Misconfiguration exposes GKE clusters to takeover – Cloud – Security
Researchers from cloud security firm Orca have discovered that a widespread misunderstanding of a key authentication parameter in Google Kubernetes Engine leaves clusters at risk…
Author: Cybernoz
Russian hackers breached its security team’s email accounts
Hewlett Packard Enterprise (HPE) disclosed today that suspected Russian hackers known as Midnight Blizzard gained access to the company’s Microsoft Office 365 email environment to…
2024 State of Ransomware in Education: 92% spike in K-12 attacks
This article is based on research by Marcelo Rivero, Malwarebytes’ ransomware specialist, who monitors information published by ransomware gangs on their Dark Web sites. In…
Salesforce’s bug bounty programme paid out $3m in 2023
Salesforce’s long-running bug bounty programme continues to pay dividends to both the organisation’s customers and its growing network of ethical hackers, as the software giant…
NT Police lean on AFP for digital device searches – Security – Software – Telco/ISP
Northern Territory Police are linking up with federal colleagues “wherever possible” to search digital devices, a power they otherwise do not have due to “archaic”…
Global fintech firm EquiLend offline after recent cyberattack
New York-based global financial technology firm EquiLend says its operations have been disrupted after some systems were taken offline in a Monday cyberattack. Following the…
AI will heighten global ransomware threat, says NCSC
Artificial intelligence (AI) will be leveraged to increase the volume and impact of cyber attacks involving ransomware between now and 2026, the UK’s National Cyber…
North Sydney Council creates CIO role – Strategy – Training & Development
North Sydney Council is seeking its first chief information officer (CIO), a role created in a late-2023 council reorganisation. As recorded in December 2023 minutes…
5379 GitLab servers vulnerable to zero-click account takeover attacks
5379 GitLab servers vulnerable to zero-click account takeover attacks Pierluigi Paganini January 24, 2024 Thousands of GitLab servers are vulnerable to zero-click account takeover attacks…
Inside a massive 70,000-domain cybercrime operation
A previously unknown traffic distribution system (TDS) named ‘VexTrio’ has been active since at least 2017, aiding 60 affiliates in their cybercrime operations through a…
Jason’s Deli Data Breach Exposes 344,000 Users in Credential Stuffing Attack
As per the data breach notification filed by the company with Maine’s attorney general office, hackers gained access to customers’ usernames and passwords, along with…
Uptime Institute predicts 2024 will see datacentre operators start row back on net-zero commitments
The Uptime Institute has predicted that 2024 will see many organisations forced to backtrack on their publicly stated net-zero goals, as their sustainability efforts struggle…