πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
26.7K subscribers
89.8K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
🦿 Top Tech Conferences & Events to Add to Your Calendar in 2024 🦿

A great way to stay current with the latest technology trends and innovations is by attending conferences. Read and bookmark our 2024 tech events guide.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
🧠 It all adds up: Pretexting in executive compromise 🧠

Executives hold the keys to the corporate kingdom. If attackers can gain the trust of executives using layered social engineering techniques, they may be able to access sensitive corporate information such as intellectual property, financial data or administrative control logins and passwords. While phishing remains the primary pathway to executive compromise, increasing Csuite awareness of The post It all adds up Pretexting in executive compromise appeared first on Security Intelligence.

πŸ“– Read more.

πŸ”— Via "Security Intelligence"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ How MFA Failures are Fueling a 500% Surge in Ransomware Losses πŸ–‹οΈ

The cybersecurity threat landscape has witnessed a dramatic and alarming rise in the average ransomware payment, an increase exceeding 500. Sophos, a global leader in cybersecurity, revealed in its annual "State of Ransomware 2024" report that the average ransom payment has increased 500 in the last year with organizations that paid a ransom reporting an average payment of 2 million, up from.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ New Intel CPU Vulnerability 'Indirector' Exposes Sensitive Data πŸ–‹οΈ

Modern CPUs from Intel, including Raptor Lake and Alder Lake, have been found vulnerable to a new sidechannel attack that could be exploited to leak sensitive information from the processors. The attack, codenamed Indirector by security researchers Luyi Li, Hosein Yavarzadeh, and Dean Tullsen, leverages shortcomings identified in Indirect Branch Predictor IBP and the Branch Target Buffer BTB.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Meta's 'Pay or Consent' Approach Faces E.U. Competition Rules Scrutiny πŸ–‹οΈ

Meta's decision to offer an adfree subscription in the European Union E.U. has faced a new setback after regulators accused the social media behemoth of breaching the bloc's competition rules by forcing users to choose between seeing ads or paying to avoid them. The European Commission said the company's "pay or consent" advertising model is in contravention of the Digital Markets Act DMA.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Chinese Hackers Exploiting Cisco Switches Zero-Day to Deliver Malware πŸ–‹οΈ

A Chinanexus cyber espionage group named Velvet Ant has been observed exploiting a zeroday flaw in Cisco NXOS Software used in its switches to deliver malware. The vulnerability, tracked as CVE202420399 CVSS score 6.0, concerns a case of command injection that allows an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Australian Man Charged for Fake Wi-Fi Scam on Domestic Flights πŸ–‹οΈ

An Australian man has been charged with running a fake WiFi access point during a domestic flight with an aim to steal user credentials and data. The unnamed 42yearold "allegedly established fake free WiFi access points, which mimicked legitimate networks, to capture personal data from unsuspecting victims who mistakenly connected to them," the Australian Federal Police AFP said in a press.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸš€ Hijacked: How hacked YouTube channels spread scams and malware πŸš€

Heres how cybercriminals go after YouTube channels and use them as conduits for fraud and what you should watch out for when watching videos on the platform.

πŸ“– Read more.

πŸ”— Via "ESET - WeLiveSecurity"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Mobile Political Spam Surges Threefold For 2024 Election πŸ“”

Proofpoint highlighted how smishing, impersonation and spam are eroding trust in mobile messaging.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Chrome Update Will Block Entrust Certificates by November 2024 πŸ“”

The move follows a series of reported compliance failures and lack of progress in addressing publicly disclosed incidents.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Ransomware Attack Demands Reach a Staggering $5.2m in 2024 πŸ“”

Comparitech calculated that the average ransom demand was over 5.2m in the first six months of 2024, with 421 confirmed incidents during this period.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Health Tech Execs Get Jail Time For $1bn Fraud Scheme πŸ“”

The former CEO and COO of a health startup will spend years in jail after conducting a largescale fraud scheme.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Cisco Patches Zero-Day Bug Used by Chinese Velvet Ant Group πŸ“”

Cisco has patched a zeroday vulnerability exploited by a Chinese APT group to compromise Nexus switches.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 Email Phishing Playbook – Free PDF 🌊

Phishing emails are a constant threat, targeting employees and exploiting vulnerabilities to steal sensitive data... The post Email Phishing Playbook Free PDF appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Cyber Workforce Numbers Rise for Larger Organizations πŸ•΅οΈβ€β™‚οΈ

Some organizations are also reaching recordhigh levels of cyber maturity, at 80 to 90.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ PTC License Server Bug Needs Immediate Patch Against Critical Flaw πŸ•΅οΈβ€β™‚οΈ

Creo ElementsDirect License Servers, which enable industrial design and modeling software, are exposed to the Internet, leaving critical infrastructure vulnerable to remote code execution.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Fintech Frenzy: Affirm & Others Emerge as Victims in Evolve Breach πŸ•΅οΈβ€β™‚οΈ

A ransomware attack has become a supply chain issue, thanks to the victim's partnerships with other financial services companies.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Passkey Redaction Attacks Subvert GitHub, Microsoft Authentication πŸ•΅οΈβ€β™‚οΈ

Adversaryinthemiddle attacks can strip out the passkey option from login pages that users see, leaving targets with only authentication choices that force them to give up credentials.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ 3 Ways to Chill Attacks on Snowflake πŸ•΅οΈβ€β™‚οΈ

Multifactor authentication is a good first step, but businesses should look to collect and analyze data to hunt for threats, manage identities more closely, and limit the impact of attacks.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Prudential said 36,000 people were affected in a February data breach – it just revised that number to 2.5 million πŸ“’

Prudential has revised its initial data breach victim count from just over 36,000 to a whopping 2.5 million.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ South Africa National Healthcare Lab Still Reeling from Ransomware Attack πŸ•΅οΈβ€β™‚οΈ

The cyberattack disrupted national laboratory services, which could slow response to disease outbreaks such as mpox, experts warn.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity