Blackberry | Daniel Miessler
Got me a Blackberry. My old Nokia has been irking me as of late, and I have been wanting to get myself a new phone…
Author: Cybernoz
Apple backports zero-day patches to older iPhones and Macs
Apple has released security updates that backport fixes for actively exploited vulnerabilities that were exploited as zero-days to older versions of its operating systems. At…
Massive 400GB X (Twitter) Data Leak Surfaces on Hacker Forums
A colossal 400GB trove containing data from 2.873 billion X (formerly Twitter) users has surfaced on hacker forums. The breach, allegedly dated January 2025, is…
China-Linked Earth Alux Uses VARGEIT and COBEACON in Multi-Stage Cyber Intrusions
Cybersecurity researchers have shed light on a new China-linked threat actor called Earth Alux that has targeted various key sectors such as government, technology, logistics,…
Post Office Capture and Ecco+ users asked to make contact with Scottish statutory body
The Scottish Criminal Cases Review Commission (SCCRC) is attempting to contact any former subpostmasters that could have been prosecuted for unexplained losses on the Post…
Network Intrusion Prevention Systems | Daniel Miessler
Anyone keeping track of the security vendor/technology hype knows that IPS has quickly replaced IDS as the “next big thing”. Depending on who you are,…
PortSwigger Launches Burp AI to Enhance Penetration Testing with AI
PortSwigger, the makers of Burp Suite, has taken a giant leap forward in the field of cybersecurity with the launch of Burp AI, a groundbreaking set…
Defining a Strong Cybersecurity Ecosystem for Higher Ed
Colleges and universities are faced with cyberattacks that come in many forms, including insider threats, malware, botnets, phishing, DDoS (distributed denial of service), ransomware, APT…
Building a reasonable cyber defense program
If you do business in the United States, especially across state lines, you probably know how difficult it is to comply with U.S. state data…
Global Retailer Overshares CSRF Tokens with Facebook
Apr 01, 2025The Hacker NewsWeb Security / GDPR Compliance Are your security tokens truly secure? Explore how Reflectiz helped a giant retailer to expose a…
Study: Alternative Data Streams | Daniel Miessler
You may be interested to know about another “SECRET” that the boys in Redmond try not to advertise. It is called Alternative Data Streams, and…
Critical auth bypass bug in CrushFTP now exploited in attacks
Attackers are now targeting a critical authentication bypass vulnerability in the CrushFTP file transfer software using exploits based on publicly available proof-of-concept code. The security…