It’s Time To Untangle the SaaS Ball of Yarn
It’s no great revelation to say that SaaS applications have changed the way we operate, both in our personal and professional lives. We routinely rely…
Author: Cybernoz
AWS Configuration Vulnerability Exposes Thousands of Web Apps
A recent discovery by Miggo Research has unveiled a critical configuration vulnerability in Amazon Web Services (AWS) that exposes thousands of web applications to potential…
Misconfiguration Flaw Exposes 15,000 AWS Load Balancers to Risk
ALBeast is a critical vulnerability that allows attackers to bypass authentication and authorization in AWS ALB-based applications. Learn how to mitigate this risk and protect…
The Rise of Kerberoasting: A New Cyber Threat on the Horizon
In recent years, the landscape of cybersecurity threats has evolved, with attackers constantly refining their techniques to exploit vulnerabilities in increasingly sophisticated ways. Among the…
RightCrowd introduces Mobile Credential Management feature
RightCrowd introduced Mobile Credential Management feature for RightCrowd SmartAccess. This solution transforms how organizations manage and control access, replacing traditional methods with a more secure,…
A Dangerous New Cyber Threat Emerges
A new malware strain called Styx Stealer has emerged, posing a significant threat to online security. Discovered in April 2024, Styx Stealer malware targets popular…
TA453 Hackers Using Fake podcast To Deliver New BlackSmith Malware Toolkit
Iranian threat actor TA453 launched a phishing campaign targeting a prominent religious figure with a fake podcast invitation aiming to deliver a new malware toolkit,…
Toyota confirms customer and employee data stolen, says breach at third party to blame
Last week, a cybercriminal using the handle ZeroSevenGroup dumped 240GB of data on the infamous stolen data site BreachForums, that they said came from a…
Wells Fargo bank turns to AI to help families settle estates after a death
US bank Wells Fargo has reported a big jump in recommendations from customers after using artificial intelligence (AI) and automation to help families manage the…
Critical Vulnerability In OpenBMCs For Servers, Leads To Full Compromise
BMCs are specialized microcontrollers embedded in servers and other devices, responsible for monitoring and managing hardware health, including temperature, voltage, and system logs. Cybersecurity researchers…
Post Office Horizon crash disconnected branches from datacentre
The Post Office has revealed a disconnect between branch systems and a Fujitsu datacentre is what left subpostmasters unable to authenticate and log onto their…
Hackers Exploit PHP Vulnerability in Windows for Remote Code Execution
Cybersecurity researchers at Symantec recently identified a new malware that exploits a PHP vulnerability(CVE-2024-4577) in the CGI argument injection flaw. This vulnerability affects all versions…