🛡 Cybersecurity & Privacy 🛡 - News
26.8K subscribers
89.8K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
🛠 I2P 2.6.0 🛠

I2P is an anonymizing network, offering a simple layer that identitysensitive applications can use to securely communicate. All data is wrapped with several layers of encryption, and the network is both distributed and dynamic, with no trusted parties. This is the source code release version.

📖 Read more.

🔗 Via "Packet Storm - Tools"

----------
👁️ Seen on @cibsecurity
🛠 Logwatch 7.11 🛠

Logwatch analyzes and reports on unix system logs. It is a customizable and pluggable log monitoring system which will go through the logs for a given period of time and make a customizable report. It should work right out of the package on most systems.

📖 Read more.

🔗 Via "Packet Storm - Tools"

----------
👁️ Seen on @cibsecurity
🖋️ Experts Uncover Chinese Cybercrime Network Behind Gambling and Human Trafficking 🖋️

The relationship between various TDSs and DNS associated with Vigorish Viper and the final landing experience for the user A Chinese organized crime syndicate with links to money laundering and human trafficking across Southeast Asia has been using an advanced "technology suite" that runs the whole cybercrime supply chain spectrum to spearhead its operations. Infoblox is tracking the proprietor.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ PINEAPPLE and FLUXROOT Hacker Groups Abuse Google Cloud for Credential Phishing 🖋️

A Latin America LATAMbased financially motivated actor codenamed FLUXROOT has been observed leveraging Google Cloud serverless projects to orchestrate credential phishing activity, highlighting the abuse of the cloud computing model for malicious purposes. "Serverless architectures are attractive to developers and enterprises for their flexibility, cost effectiveness, and ease of use," Google.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ How to Set up an Automated SMS Analysis Service with AI in Tines 🖋️

The opportunities to use AI in workflow automation are many and varied, but one of the simplest ways to use AI to save time and enhance your organizations security posture is by building an automated SMS analysis service. Workflow automation platform Tines provides a good example of how to do it. The vendor recently released their first native AI features, and security teams have already.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ MSPs & MSSPs: How to Increase Engagement with Your Cybersecurity Clients Through vCISO Reporting 🖋️

As a vCISO, you are responsible for your client's cybersecurity strategy and risk governance. This incorporates multiple disciplines, from research to execution to reporting. Recently, we published a comprehensive playbook for vCISOs, Your First 100 Days as a vCISO 5 Steps to Success, which covers all the phases entailed in launching a successful vCISO engagement, along with recommended.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ SocGholish Malware Exploits BOINC Project for Covert Cyberattacks 🖋️

The JavaScript downloader malware known as SocGholish aka FakeUpdates is being used to deliver a remote access trojan called AsyncRAT as well as a legitimate opensource project called BOINC. BOINC, short for Berkeley Open Infrastructure Network Computing Client, is an opensource "volunteer computing" platform maintained by the University of California with an aim to carry out "largescale.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ New Linux Variant of Play Ransomware Targeting VMware ESXi Systems 🖋️

Cybersecurity researchers have discovered a new Linux variant of a ransomware strain known as Play aka Balloonfly and PlayCrypt that's designed to target VMware ESXi environments. "This development suggests that the group could be broadening its attacks across the Linux platform, leading to an expanded victim pool and more successful ransom negotiations," Trend Micro researchers said in a.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🚀 How adware exposed victims to kernel-level threats – Week in Security with Tony Anscombe 🚀

A purported ad blocker marketed as a security solution hides kernellevel malware that inadvertently exposes victims to even more dangerous threats.

📖 Read more.

🔗 Via "ESET - WeLiveSecurity"

----------
👁️ Seen on @cibsecurity
📔 Play Ransomware Expands to Target VMWare ESXi Environments 📔

Trend Micro also revealed a connection between the Play ransomware group and the threat actor Prolific Puma.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 Ransomware Groups Fragment Amid Rising Cybercrime Threats 📔

Europol also said that multilayered extortion tactics in ransomware are becoming more common.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 Cybercriminals Exploit CrowdStrike Outage Chaos 📔

Cybercriminals have launched phishing campaigns purporting to support organizations impacted by the global IT outage, caused by a CrowdStrike Falcon issue.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 Two Russians Convicted for Role in LockBit Attacks 📔

Two Russian nationals have pleaded guilty to charges relating to their participation in the LockBit ransomware gang.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Quantum Leap: Advanced Computing Is a Vulnerable Cyber Target 🕵️‍♂️

At Black Hat USA, researchers from Bitdefender and Transilvania Quantum will showcase how attackers can target quantumbased infrastructure.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Russian Hacktivists Sanctioned for US Critical Infrastructure Attacks 🕵️‍♂️

"CARR" hackers have managed to gain control over ICS and SCADA systems in the US and Europe.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
1
🕵️‍♂️ Teenage Scattered Spider Suspect Arrested in Global Cybercrime Sting 🕵️‍♂️

The authorities intend to send a message to these cybercrime groups that their criminal offenses and ransomware attacks are not worth the fallout.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Swipe Right for Data Leaks: Dating Apps Expose Location, More 🕵️‍♂️

Apps like Tinder, Bumble, Grindr, Badoo, OKCupid, MeetMe, and Hinge all have API vulnerabilities that expose sensitive user data, and six allow a threat actor to pinpoint exactly where someone is.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🖋️ Google Abandons Plan to Phase Out Third-Party Cookies in Chrome 🖋️

Google on Monday abandoned plans to phase out thirdparty tracking cookies in its Chrome web browser more than four years after it introduced the option as part of a larger set of a controversial proposal called the Privacy Sandbox. "Instead of deprecating thirdparty cookies, we would introduce a new experience in Chrome that lets people make an informed choice that applies across their web.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
👍2
🕵️‍♂️ Novel ICS Malware Sabotaged Water-Heating Services in Ukraine 🕵️‍♂️

Newly discovered "FrostyGoop" is the first ICS malware that can communicate directly with operational technology systems via the Modbus protocol.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
👍1
📔 Prolific DDoS Marketplace Shut Down by UK Law Enforcement 📔

The UKs National Crime Agency has infiltrated the DigitalStress marketplace, which offers DDoS capabilities.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🦅 Philips Discloses Multiple VUE PACS Vulnerabilities: Healthcare Sector Walking on Thin Ice 🦅

Internet Exposed VUE PACS a Storm Brewing in Hindsight On July 18, 2024, Philips issued a security advisory addressing vulnerabilities within Philips Vue Picture Archiving and Communication System PACS versions prior to 12.2.8.410.   The Philips Vue PACS is a sophisticated medical imaging solution used to manage, store, and transmit digital medical images and reports. Primarily employed in hospitals, diagnostic imaging centers, and other healthcare facilities, this system facilitates the storage and retrieval of images from multiple modalities such as Xrays, MRI, CT scans, and ultrasound. The PACS integrates with Electronic Medical Records EMR and Radiology Information Systems RIS, allowing healthcare professionals to access and share patient images and reports seamlessly, improvi...

📖 Read more.

🔗 Via "CYBLE"

----------
👁️ Seen on @cibsecurity