Marks & Spencer breach linked to Scattered Spider ransomware attack
Ongoing outages at British retail giant Marks & Spencer are caused by a ransomware attack believed to be conducted by a hacking collective known as…
Author: Cybernoz
Rack Ruby Framework vulnerabilities Let Attackers inject and manipulate log content
Researchers Thai Do and Minh Pham have exposed multiple critical vulnerabilities in the Rack Ruby framework, a cornerstone of Ruby-based web applications with over a…
Hitachi Vantara takes servers offline after Akira ransomware attack
Hitachi Vantara, a subsidiary of Japanese multinational conglomerate Hitachi, was forced to take servers offline over the weekend to contain an Akira ransomware attack. The…
Python-Based Discord RAT Enables Remote Control and Disruption Through a Simple Interface
A newly analyzed Python-based Remote Access Trojan (RAT) has emerged as a significant cybersecurity threat, utilizing Discord as its command-and-control (C2) platform. Disguised as a…
Fujitsu UK staff will get bonus despite Post Office scandal fallout
Fujitsu UK is rewarding staff for meeting a sales threshold, in further evidence that the company’s gesture to pause bidding for public sector contracts was…
Kali Linux warns of update failures after losing repo signing key
Offensive Security warned Kali Linux users to manually install a new Kali repository signing key to avoid experiencing update failures. The announcement comes after OffSec…
19 APT Hackers Target Asia-based Company Servers Using Exploited Vulnerabilities and Spear Phishing Email
The NSFOCUS Fuying Laboratory’s global threat hunting system identified 19 sophisticated Advanced Persistent Threat (APT) attack campaigns, predominantly targeting regions across South Asia, East Asia,…
BreachForums Displays Message About Shutdown, Cites MyBB 0day Flaw
BreachForums posts a PGP-signed message explaining the sudden April 2025 shutdown. Admins cite MyBB 0day vulnerability impacting the site, plan return, deny seizure, and warn…
Trojanized Text Editor Software Used In Uyghur Spy Campaign
A trusted tool has turned traitor. A new Citizen Lab investigation reveals that UyghurEditPP, a legitimate open-source Uyghur-language text editor, has been weaponized to spy…
Security Improves As Issues Remain
Nearly a year after its troubled initial rollout, Microsoft Recall is back. Microsoft announced in an April 25 blog post that it will begin rolling…
Hive Five 221 – Underdoing the Competition
I’m still running daily, but I’ve swapped some days for walking with a weighted vest. The main limitation I’m currently facing is the lack of…
VeriSource now says February data breach impacts 4 million people
Employee benefits administration firm VeriSource Services is warning that a data breach exposed the personal information of four million people. VeriSource is a Texas-based employee…