Author: Cybernoz

FortiOS, FortiWeb, and FortiProxy Vulnerability Lets Attackers Bypass FortiCloud SSO Authentication
09
Dec
2025

FortiOS, FortiWeb, and FortiProxy Vulnerability Lets Attackers Bypass FortiCloud SSO Authentication

Fortinet has issued an urgent security advisory regarding a critical vulnerability affecting its FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager product lines….

New Variant of Mirai Botnet 'Broadside' Launches Active Attacks on Users
09
Dec
2025

New Variant of Mirai Botnet ‘Broadside’ Launches Active Attacks on Users

Cydome’s Cybersecurity Research Team has uncovered a sophisticated new variant of the notorious Mirai botnet, designated as “Broadside,” currently executing…

AI Agent Governance: The Next Pillar of Zero Trust and Compliance
09
Dec
2025

AI Agent Governance: The Next Pillar of Zero Trust and Compliance

For decades, enterprise identity governance has answered a simple question:“Who has access to what and why?” That model worked when…

Soaring cloud costs force firms to curtail IT staff hiring and AI efforts, research shows
09
Dec
2025

Interview: Meet the competition lawyer taking Microsoft to task over its cloud licensing tactics

The hyperscalers’ hold on the global, multibillion-pound cloud computing market has come under repeated scrutiny over the past couple of…

Wazuh
09
Dec
2025

Maintaining enterprise IT hygiene using Wazuh SIEM/XDR

Organizations face the challenge of maintaining visibility and control over their IT infrastructure. A forgotten user account, an outdated software…

Microsoft December 2025 Patch Tuesday
09
Dec
2025

Microsoft December 2025 Patch Tuesday

Microsoft released its final Patch Tuesday updates of 2025 on December 9, addressing 56 security vulnerabilities across Windows, Office, Exchange…

Hackers Exploit Ivanti Connect Secure Vulnerabilities to Spread MetaRAT Malware
09
Dec
2025

Hackers Exploit Ivanti Connect Secure Vulnerabilities to Spread MetaRAT Malware

LAC’s Cyber Emergency Center has identified a sophisticated cyberespionage campaign targeting Japanese shipping and transportation companies. The operation, orchestrated by…

Police Dismantle EUR 700 Million Crypto Scam That Used Deepfakes
09
Dec
2025

Police Dismantle EUR 700 Million Crypto Scam That Used Deepfakes – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More

A massive, years-long international police operation has successfully taken down a huge cryptocurrency fraud and money laundering network in Europe….

The agentic AI future of enterprise architecture
09
Dec
2025

The agentic AI future of enterprise architecture

Throughout 2025, enterprise software providers have launched and spoken of agentic AI, claiming it will revolutionise the operating model of…

Ivanti
09
Dec
2025

Ivanti warns of critical Endpoint Manager code execution flaw

American IT software company Ivanti warned customers today to patch a newly disclosed vulnerability in its Endpoint Manager (EPM) solution…

Threat Actors Poisoning SEO Results to Attack Organizations With Fake Microsoft Teams Installer
09
Dec
2025

Threat Actors Poisoning SEO Results to Attack Organizations With Fake Microsoft Teams Installer

A sophisticated cyber campaign is exploiting search engine optimization (SEO) to distribute a malicious installer disguised as Microsoft Teams, targeting…

Malicious MCP Servers Enable Stealthy Prompt Injection to Drain System Resources
09
Dec
2025

Malicious MCP Servers Enable Stealthy Prompt Injection to Drain System Resources

Security researchers have uncovered critical vulnerabilities in the Model Context Protocol (MCP) sampling feature that enable malicious servers to execute…