🛡 Cybersecurity & Privacy 🛡 - News
26.1K subscribers
89.3K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
📔 Apple Rolls Out Major Security Update to Patch macOS and iOS Vulnerabilities 📔

In a major security update, Apple has fixed dozens of bugs and vulnerabilities across its operating systems and services.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🦅 The Cybersecurity and Infrastructure Security Agency (CISA) Reports Urgent Security Updates for Apple Products 🦅

Overview The Cybersecurity and Infrastructure Security Agency CISA has recently alerted users to multiple vulnerabilities in Apple products following the release of vital security updates on October 28, 2024. These Apple vulnerabilities could potentially allow cyber threat actors to exploit weaknesses in the software, emphasizing the importance of timely updates for safeguarding systems. Apple product users and administrators are urged to review the advisories and promptly apply the necessary updates. These updates address vulnerabilities that could potentially expose users to several risks, ranging from unauthorized access to sensitive data to the possibility of complete system control. The products affected by these updates encompass a wide range of operating systems and devic...

📖 Read more.

🔗 Via "CYBLE"

----------
👁️ Seen on @cibsecurity
🔥1
🕵️‍♂️ MIND Launches "Intelligent" DLP Platform 🕵️‍♂️

The company's data loss prevention platform helps customers identify and classify data across SaaS and GenAI applications, endpoints, and emails.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
👍1
🕵️‍♂️ White House Outlines AI's Role in National Security 🕵️‍♂️

The National Security Memorandum on Artificial Intelligence tasks various federal agencies with securing the AI supply chain from potential cyberattacks and disseminating timely threat information about such attacks.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ 'Midnight Blizzard' Targets Networks With Signed RDP Files 🕵️‍♂️

The Russianbacked group is using a novel access vector to harvest victim data and compromise devices in a largescale intelligencegathering operation.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Ex-Disney Employee Charged With Hacking Menu Database 🕵️‍♂️

In a vengeful move against the happiest place on Earth, the former employee allegedly used his old credentials to make potentially deadly changes.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Regulators Combat Deepfakes With Anti-Fraud Rules 🕵️‍♂️

Despite the absence of laws specifically covering AIbased attacks, regulators can use existing rules around fraud and deceptive business practices.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
📔 Over 80% of US Small Businesses Have Been Breached 📔

ITRC data finds 81 of US small businesses have suffered a data or security breach over the past year.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
1
📢 Scaling AI from pilot to production: Maximize AI impact with HPE & Intel 📢

Transform AI proofofconcepts into fullscale implementations.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
🖋️ Enterprise Identity Threat Report 2024: Unveiling Hidden Threats to Corporate Identities 🖋️

In the modern, browsercentric workplace, the corporate identity acts as the frontline defense for organizations. Often referred to as the new perimeter, the identity stands between safe data management and potential breaches. However, a new report reveals how enterprises are often unaware of how their identities are being used across various platforms. This leaves them vulnerable to data.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🔥1
🖋️ LiteSpeed Cache Plugin Vulnerability Poses Significant Risk to WordPress Websites 🖋️

A highseverity security flaw has been disclosed in the LiteSpeed Cache plugin for WordPress that could allow an unauthenticated threat actor to elevate their privileges and perform malicious actions. The vulnerability, tracked as CVE202450550 CVSS score 8.1, has been addressed in version 6.5.2 of the plugin. "The plugin suffers from an unauthenticated privilege escalation vulnerability.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📔 Government Sector Suffers 236% Surge in Malware Attacks 📔

Malwarerelated attacks against global government organizations increased 236 yearonyear in Q1 2024, according to SonicWall.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📢 Two notorious infostealer malware operations were just knocked offline 📢

Infrastructure linked to two major infostealer malware strains has been seized in a joint law enforcement operation.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ North Korea's Andariel Pivots to 'Play' Ransomware Games 🕵️‍♂️

The prominent statesponsored advanced persistent threat APT, aka Jumpy Pisces, appears to be moving away from its primary cyberespionage motives and toward wreaking widespread disruption and damage.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Noma Launches With Plans to Secure Data, AI Life Cycle 🕵️‍♂️

Application security teams from Fortune 500 companies are already using Noma's life cycle platform, which offers organizations data and AI supply chain security, AI security posture management, and AI threat detection and response.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ The Case Against Abandoning CrowdStrike Post-Outage 🕵️‍♂️

Kneejerk reactions to major vendor outages could do more harm than good.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
👍1
🕵️‍♂️ China Says Seabed Sentinels Are Spying, After Trump Taps 🕵️‍♂️

On the heels of a Chinese APT eavesdropping on phone calls made by Trump and Harris campaign staffers, Beijing says foreign nations have mounted an extensive seafaring espionage effort.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🦿 What is a Passkey? Definition, How It Works and More 🦿

A passkey is a security measure used to grant access to a protected system. This guide explains how it works, and provides more information on its uses and benefits.

📖 Read more.

🔗 Via "Tech Republic"

----------
👁️ Seen on @cibsecurity
🧠 Quishing: A growing threat hiding in plain sight 🧠

Our mobile devices go everywhere we go, and we can use them for almost anything. For businesses, the accessibility of mobile devices has also made it easier to create more interactive ways to introduce new products and services while improving user experiences across different industries. Quickresponse QR codes are a good example of this in The post Quishing A growing threat hiding in plain sight appeared first on Security Intelligence.

📖 Read more.

🔗 Via "Security Intelligence"

----------
👁️ Seen on @cibsecurity
🖋️ New LightSpy Spyware Version Targets iPhones with Increased Surveillance Tactics 🖋️

Cybersecurity researchers have discovered an improved version of an Apple iOS spyware called LightSpy that not only expands on its functionality, but also incorporates destructive capabilities to prevent the compromised device from booting up. "While the iOS implant delivery method closely mirrors that of the macOS version, the postexploitation and privilege escalation stages differ.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ LottieFiles Issues Warning About Compromised "lottie-player" npm Package 🖋️

LottieFiles has revealed that its npm package "lottieplayer" was compromised as part of a supply chain attack, prompting it to release an updated version of the library. "On October 30th 620 PM UTC LottieFiles were notified that our popular open source npm package for the web player lottiefileslottieplayer had unauthorized new versions pushed with malicious code," the company said in a.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity