Researcher Exploited Nexus Repository Directory Traversal Vulnerability
Hackers target and exploit GitHub repositories for a multitude of reasons and illicit purposes. The widespread use of GitHub and the diverse range of codebases…
Author: Cybernoz
Fake Antivirus Sites Spread Malware Disguised as Avast, Malwarebytes, Bitdefender
Trellix research exposes the dangers of fake antivirus websites disguised as legitimate security software but harbouring malware. Learn how to identify these scams and protect…
4-Step Approach to Mapping and Securing Your Organization’s Most Critical Assets
You’re probably familiar with the term “critical assets”. These are the technology assets within your company’s IT infrastructure that are essential to the functioning of…
Government appoints investigators to analyse Post Office Capture software used before Horizon
The government is bringing in specialist investigators to examine whether a Post Office software application in use during the 1990s – before the controversial Horizon…
Researchers Detailed WAF Bypass Techniques With Burp Plugin
Security experts have disclosed advanced methods for bypassing Web Application Firewalls (WAFs) on a large scale, and they have also introduced a new Burp Suite…
DDNS Service Or QNAP Embed Devices Exposes Sensitive Data
Hackers employ DNS for various purposes like redirecting traffic to enable man-in-the-middle attacks, infecting malware through harmful sites, and flooding DNS servers with fake requests…
What is an Infosec Audit and Why Does Your Company Need One?
Uncover IT security weaknesses and ensure compliance with infosec audits. Regular audits protect your data from breaches & meet regulations. Learn more about infosec audits…
Researchers Warn of CatDDoS Botnet and DNSBomb DDoS Attack Technique
The threat actors behind the CatDDoS malware botnet have exploited over 80 known security flaws in various software over the past three months to infiltrate…
Post Office scandal: Met Police investigation set to go national
The Metropolitan Police has confirmed it is setting up a national investigation into the Post Office scandal, although it could take at least two years…
Cencora Data Breach Far More Widespread Than Earlier Thought
The impact of the Cencora data breach is far more widespread than earlier thought as more than a dozen pharmaceutical giants including Novartis and GlaxoSmithKline…
Decathlon Data Leak: Employees Info Potentially Exposed
A recent data breach has reportedly compromised the personal information of Decathlon employees in Spain. The threat actor known as 888 has taken responsibility for…
Zscaler Client Connector Zero-interaction Privilege Escalation Vulnerability
A new privilege escalation vulnerability has been discovered in Zscaler Client Connector, combining three different vulnerabilities. The three vulnerabilities were associated with Reverting password check…