Addressing XPath Expression Injection Vulnerabilities
Widely used open-source Java tools, GeoServer and GeoTools, that help in geospatial data processing have fixed security vulnerabilities related to XPath expression injection. Identified as…
Author: Cybernoz
Kematian Stealer Abuses Powershell for Covert Data Exfiltration
The Kematian Stealer has emerged as a sophisticated PowerShell-based malware that covertly exfiltrates sensitive data from compromised systems. This article delves into the intricate workings…
Authy phone numbers accessed by cybercriminals, warns Twilio
Twilio has warned users of the Authy multi-factor authentication (MFA) app about an incident in which cybercriminals may have obtained their phone numbers. Twilio said…
For Cybersecurity Pros, July 4 Is Never A Time To Relax
For most Americans, July 4 is an idyllic holiday of cookouts, parades and fireworks, and leisure time by the pool or even at the beach.…
Healthcare fintech firm HealthEquity disclosed a data breach
Healthcare fintech firm HealthEquity disclosed a data breach Pierluigi Paganini July 04, 2024 Healthcare firm HealthEquity disclosed a data breach caused by a partner’s compromised…
Hackers attack HFS servers to drop malware and Monero miners
Hackers are targeting older versions of the HTTP File Server (HFS) from Rejetto to drop malware and cryptocurrency mining software. Threat researchers at security company AhnLab believe that…
Volcano Demon Ransomware Group Threatening Victims Over Phone Call
A novel malware known as Volcano Demon has been observed targeting Windows workstations and servers, obtaining administrative credentials from the network. The threat actor doesn’t…
Ilan Leiferman Takes Helm Of Vintage’s Value+ Platform
Vintage Investment Partners, a global venture capital platform managing $4 billion in assets, has announced the appointment of Ilan Leiferman as Chief Value-Add Officer. Leiferman…
OpenStack Arbitrary File Access Flaw Exposes Cloud Data to Hackers
A critical security vulnerability has been identified in OpenStack, a widely used open-source cloud computing platform. The flaw tracked as CVE-2024-32498, allows authenticated attackers to…
How Apple Intelligence’s Privacy Stacks Up Against Android’s ‘Hybrid AI’
Yet Google and its hardware partners argue privacy and security are a major focus of the Android AI approach. VP Justin Choi, head of the…
New Android Spyware Steals Data from Gamers and TikTok Users
Pakistan-linked Transparent Tribe (aka APT 36, Operation C-Major) disguises CapraRAT, an Android spyware, as popular apps to steal your data. Learn how to protect yourself…
Brazil data protection authority bans Meta from training AI models with data originating in the country
Brazil data protection authority bans Meta from training AI models with data originating in the country Pierluigi Paganini July 04, 2024 Brazil’s data protection authority…