🛡 Cybersecurity & Privacy 🛡 - News
26.1K subscribers
89.3K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
🕵️‍♂️ Looted RIPE Credentials for Sale on the Dark Web 🕵️‍♂️

A monitoring exercise identified user details in 716 compromised RIPE NCC accounts, plus other valuable credentials belonging to those victims.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🦿 What Is Cyber Threat Hunting? (Definition & How it Works) 🦿

Cyber threat hunting is the proactive process of searching for and detecting potential threats or malicious activities within a network or system.

📖 Read more.

🔗 Via "Tech Republic"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ More Ivanti VPN Zero-Days Fuel Attack Frenzy as Patches Finally Roll 🕵️‍♂️

Both Chinabacked APTs and ordinary cyberattackers have seized on a pair of Ivanti VPN bugs for global exploitation.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🖋️ RunC Flaws Enable Container Escapes, Granting Attackers Host Access 🖋️

Multiple security vulnerabilities have been disclosed in the runC command line tool that could be exploited by threat actors to escape the bounds of the container and stage followon attacks. The vulnerabilities, tracked as CVE202421626, CVE202423651, CVE202423652, and CVE202423653, have been collectively dubbed Leaky Vessels by cybersecurity vendor Snyk. "These container.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Johnson Controls Ransomware Cleanup Costs Top $27M and Counting 🕵️‍♂️

JCI's latest SEC filing notes that its smartfactory installations weren't compromised, allaying physical security fears.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ 'Leaky Vessels' Cloud Bugs Allow Container Escapes Globally 🕵️‍♂️

The four security vulnerabilities are found in Docker and beyond, and one affecting runC affects essentially every cloudnative developer worldwide.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Fulton County Suffers Power Outages as Cyberattack Continues 🕵️‍♂️

County services have come to a halt and are not expected to resume until next week no threat actor has yet been identified.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Ransomware Groups Gain Clout With False Attack Claims 🕵️‍♂️

Technica? Europcar? Cybercriminals are increasingly bluffing about ransomware attacks, and the cybersecurity community is helping by spreading their lies.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Incognia Secures $31M to Meet Demand for Proactive Approach to Fraud Prevention 🕵️‍♂️



📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Aim Security Raises $10M to Secure Generative AI Enterprise Adoption 🕵️‍♂️



📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Kasperskys ICS CERT Predictions for 2024: Ransomware Rampage, Cosmopolitical Hacktivism, and Beyond 🕵️‍♂️



📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🖋️ CISA Warns of Active Exploitation of Critical Vulnerability in iOS, iPadOS, and macOS 🖋️

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a highseverity flaw impacting iOS, iPadOS, macOS, tvOS, and watchOS to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The vulnerability, tracked as CVE202248618 CVSS score 7.8, concerns a bug in the kernel component. "An attacker with.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🦅 Greenbean: Latest Android Banking Trojan Leveraging Simple RealTime Server (SRS) for C&C Communication 🦅

Cyble analyzes GreenBean, a new Android Banking Trojan leveraging Simple RealTime Server SRS for CC Communication The post Greenbean Latest Android Banking Trojan Leveraging Simple RealTime Server SRS for CC Communication appeared first on Cyble. The post Greenbean Latest Android Banking Trojan Leveraging Simple RealTime Server SRS for CC Communication appeared first on Cyble.

📖 Read more.

🔗 Via "CYBLE"

----------
👁️ Seen on @cibsecurity
🖋️ Warning: New Malware Emerges in Attacks Exploiting Ivanti VPN Vulnerabilities 🖋️

Googleowned Mandiant said it identified new malware employed by a Chinanexus espionage threat actor known as UNC5221 and other threat groups during postexploitation activity targeting Ivanti Connect Secure VPN and Policy Secure devices. This includes custom web shells such as BUSHWALK, CHAINLINE, FRAMESTING, and a variant of LIGHTWIRE. "CHAINLINE is a Python web shell backdoor that is.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
👍1
🚀 ESET Research Podcast: ChatGPT, the MOVEit hack, and Pandora 🚀

An AI chatbot inadvertently kindles a cybercrime boom, ransomware bandits plunder organizations without deploying ransomware, and a new botnet enslaves Android TV boxes.

📖 Read more.

🔗 Via "ESET - WeLiveSecurity"

----------
👁️ Seen on @cibsecurity
📔 Ivanti Releases Zero-Day Patches and Reveals Two New Bugs 📔

Ivanti has finally released updates to fix two zeroday bugs and two new highseverity vulnerabilities.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🧠 Audio-jacking: Using generative AI to distort live audio transactions 🧠

The rise of generative AI, including texttoimage, texttospeech and large language models LLMs, has significantly changed our work and personal lives. While these advancements offer many benefits, they have also presented new challenges and risks. Specifically, there has been an increase in threat actors who attempt to exploit large language models through prompt injections and The post Audiojacking Using generative AI to distort live audio transactions appeared first on Security Intelligence.

📖 Read more.

🔗 Via "Security Intelligence"

----------
👁️ Seen on @cibsecurity
🦿 TechRepublic Premium Editorial Calendar: Policies, Checklists, Hiring Kits and Glossaries for Download 🦿

TechRepublic Premium content helps you solve your toughest IT issues and jumpstart your career or next project.

📖 Read more.

🔗 Via "Tech Republic"

----------
👁️ Seen on @cibsecurity
🖋️ Why the Right Metrics Matter When it Comes to Vulnerability Management 🖋️

Hows your vulnerability management program doing? Is it effective? A success? Lets be honest, without the right metrics or analytics, how can you tell how well youre doing, progressing, or if youre getting ROI? If youre not measuring, how do you know its working? And even if you are measuring, faulty reporting or focusing on the wrong metrics can create blind spots and make it harder to.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ HeadCrab 2.0 Goes Fileless, Targeting Redis Servers for Crypto Mining 🖋️

Cybersecurity researchers have detailed an updated version of the malware HeadCrab that's known to target Redis database servers across the world since early September 2021. The development, which comes exactly a year after the malware was first publicly disclosed by Aqua, is a sign that the financiallymotivated threat actor behind the campaign is actively adapting and.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
👍1
📢 Firms need to implement hybrid liveness detection to catch out ever improving deepfake technology 📢

Hackers are leveraging increasingly powerful AI tools to trick identity verification systems, how can firms respond?.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity