How cyber security professionals are leveraging AWS tools
With millions of businesses now using Amazon Web Services (AWS) for their cloud computing needs, it’s become a vital consideration for IT security teams and…
Author: Cybernoz
Apache InLong CVE-2025-27522 Exposes RCE Attacks
A newly disclosed vulnerability, tracked as CVE-2025-27522, has been discovered in Apache InLong, a widely used real-time data streaming platform. The Apache InLong vulnerability introduces…
Chinese Hacking Group APT41 Exploits Google Calendar to Target Governments
Chinese state-sponsored threat actor APT41 has targeted government entities with malware that uses Google Calendar for command-and-control (C&C), Google warns. Also tracked as Barium, Winnti,…
US Treasury sanctioned the firm Funnull Technology as major cyber scam facilitator
US Treasury sanctioned the firm Funnull Technology as major cyber scam facilitator Pierluigi Paganini May 30, 2025 The U.S. sanctioned Funnull Technology and Liu Lizhi…
PortSwigger Honored with the King’s Award for Enterprise in International Trade
Amelia Coen | 30 May 2025 at 09:38 UTC We’re proud to announce that PortSwigger has been awarded the prestigious King’s Award for Enterprise in…
Microsoft Begins Authenticator Password Phase-Out This Weekend
This weekend, Microsoft will start turning off password management functionality in its Authenticator app. If you use the app, from June 1, 2025, you will…
Cybercriminals exploit AI hype to spread ransomware, malware
Threat actors linked to lesser-known ransomware and malware projects now use AI tools as lures to infect unsuspecting victims with malicious payloads. This development follows…
U.S. Sanctions Cloud Provider ‘Funnull’ as Top Source of ‘Pig Butchering’ Scams – Krebs on Security
Image: Shutterstock, ArtHead. The U.S. government today imposed economic sanctions on Funnull Technology Inc., a Philippines-based company that provides computer infrastructure for hundreds of thousands…
Cops in Germany Claim They’ve ID’d the Mysterious Trickbot Ransomware Kingpin
Several cybersecurity researchers who have tracked Trickbot extensively tell WIRED they were unaware of the announcement. An anonymous account on the social media platform X…
Critical Icinga 2 Vulnerability Allows Attackers to Obtain Valid Certificates
A critical vulnerability (CVE-2025-48057) has been discovered in Icinga 2, the widely used open-source monitoring platform. The flaw, affecting installations built with OpenSSL versions older…
CrowdStrike Partners With AARNet to Safeguard Education Sector
CrowdStrike and Australia’s Academic and Research Network (AARNet) today announced an expanded partnership to deliver CrowdStrike Falcon Complete Next-Gen MDR to Australia’s research and education…
Microsoft Authenticator now warns to export passwords before July cutoff
The Microsoft Authenticator app is now issuing notifications warning that the password autofill feature is being deprecated in July, suggesting users move to Microsoft Edge…