Supply chain attack hits npm package with 45,000 weekly downloads
An npm package named ‘rand-user-agent’ has been compromised in a supply chain attack to inject obfuscated code that activates a remote access trojan (RAT) on…
Author: Cybernoz
Guess Which Browser Tops the List for Data Collection!
Google Chrome has emerged as the undisputed champion of data collection among 10 popular web browsers studied on the Apple App Store. Collecting a staggering…
SA Power Networks opens first cyber security ‘kickstart’ program
SA Power Networks has commenced its first ‘kickstart’ program to train people with no prior experience in cyber security skills. Head of cyber security and…
Cisco fixes max severity IOS XE flaw letting attackers hijack devices
Cisco has fixed a maximum severity flaw in IOS XE Software for Wireless LAN Controllers by a hard-coded JSON Web Token (JWT) that allows an unauthenticated…
New Attack Exploits X/Twitter Ad URL Feature to Deceive Users
Silent Push Threat Analysts have recently exposed a sophisticated financial scam leveraging a vulnerability in X/Twitter’s advertising display URL feature to deceive users. This attack…
Reverse Engineering Granola to Get Notes In Obsidian · Joseph Thacker
I love granola.ai. Everyone I know is using it for meeting transcription. I’ve been using it to transcribe my calls and meetings for months. But…
Sen. Murphy: Trump administration has ‘illegally gutted funding for cybersecurity’
Another top appropriations Democrat criticized budget cuts affecting the Cybersecurity and Infrastructure Security Agency, saying the Trump administration has “illegally gutted funding for cybersecurity.” Connecticut…
Education giant Pearson hit by cyberattack exposing customer data
Education giant Pearson suffered a cyberattack, allowing threat actors to steal corporate data and customer information, BleepingComputer has learned. Pearson is a UK-based education company…
ESET Reveals How to Spot Fake Calls Demanding Payment for ‘Missed Jury Duty’
ESET, a leading cybersecurity firm, has shed light on one particularly insidious scheme: fake calls purportedly from government officials demanding payment for ‘missed jury duty’.…
PowerSchool Paid Ransom, Now Hackers Target Teachers for More
PowerSchool paid ransom after a major data breach; now hackers are targeting teachers and schools with direct extortion threats for more payment. On December 28,…
Why A Digital Blackout Matters In War Impacted Areas Of India
As tensions flare and the possibility of full blown armed conflict between India and Pakistan grows, there is a need not just for restraint and…
Microsoft Azure Integrates Google’s A2A Protocol for Effortless AI Agent Communication
Microsoft has announced its support for the Agent2Agent (A2A) protocol, an open standard developed in collaboration with industry partners including Google, to enable seamless communication…