Operation Economic Outcast Targets Iran With New Sanctions
The U.S. Department of the Treasury has launched Operation Economic Outcast, a whole-of-government campaign aimed at disrupting the economic networks and revenue channels supporting the…
Author: Cybernoz
Feds and telcos tell customers 000 camp-on delays can last up to a minute
Key points Optus, Telstra and TPG Telecom will launch a public campaign this week telling Australians to stay on the line for up to 60…
WordPress Websites Targeted via MiniOrange Plugin Vulnerabilities
Threat actors have been attempting to hack WordPress websites by exploiting two recently patched vulnerabilities affecting a MiniOrange plugin. The two vulnerabilities are CVE-2026-61979 and…
U.S. CISA adds maximum-severity Oracle flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds maximum-severity Oracle flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini August 25, 2026 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds…
AI helps Chinese-speaking hackers speed up attacks on exposed servers
A Chinese-speaking cybercrime group is using AI-driven tools to help compromise internet-facing Windows and Linux web servers, according to Cisco Talos, Cisco’s threat intelligence research…
Top GenAI Security Risks and Best Practices
As we approach the spookiest season of the year, it’s essential to ensure that your organization’s embrace of Generative AI (GenAI) doesn’t open the door…
Every Ransomware Attack Has a Backstory
Ransomware is the part of the attack that gets the most attention. It’s the locked screens, the ransom note, the disrupted workflows, the scramble to…
Police arrests dozens of suspects in global cybercrime crackdown
Law enforcement agencies from 22 countries helped identify 263 suspects and arrested 58 individuals linked to cybercrime networks coordinated by African crime groups. The “Operation…
EvilTokens Doesn’t Just Steal Microsoft Sessions—Its AI Tells Attackers Who to Scam Next
EvilTokens is pushing phishing beyond the moment a victim clicks a link. The service steals Microsoft 365 session access, then examines the compromised mailbox to…
91 Spring CVEs Impact Over 209,000 Software Components Across the Supply Chain
Broadcom has disclosed 91 Common Vulnerabilities and Exposures (CVEs) affecting the Spring Framework and related projects, triggering a software supply chain remediation event that Sonatype…
ShinyHunters taunts ReliaQuest after its own employee falls for social engineering attack
Cybersecurity company ReliaQuest has confirmed that one of its own employees fell for a social engineering attack, handing attackers a password and a brief window…
TikTok phishing: How to spot fake login and verification pages
Phishing pages don’t need to be sophisticated. They just need to look convincing enough to make you trust them. TikTok phishing often starts with an…