Fraud network uses 4,700 fake shopping sites to steal credit cards
A financially motivated Chinese threat actor dubbed “SilkSpecter” is using thousands of fake online stores to steal the payment card details of online shoppers in…
Author: Cybernoz
122 million people’s business contact info leaked by data broker
A data broker has confirmed a business contact information database containing 132.8 million records has been leaked online. In February, 2024, a cybercriminal offered the…
CISA warns of more Palo Alto Networks bugs exploited in attacks
CISA warned today that two more critical security vulnerabilities in Palo Alto Networks’ Expedition migration tool are now actively exploited in the wild. Attackers can…
US regulators plan to investigate Microsoft’s cloud business – Cloud
(Reuters) -The U.S. Federal Trade Commission is preparing to launch an investigation into anti-competitive practices at Microsoft’s cloud computing business, the Financial Times reported, citing…
New Glove infostealer malware bypasses Chrome’s cookie encryption
New Glove Stealer malware can bypass Google Chrome’s Application-Bound (App-Bound) encryption to steal browser cookies. As Gen Digital security researchers who first spotted it while…
QLD Police brings 3D crime scene recreation to forensics team – Hardware
Queensland Police’s forensic division will soon be able to reconstruct crime scenes in 3D using the native LiDAR scanners embedded in iPad Pro. The force’s…
Australia Post unites HR support with new ‘front door’ and tech platform – Cloud – HR
Australia Post has created a single front door for HR support, underpinned by a platform that’s being enhanced and expanded over a three-year period. Australia…
These 8 Apps on Google Play Store Contain Android/FakeApp Trojan
Eight Android apps on the Google Play Store, downloaded by millions, contain the Android.FakeApp trojan, stealing user data – Here’s the complete list, delete the…
Hackers use macOS extended file attributes to hide malicious code
Hackers are using a novel technique that abuses extended attributes for macOS files to deliver a new trojan that researchers call RustyAttr. The threat actor is…
Experts Uncover 70,000 Hijacked Domains in Widespread ‘Sitting Ducks’ Attack Scheme
Multiple threat actors have been found taking advantage of an attack technique called Sitting Ducks to hijack legitimate domains for using them in phishing attacks…
The true (and surprising) cost of forgotten passwords
We’ve all been there: staring at the login screen, trying to remember which password variation we’re supposed to use on a particular site. Thankfully, a…
The CrowdStrike Incident: The Devil is in the Details, and Chaos is in the Code
The CrowdStrike failure, a watershed moment in cybersecurity, stands as the most significant story of the year and potentially one of the most impactful of…