US Treasury Department breached through remote support platform
Chinese state-sponsored threat actors hacked the U.S. Treasury Department after breaching a remote support platform used by the federal agency. In a letter sent to lawmakers…
Author: Cybernoz
16 Chrome Extensions Hacked in Large-Scale Credential Theft Scheme
SUMMARY Large-Scale Breach: Over 16 Chrome extensions were compromised, exposing 600,000+ users to data and credential theft. Phishing Attack: Developers were tricked into granting access…
CISA Added Palo Alto Networks PAN-OS Vulnerability to Its Known Vulnerability Database
In the ongoing battle against cyber threats, the Cybersecurity and Infrastructure Security Agency (CISA) has flagged a critical vulnerability in Palo Alto Networks’ PAN-OS software…
Is nowhere safe from AI slop? (Lock and Code S05E27)
This week on the Lock and Code podcast… You can see it on X. You can see on Instagram. It’s flooding community pages on Facebook…
Ransomware Turns 35. How It All Started In 1989.
The first event considered to be a ransomware attack happened in 1989, according to CNBC. A hacker physically mailed floppy disks claiming to contain software that…
Hackers exploit Four-Faith router flaw to open reverse shells
Threat actors are exploiting a post-authentication remote command injection vulnerability in Four-Faith routers tracked as CVE-2024-12856 to open reverse shells back to the attackers. The…
Oracle WebLogic Server Vulnerability Lets Attackers Compromise the Server Remotely
A vulnerability, tracked as CVE-2024-21182, in Oracle WebLogic Server, affecting versions 12.2.1.4.0 and 14.1.1.0.0. The flaw, rated with a CVSS score of 7.5 (High), allows…
Italy faces DDOS attacks from Russia
On Saturday, a series of sophisticated cyberattacks hit nine Italian government websites, causing disruptions across several key digital platforms. Among the affected sites were those…
Cisco states that the second data leak is linked to the one from October.
Cisco states that the second data leak is linked to the one from October Pierluigi Paganini December 30, 2024 Cisco confirmed the authenticity of the…
Researchers Uncovered OAuth Vulnerability in Chrome Extensions Days Before Major Breach
SquareX, an industry-first Browser Detection and Response (BDR) solution, leads the way in browser security. About a week ago, SquareX reported large-scale attacks targeting Chrome Extension…
SquareX Researchers Expose OAuth Attack on Chrome Extensions Days Before Major Breach
Palo Alto, Calif., USA, December 30th, 2024, CyberNewsWire SquareX, an industry-first Browser Detection and Response (BDR) solution, leads the way in browser security. About a…
SquareX Researchers Expose OAuth Attack on Chrome Extensions Days Before Major Breach
Palo Alto, Calif., USA, December 30th, 2024, CyberNewsWire SquareX, an industry-first Browser Detection and Response (BDR) solution, leads the way in browser security. About a…