Massive 400GB X (Twitter) Data Leak Surfaces on Hacker Forums
A colossal 400GB trove containing data from 2.873 billion X (formerly Twitter) users has surfaced on hacker forums. The breach, allegedly dated January 2025, is…
Author: Cybernoz
China-Linked Earth Alux Uses VARGEIT and COBEACON in Multi-Stage Cyber Intrusions
Cybersecurity researchers have shed light on a new China-linked threat actor called Earth Alux that has targeted various key sectors such as government, technology, logistics,…
Post Office Capture and Ecco+ users asked to make contact with Scottish statutory body
The Scottish Criminal Cases Review Commission (SCCRC) is attempting to contact any former subpostmasters that could have been prosecuted for unexplained losses on the Post…
Network Intrusion Prevention Systems | Daniel Miessler
Anyone keeping track of the security vendor/technology hype knows that IPS has quickly replaced IDS as the “next big thing”. Depending on who you are,…
PortSwigger Launches Burp AI to Enhance Penetration Testing with AI
PortSwigger, the makers of Burp Suite, has taken a giant leap forward in the field of cybersecurity with the launch of Burp AI, a groundbreaking set…
Defining a Strong Cybersecurity Ecosystem for Higher Ed
Colleges and universities are faced with cyberattacks that come in many forms, including insider threats, malware, botnets, phishing, DDoS (distributed denial of service), ransomware, APT…
Building a reasonable cyber defense program
If you do business in the United States, especially across state lines, you probably know how difficult it is to comply with U.S. state data…
Global Retailer Overshares CSRF Tokens with Facebook
Apr 01, 2025The Hacker NewsWeb Security / GDPR Compliance Are your security tokens truly secure? Explore how Reflectiz helped a giant retailer to expose a…
Study: Alternative Data Streams | Daniel Miessler
You may be interested to know about another “SECRET” that the boys in Redmond try not to advertise. It is called Alternative Data Streams, and…
Critical auth bypass bug in CrushFTP now exploited in attacks
Attackers are now targeting a critical authentication bypass vulnerability in the CrushFTP file transfer software using exploits based on publicly available proof-of-concept code. The security…
Chord Specialty Dental Partners Data Breach Exposes Customer Personal Data
Chord Specialty Dental Partners is under scrutiny after revealing a data breach that compromised the personal and health information of its customers. The breach, which…
Nearly 24,000 IPs Target PAN-OS GlobalProtect in Coordinated Login Scan Campaign
Apr 01, 2025Ravie LakshmananNetwork Security / Vulnerability Cybersecurity researchers are warning of a spike in suspicious login scanning activity targeting Palo Alto Networks PAN-OS GlobalProtect…