🛡 Cybersecurity & Privacy 🛡 - News
25.9K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
🖋️ North Korean ScarCruft Exploits Windows Zero-Day to Spread RokRAT Malware 🖋️

The North Korean threat actor known as ScarCruft has been linked to the zeroday exploitation of a nowpatched security flaw in Windows to infect devices with malware known as RokRAT. The vulnerability in question is CVE202438178 CVSS score 7.5, a memory corruption bug in the Scripting Engine that could result in remote code execution when using the Edge browser in Internet Explorer Mode.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ 5 Techniques for Collecting Cyber Threat Intelligence 🖋️

To defend your organization against cyber threats, you need a clear picture of the current threat landscape. This means constantly expanding your knowledge about new and ongoing threats. There are many techniques analysts can use to collect crucial cyber threat intelligence. Lets consider five that can greatly improve your threat investigations. Pivoting on 2 IP addresses to pinpoint malware.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Astaroth Banking Malware Resurfaces in Brazil via Spear-Phishing Attack 🖋️

A new spearphishing campaign targeting Brazil has been found delivering a banking malware called Astaroth aka Guildma by making use of obfuscated JavaScript to slip past security guardrails. "The spearphishing campaign's impact has targeted various industries, with manufacturing companies, retail firms, and government agencies being the most affected," Trend Micro said in a new analysis. ".

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📔 Cyber Threats Escalating Beyond Ability to Defend, New NCSC Head Warns 📔

New NCSC CEO Dr Richard Horne warned in a speech that there is a widening gap between escalating threats and societys ability to defend against them.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 FIDO Alliance Proposes New Passkey Exchange Standard 📔

The new set of specifications could enable users to securely move passkeys and all other credentials across providers.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 Experts Play Down Significance of Chinese Quantum “Hack” 📔

DigiCert says imminent crypto threat from quantum computing has been overhyped.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 UK Government Launches AI Safety Scheme to Tackle Deepfakes 📔

New government grants for AI safety research are designed to fund work into deepfakes and other cyber risks.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🦅 CISA Issues Urgent Advisory on Vulnerabilities Affecting Multiple Products 🦅

Overview The Cybersecurity and Infrastructure Security Agency CISA has released a critical advisory report highlighting vulnerabilities recently added to the Known Exploited Vulnerability KEV catalog. These vulnerabilities pose risks to organizations and require immediate attention. CISA categorizes vulnerabilities based on the Common Vulnerabilities and Exposures CVE naming standards and the Common Vulnerability Scoring System CVSS. This system classifies vulnerabilities into high, medium, and low categories. High vulnerabilities are assigned scores ranging from 7.0 to 10.0 medium vulnerabilities receive scores between 4.0 and 6.9, and low vulnerabilities score between 0.0 and 3.9. The advisory outlines specific vulnerabilities and the products they affect, including SolarWin...

📖 Read more.

🔗 Via "CYBLE"

----------
👁️ Seen on @cibsecurity
👍1
🧠 Navigating the ethics of AI in cybersecurity 🧠

Even if were not always consciously aware of it, artificial intelligence is now all around us. Were already used to personalized recommendation systems in ecommerce, customer service chatbots powered by conversational AI and a whole lot more. In the realm of information security, weve already been relying on AIpowered spam filters for years to protect The post Navigating the ethics of AI in cybersecurity appeared first on Security Intelligence.

📖 Read more.

🔗 Via "Security Intelligence"

----------
👁️ Seen on @cibsecurity
📢 New Loader Masquerades as Antivirus to Deliver SSLoad 📢

A new malware loader, PhantomLoader, disguises itself as an antivirus software module to deliver the evasive SSLoad malware, bypassing traditional security measures.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
📢 Cisco confirms investigation amid data breach claims 📢

The networking giant says its probe is ongoing amid claims a threat actors accessed company data.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ What Cybersecurity Leaders Can Learn From the Game of Golf 🕵️‍♂️

As in golf, security requires collaboration across the entire organization, from individual contributors in each department to the executive level and the board.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Sidewinder Casts Wide Geographic Net in Latest Attack Spree 🕵️‍♂️

The longactive, Indiasponsored cyberthreat group targeted multiple entities across Asia, Africa, the Middle East, and even Europe in a recent attack wave that demonstrated the use of a previously unknown postexploit tool called StealerBot.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🦿 Engaging Executives: How to Present Cybersecurity in a Way That Resonates 🦿

Getting buyin can be difficult. SafeU founder and CEO Jorge Litvin explains how to create a common language between the CISO and the rest of the Csuite.

📖 Read more.

🔗 Via "Tech Republic"

----------
👁️ Seen on @cibsecurity
🦿 Urban VPN Review (2024): Is it a Safe & Reliable VPN to Use? 🦿

With its questionable privacy policy, slow VPN performance, and lack of independent audits, Urban VPN fails to offer a secure and quality VPN experience.

📖 Read more.

🔗 Via "Tech Republic"

----------
👁️ Seen on @cibsecurity
🦿 How to Use Call Detail Records to Detect Fraud 🦿

Learn how data from call detail records can help you find fraud calls made by your phone system and prevent them from happening again.

📖 Read more.

🔗 Via "Tech Republic"

----------
👁️ Seen on @cibsecurity
🛠 GNUnet P2P Framework 0.22.1 🛠

GNUnet is a peertopeer framework with focus on providing security. All peertopeer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, or SMTP messages. GNUnet supports accounting to provide contributing nodes with better service. The primary service build on top of the framework is anonymous file sharing.

📖 Read more.

🔗 Via "Packet Storm - Tools"

----------
👁️ Seen on @cibsecurity
🖋️ Hackers Abuse EDRSilencer Tool to Bypass Security and Hide Malicious Activity 🖋️

Threat actors are attempting to abuse the opensource EDRSilencer tool as part of efforts to tamper endpoint detection and response EDR solutions and hide malicious activity. Trend Micro said it detected "threat actors attempting to integrate EDRSilencer in their attacks, repurposing it as a means of evading detection." EDRSilencer, inspired by the NightHawk FireBlock tool from MDSec, is.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ FIDO Alliance Drafts New Protocol to Simplify Passkey Transfers Across Different Platforms 🖋️

The FIDO Alliance said it's working to make passkeys and other credentials more easier to export across different providers and improve credential provider interoperability, as more than 12 billion online accounts become accessible with the passwordless signin method. To that end, the alliance said it has published a draft for a new set of specifications for secure credential exchange,.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📔 CISA Urges Improvements in US Software Supply Chain Transparency 📔

CISA released the third edition of SBOM guidelines to enhance software component transparency.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 Ethical Hackers Embrace AI Tools Amid Rising Cyber Threats 📔

A new Bugcrowd study shows 71 of ethical hackers now see AI boosting hacking value, up from 21 in 2023.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity