πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.9K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
🦿 7 Security and Compliance Tips From ISC2 Security Congress 🦿

An IT and security compliance analyst distilled seven ways to forge effective synergies between IT and broader business goals.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Hybrid Work Exposes New Vulnerabilities in Print Security πŸ•΅οΈβ€β™‚οΈ

The shift to a distributed work model has exposed organizations to new threats, and a low but continuing stream of printerrelated vulnerabilities isn't helping.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Bad Actors Manipulate Red-Team Tools to Evade Detection πŸ•΅οΈβ€β™‚οΈ

By using EDRSilencer, threat actors are able to prevent security alerts and reports getting generated.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Chinese Researchers Tap Quantum to Break Encryption πŸ•΅οΈβ€β™‚οΈ

But the time when quantum computers pose a tangible threat to modern encryption is likely still several years away.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Iran's APT34 Abuses MS Exchange to Spy on Gulf Gov'ts πŸ•΅οΈβ€β™‚οΈ

A MOISaligned threat group has been using Microsoft Exchange servers to exfiltrate sensitive data from Gulfstate government agencies.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Critical Kubernetes Image Builder Vulnerability Exposes Nodes to Root Access Risk πŸ–‹οΈ

A critical security flaw has been disclosed in the Kubernetes Image Builder that, if successfully exploited, could be abused to gain root access under certain circumstances. The vulnerability, tracked as CVE20249486 CVSS score 9.8, has been addressed in version 0.1.38. The project maintainers acknowledged Nicolai Rybnikar for discovering and reporting the vulnerability. "A security issue.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” NIS2 Confusion: Concerns Over Readiness as Deadline Reached πŸ“”

NIS2 will be enforced as of October 17, yet many organizations and even EU member states appear completely unprepared for implementation.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” CISA Seeks Feedback on Upcoming Product Security Flaws Guidance πŸ“”

CISA is asking for feedback on future guidance outlining bad security practices in product development as part of its Secure by Design initiative.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ 96% of SMBs are missing critical cybersecurity skills – here's why πŸ“’

The skills shortage hits SMBs worse as they often suffer from a lack of budget and resources.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ U.S. Charges Two Sudanese Brothers for Record 35,000 DDoS Attacks πŸ–‹οΈ

Federal prosecutors in the U.S. have charged two Sudanese brothers with running a distributed denialofservice DDoS botnet for hire that conducted a record 35,000 DDoS attacks in a single year, including those that targeted Microsoft's services in June 2023. The attacks, which were facilitated by Anonymous Sudan's "powerful DDoS tool," singled out critical infrastructure, corporate networks,.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” RansomHub Overtakes LockBit as Most Prolific Ransomware Group πŸ“”

Symantec data reveals RansomHub claimed more attacks than any other group in Q3 2024.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Two-thirds of Attributable Malware Linked to Nation States πŸ“”

Netskope claims 66 of malware attacks last year were backed by nation states.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Is a CPO Still a CPO? The Evolving Role of Privacy Leadership πŸ•΅οΈβ€β™‚οΈ

Has the role of chief privacy officer become something more than it was? And is it still a role that just one person can handle?.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
❀1πŸ‘1
🦿 NIS 2 Compliance Deadline Arrives: What You Need to Know 🦿

The NIS 2 compliance deadline is Oct. 17. Discover essential insights on requirements, impacts, and what organisations must do now.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Fortify your future with HPE ProLiant Servers powered by Intel πŸ“’

Enhance your security and manage your servers more effectively.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1
πŸ•΅οΈβ€β™‚οΈ 4 Ways to Address Zero-Days in AI/ML Security πŸ•΅οΈβ€β™‚οΈ

As the unique challenges of AI zerodays emerge, the approach to managing the accompanying risks needs to follow traditional security best practices but be adapted for AI.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Anonymous Sudan Unmasked as Leaders Face Life in Prison πŸ•΅οΈβ€β™‚οΈ

US officials disrupted the group's DDoS operation and arrested two individuals behind it, who turned out to be far less intimidating than they were made out to be in the media.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 Number of Active Ransomware Groups Highest on Record, Cyberint’s Report Finds 🦿

This indicates that the most prominent ransomware groups are succumbing to law enforcement takedowns, according to researchers from Cyberint.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
β™ŸοΈ Sudanese Brothers Arrested in β€˜AnonSudan’ Takedown β™ŸοΈ

The U.S. government on Wednesday announced the arrest and charging of two Sudanese brothers accused of running Anonymous Sudan a.k.a. AnonSudan, a cybercrime business known for launching powerful distributed denialofservice DDoS attacks against a range of targets, including dozens of hospitals, news websites and cloud providers. One of the brothers is facing life in prison for allegedly seeking to kill people with his attacks.

πŸ“– Read more.

πŸ”— Via "Krebs on Security"

----------
πŸ‘οΈ Seen on @cibsecurity
🧠 The cybersecurity skills gap contributed to a $1.76 million increase in average breach costs 🧠

Understaffing in cybersecurity the skills gap is driving up the cost of data breaches in recent years, according to a decade of reports by IBM. The 2024 IBM Data Breach Report found that more than half of breached organizations experienced severe security staffing shortages, a 26.2 increase from the previous year. They found The post The cybersecurity skills gap contributed to a 1.76 million increase in average breach costs appeared first on Security Intelligence.

πŸ“– Read more.

πŸ”— Via "Security Intelligence"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Russian RomCom Attacks Target Ukrainian Government with New SingleCamper RAT Variant πŸ–‹οΈ

The Russian threat actor known as RomCom has been linked to a new wave of cyber attacks aimed at Ukrainian government agencies and unknown Polish entities since at least late 2023. The intrusions are characterized by the use of a variant of the RomCom RAT dubbed SingleCamper aka SnipBot or RomCom 5.0, said Cisco Talos, which is monitoring the activity cluster under the moniker UAT5647. "This.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity