Privacy + Secure Tech Corner Channel ๐Ÿ›ก๏ธ
90 subscribers
6.66K photos
579 videos
530 files
16.2K links
Here you can find all about GSI's, ROM's, GKI Kernel's, Tech NEWS, Updates, Root methods, Magisk Module, Overlay's, Hacker things, FLOSS, FOSS, Privacy + Secure Stuff and many more!
Download Telegram
Forwarded from The Hacker News
โš ๏ธ Ukraineโ€™s CERT-UA uncovers a malware attack targeting military personnel.

Disguised as the Army+ app, this sophisticated attack:

ยป Exploits Cloudflare Workers and Pages to host fake login pages.
ยป Tricks users into giving up credentials.
ยป Installs OpenSSH and steals cryptographic keys via the TOR network.

๐Ÿ’ก Even legitimate services are becoming a haven for cybercriminals, raising red flags for CISOs and CTOs.

๐Ÿ”— Read the full analysis here: https://thehackernews.com/2024/12/uac-0125-abuses-cloudflare-workers-to.html
Forwarded from The Hacker News
Netflix has been fined โ‚ฌ4.75M for violating GDPR by failing to explain how it used customer data like email addresses and payment details between 2018โ€“2020.

Read more: https://thehackernews.com/2024/12/dutch-dpa-fines-netflix-475-million-for.html
Forwarded from The Hacker News
๐Ÿ”ฅ Critical Alert: CISAโ€™s new directive, BOD 25-01, sets a new benchmark in cloud security for federal agencies.

Why? Misconfigurations and weak controls are opening doors to attackers.

Key Deadlines:
ยป By Feb 2025: Identify all cloud tenants
ยป By Apr 2025: Deploy SCuBA assessment tools
ยป By Jun 2025: Implement mandatory policies

๐Ÿ”— Learn how to protect your communications effectively: https://thehackernews.com/2024/12/cisa-mandates-cloud-security-for.html

๐Ÿ›ก๏ธ Regularly update security configurations to reduce your attack surface.
Forwarded from The Hacker News
๐Ÿ›‘ Fortinet's Wireless LAN Manager (FortiWLM) is vulnerable to a path traversal flaw (CVE-2023-34990) with a 9.6/10 CVSS score.

Why itโ€™s urgent: It allows attackers to...
1๏ธโƒฃ Access admin accounts using static session IDs.
2๏ธโƒฃ Execute unauthorized commands by chaining vulnerabilities.
3๏ธโƒฃ Gain root access to your network in minutes.

๐Ÿ› ๏ธ Patch now:
Affected versions: 8.5.0 to 8.6.5.
Fixed in 8.6.6โ€”update immediately.

Read: https://thehackernews.com/2024/12/fortinet-warns-of-critical-fortiwlm.html
Forwarded from The Hacker News
๐Ÿšจ What if your device unknowingly became a tool for cybercrime? Itโ€™s happening now.

Mirai malware strikes Juniper SSR devices, leveraging default passwords to turn them into DDoS attack machines. Over 90% of breached systems had unaltered factory settings.

๐Ÿ”‘ Donโ€™t leave the door open. Secure your systems today.

Read the full report: https://thehackernews.com/2024/12/juniper-warns-of-mirai-botnet-targeting.html
Forwarded from The Hacker News
Threat actors are tricking developers with fake npm packages like typescript-eslint lookalikes, amassing thousands of downloads.

Compromised tools = compromised enterprises. One wrong download could breach your entire development cycle.

๐Ÿ”’ Your move:
โœ… Review your dependencies.
โœ… Learn how these attacks work.
โœ… Build a resilient security strategy.

๐Ÿ‘‰ Read here: https://thehackernews.com/2024/12/thousands-download-malicious-npm.html
TLPUI

The Python scripts in this project generate a GTK-UI to change TLP configuration files easily. It has the aim to protect users from setting bad configuration and to deliver a basic overview of all the valid configuration values.

๐Ÿ”— Links:
- Installation
- Screenshots
- Source code
Developer: d4nj1

๐Ÿท๏ธ Tags: #Linux #Optimization
The folks behind the popular Niagara Launcher are rolling out a major update today, bringing a useful digital wellbeing feature as well as the ability to backup your settings!

The new digital wellbeing feature is called Usage Breaker and it's designed to give you gentle nudges that tell you you may be using an app for too long. It's not as restrictive as setting an app limit which is good because app limits can get in your way and some even override them as a result. You select the apps you think you spend too much time in, and Niagara will send a reminder about the duration of your current app session.

Usage Breaker is available in Niagara Pro. The devs realize it's very similar to the screen time reminder feature that Google recently rolled out, but hey, what can you do: great minds think alike. (They were obviously working on this separately.)

The other major new feature is backup support. This lets you reliably transfer your setup of Niagara from one device to another. It's available for both Free and Pro users under the Advanced menu in Niagara Settings. The feature is in preview right now so the devs warn everything may not transfer yet. Also it's not designed to transfer your home screen setup.

Lastly, the team has some big personal news: working on Niagara Launcher is now their full time job! They've opened up a proper office in Germany and did the paperwork to turn the project into a proper company. Going full-time has allowed them to work on long requested features like backup support as well as fix many bugs.

To make this sustainable, the Niagara devs will be raising the price of Pro, but only for new subscribers starting in February 2025. Lifetime purchases are unaffected.

Congrats to the team on this big launch!