πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.9K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ•΅οΈβ€β™‚οΈ Alkira Raises $100M in Series C Funding to Simplify, Secure and Scale Critical Network Infrastructure πŸ•΅οΈβ€β™‚οΈ



πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Cybercriminals Exploiting Microsoft’s Quick Assist Feature in Ransomware Attacks πŸ–‹οΈ

The Microsoft Threat Intelligence team said it has observed a threat it tracks under the name Storm1811 abusing the client management tool Quick Assist to target users in social engineering attacks. "Storm1811 is a financially motivated cybercriminal group known to deploy Black Basta ransomware," the company said in a report published on May 15, 2024. The.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Google Patches Yet Another Actively Exploited Chrome Zero-Day Vulnerability πŸ–‹οΈ

Google has rolled out fixes to address a set of nine security issues in its Chrome browser, including a new zeroday that has been exploited in the wild. Assigned the CVE identifier CVE20244947, the vulnerability relates to a type confusion bug in the V8 JavaScript and WebAssembly engine. It was reported by Kaspersky researchers Vasily Berdnikov and Boris.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸš€ To the Moon and back(doors): Lunar landing in diplomatic missions πŸš€

ESET researchers provide technical analysis of the Lunar toolset, likely used by the Turla APT group, that infiltrated a European ministry of foreign affairs.

πŸ“– Read more.

πŸ”— Via "ESET - WeLiveSecurity"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Nigeria Halts Cybersecurity Tax After Public Outrage πŸ•΅οΈβ€β™‚οΈ

In the midst of an economy struggling with soaring inflation, the Nigerian government paused plans to place a levy on domestic transactions that was aimed at enhancing cybersecurity.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
❀1
πŸ“” BreachForums Hacking Marketplace Taken Down Again πŸ“”

The FBI claims to have seized the domain and servers of hacking forum BreachForums.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1
πŸ“” UK Lags Europe on Exploited Vulnerability Remediation πŸ“”

UK organizations are less likely than their European peers to have known exploited bugs but take longer to fix them.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ This ransomware variant has now been used against 500 targets β€” here's what you need to know πŸ“’

One form of ransomware has become a significant threat, US authorities have warned heres how to protect yourself.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 Does a VPN Slow Down Your Internet Speed? 🦿

Can a VPN slow down your internet? Find out how VPNs can impact your internet speed with our article.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Researchers Uncover 11 Security Flaws in GE HealthCare Ultrasound Machines πŸ–‹οΈ

Security researchers have disclosed almost a dozen security flaws impacting the GE HealthCare Vivid Ultrasound product family that could be exploited by malicious actors to tamper with patient data and even install ransomware under certain circumstances. "The impacts enabled by these flaws are manifold from the implant of ransomware on the ultrasound machine to the access and manipulation of.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Patch Now: Another Google Zero-Day Under Exploit in the Wild πŸ•΅οΈβ€β™‚οΈ

Google has rolled an emergency patch for CVE20244947, the third Chrome zeroday it's addressed in the past week.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” CISO Confidence in AI Security Grows as GenAI Adoption Rises πŸ“”

Nearly six out of ten surveyed ClubCISO members are confident AI is used securely in their organizations.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ FCC Reveals 'Royal Tiger' Robocall Campaign πŸ•΅οΈβ€β™‚οΈ

In a firstever move, the commission's enforcement bureau has high hopes that official classification will allow law enforcement partners to better combat these kinds of threats.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ The Fall of the National Vulnerability Database πŸ•΅οΈβ€β™‚οΈ

Since its inception, three key factors have affected the NVD's ability to classify security concerns and what we're experiencing now is the result.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Windows Quick Assist Anchors Black Basta Ransomware Gambit πŸ•΅οΈβ€β™‚οΈ

When abused by threat actors with sophisticated socialengineering chops, remoteaccess tools demand that enterprises remain sharp in both defense strategy and employeeawareness training.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 Cisco’s Splunk Acquisition Should Help Security Pros See Threats Sooner in Australia and New Zealand 🦿

Ciscos Splunk acquisition was finalised in March 2024. Splunks Craig Bates says the combined offering could enhance observability and put data to work for security professionals in an age of AI threat defence.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ›  Wireshark Analyzer 4.2.5 πŸ› 

Wireshark is a GTKbased network protocol analyzer that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercialquality analyzer for Unix and Win32 and to give Wireshark features that are missing from closedsource sniffers. This is the source code release.

πŸ“– Read more.

πŸ”— Via "Packet Storm - Tools"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ›  Packet Fence 13.2.0 πŸ› 

PacketFence is a network access control NAC system. It is actively maintained and has been deployed in numerous largescale institutions. It can be used to effectively secure networks, from small to very large heterogeneous networks. PacketFence provides NACoriented features such as registration of new network devices, detection of abnormal network activities including from remote snort sensors, isolation of problematic devices, remediation through a captive portal, and registrationbased and scheduled vulnerability scans.

πŸ“– Read more.

πŸ”— Via "Packet Storm - Tools"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ›  SIPPTS 4.0 πŸ› 

Sippts is a set of tools to audit VoIP servers and devices using SIP protocol. It is programmed in Python script and it allows us to check the security of a VoIP server using SIP protocol, over UDP, TCP and TLS protocols.

πŸ“– Read more.

πŸ”— Via "Packet Storm - Tools"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ North Korean Hackers Exploit Facebook Messenger in Targeted Malware Campaign πŸ–‹οΈ

The North Korealinked Kimsuky hacking group has been attributed to a new social engineering attack that employs fictitious Facebook accounts to targets via Messenger and ultimately delivers malware. "The threat actor created a Facebook account with a fake identity disguised as a public official working in the North Korean human rights field," South Korean cybersecurity company Genians.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘½ Artificial Intelligence Threatens Global Employment πŸ‘½

The International Monetary Fund IMF Managing Director, Kristalina Georgieva, has sounded the alarm about the potentially disruptive impact of artificial intelligence AI on the global workforce. Speaking at a conference in London, Georgieva predicted a coming tsunami of job losses, driven by the rapid advancement of AI technologies. Georgievas warning.

πŸ“– Read more.

πŸ”— Via "BE3SEC"

----------
πŸ‘οΈ Seen on @cibsecurity