πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
26K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ“” UK Launches New Competition to Spur Cybersecurity Careers πŸ“”

The UK governments Cyber Team Competition offer applicants the chance to receive advanced training, mentorship and networking opportunities.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ¦… OEMs Are Urged to Address Vulnerabilities in Device Communication πŸ¦…

Overview Qualcomm has shared its October 2024 Security Bulletin, highlighting multiple vulnerabilities. Google's Threat Analysis Group has also denoted the exploitation of a critical vulnerability, CVE202443047, in targeted attacks. The vulnerability revolves around the FASTRPC driver, which plays an important role in device communication processes. Exploitation of this vulnerability can lead to severe security breaches, potentially allowing unauthorized access to sensitive data. Considering this, original equipment manufacturers OEMs have received patches designed to rectify this flaw, and they are strongly encouraged to implement these updates without delay. Users concerned about the implications of this vulnerability should contact their device manufacturers for specific patc...

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity
β™ŸοΈ Lamborghini Carjackers Lured by $243M Cyberheist β™ŸοΈ

The parents of a 19yearold Connecticut honors student accused of taking part in a 243 million cryptocurrency heist in August were carjacked a week later, while out househunting in a brand new Lamborghini. Prosecutors say the couple was beaten and briefly kidnapped by six young men who traveled from Florida as part of a botched plan to hold the parents for ransom.

πŸ“– Read more.

πŸ”— Via "Krebs on Security"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Google Joins Forces with GASA and DNS RF to Tackle Online Scams at Scale πŸ–‹οΈ

Google on Wednesday announced a new partnership with the Global AntiScam Alliance GASA and DNS Research Federation DNS RF to combat online scams. The initiative, which has been codenamed the Global Signal Exchange GSE, is designed to create realtime insights into scams, fraud, and other forms of cybercrime pooling together threat signals from different data sources in order to create.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Hackers Hide Remcos RAT in GitHub Repository Comments πŸ•΅οΈβ€β™‚οΈ

The tack highlights bad actors' interest in trusted development and collaboration platforms and their users.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Australia Intros Its First National Cyber Legislation πŸ•΅οΈβ€β™‚οΈ

The bill is broken up into several pieces, including ransomware reporting and securing smart devices, among other objectives.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Mamba 2FA Cybercrime Kit Targets Microsoft 365 Users πŸ•΅οΈβ€β™‚οΈ

A stealthy new underground offering uses sophisticated adversaryinthemiddle AitM techniques to convincingly serve up "Microsoft" login pages of various kinds, with dynamic enterprise branding.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ 3 More Ivanti Cloud Vulns Exploited in the Wild πŸ•΅οΈβ€β™‚οΈ

The security bugs were found susceptible to exploitation in connection to the previously disclosed, critical CVE20248963 vulnerability in the security vendor's Cloud Services Appliance CSA.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Cloud, AI Talent Gaps Plague Cybersecurity Teams πŸ•΅οΈβ€β™‚οΈ

Cyber pros are scrambling to stay uptodate as the businesses they work for quickly roll out AI tools and keep expanding their cloud initiatives.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 Bitwarden vs 1Password (2024): Which One Should You Choose? 🦿

Bitwarden and 1Password are two of the top password managers. Find out which password manager is the best for you using this comprehensive comparison.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ AI-Powered Cybercrime Cartels on the Rise in Asia πŸ•΅οΈβ€β™‚οΈ

All across the AsiaPacific region, large and diverse marketplaces for AI cybercrime tools have developed, with deepfakes proving most popular.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Modern payment systems: An effective way to reduce your attack surface πŸ“’

Embracing modern payment methods can eliminate many of the vulnerabilities associated with the last 20 years of online payments.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Cybercriminals Use Unicode to Hide Mongolian Skimmer in E-Commerce Platforms πŸ–‹οΈ

Cybersecurity researchers have shed light on a new digital skimmer campaign that leverages Unicode obfuscation techniques to conceal a skimmer dubbed Mongolian Skimmer. "At first glance, the thing that stood out was the script's obfuscation, which seemed a bit bizarre because of all the accented characters," Jscrambler researchers said in an analysis. "The heavy use of Unicode characters, many.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ CISA Warns of Critical Fortinet Flaw as Palo Alto and Cisco Issue Urgent Security Patches πŸ–‹οΈ

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a critical security flaw impacting Fortinet products to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE202423113 CVSS score 9.8, relates to cases of remote code execution that affects FortiOS, FortiPAM, FortiProxy, and FortiWeb. "A.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Firefox Zero-Day Under Attack: Update Your Browser Immediately πŸ–‹οΈ

Mozilla has revealed that a critical security flaw impacting Firefox and Firefox Extended Support Release ESR has come under active exploitation in the wild. The vulnerability, tracked as CVE20249680, has been described as a useafterfree bug in the Animation timeline component. "An attacker was able to achieve code execution in the content process by exploiting a useafterfree in.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Former RAC Employees Get Suspended Sentence for Data Theft πŸ“”

Two former RAC employees have been handed suspended prison sentences for trading in personal data.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Over 240 Million US Breach Victims Recorded in Q3 πŸ“”

Supply chain victim numbers surge as more than 240 million US residents are impacted by data breaches in Q3 2024.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ¦… CISA Issues Urgent Advisory on Critical Vulnerabilities in Ivanti Products πŸ¦…

Overview The Cybersecurity and Infrastructure Security Agency CISA has issued a critical advisory report on vulnerabilities disclosed in multiple Ivanti products. These products include Ivanti Endpoint Manager Mobile EPMM, Ivanti Cloud Service Application CSA, Ivanti Velocity License Server, Ivanti Connect Secure, Policy Secure, and Ivanti Avalanche. The official advisory from Ivanti specifically addresses various vulnerabilities affecting the Ivanti Cloud Service Application CSA. It highlights that a limited number of customers using CSA versions 4.6 patches 518 and earlier have been exploited when certain vulnerabilitiesCVE20249379, CVE20249380, or CVE20249381are chained with CVE20248963. The recent advisory from Ivanti has indicated a range of vulnerabilities across their p...

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1
πŸ•΅οΈβ€β™‚οΈ Vulnerability Prioritization & the Magic 8 Ball πŸ•΅οΈβ€β™‚οΈ

Vulnerability prioritization has evolved over the years. Several frameworks exist to help organizations make the right decisions when it comes to deciding which patches to apply and when. But are these better than a Magic 8 Ball?.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Microsoft: BYOD, QR Codes Lead Rampant Education Attacks πŸ•΅οΈβ€β™‚οΈ

The average higher education institution is getting hit once a week now, and as one University of Oregon attack shows, the sector often lacks the resources to keep pace.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 Patch Tuesday: Internet Explorer Vulnerabilities Still Pose a Problem 🦿

Patch Tuesday brings patches for hundreds of vulnerabilities. Plus, Apple makes sure Sequoia plays nice with thirdparty security tools.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1