Upload a video selfie to get your Facebook or Instagram account back
Meta, the company behind Facebook and Instagram says its testing new ways to use facial recognition—both to combat scams and to help restore access to…
Author: Cybernoz
Malicious npm Packages Target Developers’ Ethereum Wallets with SSH Backdoor
Oct 22, 2024Ravie LakshmananVulnerability / Supply Chain Cybersecurity researchers have discovered a number of suspicious packages published to the npm registry that are designed to…
Danish government reboots cyber security council amid AI expansion
The Danish government has relaunched the National Cyber Security Council (NCSC) under the umbrella of a new mission to strengthen the country’s digital security capabilities…
Security Advisory On Critical Issues
Splunk has recently issued a security advisory aimed at addressing multiple vulnerabilities within its Splunk Enterprise software. The advisory categorizes these Splunk vulnerabilities into three…
Critical OneDev DevOps Platform Vulnerability Let Attacker Read Sensitive Data
A critical vulnerability has been identified in the OneDev DevOps platform, posing significant security risks to organizations relying on this tool for their software development…
FISA – A Catalyst for Europe’s Cybersecurity Sovereignty
The recent two-year extension of Section 702 of the Foreign Intelligence Surveillance Act (FISA) represents a significant escalation in global cybersecurity tensions, particularly in Europe.…
VMware fixes critical vCenter Server RCE bug – again! (CVE-2024-38812)
Broadcom has released new patches for previously fixed vulnerabilities (CVE-2024-38812, CVE-2024-38813) in vCenter Server, one of which hasn’t been fully addressed the first time and…
A Comprehensive Guide to Finding Service Accounts in Active Directory
Oct 22, 2024Ravie LakshmananIdentity Management / Security Automation Service accounts are vital in any enterprise, running automated processes like managing applications or scripts. However, without…
Hackers Exploiting Exposed Docker Remote API Servers With perfctl Malware
Cybercriminals are increasingly targeting exposed Docker Remote API servers to deploy the perfctl malware, posing significant threats to organizations relying on containerized environments. These attacks…
Fastly DDoS Protection blocks malicious traffic
Fastly released Fastly DDoS Protection to provide automatic protection from Layer 7 and other application-level DDoS attacks. With a click of a button, organizations can…
Bumblebee and Latrodectus Malware Return with Sophisticated Phishing Strategies
Oct 22, 2024Ravie LakshmananMalware / Threat Intelligence Two malware families that suffered setbacks in the aftermath of a coordinated law enforcement operation called Endgame have…
Roundcube XSS flaw exploited to steal credentials, email (CVE-2024-37383)
Attackers have exploited an XSS vulnerability (CVE-2024-37383) in the Roundcube Webmail client to target a governmental organization of a CIS country, Positive Technologies (PT) analysts…