Microsoft launches unified Teams app for personal, work accounts
Microsoft has launched a new unified Teams application that allows Windows and Mac users to switch between personal, work, and education accounts without installing multiple…
Author: Cybernoz
Backdoor MIFARE Smart Cards Exposes User-Defined Keys On Cards
Researchers analyze the security of MIFARE Classic cards, focusing exclusively on card-only attacks. They uncover multiple new attack vectors by examining the CRYPTO-1 algorithm, existing…
Previously unseen Msupedge backdoor targeted a university in Taiwan
Previously unseen Msupedge backdoor targeted a university in Taiwan Pierluigi Paganini August 20, 2024 Experts spotted a previously undetected backdoor, dubbed Msupedge, that was employed…
Hackers use PHP exploit to backdoor Windows systems with new malware
Unknown attackers have deployed a newly discovered backdoor dubbed Msupedge on a university’s Windows systems in Taiwan, likely by exploiting a recently patched PHP remote…
August Windows updates break dual boot on some Linux systems
According to user reports following this month’s Patch Tuesday, the August 2024 Windows updates are breaking dual boot on Linux systems with Secure Boot enabled.…
Critical WordPress Plugin RCE Vulnerability Impacts 100k+ Sites
A severe security flaw has been discovered in GiveWP, a popular WordPress donation plugin with over 100,000 active installations. The vulnerability, classified as an unauthenticated…
Publishers Spotlight: ForAllSecure – Cyber Defense Magazine
I was thrilled to catch up with ForAllSecure during Black Hat USA 2024. ForAllSecure is an organization of hackers, developers, and security professionals dedicated to…
TodoSwift Malware Targets macOS, Disguised as Bitcoin PDF App
Meet TodoSwift, a malicious application that masquerades as a PDF downloader. Crafted by the BlueNoroff threat group, TodoSwift leverages Apple’s Swift/SwiftUI to present a decoy PDF…
Takeaways from the Dismissal of the Government’s Case Against the SolarWinds CISO
The case against SolarWinds was filed by the Securities and Exchange Commission (SEC), a government agency that has interpreted its authority broadly to regulate publicly…
The Steep Cost of Neglecting Cybersecurity Training
In modern business, cybersecurity is not merely a technical concern but a crucial financial safeguard. With cyber threats growing in sophistication and frequency, the financial…
Germany offers Cybersecurity Labels for mobile devices
Since August 14, 2024, the Federal Office for Information Security (BSI) in Germany has begun issuing security labels for IT devices. These labels provide a…
Hacker locks Unicoin staff out of Google accounts for 4 days
A hacker compromised Unicoin’s Google Workspace (formerly G-Suite) account and changed the passwords for all company employees, locking them out of their corporate accounts for…