Lynx ransomware behind Electrica energy supplier cyberattack
The Romanian National Cybersecurity Directorate (DNSC) says the Lynx ransomware gang breached Electrica Group, one of the largest electricity suppliers in the country. Electrica became…
Author: Cybernoz
Microsoft Azure MFA Vulnerability Allows Unauthorized User Account Access
A critical vulnerability in Microsoft’s Multi-Factor Authentication (MFA) implementation has been uncovered by Oasis Security’s research team, potentially exposing over 400 million Office 365 accounts…
Reserachers Uncovered Zloader DNS Tunneling Tactics For Stealthy C2 Communication
Zloader, a sophisticated Trojan, has recently evolved with features that enhance its stealth and destructive potential, as the latest version, 2.9.4.0, introduces a custom DNS…
Resecurity introduces Government Security Operations Center (GSOC) at NATO Edge 2024
Los Angeles, USA, December 11th, 2024, CyberNewsWire Resecurity, a global leader in cybersecurity solutions, unveiled its advanced Government Security Operations Center (GSOC) during NATO Edge…
New Malware Technique Could Exploit Windows UI Framework to Evade EDR Tools
Dec 11, 2024Ravie LakshmananMalware / Endpoint Security A newly devised technique leverages a Windows accessibility framework called UI Automation (UIA) to perform a wide range…
Police not ruling any person or crime out of Post Office scandal investigation
Current and former Post Office staff, lawyers and civil servants could all be questioned as part of the Metropolitan Police’s national investigation into crimes related…
Researchers Uncovered Zloader DNS Tunneling Tactics For C2 Communication
An updated version of Zloader (2.9.4.0) has been discovered, which includes a Domain Name System (DNS) tunnel for command-and-control (C2) connections, an interactive shell for…
ZLoader Malware Returns With DNS Tunneling to Stealthily Mask C2 Comms
Dec 11, 2024Ravie LakshmananRansomware / Malware Cybersecurity researchers have discovered a new version of the ZLoader malware that employs a Domain Name System (DNS) tunnel…
Ivanti fixed a maximum severity vulnerability in its CSA solution
Ivanti fixed a maximum severity vulnerability in its CSA solution Pierluigi Paganini December 11, 2024 Ivanti addressed a critical authentication bypass vulnerability impacting its Cloud…
Krispy Kreme cyberattack impacts online orders and operations
US doughnut chain Krispy Kreme suffered a cyberattack in November that impacted portions of its business operations, including placing online orders. Krispy Kreme is an…
Apple Intelligence is live! iOS 18.2 is Released
Apple today announced the launch of iOS 18.2, iPadOS 18.2, and macOS Sequoia 15.2, featuring groundbreaking updates to Apple Intelligence, its user-friendly and privacy-first personal…
Microsoft MFA AuthQuake Flaw Enabled Unlimited Brute-Force Attempts Without Alerts
Dec 11, 2024Ravie LakshmananVulnerability / Authentication Cybersecurity researchers have flagged a “critical” security vulnerability in Microsoft’s multi-factor authentication (MFA) implementation that allows an attacker to…