Public education on security must be a top priority for Labour
Since 4 July 2024, a new Labour administration has been in place in the UK, but the last time Labour were in power was 14…
Author: Cybernoz
Google Cloud Storage Bucket Leak Tied To Shark Tank Contestant
A misconfigured Google Cloud Storage bucket linked to Alice’s Table, a popular virtual floral arrangement platform, has exposed the personal data of over 83,000 customers.…
Park’N Fly notifies 1 million customers of data breach
Park’N Fly is warning that a data breach exposed the personal and account information of 1 million customers in Canada after hackers breached its network.…
Research Unveils Eight Android & iOS that leaks User’s Sensitive Data
The eight Android and iOS apps fail to adequately protect user data, which transmits sensitive information, such as device details, geolocation, and credentials, over the…
The US courts may have thrown a wrench into cyber regulation
The United States Supreme Court recently stymied recent cyber security regulations and plans. To fight the proliferation of cyber security threats, President Biden’s administration has…
How to identify unknown assets while pen testing
Hackers relentlessly probe your organization’s digital defenses, hunting for the slightest vulnerability to exploit. And while penetration testing serves as a valuable tool, there might…
New 0-Day Attacks Linked to China’s ‘Volt Typhoon’ – Krebs on Security
Malicious hackers are exploiting a zero-day vulnerability in Versa Director, a software product used by many Internet and IT service providers. Researchers believe the activity…
Chinese Volt Typhoon Exploits Versa Director Flaw, Targets U.S. and Global IT Sectors
The China-nexus cyber espionage group tracked as Volt Typhoon has been attributed with moderate confidence to the zero-day exploitation of a recently disclosed high-severity security…
Extending zero-trust principles to endpoints
In the modern workplace, the proliferation of endpoints has significantly expanded the attack surface, presenting new security challenges for organisations. Security and risk management (SRM)…
Microsoft Sway abused in massive QR code phishing campaign
A massive QR code phishing campaign abused Microsoft Sway, a cloud-based tool for creating online presentations, to host landing pages to trick Microsoft 365 users…
SMS scammers use toll fees as a lure
In April 2024, the FBI warned about a new type of smishing scam. Smishing is the term we use for phishing attacks sent via text…
How Gartner’s New Categories Help to Manage Exposures
Want to know what’s the latest and greatest in SecOps for 2024? Gartner’s recently released Hype Cycle for Security Operations report takes important steps to…