OpenSSH flaw lets attackers access password-disabled accounts on some Linux systems
A critical vulnerability that affects OpenSSH servers on Linux systems built with the musl C library instead of glibc allows remote attackers to easily bypass…
Author: Cybernoz
Wiz integrates with Amazon Security Lake to improve cloud security through cloud security data sharing
We are excited to announce our integration with Amazon Security Lake. This integration enables mutual customers to add Wiz Issues (risks that Wiz has identified…
Inside BTMob: How a Source Code Leak Expanded Access to a Mobile RAT
BTMob, a mobile remote access trojan (RAT) capable of extensive device surveillance and data theft, has gained traction across cybercriminal communities following the leak of…
Huntress + Hudu Integration: Security Context in Your IT Docs
Most managed service providers (MSPs) have one place where everything about a client lives: their devices, passwords, network details, and the steps for onboarding a…
The more you know, the less you know.
This week, hosts of N2K CyberWire Maria Varmazis and Dave Bittner alongside Joe Carrigan are discussing the latest in social engineering scams, phishing schemes, and…
FBI, CISA warn of cyberattacks targeting refrigeration systems
The FBI and CISA warn that hackers are actively targeting industrial refrigeration and cold-chain monitoring systems worldwide, potentially causing food spoilage, equipment damage, and fire…
OpenAI Launches GPT-6 Cyber That Finds 81 Firefox Flaws and Develops 948 Linux Exploits
OpenAI has launched GPT-6 Cyber, a security-focused AI model that found 81 new high-severity Firefox flaws and built working exploits for 948 Linux kernel bugs.…
Hackers Develop New HYFLOCK Ransomware That Encrypts Files and Attempts to Block Recovery
HYFLOCK ransomware operators have developed successive Windows encryptors that lock files, access network shares, and attempt to obstruct recovery, while implementation flaws create sharply different…
Vercel ties login sessions to devices, rolls out AI security reviews in public beta
Vercel, the popular cloud platform for building and hosting websites and web applications, has announced the rollout of Device Bound Session Credentials (DBSC) and the…
NIKKE PC launcher compromise put players’ passwords and personal files at risk
Players of Goddess of Victory: NIKKE are being urged to check their PCs after attackers tampered with files used by the game’s Windows launcher. Opening…
Researchers Bypass ChatGPT Lockdown Mode to Exfiltrate Chats Without User Interaction
Cybersecurity researchers have disclosed details of a now-patched vulnerability that could be exploited to bypass Lockdown Mode protections in OpenAI ChatGPT. Lockdown Mode was introduced…
UK government ‘house of cards’ heavily reliant on US AI models
The artificial intelligence (AI) tools used by the UK government rely almost exclusively on models from US tech firms, raising questions over contingency planning. According…