Ingress-NGINX Controller Flaws Require Immediate Fix
A set of vulnerabilities have been identified in Ingress-NGINX Controller for Kubernetes, posing a risk to organizations relying on the affected versions. These vulnerabilities impact…
Latest Cybersecurity News — Page 3028
View all →
CVE-2025-26512: Critical SnapCenter Security Risk
A serious security vulnerability has recently been identified in NetApp’s SnapCenter software, a widely used enterprise solution for managing data protection. This flaw, tracked as…
CBA opens a ‘tech hub’ in Seattle – Financial Services – Cloud – Software
CBA has opened a ‘tech hub’ in Seattle this month that will act as a “strategic gateway” to collaborate with technology vendors, at a time…
Hive Five 216 – The Hacker Always Wins
Habits are so good. They even compound! But, they can be hard to start and maintain. I’ve successfully started new ones and then stacked on…
Arkana Security group claims the hack of US telco provider WideOpenWest (WOW!)
Arkana Security group claims the hack of US telco provider WideOpenWest (WOW!) Pierluigi Paganini March 27, 2025 Arkana Security, a new ransomware group, claims to…
![[tl;dr sec] #271 - Threat Modeling (+ AI), Backdoored GitHub Actions, Compromising a Threat Actor's Telegram](https://image.cybernoz.com/wp-content/uploads/2025/03/1743072871_tldr-sec-271-Threat-Modeling-AI-Backdoored-GitHub.png)
[tl;dr sec] #271 – Threat Modeling (+ AI), Backdoored GitHub Actions, Compromising a Threat Actor’s Telegram
Threat modeling (with) LLMs, tj-actions woes, reading a threat actor’s Telegram C2 I hope you’ve been doing well! Working on Your Personality One family ritual…
Security Update: Publicly Exposed Ingress NGINX Admission
A series of vulnerabilities, known as IngressNightmare (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, CVE-2025-1974), have been identified in ingress-nginx, a widely used Kubernetes ingress controller. When exploited together,…
Intigriti insights into latest beg bounty scam
The Intigriti team have recently observed an abuse scenario, trending across the industry, where malicious actors are posing as legitimate white-hat hackers, deceiving targeted companies…
My information was stolen. Now what?
Back in May 2023, I wrote the blogpost You may not care where you download software from, but malware does as a call to arms,…
Commerce limits 19 Chinese, Taiwanese companies from buying U.S. tech
The Commerce Department plans to finalize economic sanctions this week on nearly 20 Chinese and Taiwanese organizations, citing the need to limit their access to…
UK fines software provider £3.07 million for 2022 ransomware breach
The UK Information Commissioner’s Office (ICO) has issued a £3.07 million fine on Advanced Computer Software Group Ltd for a 2022 ransomware attack that exposed the…
Kathryn Thornton: First Service Mission to the Hubble Space Telescope
The veteran of four space missions discusses challenges faced by the Hubble Space Telescope and how human ingenuity and teamwork made Hubble’s success possible 20…