πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
26K subscribers
89.3K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ“” US Energy Sector Vulnerable to Supply Chain Attacks πŸ“”

45 of security breaches in the energy sector in the past year were thirdparty related, according to a report by Security Scorecard and KPMG.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
β™ŸοΈ The Global Surveillance Free-for-All in Mobile Ad Data β™ŸοΈ

Not long ago, the ability to remotely track someones daily movements just by knowing their home address, employer, or place of worship was considered a powerful surveillance tool that should only be in the purview of nation states. But a new lawsuit in a likely constitutional battle over a New Jersey privacy law shows that anyone can now access this capability, thanks to a proliferation of commercial services that hoover up the digital exhaust emitted by widelyused mobile apps and websites.

πŸ“– Read more.

πŸ”— Via "Krebs on Security"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ¦… CISA Warns About New Microsoft SharePoint Vulnerability CVE-2024-38094: High Risks and Immediate Patching Needed πŸ¦…

Overview The Cybersecurity and Infrastructure Security Agency CISA has issued a critical advisory regarding newly discovered vulnerabilities in Microsoft SharePoint, specifically addressing a deserialization vulnerability now included in CISAs Known Exploited Vulnerability KEV catalog.  The vulnerability in question, identified as CVE202438094, has a CVSSv3.1 score of 7.2, which indicates a highseverity risk. It affects several SharePoint products, including Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Server 2019, and Microsoft SharePoint Enterprise Server 2016. An authenticated attacker with Site Owner permissions could exploit this vulnerability to inject and execute arbitrary code within the SharePoint environment. The risk of such exploitation ...

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1
πŸ“’ Exploitation of Docker remote API servers has reached a β€œcritical level” πŸ“’

Hackers are targeting Dockers remote access API as it allows them to pivot from a single container to the host and deploy malware with ease.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1
πŸ“’ Multi-layered security is the key to keeping data safe – here’s why πŸ“’

A robust cyber resilience strategy requires multiple layers of defense to safeguard businesscritical data against an increasingly sophisticated threat landscape.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Bumblebee Malware Is Buzzing Back to Life πŸ•΅οΈβ€β™‚οΈ

Despite a law enforcement sweep last May, the sophisticated downloader malware is reemerging.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
🧠 AI hallucinations can pose a risk to your cybersecurity 🧠

In early 2023, Googles Bard made headlines for a pretty big mistake, which we now call an AI hallucination. During a demo, the chatbot was asked, What new discoveries from the James Webb Space Telescope can I tell my 9yearold about? Bard answered that JWST, which launched in December 2021, took the very first pictures The post AI hallucinations can pose a risk to your cybersecurity appeared first on Security Intelligence.

πŸ“– Read more.

πŸ”— Via "Security Intelligence"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Permiso State of Identity Security 2024: A Shake-up in Identity Security Is Looming Large πŸ–‹οΈ

Identity security is front, and center given all the recent breaches that include Microsoft, Okta, Cloudflare and Snowflake to name a few. Organizations are starting to realize that a shakeup is needed in terms of the way we approach identity security both from a strategic but also a technology vantage point.  Identity security is more than just provisioning access  The conventional view.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094) πŸ–‹οΈ

A highseverity flaw impacting Microsoft SharePoint has been added to the Known Exploited Vulnerabilities KEV catalog by the U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday, citing evidence of active exploitation. The vulnerability, tracked as CVE202438094 CVSS score 7.2, has been described as a deserialization vulnerability impacting SharePoint that could result.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” 70% of Leaders See Cyber Knowledge Gap in Employees πŸ“”

70 of leaders see cyber knowledge gap AI attacks are harder to detect, 60 expect more victims.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ¦… CISA Adds ScienceLogic SL1 Vulnerability to Known Exploited Vulnerabilities (KEV) Catalog πŸ¦…

Overview The Cybersecurity and Infrastructure Security Agency CISA recently added a vulnerability related to ScienceLogic SL1, previously known as EM7, to its Known Exploited Vulnerabilities KEV catalog.   The specific vulnerability in question, designated as CVE20249537, has been classified as critical. It relates to a thirdparty utility included with the ScienceLogic SL1 package. Notably, the name of this utility has not been disclosed to prevent providing insights to potential threat actors. The newly identified vulnerability, designated CVE20249537, has a critical CVSS score of 9.3. It involves a remote code execution issue linked to a thirdparty component within ScienceLogic SL1. This specific vulnerability has attracted many users and cybersecurity professionals, par...

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Former British PM Cameron Calls for Tech Engagement with China Despite Cyber Threats πŸ“”

Former UK PM David Cameron called for stronger defenses against Chinese cyber espionage while advocating collaboration with Beijing, coinciding with the BRICS Summit.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Mobile Apps With Millions of Downloads Expose Cloud Credentials πŸ•΅οΈβ€β™‚οΈ

Popular titles on both Google Play and Apple's App Store include hardcoded and unencrypted AWS and Azure credentials in their codebases or binaries, making them vulnerable to misuse by threat actors.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ The US Needs a Better Energy Grid to Win the AI Arms Race πŸ•΅οΈβ€β™‚οΈ

The longer we avoid reform, the further behind we'll fall in AI innovation and the more vulnerable we'll be.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 Threat Actors Are Exploiting Vulnerabilities Faster Than Ever 🦿

It only takes five days on average for attackers to exploit a vulnerability, according to a new report.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 Is a VPN Really Worth It in 2024? 🦿

Learn about the benefits of using a VPN and how to choose the right one for your business needs.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” New Malware WarmCookie Targets Users with Malicious Links πŸ“”

WarmCookie malware, aka BadSpace, spreads via malspam, malvertising and enables persistent access.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Embargo Ransomware Gang Deploys Customized Defense Evasion Tools πŸ“”

The recently discovered Embargo ransomware group is using Rustbased custom tools to overcome victims security defenses, ESET researchers have observed.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Lazarus Group Exploits Chrome Zero-Day in Latest Campaign πŸ•΅οΈβ€β™‚οΈ

The North Korean actor is going after cryptocurrency investors worldwide leveraging a genuinelooking game site and AIgenerated content and images.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Russian Trolls Pose as Reputable Media to Sow US Election Chaos πŸ•΅οΈβ€β™‚οΈ

Operation Overload pushes dressed up Russian state propaganda with the aim of flooding the US with election disinformation.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Microsoft SharePoint Vuln Is Under Active Exploit πŸ•΅οΈβ€β™‚οΈ

The risk of exploitation is heightened, thanks to a proofofconcept that's been made publicly available.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity