Hackers’ OPSEC Mistake Exposed a Global Espionage Campaign and Its New TriBack Malware
A simple mistake by cyber spies has pulled back the curtain on a wide ranging espionage effort. It reached hospitals, government offices, and schools across…
Author: Cybernoz
Critical FreePBX Flaws Let Unauthenticated Attackers Execute Code and Take Over Administrator Accounts
Critical security vulnerabilities in FreePBX have been disclosed, exposing organizations to risks of unauthenticated remote code execution and the takeover of administrator accounts. These flaws,…
Months-long breach exposes South Korean diplomats’ personal data
South Korea’s Foreign Ministry has disclosed that attackers breached the Korea National Diplomatic Academy’s online education system, compromising personal data belonging to current and former…
Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge
The Chaos ransomware group ran its command-and-control through the victim’s own browser. Cisco Talos on Thursday detailed msaRAT, the Rust implant behind it, found on…
Alphabet borrows $100bn to pay for AI investments
Alphabet, the parent company of Google, has reported revenue for the second quarter of 2026 of £120bn, an increase of 24%, with Google Cloud experiencing…
US and allies say Russian hackers stole emails without social engineering
The United States and more than a dozen allied nations said that Russian hackers stole emails from users of the Zimbra email program without having…
Is Patching Dead? Vulnerability Management in the Post-Mythos Era
On July 14, 2026, the White House launched Gold Eagle: a federal clearinghouse that uses frontier AI to identify, rank, and coordinate the remediation of…
U.S. CISA adds Microsoft SharePoint and Check Point SmartConsole flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Microsoft SharePoint and Check Point SmartConsole flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini July 23, 2026 U.S. Cybersecurity and Infrastructure…
CISA, FBI warn that Iran-linked hackers are expanding target set for water, energy
The agencies said threat groups have disrupted critical infrastructure sites by exploiting vulnerable PLC devices. Source link
Rubio restricts visas for sextortionists, cyber scammers
The State Department will restrict visas for cybercriminals like scammers to sextortionists, and in some cases even their family members, Secretary of State Marco Rubio…
Department of War suspends CMMC Phase II requirements during review
The U.S. Department of War has announced the immediate suspension of Phase II of the Cybersecurity Maturity Model Certification (CMMC) program, marking a shift in…
Check Point hole grants unauthenticated attackers full SmartConsole admin privileges
Challenges of IP address restrictions While it can be technically challenging to keep the IP address allowlists that Check Point recommends current, given DHCP’s ability…