🛡 Cybersecurity & Privacy 🛡 - News
25K subscribers
88.4K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
🕴 Steps CISOs Should Take Before, During & After a Cyberattack 🕴

By creating a plan of action, organizations can better respond to attacks.

📖 Read

via "Dark Reading".
🕴 Molerats Group Wields Custom Cybertool to Steal Secrets in the Middle East 🕴

The so-called TA402 group continues to focus on cyber espionage against government agencies.

📖 Read

via "Dark Reading".
🕴 Royal Ransom Demands Exceed $275M, Rebrand in Offing 🕴

The swift-moving ransomware crew continues to evolve quickly and has already attacked more than 350 victims since it was first detected just over a year ago.

📖 Read

via "Dark Reading".
🕴 Google Goes After Scammers Abusing Its Bard AI Chatbot 🕴

A pair of lawsuits are part of a wider strategy to establish guardrails preventing AI-powered scams, frauds, and harassment, Google's general counsel says.

📖 Read

via "Dark Reading".
🦿 Red Hat: UK Leads Europe in IT Automation, But Key Challenges Persist 🦿

The U.K.'s position as a financial services hub puts it ahead in enterprise-wide IT automation, says Red Hat. But skills shortages remain an issue for all IT leaders surveyed.

📖 Read

via "Tech Republic".
🛠 Faraday 4.6.2 🛠

Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use the available tools in the community to take advantage of them in a multiuser way.

📖 Read

via "Packet Storm Security".
🕴 Danish Energy Attacks Portend Targeting More Critical Infrastructure 🕴

Targeted attacks against two dozen related companies is just the latest evidence that hackers want a piece of energy.

📖 Read

via "Dark Reading".
🕴 Microsoft Zero-Days Allow Defender Bypass, Privilege Escalation 🕴

Another two bugs in this month's set of fixes for 63 CVEs were publicly disclosed previously but have not been exploited yet.

📖 Read

via "Dark Reading".
♟️ Microsoft Patch Tuesday, November 2023 Edition ♟️

Microsoft today released updates to fix more than five dozen security holes in its Windows operating systems and related software, including three "zero day" vulnerabilities that Microsoft warns are already being exploited in active attacks.

📖 Read

via "Krebs on Security".
🕴 Combining Agentless and Agent-Based Cloud Security in CNAPPs 🕴

Combining both approaches using a cloud-native application protection platform helps organizations make their cybersecurity holistic by tapping into richer automation and prioritization features.

📖 Read

via "Dark Reading".
👍1
🕴 Defending Against Attacks on Vulnerable IoT Devices 🕴

Organizations must approach cybersecurity as if they are defending themselves in a cyberwar.

📖 Read

via "Dark Reading".
🕴 Oil Giant Aramco Drills Down on Saudi ICS Security 🕴

Saudi Arabia's national oil and gas company is investing in an operational technology security training academy for organizations across the Kingdom.

📖 Read

via "Dark Reading".
🕴 Qatar & Rwanda Partner to Boost Cybersecurity in Africa 🕴

The two countries will work on AI security guardrails, public key infrastructure, smart city cyber, and more.

📖 Read

via "Dark Reading".
🕴 After Critical Bug Disclosures, TETRA Emergency Comms Code Goes Public 🕴

After the encryption algorithm used by public safety, military, and governments globally was found to allow eavesdropping, standard maintainers are making TETRA open source.

📖 Read

via "Dark Reading".
🕴 Cyber Resilience Requires Maturity, Persistence & Board Engagement 🕴

Women in Cyber Security Middle East highlight a requirement for resilience in the face of increased business and cyber challenges.

📖 Read

via "Dark Reading".
🕴 EU Tightens Cybersecurity Requirements for Critical Infrastructure and Services 🕴

Organizations in sectors deemed "essential" or "important" have until October 2024 to comply with the Network and Information Systems Directive 2022 (NIS2).

📖 Read

via "Dark Reading".
🕴 'AlphaLock' Hacker Organization Launches Pen-Testing Training Group 🕴

With a two-pronged approach, the group trains its hackers in penetration testing, only to set them free to build a marketplace for pen-testing services.

📖 Read

via "Dark Reading".
🕴 Rackspace Ransomware Costs Soar to Nearly $12M 🕴

Rackspace's 2022 ransomware attack only continue to mount, with lawsuits in the offing — and show the long-tail costs of a cyberattack.

📖 Read

via "Dark Reading".
🕴 Egress and KnowBe4 Extend Partnership to Offer AI-based Adaptive Email Security and Training 🕴



📖 Read

via "Dark Reading".
🦿 Microsoft Ignite: New Solutions Offer More Security and Productivity from Windows in the Cloud 🦿

Cloud PCs give you access to Windows AI tools on any device, and Windows 365 now has AI-powered tools to help IT give users the right cloud PC for their needs.

📖 Read

via "Tech Republic".