Cybersecurity in 2025 — Challenges, Risks, and What Leaders Must Do
Every year brings new challenges — more threats, new techniques, more astute perpetrators, according to Rob Gurzeev, co-founder and CEO at CyCognito, a Forbes tech…
Author: Cybernoz
Kerio Control Firewall Vulnerability Allows 1-Click Remote Code Execution
A critical vulnerability in Kerio Control, a popular firewall and Unified Threat Management (UTM) product, has been discovered that could allow attackers to execute remote…
New PayPal Phishing Abusing Microsoft365 Domains for Sophisticated Attacks
A new and sophisticated phishing scam has been uncovered, leveraging Microsoft 365 domains to trick users into compromising their PayPal accounts. The attack exploits legitimate-looking…
Thousands of Live Hacker Backdoors Found in Expired Domains
SUMMARY Cybersecurity firm watchTowr discovered over 4,000 active hacker backdoors relying on expired domain names. These backdoors are pre-existing entry points on already compromised systems,…
How Reco Discovers Shadow AI in SaaS
As SaaS providers race to integrate AI into their product offerings to stay competitive and relevant, a new challenge has emerged in the world of…
U.S. CISA adds Ivanti Connect Secure, Policy Secure, and ZTA Gateways flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Ivanti Connect Secure, Policy Secure, and ZTA Gateways flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini January 09, 2025 U.S. Cybersecurity…
Ivanti Connect Secure zero-day exploited since mid-December (CVE-2025-0282)
The zero-day attacks leveraging the Ivanti Connect Secure (ICS) vulnerability (CVE-2025-0282) made public on Wednesday were first spotted in mid-December 2024, Mandiant researchers have shared.…
Learn How to Stop Encrypted Attacks Before They Cost You Millions
Jan 09, 2025The Hacker NewsData Protection / Encryption Ransomware isn’t slowing down—it’s getting smarter. Encryption, designed to keep our online lives secure, is now being…
Top 10 Cybersecurity Conferences You Can’t Miss
What makes a cybersecurity professional stand out in today’s rapidly evolving digital landscape? Is it their technical prowess, their ability to anticipate threats or their…
APT32 Hacker Group Attacking Cybersecurity Professionals Poisoning GitHub
The malicious Southeast Asian APT group known as OceanLotus (APT32) has been implicated in a sophisticated attack that compromises the privacy of cybersecurity professionals. A…
MirrorFace Leverages ANEL and NOOPDOOR in Multi-Year Cyberattacks on Japan
Jan 09, 2025Ravie LakshmananCybersecurity / Malware Japan’s National Police Agency (NPA) and National Center of Incident Readiness and Strategy for Cybersecurity (NCSC) accused a China-linked…
Key Insights Into Australia’s Commonwealth Cybersecurity
The Australian Government has shared its insights and developments regarding the Commonwealth’s cybersecurity measures. The Commonwealth Cybersecurity Posture 2024 provides an in-depth overview of Australia’s…