Mozilla warns Windows users of critical Firefox sandbox escape flaw
Mozilla has released Firefox 136.0.4 to patch a critical security vulnerability that can let attackers escape the web browser’s sandbox on Windows systems. Tracked as…
Author: Cybernoz
New Sophisticated Malware CoffeeLoader Bypasses Endpoint Security to Deploy Rhadamanthys Shellcode
Cybersecurity researchers have uncovered a sophisticated new malware strain targeting macOS systems, dubbed “CoffeeLoader,” which employs advanced techniques to bypass endpoint security solutions and deliver…
Unpacking Disinformation in the 2024 US Presidential Election
The 2016 U.S. presidential election is often cited as a watershed moment for digital disinformation campaigns – revealing the vulnerability of democratic processes to foreign…
Threat Actors Compromise 150,000 Websites to Promote Chinese Gambling Platforms
A large-scale cyberattack has compromised approximately 150,000 legitimate websites by injecting malicious JavaScript to redirect visitors to Chinese-language gambling platforms. The campaign, first detected in…
Next.js Middleware Flaw Lets Attackers Bypass Authorization
A recent collaborative effort by researchers Rachid Allam and Yasser Allam has exposed a critical vulnerability within the Next.js framework, a widely used JavaScript framework…
Why Healthcare Executives Should Prioritize Security Compliance
For healthcare executives, prioritizing security compliance is not just about meeting regulatory requirements but also protecting the organization’s reputation, reducing risks, and ensuring business continuity.…
ETSI releases security standard for the quantum future
ETSI launched post-quantum security standard to guarantee the protection of critical data and communications in the future. The specification “Efficient Quantum-Safe Hybrid Key Exchanges with…
Moving from WhatsApp to Signal: A good idea?
This week we learned that the US Government uses Signal for communication, after a journalist was accidentally added to a Signal chat. Accidental additions of…
NetApp SnapCenter Flaw Could Let Users Gain Remote Admin Access on Plug-In Systems
Mar 27, 2025Ravie LakshmananVulnerability / Enterprise Security A critical security flaw has been disclosed in NetApp SnapCenter that, if successfully exploited, could allow privilege escalation.…
More than 200 Lloyds bank bosses to receive artificial intelligence training
Lloyds Banking Group is training 200 of its senior leaders to ensure the organisation can get the most out of artificial intelligence (AI) technology. The…
Hackers Demand US$10 Million Ransom
Malaysia Airports Holdings Berhad (MAHB) recently became the target of a cyberattack, causing disruption to its digital systems. The MAHB cyberattack, which occurred in late…
DOGE staffer ‘Big Balls’ provided tech support to cybercrime ring – Security
The best-known member of Elon Musk’s US DOGE Service team of technologists once provided support to a cybercrime gang that bragged about trafficking in stolen…