Why the Right Metrics Matter When it Comes to Vulnerability Management
How’s your vulnerability management program doing? Is it effective? A success? Let’s be honest, without the right metrics or analytics, how can you tell how…
Author: Cybernoz
PurpleFox malware infected thousands of systems in Ukraine
The Computer Emergency Response Team in Ukraine (CERT-UA) is warning about a PurpleFox malware campaign that has infected at least 2,000 computers in the country.…
A Startup Allegedly ‘Hacked the World.’ Then Came the Censorship—and Now the Backlash
Even so, a little more than two weeks after publishing its investigation into Appin Technology, on December 5, Reuters complied with the Indian court’s injunction,…
BackBox introduces ZTNO to automate zero trust security for network operations
In a significant stride towards enhancing network security, BackBox introduces Zero Trust Network Operations (ZTNO). This offering is a best practice framework with six actionable…
Tax season is here, so are scammers
The Internal Revenue Service has announced that the 2024 tax filing season has officially begun, with an expected 146 million individual tax returns to be…
FritzFrog Returns with Log4Shell and PwnKit, Spreading Malware Inside Your Network
Feb 01, 2024NewsroomCyber Attack / Botnet The threat actor behind a peer-to-peer (P2P) botnet known as FritzFrog has made a return with a new variant…
Welsh workers’ AI experiences shaped by uneven power dynamics
Asymmetric power dynamics at work are fuelling Welsh workers’ negative experience of artificial intelligence (AI), says Trade Unions Congress (TUC), and make it difficult to…
[tl;dr sec] #216 – Azure Attack Paths, Recipe for Scaling Security, Cybersecurity Incident Tracker
I hope you’ve been doing well! 🎭️ SF SketchFest One of my favorite events every year is SF SketchFest, which is basically a month of…
Google shares fix for Pixel phones hit by bad system update
Google has shared a temporary fix for owners of Google Pixel devices that were rendered unusable after installing the January 2024 Google Play system update.…
What is HTTP Request Smuggling and HTTP/2 Downgrading?
Have you heard of the term HTTP Request Smuggling? What about HTTP/2 Downgrading? Well, these are vulnerabilities that can be exploited by cybercriminals when there…
FTC issues ban on location data and bars information brokers from duties
Following an investigation into the unauthorized use and sale of geolocation data by two companies, the Federal Trade Commission (FTC) in the United States has…
FritzFrog botnet exploits Log4Shell, PwnKit vulnerabilities
The FritzFrog cryptomining botnet has new potential for growth: a recently analyzed variant of the bot is exploiting the Log4Shell (CVE-2021-44228) and PwnKit (CVE-2021-4034) vulnerabilities…