How to Know What To Do · Joseph Thacker
This morning I tweeted: “Most people don’t actually know what’s ‘best’ for themselves.” And atomiczsec replied and said “How do you find what is best…
Author: Cybernoz
Craft CMS RCE exploit chain used in zero-day attacks to steal data
Two vulnerabilities impacting Craft CMS were chained together in zero-day attacks to breach servers and steal data, with exploitation ongoing, according to CERT Orange Cyberdefense. The…
Threat Actors Register Over 26,000 Domains Imitating Brands to Deceive Users
Researchers from Unit 42 have uncovered a massive wave of SMS phishing, or “smishing,” activity targeting unsuspecting users. Since the FBI’s initial warning in April…
House bill seeks better tech to combat financial fraud scams against elderly
A bipartisan trio of House lawmakers is pushing a bill that would give law enforcement more resources to tackle financial fraud, pig butchering and other…
“Power Parasites” Phishing Campaign Targets Energy Firms and Major Brands
Silent Push Threat Analysts have uncovered a widespread phishing and scam operation dubbed “Power Parasites,” targeting prominent energy companies and major global brands across multiple…
JPCERT warns of DslogdRAT malware deployed in Ivanti Connect Secure
JPCERT warns of DslogdRAT malware deployed in Ivanti Connect Secure Pierluigi Paganini April 25, 2025 Researchers identified a new malware, named DslogdRAT, deployed after exploiting…
DragonForce and Anubis Ransomware Gangs Launch New Affiliate Programs
Secureworks Counter Threat Unit (CTU) researchers have uncovered innovative strategies deployed by the DragonForce and Anubis ransomware operators in 2025. These groups are adapting to…
SAP zero-day vulnerability under widespread active exploitation
Threat hunters and security researchers have observed widespread exploitation of a zero-day vulnerability affecting SAP NetWeaver systems. The unrestricted file upload vulnerability — CVE-2025-31324 —…
The Story of Jericho Security
Redefining Cybersecurity for the AI Era With the launch of ChatGPT, everything changed – overnight, AI became democratized. But while everyday users turned to AI…
Russian Hackers Attempt to Sabotage Digital Control Systems of Dutch Public Service
The Dutch Defense Ministry has revealed that critical infrastructure, democratic processes, and North Sea installations in the Netherlands have become focal points for Russian cyber…
AI is getting “creepy good” at geo-guessing
If you are worried about revealing your exact location—or if you maybe even fib about it at times—there are some good reasons to worry about…
SAP NetWeaver zero-day allegedly exploited by an initial access broker
SAP NetWeaver zero-day allegedly exploited by an initial access broker Pierluigi Paganini April 25, 2025 A zero-day in SAP NetWeaver is potentially being exploited, putting…