Windows Task Scheduler Flaw Allows Attackers to Escalate Privileges
A critical elevation of privilege vulnerability has been identified in the Windows Task Scheduler service, tracked as CVE-2025-33067. Officially published on June 10, 2025, by…
Author: Cybernoz
SpecterOps Privilege Zones enables security teams to define logical access boundaries
SpecterOps introduced Privilege Zones, a new addition to its flagship BloodHound Enterprise platform. Privilege Zones enable teams to define custom security boundaries around business-critical resources…
Government using national security as ‘smokescreen’ in Apple encryption row
The government is using national security as a “smokescreen” to refuse to disclose how many technical capability notices (TCNs) it has issued to telecoms and…
Microsoft fixes unreachable Windows Server domain controllers
Microsoft has resolved a known issue that caused some Windows Server 2025 domain controllers to become unreachable after a restart and triggered app or service…
Modernizing Critical Infrastructure Security to Meet Today’s Threats
Ransomware attacks are no longer just a cybersecurity concern – they are a direct threat to national security. A recent study found that among organizations hit by…
Multiple Microsoft Office Vulnerabilities Enable Remote Code Execution by Attackers
Microsoft has disclosed four critical remote code execution (RCE) vulnerabilities in its Office suite as part of the June 2025 Patch Tuesday updates, posing significant…
INTERPOL Disrupts 20,000 Infostealer Domains, 32 Arrested
An international cybercrime operation coordinated by INTERPOL has led to the takedown of more than 20,000 malicious IPs and domains used to deploy infostealer malware…
Young Western Hackers Collaborate with Russians Increasing Ransomware Threats
Cybersecurity Ventures predicts that by 2031, ransomware could potentially cause a business (or consumer) to fall victim every two seconds. This growing incidence underscores the importance…
Why DNS Security Is Your First Defense Against Cyber Attacks?
In today’s cybersecurity landscape, much of the focus is placed on firewalls, antivirus software, and endpoint detection. While these tools are essential, one critical layer…
Human vs digital therapy: AI falls short when IT pros need help
Over half of cyber security professionals lose sleep due to work-related stress, according to research by the Chartered Institute of Information Security (CIISec: 2022/23 State…
Microsoft fixes Windows Server auth issues caused by April updates
Microsoft has fixed a known issue causing authentication problems on Windows Server domain controllers after installing the April 2025 security updates. Platforms affected by these…
CoreDNS Vulnerability Allows Attackers to Exhaust Server Memory via Amplification Attack
A high-severity vulnerability (CVE-2025-47950) in CoreDNS’s DNS-over-QUIC (DoQ) implementation enables remote attackers to crash DNS servers through stream amplification attacks. Patched in v1.21.2, this flaw…