How to Stay Ahead of Deepfakes and Other Social Engineering Attacks
As companies work to reap the benefits of artificial intelligence (AI), they also must beware of its nefarious potential. Amid an AI-driven uptick in social…
Author: Cybernoz
Millions of Kia vehicles were vulnerable to remote attacks with just a license plate number
In June of 2024 security researchers uncovered a set of vulnerabilities in the Kia dealer portal that allowed them to remotely take over any Kia…
Cyber companies need a best practice approach to major incidents.
Cyber security companies have made global headlines recently with a series of significant incidents which caused widespread disruption. The CrowdStrike incident is estimated to have…
NIST Recommends New Rules for Password Security
The National Institute of Standards and Technology (NIST) has released updated guidelines for password security, marking a significant shift from traditional password practices. These new…
LummaC2 Stealer Leverages Customized Control Flow Indirection For Execution
The LummaC2 obfuscator employs a novel control flow protection scheme designed specifically for its stealer component, which is part of a broader set of transformations,…
Defaulting to open: Decoding the (very public) CrowdStrike event
We live in an era of cyber ‘incidents,’ from WannaCry to MOVEit. However, it’s undeniably rare that a vendor finds themselves at the epicentre of…
CUPS flaws allow remote code execution on Linux systems under certain conditions
CUPS flaws allow remote code execution on Linux systems under certain conditions Pierluigi Paganini September 27, 2024 A researcher has disclosed details of an unpatched…
Embargo ransomware escalates attacks to cloud environments
Microsoft warns that ransomware threat actor Storm-0501 has recently switched tactics and now targets hybrid cloud environments, expanding its strategy to compromise all victim assets.…
Top 5 SME Cybersecurity Mistakes & Solutions in 2024
Many small to medium-sized enterprises (SMEs) misperceive cybersecurity as an IT issue for technical specialists. By recognizing organizational protection as an imperative for all employees…
Innovator Spotlight: Zilla Security – Cyber Defense Magazine
by Dan K. Anderson CEO, CISO, and vCISO As organizations grow, managing access to critical systems and ensuring compliance with identity governance and administration (IGA)…
Hackers Abuse HTML Smuggling Technique To Deliver Sophisticated Phishing Page
Phishing attackers employed an HTML smuggling technique to deliver a malicious payload, as the attack chain started with a phishing email mimicking an American Express…
Innovator Spotlight: Guardio – Cyber Defense Magazine
Cyber threats are becoming more sophisticated, putting both individuals and businesses at significant risk. The rise in phishing attacks, identity theft, and online fraud highlights…