Four Steps Security Teams Can Take to Unlock Resources In Budget-Constrained Environments
Imagine walking into a board meeting with a tool that shows your board exactly how protected the organization is, based on the investment they have…
Author: Cybernoz
A Practical Guide for MSPs
Cybersecurity reporting is a critical yet often overlooked opportunity for service providers managing cybersecurity for their clients, and specifically for virtual Chief Information Security Officers…
UK Defence Committee urges MoD to embrace AI
The UK Ministry of Defence (MoD) should embrace artificial intelligence (AI) to maintain its military advantages, which will require nurturing the country’s private AI defence…
Weaponized LDAP Exploit Deploys Information-Stealing Malware
Cybercriminals are exploiting the recent critical LDAP vulnerabilities (CVE-2024-49112 and CVE-2024-49113) by distributing fake proof-of-concept exploits for CVE-2024-49113 (dubbed “LDAPNightmare”). These malicious PoCs, often disguised…
Job-seeking devs targeted with fake CrowdStrike offer via email
Cryptojackers are impersonating Crowdstrike via email to get developers to unwittingly install the XMRig cryptocurrency miner on their Windows PC, the company has warned. The…
CrowdStrike Warns of Phishing Scam Targeting Job Seekers with XMRig Cryptominer
Jan 10, 2025Ravie LakshmananCryptomining / Malware Cybersecurity company CrowdStrike is alerting of a phishing campaign that exploits its own branding to distribute a cryptocurrency miner…
UK fintech investment drops by almost double global average
Investment in the UK fintech sector fell by 37% last year compared to 2023, but retained its leadership in Europe and was second place in…
Samsung Patches Multiple Vulnerabilities That Let Attackers Execute Arbitrary Code
Samsung Mobile has announced the release of a comprehensive maintenance update as part of its monthly Security Maintenance Release (SMR) process. This latest update addresses…
Multi-Plugin Malware Framework Installs Backdoor on Windows
The QSC Loader service DLL named “loader.dll” leverages two distinct methods to obtain the path to the Core module code. It either extracts the path…
RedDelta Deploys PlugX Malware to Target Mongolia and Taiwan in Espionage Campaigns
Jan 10, 2025Ravie LakshmananCyber Espionage / Cyber Attack Mongolia, Taiwan, Myanmar, Vietnam, and Cambodia have been targeted by the China-nexus RedDelta threat actor to deliver…
Phishers abuse CrowdStrike brand targeting job seekers with cryptominer
Phishers abuse CrowdStrike brand targeting job seekers with cryptominer Pierluigi Paganini January 10, 2025 CrowdStrike warns of a phishing campaign that uses its recruitment branding…
New NonEuclid RAT Evades Antivirus and Encrypts Critical Files
A NonEuclid sophisticated C# Remote Access Trojan (RAT) designed for the.NET Framework 4.8 has been shown to pose a significant and ever-evolving cyber threat. The…