New York sues Valve for promoting illegal gambling via game loot boxes
New York Attorney General Letitia James sued video game developer and publisher Valve Corporation for using game loot boxes to facilitate illegal gambling activities among…
Author: Cybernoz
Malicious Ads Bypass Google Ads Screening via New Campaign Platform Exploit
A sophisticated cloaking platform called 1Campaign, designed to help attackers run malicious Google Ads campaigns while evading detection. The service acts as a full‑service infrastructure…
The Conduent breach; from 10 million to 25 million (and counting)
The Conduent breach has quietly grown into one of the biggest third‑party data incidents in US history, and the real story now is how many…
Microsoft Warns Developers of Fake Next.js Job Repos Delivering In-Memory Malware
A “coordinated developer-targeting campaign” is using malicious repositories disguised as legitimate Next.js projects and technical assessments to trick victims into executing them and establish persistent…
27 Years old Telnet Vulnerability Enables Attackers to Gain Root Access
27 Years old Telnet Enables Attackers Gain Root Access A newly confirmed vulnerability in the telnet daemon (telnetd) in GNU Inetutils has revived a 27-year-old…
ServiceNow AI Platform Vulnerability Allows Remote Code Execution
ServiceNow has disclosed a critical security vulnerability in its AI Platform that could allow unauthenticated attackers to remotely execute code within the ServiceNow Sandbox environment.…
Instagram flagged explicit messages to minors in 2018. Image-blurring arrived six years later
Meta took six years to blur explicit images on Instagram, even though internal emails show executives were aware in 2018 that minors were receiving them,…
From curiosity to critical bugs. Interview with Marc-Oliver Munz
Security is built by people. At Intigriti, we don’t just help organizations stay secure; we shine a light on the ethical hackers making a difference. Through our Hacker Spotlight series, we…
Firefox 148 Released With Sanitizer API to Disable XSS Attack
Firefox 148 Released With Sanitizer API Firefox 148 introduces the new standardized Sanitizer API, becoming the first browser to implement it. The update marks a…
ResidentBat Android Malware Grants Belarusian KGB Ongoing Mobile Access
ResidentBat is a custom Android spyware implant used by the Belarusian KGB to turn seized smartphones into long‑lived surveillance platforms against journalists and civil society…
Samsung’s Galaxy S26 turns privacy into a visible and invisible feature
The Samsung Galaxy S26 series is out, offering plenty of security features that protect personal data while providing users with transparency and control over how…
US artificial intelligence developers accuse Chinese firms of stealing their data
US artificial intelligence (AI) developers are sounding the alarm about “industrial scale” distillation attacks by Chinese labs looking to exfiltrate a variety of data from…