HackerOne Company Values Matter: Default to Disclosure
Each year, HackerOne employees nominate peers to receive the covetable Values Awards. Five Hackeronies are recognized for their unique contribution to our company’s success, and…
Author: Cybernoz
Telegram fixes Windows app zero-day caused by file extension typo
Telegram fixed a zero-day vulnerability in its Windows desktop application that could be used to bypass security warnings and automatically launch Python scripts. Over the…
House Votes to Extend—and Expand—a Major US Spy Program
A controversial US wiretap program that was days from expiration cleared a major hurdle on its way to being reauthorized. After months of delays, false…
FBI warns of massive wave of road toll SMS phishing attacks
On Friday, the Federal Bureau of Investigation warned of a massive ongoing wave of SMS phishing attacks targeting Americans with lures regarding unpaid road toll…
Change Healthcare Faces Another Ransomware Threat—and It Looks Credible
For months, Change Healthcare has faced an immensely messy, months-long ransomware debacle that has left hundreds of pharmacies and medical practices across the United States…
Apple iPhone security alert renews spyware concerns
Developers of so-called mercenary spyware, and the governments and organisations that use such products, are once again the subject of a major Apple security alert,…
Ex-Amazon engineer gets 3 years for hacking crypto exchanges
Former Amazon security engineer Shakeeb Ahmed was sentenced to three years in prison for hacking two cryptocurrency exchanges in July 2022 and stealing over $12…
Palo Alto Networks PAN-OS Zero-day Under Active Attack
In a recent security alert, Palo Alto Networks has disclosed a critical vulnerability within its PAN-OS operating system, identified as CVE-2024-3400. This zero-day flaw, found…
Palo Alto RCE Zero-day Vulnerability Actively Exploited in the Wild
In a recent security bulletin, Palo Alto Networks disclosed a critical vulnerability in its GlobalProtect Gateway, identified as CVE-2024-3400. This flaw, rooted in the PAN-OS…
LastPass Dodges Deepfake Scam: CEO Impersonation Attempt Thwarted
Password management giant LastPass narrowly avoided a potential security breach after a company employee was targeted by a deepfake scam. The incident, detailed in a…
US House bill prohibits ransomware payments over $100,000
The US House of Representatives is on the brink of passing a significant bill aimed at curbing the scourge of ransomware attacks by prohibiting payments…
How to change your Social Security Number
After seeing their Social Security Number (SSN) leaked in the AT&T breach, some US citizens are wondering if and how they can change their SSN.…