Chrome Security Update – Memory Corruption & Access Vulnerabilities Patched
Google has rolled out a new Stable Channel Update for its Chrome browser, addressing critical security vulnerabilities that posed significant risks to users. The update,…
Author: Cybernoz
Weaponised XWorm RAT builder Attacking script kiddies to Steal Sensitive Data
A recent cybersecurity attack involving a Trojanized version of the XWorm Remote Access Trojan (RAT) builder has compromised over 18,000 devices worldwide. This sophisticated malware,…
VMware backup: Key decision points if you migrate away from VMware
Broadcom’s 2023 acquisition of VMware for US$69bn led to disruptive changes in the virtualisation provider’s pricing. Key here is a move from perpetual licences to…
New Jersey Man Charged With Wire Fraud, Swindling $880K
A 59-year-old man from Union City, New Jersey, has been arrested and charged in connection with a large-scale scheme to defraud an elderly woman out…
Scammers Are Creating Fake News Videos to Blackmail Victims
Typically, Yahoo Boy scammers message hundreds of people online while posing as members of the opposite sex using pictures stolen from social media profiles. They…
Burp Suite 2025.1 Released, What’s New!
Burp Suite 2025.1, is packed with new features and enhancements designed to improve your web application testing workflow. This latest version brings exciting upgrades like…
SonicWall SMA Appliances Exploited in Zero-Day Attacks
Critical security flaw in SonicWall SMA 1000 appliances (CVE-2025-23006) exploited as a zero-day. Rated CVSS 9.8, patch immediately to protect systems. SonicWall has identified a…
ESXi ransomware attacks use SSH tunnels to avoid detection
ESXi ransomware attacks use SSH tunnels to avoid detection Pierluigi Paganini January 27, 2025 Threat actors behind ESXi ransomware attacks target virtualized environments using SSH…
Hack My Career: Harley Kimball’s Journey to DEFCON
In this interview, we explore Harley’s experience at DEFCON, the world’s largest hacker convention, where he took his skills to new heights. His story goes…
Phishing Framework Attack Multiple Brands Login Pages To Steal Credentials
Researchers have identified a sophisticated phishing tactic leveraging Cloudflare’s workers.dev, a free domain name service, to execute credential theft campaigns. The modus operandi involves a…
Public cloud: Data sovereignty and data security in the UK
The UK government’s decision to designate datacentres as critical national infrastructure (CNI) in September 2024 signalled its ambition to build a digital economy that is…
Hackers allegedly stole $69M from cryptocurrency platform Phemex
Attackers allegedly stole $69 million from cryptocurrency platform Phemex Pierluigi Paganini January 27, 2025 Crooks stole at least $69 million from Singapore-based cryptocurrency platform Phemex…