Log4J shows no sign of fading, spotted in 30% of CVE exploits
Organizations continue to run insecure protocols across their wide access networks (WAN), making it easier for cybercriminals to move across networks, according to a Cato…
Author: Cybernoz
MITRE EMB3D Cybersecurity Threat Model for Embedded Devices
In collaboration with Red Balloon Security, Narf Industries, and Niyo Little Thunder Pearson (ONEGas, Inc.), MITER has unveiled EMB3D, a comprehensive threat model designed to…
Top Threats to Embedded Devices and How EMB3D Mitigates Them
In a significant development for cybersecurity in critical infrastructure, MITRE Corporation has launched a new threat-modeling framework known as EMB3D. This initiative marks a collaborative…
OpenAI unveils new AI model as competition heats up – Software
ChatGPT maker OpenAI said it would release a new AI model called GPT-4o, capable of realistic voice conversation and able to interact across text and…
Apple backports fix for RTKit iOS zero-day to older iPhones
Apple has backported security patches released in March to older iPhones and iPads, fixing an iOS Kernel zero-day tagged as exploited in attacks. In security…
Australian court lifts order blocking X on church video – Software
An Australian court has rejected a bid by the country’s cyber safety regulator to extend a temporary order for Elon Musk-owned X to block videos…
Threat actors may have exploited a zero-day in older iPhones, Apple warns
Threat actors may have exploited a zero-day in older iPhones, Apple warns Pierluigi Paganini May 13, 2024 Apple rolled out urgent security updates to address…
PyPi package backdoors Macs using the Sliver pen-testing suite
A new package mimicked the popular ‘requests’ library on the Python Package Index (PyPI) to target macOS devices with the Sliver C2 adversary framework, used for…
INC ransomware source code selling on hacking forums for $300,000
A cybercriminal using the name “salfetka” claims to be selling the source code of INC Ransom, a ransomware-as-a-service (RaaS) operation launched in August 2023. INC…
CBA is building digital twins of its financial planning systems – Finance – Software
The Commonwealth Bank of Australia is building digital twins on Confluent’s event-streaming platform to analyse its financial planning systems and make improvement fixes to them…
FCC reveals Royal Tiger, its first tagged robocall threat actor
The Federal Communications Commission (FCC) has named its first officially designated robocall threat actor ‘Royal Tiger,’ a move aiming to help international partners and law…
City of Helsinki suffered a data breach
City of Helsinki suffered a data breach Pierluigi Paganini May 13, 2024 The City of Helsinki suffered a data breach that impacted tens of thousands…