How REI Strengthens Security with HackerOne’s Global Security Researcher Community
Q: Please introduce yourself. Tell us what you do at REI and why cybersecurity is important to REI. A: I’m Isaiah Grigsby, a senior application…
Author: Cybernoz
Microsoft now testing hotpatch on Windows 11 24H2 and Windows 365
Microsoft announced today that hotpatching of security updates is now also available in preview on Windows 365 and Windows 11 Enterprise 24H2 client devices. Windows…
ETSI Security Conference 2024 – Identity Theft in the Digital Age w/ Dr. Nicole van der Meulen
Nicole van der Meulen is cybersecurity innovation lead at SURF. Previously she worked as a Senior Strategic Analyst and Head of the Strategy & Development team…
From beauty model to tech role model – this year’s most influential woman in UK tech
“My husband has to sew my buttons on – I still can’t sew,” confesses co-CEO of technology education charity Tech She Can, Sheridan Ash. This…
D-Link urges users to retire VPN routers impacted by unfixed RCE flaw
D-Link is warning customers to replace end-of-life VPN router models after a critical unauthenticated, remote code execution vulnerability was discovered that will not be fixed on…
Helldown ransomware exploits Zyxel VPN flaw to breach networks
The new ‘Helldown’ ransomware operation is believed to target vulnerabilities in Zyxel firewalls to breach corporate networks, allowing them to steal data and encrypt devices.…
Russian Hacker Extradited to US for Phobos Ransomware Charges
Russian national Evgenii Ptitsyn, linked to Phobos ransomware, faces U.S. charges for extortion and hacking, with over $16M in damages globally. The U.S. Department of…
Windows 365 Link Cloud PC: Connect securely to Windows 365
Microsoft unveiled Windows 365 Link, their first purpose-built Cloud PC device for instant, secure connection to Windows 365. Sign-in screen with USB security key option…
Cross-IdP impersonation bypasses SSO protections
Cross-IdP impersonation – a technique that enables attackers to hijack the single sign-on (SSO) process to gain unauthorized access to downstream software-as-a-service (SaaS) applications without…
CMA clears Google over Anthropic partnership
The Competition and Markets Authority (CMA) has said Alphabet’s partnership with Anthropic does not qualify for investigation under the merger provisions of the Enterprise Act…
China-linked actor’s malware DeepData exploits FortiClient VPN zero-day
China-linked actor’s malware DeepData exploits FortiClient VPN zero-day Pierluigi Paganini November 19, 2024 Chinese threat actors use custom post-exploitation toolkit ‘DeepData’ to exploit FortiClient VPN…
Botnet fueling residential proxies disrupted in cybercrime crackdown
The Ngioweb botnet, which supplies most of the 35,000 bots in the cybercriminal NSOCKS proxy service, is being disrupted as security companies block traffic to and…