A guide to DORA compliance
The Digital Operational Resilience Act (DORA) came into force on 16 January 2023. Following a two-year implementation period, from 17 January 2025, financial organisations must…
Author: Cybernoz
Archana Venugopal Named Senior VP & CISO At NCDEX
Archana Venugopal has taken to LinkedIn to announce her appointment as Senior Vice President & Chief Information Security Officer (CISO) at the National Commodity &…
Post Office’s military culture and the “infallible computers illusion” destroyed lives
Problems experienced by users of the Post Office’s Horizon system are well known today, but the system’s predecessor, Capture, also caused huge problems for users…
PoC Exploit Released for Ivanti Connect Secure RCE Vulnerability
A serious security flaw has been identified in Ivanti Connect Secure, designated as CVE-2025-0282, which enables remote unauthenticated attackers to execute arbitrary code. As of January…
New PoC Released For Ivanti Connect Secure RCE Vulnerability (CVE-2025-0282)
Security researchers have unveiled a proof-of-concept (PoC) exploit for a critical remote code execution vulnerability in Ivanti Connect Secure, Policy Secure, and Neurons for ZTA…
$40,000 Reward for Escalating Limited Path Traversal to RCE
As a dedicated bug bounty hunter with an enviable track record on BugCrowd, Abdullah Nawaf, Full full-time bug Bounty Hunter, thrives on the thrill of discovery…
Let’s Encrypt Unveils Six-Day Certificate and IP Address Options for 2025
Let’s Encrypt has announced plans to introduce six-day certificate options and support for IP address certificates in 2025. This initiative is part of the organization’s…
Let’s Encrypt Announces 6-day Validity Certificates
Let’s Encrypt, the non-profit certificate authority, has introduced six-day validity certificates, commonly referred to as short-lived certificates. This new offering, set to roll out in…
CISA Warns of Aviatrix Controllers OS Command Injection Vulnerability Exploited in Wild
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical alert regarding a significant OS command injection vulnerability in Aviatrix Controllers, identified as CVE-2024-50603. This…
NSA issues warning to iPhone users on data security
National Security Agency (NSA) of the United States has issued a global advisory for iPhone users regarding a device setting that raises significant data security…
Homeowners are clueless about how smart devices collect their data
Homeowners are increasingly concerned about data privacy in smart home products, according to Copeland. Homeowners see smart devices as boosting home security Homeowners are still…
Russia-linked APT Star Blizzard targets WhatsApp accounts
Russia-linked APT Star Blizzard targets WhatsApp accounts Pierluigi Paganini January 17, 2025 The Russian group Star Blizzard targets WhatsApp accounts in a new spear-phishing campaign,…