Exploiting Jenkins RCE Vulnerability (CVE-2024-43044) Via Agents
A critical vulnerability has been identified in Jenkins, a widely used automation server. If exploited further, this vulnerability allows attackers to read arbitrary files from…
Author: Cybernoz
How Ransomware Is Evolving into a Geopolitical Weapon
In recent years, ransomware attacks have evolved from mere cyber-criminal activities into sophisticated tools of geopolitical maneuvering. As the digital landscape continues to expand, ransomware…
What is Access Control List?
Access Control Lists (ACLs) are fundamental to network security and management. They are critical in determining who or what can access specific resources within a…
Sinon: Open-source automatic generative burn-in for Windows deception hosts
Sinon is an open-source, modular tool for the automatic burn-in of Windows-based deception hosts. It aims to reduce the difficulty of orchestrating deception hosts at…
VirusTotal for Threat Research – A Comprehensive Guide 2024
VirusTotal is an essential tool for cybersecurity professionals. It offers a comprehensive platform for analyzing files, URLs, domains, and IP addresses to detect malicious activities.…
A macro look at the most pressing cybersecurity risks
Forescout’s 2024H1 Threat Review is a new report that reviews the current state of vulnerabilities, threat actors, and ransomware attacks in the first half of…
Rocinante Malware Taking Over The Android Device Remotely
The ever-evolving malware landscape is evolving at an alarming rate, as a multitude of new strains have already been noticed. Hackers are becoming more innovative…
New infosec products of the week: August 30, 2024
Here’s a look at the most interesting products from the past week, featuring releases from Bitwarden, Dragos, Fortinet, HYCU, and Rezonate. Fortinet introduces sovereign SASE…
Massive Mirai Botnet Exploited AVTECH Cameras Zero-Day
Researchers have discovered a botnet campaign that is exploiting several vulnerabilities, including a zero-day vulnerability (CVE-2024-7029) in AVTECH closed-circuit television (CCTV) cameras that could allow…
Iran-Linked Peach Sandstorm Group Deploys Tickler Malware
Researchers have uncovered a new wave of activity by the Iranian state-sponsored threat actor known as Peach Sandstorm. Between April and July 2024, the group…
Queensland Police system update causes data access issues – Software
Queensland Police has reported “delays” in accessing data held in its core operational database, which it is attributing to unspecified system “updates” made on Wednesday.…
Dell attempts to sell SecureWorks again – Security
Dell Technologies is again exploring a possible sale of SecureWorks, after unsuccessful earlier attempts to find a buyer for the US cyber security firm, according…