Gitleaks: Open-source solution for detecting secrets in your code
Gitleaks is an open-source SAST tool designed to detect and prevent hardcoded secrets such as passwords, API keys, and tokens in Git repositories. With more…
Author: Cybernoz
Chinese Cyberspies Employ Ransomware in Attacks for Diversion
Cyberespionage groups have been using ransomware as a tactic to make attack attribution more challenging, distract defenders, or for a financial reward as a secondary…
New ransomware, infostealers pose growing risk in 2024
BlackBerry detected and stopped 3.1 million cyberattacks (37,000 per day) in the first quarter of 2024. Between January and March 2024, BlackBerry detected 630,000 malicious…
WordPress Releases Urgent Security Update to Patch XSS and Path Traversal Flaws
WordPress has released an urgent security update, version 6.5.5, addressing critical vulnerabilities that could potentially compromise the security of millions of websites. This minor release,…
75% of new vulnerabilities exploited within 19 days
Last year alone, over 30,000 new vulnerabilities were published, with a new vulnerability emerging approximately every 17 minutes — averaging 600 new vulnerabilities per week,…
National e-conveyancing reform halted – Finance
A national reform to widen competition in the electronic conveyancing industry has been paused due to “issues raised by the banking industry”. Known as the interoperability…
BSNL Data Breach Exposes Millions of Users to Fraud and Security Risks
Bharat Sanchar Nigam Limited (BSNL), India’s state-owned telecommunications provider, has suffered a major data breach orchestrated by a threat actor known as “kiberphant0m”. The cyberattack…
SOCO Reveals Microsoft AI with Power Platform Use Cases at Upcoming Government Event – Partner Content
Leading Microsoft partner SOCO aims to build governments’ knowledge of the potential of Copilot Studio with Power Platform and has scheduled a two-hour, in-person briefing…
User ID Verification Service for TikTok, Uber, X Exposes Admin Credentials
AU10TIX, an Israel-based identity verification company that works with major tech platforms like TikTok, Uber, and X (formerly Twitter), inadvertently exposed a set of administrative…
South Korean ISP Targeted Torrenting Customers With Malware
South Korean telecommunications giant KT is under investigation for allegedly hacking the systems of customers who used torrent services such as web hard drives (Webhard),…
Polyfill Supply Chain Attack Affects Over 100,000 Websites
A widespread supply chain attack has hit more than 100,000 websites, including notable platforms like JSTOR, Intuit, and the World Economic Forum. The attack stems…
Chinese Espionage Group “ChamelGang” Uses Attacks for Disruption, Data Theft
SentinelOne’s research arm, SentinelLabs, has revealed startling new details on the strategic use of ransomware by cyberespionage actors for financial gain, disruption, distraction, or misattribution.…