A newly uncovered cyber-espionage campaign, dubbed Operation HollowQuill, has been identified as targeting academic, governmental, and defense-related networks in Russia using weaponized PDF documents. The…
Cybersecurity researchers at Jscamblers have uncovered a sophisticated web-skimming campaign targeting online retailers. The campaign utilizes a legacy application programming interface (API) to validate stolen…
A new and potentially devastating alliance has emerged in the world of cybercrime. EvilCorp, an infamous cybercriminal group suspected to be led by an ex-FSB…
Recently we’ve been seeing quite a few phishing campaigns using QR codes in email attachments. The lure and the targets are varied, but the use…
Europol-led operation shuts down CSAM platform Kidflix, leading to 79 arrests Pierluigi Paganini April 03, 2025 An international law enforcement operation shuts down Kidflix, a…
So I got another phone — well, a Windows device (not quite the same thing exactly). It’s heresy, to be sure; going from a Blackberry…
Dive Brief: CISA earlier this week added CVE-2024-20439, a critical flaw in the Cisco Smart Licensing Utility, to its known exploited vulnerabilities (KEV) catalog. The…
Oracle has finally acknowledged to some customers that attackers have stolen old client credentials after breaching a “legacy environment” last used in 2017, Bloomberg reported.…
Researchers from Bishop Fox have successfully exploited CVE-2024-53704, an authentication bypass vulnerability that affects SonicWall firewalls. This critical flaw allows remote attackers to hijack active SSL…
Thanks to cloud computing, organisations of all shapes and sizes have benefitted from the flexibility of IT capacity without the cost and challenges of maintaining…
If you’re ever trying to get dhcp to work in Linux, and the package you installed also installed a service file named dhcp at /etc/init.d/dhcp,…
MCPs for Ghidra, Semgrep, and SecOps, a CodeQL supply chain issue, using ServiceNow offensively I hope you’ve been doing well! Bae Area Lyfe Some recent…
![[tl;dr sec] #273 - Model Context Protocol + Security Tools, Compromising CodeQL, Red Teaming with ServiceNow](https://image.cybernoz.com/wp-content/uploads/2025/04/tldr-sec-273-Model-Context-Protocol-Security-Tools.png)