πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ“” Xerox Business Solutions Reveals Security Breach πŸ“”

Imaging giant Xerox says it suffered a security incident, as ransomware group INC Ransom claims scalp

πŸ“– Read

via "Infosecurity Magazine".
❀2
πŸ“” Russia Spies on Kyiv Defenses via Hacked Cameras Before Missile Strikes πŸ“”

Ukraine’s security services revealed Russia has hacked surveillance cameras to spy on air defense activities and critical infrastructure in Kyiv ahead of missile strikes

πŸ“– Read

via "Infosecurity Magazine".
❀1
πŸ–‹οΈ 5 Ways to Reduce SaaS Security Risks πŸ–‹οΈ

As technology adoption has shifted to be employee-led, just in time, and from any location or device, IT and security teams have found themselves contending with an ever-sprawling SaaS attack surface, much of which is often unknown or unmanaged. This greatly increases the risk of identity-based threats, and according to a recent report from CrowdStrike, 80% of breaches today use compromised

πŸ“– Read

via "The Hacker News".
πŸ–‹οΈ SMTP Smuggling: New Flaw Lets Attackers Bypass Security and Spoof Emails πŸ–‹οΈ

A new exploitation technique called Simple Mail Transfer Protocol (SMTP) smuggling can be weaponized by threat actors to send spoofed emails with fake sender addresses while bypassing security measures."Threat actors could abuse vulnerable SMTP servers worldwide to send malicious emails from arbitrary email addresses, allowing targeted phishing attacks," Timo Longin, a senior security

πŸ“– Read

via "The Hacker News".
πŸ“’ 'Local' machine learning promises to cut the cost of AI development in 2024 πŸ“’

Local machine learning inferencing will be a key trend in the year ahead, according to Hugging Face CTO Julien Chaumond

πŸ“– Read

via "ITPro".
πŸ“’ BT misses key Huawei kit removal deadline, but the telco is β€œalmost over the line” πŸ“’

BT is still reliant on non-compliant Huawei equipment for 2G and 3G services

πŸ“– Read

via "ITPro".
πŸ“’ Use of generative AI in the legal profession accelerating despite accuracy concerns πŸ“’

The use of generative AI in the legal profession has been a point of controversy amid concerns over accuracy

πŸ“– Read

via "ITPro".
πŸ–‹οΈ Malware Using Google MultiLogin Exploit to Maintain Access Despite Password Reset πŸ–‹οΈ

Information stealing malware are actively taking advantage of an undocumented Google OAuth endpoint named MultiLogin to hijack user sessions and allow continuous access to Google services even after a password reset.According to CloudSEK, the critical exploit facilitates session persistence and cookie generation, enabling threat actors to maintain access to a valid session in an

πŸ“– Read

via "The Hacker News".
πŸ“” Fake and Stolen X Gold Accounts Flood Dark Web πŸ“”

CloudSEK explored some of the techniques threat actors have been using to forge or steal X Gold accounts since Elon Musk’s firm introduced its new verified accounts program

πŸ“– Read

via "Infosecurity Magazine".
πŸ“’ SentinelOne acquires PingSafe to drive cloud security capabilities πŸ“’

PingSafe’s cloud native application protection (CNAPP) solution will be integrated into the SentinelOne Singularity Platform

πŸ“– Read

via "ITPro".
πŸ‘1
πŸ“’ Brad Smith backtracks on CMA spat after 2023 regulatory battle πŸ“’

Brad Smith says the CMA was "tough and fair" in its decision to initially block the deal

πŸ“– Read

via "ITPro".
πŸ“’ OpenAI’s Irish data processing move could ward off regulatory scrutiny πŸ“’

OpenAI aims to assuage concerns about GDPR compliance in a similar move to other big tech firms

πŸ“– Read

via "ITPro".
πŸ•΄ 5 Steps for Preventing and Mitigating Corporate Espionage πŸ•΄

Companies must take steps to enhance their protection against corporate espionage and safeguard their assets.

πŸ“– Read

via "Dark Reading".
πŸ›  Proxmark3 4.17768 Custom Firmware πŸ› 

This is a custom firmware written for the Proxmark3 device. It extends the currently available firmware. This release is nicknamed Steamboat Willie.

πŸ“– Read

via "Packet Storm Security".
πŸ›  Faraday 5.0.1 πŸ› 

Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use the available tools in the community to take advantage of them in a multiuser way.

πŸ“– Read

via "Packet Storm Security".
🦿 Uncertainty Is the Biggest Challenge to Australia’s Cyber Security Strategy 🦿

Commentary: Australia’s Cyber Security Strategy 2023-2030 is a bold and far-reaching vision that will see Australia become a world leader. However, a lack of bipartisan agreement may undermine it.

πŸ“– Read

via "Tech Republic".
πŸ•΄ Qatar to Add Cybersecurity Curricula in Private Schools πŸ•΄

The goal is to raise cybersecurity awareness for all students in the country.

πŸ“– Read

via "Dark Reading".
πŸ•΄ 'Black Basta Buster' Exploits Ransomware Bug for File Recovery πŸ•΄

A tool now allows for victim files encrypted by the Black Basta cybercriminal gang to be fully or partially recoverable, depending on their size.

πŸ“– Read

via "Dark Reading".
πŸ•΄ Name That Edge Toon: Frosty the Steel Man πŸ•΄

Come up with a clever cybersecurity-related caption, and our panel of experts will reward the winner with a $25 Amazon gift card.

πŸ“– Read

via "Dark Reading".
πŸ“” Over 100 European Banks Face Cyber Resilience Test πŸ“”

The European Central Bank (ECB) will undertake a stress test on 109 European banks’ cyber-attack response capabilities after IT risk management shortfalls identified

πŸ“– Read

via "Infosecurity Magazine".
πŸ•΄ Pilfered Data From Iranian Insurance and Food Delivery Firms Leaked Online πŸ•΄

Online food ordering service and insurance firms hit by mystery hackers using the moniker "irleaks."

πŸ“– Read

via "Dark Reading".