Beware of Shadow AI Haunting Organizations This Halloween
As Halloween approaches, there’s more to be afraid of than the typical ghosts and goblins. In the world of cybersecurity, a new unseen threat is…
Author: Cybernoz
New Cisco ASA and FTD features block VPN brute-force password attacks
Cisco has added new security features that significantly mitigate brute-force and password spray attacks on Cisco ASA and Firepower Threat Defense (FTD), helping protect the network from…
Chinese cyber spies targeted phones used by Trump and Vance
Chinese cyber spies targeted phones used by Trump and Vance Pierluigi Paganini October 26, 2024 China-linked threat actors targeted the phone communications of Donald Trump and…
New Windows Driver Signature bypass allows kernel rootkit installs
Attackers can downgrade Windows kernel components to bypass security features such as Driver Signature Enforcement and deploy rootkits on fully patched systems. This is possible…
New Attack Lets Hackers Downgrade Windows to Exploit Patched Flaws
SafeBreach Labs unveils ‘Windows Downdate,’ a new attack method which compromises Windows 11 by downgrading system components, and reviving old/ptched vulnerabilities like the DSE bypass.…
Wi-Fi Test Suite Command Injection Vulnerability Found in Arcadyan Routers
A serious security vulnerability has been uncovered in Arcadyan routers, stemming from the unexpected presence of Wi-Fi Alliance’s testing software in production devices. Security researchers…
Over 70 zero-day flaws get hackers $1 million at Pwn2Own Ireland
The fourth day of Pwn2Own Ireland 2024 marked the end of the hacking competition with more than $1 million in prizes for over 70 unique…
Four REvil Ransomware Members Sentenced in Rare Russian Cybercrime Convictions
Oct 26, 2024Ravie LakshmananCybercrime / Malware Four members of the now-defunct REvil ransomware operation have been sentenced to several years in prison in Russia, marking…
Notorious Hacker Group TeamTNT Launches New Cloud Attacks for Crypto Mining
Oct 26, 2024Ravie LakshmananCloud Security / Cryptocurrency The infamous cryptojacking group known as TeamTNT appears to be readying for a new large-scale campaign targeting cloud-native…
Irish Data Protection Commission fined LinkedIn €310M for GDPR infringement
Irish Data Protection Commission fined LinkedIn €310M for GDPR infringement Pierluigi Paganini October 26, 2024 Irish Data Protection Commission fined LinkedIn €310M for violating user…
CERT-UA Identifies Malicious RDP Files in Latest Attack on Ukrainian Entities
Oct 26, 2024Ravie LakshmananCyber Attack / Threat Intelligence The Computer Emergency Response Team of Ukraine (CERT-UA) has detailed a new malicious email campaign targeting government…
Black Basta Ransomware Operators Using Microsoft Teams To Breach Organizations
The notorious ransomware group known as “Black Basta” has escalated its social engineering tactics to gain unauthorized access to organizations’ sensitive systems and data. ReliaQuest,…