πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
26.1K subscribers
89.3K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ•΅οΈβ€β™‚οΈ Incognia Secures $31M to Meet Demand for Proactive Approach to Fraud Prevention πŸ•΅οΈβ€β™‚οΈ



πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Aim Security Raises $10M to Secure Generative AI Enterprise Adoption πŸ•΅οΈβ€β™‚οΈ



πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Kasperskys ICS CERT Predictions for 2024: Ransomware Rampage, Cosmopolitical Hacktivism, and Beyond πŸ•΅οΈβ€β™‚οΈ



πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ CISA Warns of Active Exploitation of Critical Vulnerability in iOS, iPadOS, and macOS πŸ–‹οΈ

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a highseverity flaw impacting iOS, iPadOS, macOS, tvOS, and watchOS to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The vulnerability, tracked as CVE202248618 CVSS score 7.8, concerns a bug in the kernel component. "An attacker with.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ¦… Greenbean: Latest Android Banking Trojan Leveraging Simple RealTime Server (SRS) for C&C Communication πŸ¦…

Cyble analyzes GreenBean, a new Android Banking Trojan leveraging Simple RealTime Server SRS for CC Communication The post Greenbean Latest Android Banking Trojan Leveraging Simple RealTime Server SRS for CC Communication appeared first on Cyble. The post Greenbean Latest Android Banking Trojan Leveraging Simple RealTime Server SRS for CC Communication appeared first on Cyble.

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Warning: New Malware Emerges in Attacks Exploiting Ivanti VPN Vulnerabilities πŸ–‹οΈ

Googleowned Mandiant said it identified new malware employed by a Chinanexus espionage threat actor known as UNC5221 and other threat groups during postexploitation activity targeting Ivanti Connect Secure VPN and Policy Secure devices. This includes custom web shells such as BUSHWALK, CHAINLINE, FRAMESTING, and a variant of LIGHTWIRE. "CHAINLINE is a Python web shell backdoor that is.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1
πŸš€ ESET Research Podcast: ChatGPT, the MOVEit hack, and Pandora πŸš€

An AI chatbot inadvertently kindles a cybercrime boom, ransomware bandits plunder organizations without deploying ransomware, and a new botnet enslaves Android TV boxes.

πŸ“– Read more.

πŸ”— Via "ESET - WeLiveSecurity"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Ivanti Releases Zero-Day Patches and Reveals Two New Bugs πŸ“”

Ivanti has finally released updates to fix two zeroday bugs and two new highseverity vulnerabilities.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🧠 Audio-jacking: Using generative AI to distort live audio transactions 🧠

The rise of generative AI, including texttoimage, texttospeech and large language models LLMs, has significantly changed our work and personal lives. While these advancements offer many benefits, they have also presented new challenges and risks. Specifically, there has been an increase in threat actors who attempt to exploit large language models through prompt injections and The post Audiojacking Using generative AI to distort live audio transactions appeared first on Security Intelligence.

πŸ“– Read more.

πŸ”— Via "Security Intelligence"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 TechRepublic Premium Editorial Calendar: Policies, Checklists, Hiring Kits and Glossaries for Download 🦿

TechRepublic Premium content helps you solve your toughest IT issues and jumpstart your career or next project.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Why the Right Metrics Matter When it Comes to Vulnerability Management πŸ–‹οΈ

Hows your vulnerability management program doing? Is it effective? A success? Lets be honest, without the right metrics or analytics, how can you tell how well youre doing, progressing, or if youre getting ROI? If youre not measuring, how do you know its working? And even if you are measuring, faulty reporting or focusing on the wrong metrics can create blind spots and make it harder to.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ HeadCrab 2.0 Goes Fileless, Targeting Redis Servers for Crypto Mining πŸ–‹οΈ

Cybersecurity researchers have detailed an updated version of the malware HeadCrab that's known to target Redis database servers across the world since early September 2021. The development, which comes exactly a year after the malware was first publicly disclosed by Aqua, is a sign that the financiallymotivated threat actor behind the campaign is actively adapting and.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1
πŸ“’ Firms need to implement hybrid liveness detection to catch out ever improving deepfake technology πŸ“’

Hackers are leveraging increasingly powerful AI tools to trick identity verification systems, how can firms respond?.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ U.S. Feds Shut Down China-Linked "KV-Botnet" Targeting SOHO Routers πŸ–‹οΈ

The U.S. government on Wednesday said it took steps to neutralize a botnet comprising hundreds of U.S.based small office and home office SOHO routers hijacked by a Chinalinked statesponsored threat actor called Volt Typhoon and blunt the impact posed by the hacking campaign. The existence of the botnet, dubbed KVbotnet, was first disclosed by the Black Lotus Labs team at.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1
πŸ“” US Thwarts Volt Typhoon Cyber Espionage Campaign Through Router Disruption πŸ“”

US government agencies took down the botnet of Chinese APT Volt Typhoon, used to target critical infrastructure for nationstate espionage.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ¦… Cyble Chronicles – February 1: Latest Findings & Recommendations for the Cybersecurity Community πŸ¦…

Uncovering Atomic Stealer AMOS Strikes and the Rise of Dead Cookies Restoration Cyble Research and Intelligence Labs CRIL has recently uncovered a series of phishing websites masquerading as popular Mac applications, which are distributing the Atomic Stealer AMOS, a potent InfoStealer malware. Despite being identified, these deceptive sites remain active, posing a significant threat to The post Cyble Chronicles February 1 Latest Findings Recommendations for the Cybersecurity Community appeared first on Cyble. The post Cyble Chronicles February 1 Latest Findings Recommendations for the Cybersecurity Community appeared first on Cyble.

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Exposed Docker APIs Under Attack in 'Commando Cat' Cryptojacking Campaign πŸ–‹οΈ

Exposed Docker API endpoints over the internet are under assault from a sophisticated cryptojacking campaign called Commando Cat. "The campaign deploys a benign container generated using the Commando project," Cado security researchers Nate Bill and Matt Muir said in a new report published today. "The attacker escapes this container and runs multiple payloads on the.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Google’s Bazel Exposed to Command Injection Threat πŸ“”

Cycode stressed securing software supply chains amid complex dependencies and thirdparty actions.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ 3 ISIS Members Slapped With Sanctions From US Treasury πŸ•΅οΈβ€β™‚οΈ

New sanctions aim to disrupt their cyber and financial operations.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ CMMC Is the Starting Line, Not the Finish πŸ•΅οΈβ€β™‚οΈ

Cybersecurity Maturity Model Certification CMMC and a harden, detect, and respond mindset are key to protecting defense and critical infrastructure companies.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Pump-and-Dump Schemes Make Crypto Fraudsters $240m πŸ“”

Chainalysis reveals that pumpanddump schemes made Ethereum market manipulators over 240m in 2023 alone.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity