πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
26.8K subscribers
89.8K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ“” Suspected North Korean Attack Drains $2m from CoinStats Wallets πŸ“”

CoinStats has revealed a likely statesponsored attack impacting over 1500 users.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Credential Stuffing Attack Hits 72,000 Levi’s Accounts πŸ“”

Levis reveals major credential stuffing attack impacting over 72,000 customer accounts.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Modular Malware Boolka’s BMANAGER Trojan Exposed πŸ“”

The group has been observed exploiting vulnerabilities through SQL injection attacks since 2022.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Android Users Warned of Rising Malware Threat From Rafel RAT πŸ“”

An earlier publication by Check Point Research had already linked Rafel to the APTC35DoNot Team.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” China-Based RedJuliett Targets Taiwan in Cyber Espionage Campaign πŸ“”

The likely Chinese statesponsored group ran espionage campaigns against Taiwans government, academia and diplomacy from Fuzhou, China.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Polish Prosecutors Step Up Probe into Pegasus Spyware Operation πŸ“”

Polish prosecutors investigating a massive political spying operation have seized Pegasus from a government agency.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Sellafield Pleads Guilty to Historic Cybersecurity Offenses πŸ“”

UKs most hazardous nuclear site, Sellafield, has admitted criminal charges related to IT security failings.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 Building a Strong SOC Team: Best Practices and Strategies 🌊

Introduction The escalating frequency and sophistication of cyberattacks have made it critical for organizations to build robust SOC teams. A wellstructured SOC team acts as the first line of defense, continuously monitoring and responding to potential security incidents to minimize the impact of cyber attacks.   As we reflect on our years of experience building and The post Building a Strong SOC Team Best Practices and Strategies appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ¦… UAC-0184 Abuses Python in DLL Sideloading for XWORM Distribution πŸ¦…

Key Takeaways  Cyble Research and Intelligence Labs CRIL recently came across a malware campaign involving a malicious lnk file associated with the UAC0184 threat actor group.  Previously, UAC0184 targeted Ukrainian entities in Finland, utilizing the Remcos RAT in their operations.  In their latest campaign, there are signs suggesting the group may be focusing on Ukraine, using disguised lure documents to distribute the XWorm RAT.  When the LNK shortcut file is executed, it triggers a PowerShell script that downloads a ZIP file containing both legitimate and malicious Python components, including an encrypted payload.  The current attack employs DLL sideloading and Shadowloader to execute the XWorm RAT as the final payload.  Ultimately, the XWorm RAT malware attempts to c...

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Most passwords take a matter of minutes to crack – here’s how you can create strong, hacker-resistant credentials πŸ“’

Passwords are still criminally insecure and can be cracked or guessed by hackers with ease, but what precautions can you take to avoid getting breached?.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 Best Practices for Password Creation and Storage 🦿

Nearly half of Americans, 46, have had a password stolen in the past year. Out of all the accounts that were breached, more than threequarters 77 of those users had their personal information stolen, such as their personal address, credit card number and Social Security Number. Password attacks on businesses can expose even more critical ...

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
❀1
🦿 Business Email Compromise Attacks Are Evolving: How Organizations Can Stay Ahead of the Curve 🦿

Emailbased cyberattacks are rampant. If we go by figures, the U.S. Cybersecurity and Infrastructure Security Agency reports that 90 of successful cyberattacks begin with phishing emails. While phishing emails can target individuals and businesses of all sizes, attackers may prefer to double down their aim at seniorlevel employees to increase their chances of catching a ...

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Chinese and N. Korean Hackers Target Global Infrastructure with Ransomware πŸ–‹οΈ

Threat actors with suspected ties to China and North Korea have been linked to ransomware and data encryption attacks targeting government and critical infrastructure sectors across the world between 2021 and 2023. While one cluster of activity has been associated with the ChamelGang aka CamoFei, the second cluster overlaps with activity previously attributed to Chinese and North Korean.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Practical Guidance For Securing Your Software Supply Chain πŸ–‹οΈ

The heightened regulatory and legal pressure on softwareproducing organizations to secure their supply chains and ensure the integrity of their software should come as no surprise. In the last several years, the software supply chain has become an increasingly attractive target for attackers who see opportunities to forcemultiply their attacks by orders of magnitude. For example, look no.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Apple Patches AirPods Bluetooth Vulnerability That Could Allow Eavesdropping πŸ–‹οΈ

Apple has released a firmware update for AirPods that could allow a malicious actor to gain access to the headphones in an unauthorized manner. Tracked as CVE202427867, the authentication issue affects AirPods 2nd generation and later, AirPods Pro all models, AirPods Max, Powerbeats Pro, and Beats Fit Pro. "When your headphones are seeking a connection request to one of your previously.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Building an incident response strategy in 2024 πŸ“’

As the threat landscape changes, businesses must ensure their incident response strategy is up to the task and ready to meet the needs of regulators and stakeholders.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Identity Crime Reports Drop 16% Annually but Job Scams Surge πŸ“”

Identityrelated crimes declined 16 annually in 2023 with the majority related to compromised credentials.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Cyber Attackers Turn to Cloud Services to Deploy Malware πŸ“”

A growing number of malware operators have turned to cloudbased command and control servers to deploy malicious campaigns, Fortinet researchers found.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 Ransomware: Still a Threat in 2024? 🌊

In 2024, the threat of ransomware, a persistent and formidable force in the cybersecurity landscape, continues to loom large. Despite some positive strides, such as dismantling major ransomware groups, the danger remains substantial. Its of utmost importance for businesses and individuals to stay fully informed about the latest statistics and their implications. Lets investigate the The post Ransomware Still a Threat in 2024? appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ 'Snowblind' Tampering Technique May Drive Android Users Adrift πŸ•΅οΈβ€β™‚οΈ

As cybersecurity's catandmouse game starts to look more like Tom and Jerry, attackers develop a method for undermining Android app security with no obvious fix.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
🧠 The dangers of anthropomorphizing AI: An infosec perspective 🧠

The generative AI revolution is showing no signs of slowing down. Chatbots and AI assistants have become an integral part of the business world, whether for training employees, answering customer queries or something else entirely. Weve even given them names and genders and, in some cases, distinctive personalities. There are two very significant trends happening The post The dangers of anthropomorphizing AI An infosec perspective appeared first on Security Intelligence.

πŸ“– Read more.

πŸ”— Via "Security Intelligence"

----------
πŸ‘οΈ Seen on @cibsecurity