Is the rush to the fill the skills gap threatening technical competency?
There have been concerted efforts to encourage people to enter the cybersecurity profession. Back in February, the UK Cyber Security Council launched its Cyber Career…
Author: Cybernoz
Large-scale Citrix NetScaler Gateway credential harvesting campaign exploits CVE-2023-3519
Large-scale Citrix NetScaler Gateway credential harvesting campaign exploits CVE-2023-3519 Pierluigi Paganini October 09, 2023 IBM observed a credential harvesting campaign that is targeting Citrix NetScaler…
The Israel-Hamas War Erupts in Digital Chaos
After an attack on Israel by Hamas on Saturday, Israel declared war and fighting escalated throughout the weekend. As the death toll mounts on both…
ASX has until year-end to scope ageing IT plan – Finance – Hardware – Software
The Australian Securities Exchange (ASX) has been given until the end of the year to come up with a “comprehensive” plan to upgrade end-of-life software…
D-Link WiFi range extender vulnerable to command injection attacks
The popular D-Link DAP-X1860 WiFi 6 range extender is susceptible to a vulnerability allowing DoS (denial of service) attacks and remote command injection. The product…
Vodafone to create Open RAN chip sets with Intel – Networking
Vodafone underlined its commitment to Open RAN networks by confirming it would create purpose-built chipset architecture for the nascent technology with Intel. The European operator…
ALPHV ransomware gang claims attack on Florida circuit court
The ALPHV (BlackCat) ransomware gang has claimed an attack that affected state courts across Northwest Florida (part of the First Judicial Circuit) last week. Allegedly, the…
ACT government CISO role elevated to executive level – Training & Development – Security
The ACT government has elevated its whole-of-government CISO role to executive level, and as a result is advertising the position. The CISO leads the territory’s…
GNOME Linux systems exposed to RCE attacks via file downloads
A memory corruption vulnerability in the open-source libcue library can let attackers execute arbitrary code on Linux systems running the GNOME desktop environment. libcue, a…
Phishers Spoof USPS, 12 Other Natl’ Postal Services – Krebs on Security
The fake USPS phishing page. Recent weeks have seen a sizable uptick in the number of phishing scams targeting U.S. Postal Service (USPS) customers. Here’s…
Should new tech rules apply to Microsoft’s Bing, Apple’s iMessage, EU asks – Software
EU antitrust regulators are asking Microsoft’s users and rivals whether Bing should comply with new tough tech rules and also whether that should be the…
Over 17,000 WordPress sites hacked in Balada Injector attacks last month
Multiple Balada Injector campaigns have compromised and infected over 17,000 WordPress sites using known flaws in premium theme plugins. Balada Injector is a massive operation…