KDDI Data Breach Exposes 14.22M Email Accounts
Japanese telecommunications company KDDI has disclosed a major cybersecurity incident in which up to 14.22 million email addresses and passwords may have been exposed through…
Author: Cybernoz
OAIC sweep unearths health sites’ covert user tracking
Several Australian health service websites have been covertly tracking visitors and transmitting sensitive health information to social media platforms without disclosure or consent, the Office…
Webinar Today: Modern Exposure Validation in the AI Era
Weeks to hours. That’s how fast AI now turns a new vulnerability into a working exploit. Patch-and-pentest cycles were built for a slower world. The…
ASD to retire Essential Eight within two years, consults on replacement
The Australian Signals Directorate and the Australian Cyber Security Centre say the Essential Eight cyber security framework will be retired within the next two years…
Hole in widely-used FFmpeg codec could crash media servers or enable RCE
A newly discovered critical vulnerability in the FFmpeg media processing framework bundled in a huge number of open source and commercial applications points, again, to…
LiteLLM TeamPCP Supply Chain Attack: Malicious PyPI Packages
LiteLLM is the latest victim in TeamPCP’s spree of attacks targeting the open source ecosystem. Previously, Wiz has covered the compromises of Aqua Security’s Trivy…
macOS.Gaslight | Rust Backdoor Turns Prompt Injection on the Analyst, Not the Sandbox
Executive Summary SentinelLABS has analyzed a Rust macOS implant that embeds a 3.5 KB prompt-injection payload of 38 fabricated “system” messages, built to steer an…
Tata Electronics confirms cyberattack as hackers leak data
Tata Electronics has confirmed in a statement to BleepingComputer that it was the target of a cyberattack that impacted parts of its IT infrastructure. The…
In-Browser Data Inspection Lets Analysts Track Phishing Attack Flow Inside Browser Sessions
Phishing attacks have grown far more complex in recent years. Attackers no longer rely on simple static pages to steal credentials. Instead, they build layered…
Supply Chain Compromise: Nintendo Vendor Breach Exposes Internal Data
Nintendo Confirms Breach Nintendo of America publicly disclosed they had been subjected to a third-party data breach by TinyPulse, one of the company’s third-party software…
Bajaj Auto Discloses Ransomware Cyberattack Impacting Company and Technology Unit
Bajaj Auto has reported a ransomware attack that affected its internal systems and those of its wholly owned subsidiary, Bajaj Auto Technology Ltd (BATL). This…
‘Cordyceps’ CI/CD Flaw Exposes Microsoft, Google, Apache Repos to Pipeline Hijacking
A major software supply chain vulnerability has been discovered across the open-source network that can allow cybercriminals to hijack build pipelines and compromise corporate networks.…