🦿 Top Tech Conferences & Events to Add to Your Calendar 🦿
📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
A great way to stay current with the latest technology trends and innovations is by attending conferences. Read and bookmark our tech events guide.📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
TechRepublic
Top Tech Conferences & Events to Add to Your Calendar in 2025
Discover the top tech conferences and events to add to your calendar in 2025, and stay updated on the latest trends and innovations.
♟️ Booking.com Phishers May Leave You With Reservations ♟️
📖 Read more.
🔗 Via "Krebs on Security"
----------
👁️ Seen on @cibsecurity
A number of cybercriminal innovations are making it easier for scammers to cash in on your upcoming travel plans. This story examines a recent spearphishing campaign that ensued when a California hotel had its booking.com credentials stolen. We'll also explore an array of cybercrime services aimed at phishers who target hotels that rely on the world's most visited travel website.📖 Read more.
🔗 Via "Krebs on Security"
----------
👁️ Seen on @cibsecurity
Krebs on Security
Booking.com Phishers May Leave You With Reservations
A number of cybercriminal innovations are making it easier for scammers to cash in on your upcoming travel plans. This story examines a recent spear-phishing campaign that ensued when a California hotel had its booking.com credentials stolen. We'll also explore…
📔 Sophos Warns Chinese Hackers Are Becoming Stealthier 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Sophos provided details of changing tactics by Chinese APT groups over a fiveyear period, involving a shift towards stealthy, targeted attacks.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Sophos Warns Chinese Hackers Are Becoming Stealthier
Sophos provided details of changing tactics by Chinese APT groups over a five-year period, involving a shift towards stealthy, targeted attacks
🕵️♂️ EmeraldWhale's Massive Git Breach Highlights Config Gaps 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
The largescale operation took advantage of open repositories, hardcoded credentials in source code, and other cloud oversights.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Darkreading
EmeraldWhale's Massive Git Breach Highlights Config Gaps
The large-scale operation took advantage of open repositories, hardcoded credentials in source code, and other cloud oversights.
🕵️♂️ Privacy Anxiety Pushes Microsoft Recall AI Release Again 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
The Recall AI tool will be available to Copilot PC subscribers in December, and can be used to record images of every interaction on the device for review later. Critics say this introduces major privacy and security concerns along with useful functionality.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Darkreading
Privacy Anxiety Pushes Microsoft Recall AI Release Again
The Recall AI tool will be available to Copilot+ PC subscribers in December, and can be used to record images of every interaction on the device for review later. Critics say this introduces major privacy and security concerns along with useful functionality.
🖋️ Stop LUCR-3 Attacks: Learn Key Identity Security Tactics in This Expert Webinar 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Did you know that advanced threat actors can infiltrate the identity systems of major organizations and extract sensitive data within days? Its a chilling reality, becoming more common and concerning by the day. These attackers exploit vulnerabilities in SaaS and cloud environments, using compromised identities to move laterally within networks, causing widespread damage. Cybersecurity and IT.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ New FakeCall Malware Variant Hijacks Android Devices for Fraudulent Banking Calls 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity researchers have discovered a new version of a wellknown Android malware family dubbed FakeCall that employs voice phishing aka vishing techniques to trick users into parting with their personal information. "FakeCall is an extremely sophisticated Vishing attack that leverages malware to take almost complete control of the mobile device, including the interception of incoming.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
👍1
📢 Hackers have been posing as IT support on Microsoft Teams 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
The social engineering campaign combines a traditional email spam campaign with Microsoft Teamsbased manipulation.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
IT Pro
Hackers have been posing as IT support on Microsoft Teams
The social engineering campaign combines a traditional email spam campaign with Microsoft Teams-based manipulation
🖋️ Cyber Threats That Could Impact the Retail Industry This Holiday Season (and What to Do About It) 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
As the holiday season approaches, retail businesses are gearing up for their annual surge in online and instore traffic. Unfortunately, this increase in activity also attracts cybercriminals looking to exploit vulnerabilities for their gain. Imperva, a Thales company, recently published its annual holiday shopping cybersecurity guide. Data from the Imperva Threat Research teams.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Google’s AI Tool Big Sleep Finds Zero-Day Vulnerability in SQLite Database Engine 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Google said it discovered a zeroday vulnerability in the SQLite opensource database engine using its large language model LLM assisted framework called Big Sleep formerly Project Naptime. The tech giant described the development as the "first realworld vulnerability" uncovered using the artificial intelligence AI agent. "We believe this is the first public example of an AI agent finding.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 UK Council Sites Recover Following Russian DDoS Blitz 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Several UK council websites are back online after being disrupted by Russian hacktivist DDoS attacks.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
UK Council Sites Recover Following Russian DDoS Blitz
Several UK council websites are back online after being disrupted by Russian hacktivist DDoS attacks
🦅 CISA Warns of Critical Vulnerabilities in Rockwell Automation’s FactoryTalk ThinManager 🦅
📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
Overview The Cybersecurity and Infrastructure Security Agency CISA has alerted about new vulnerabilities in Rockwell Automation FactoryTalk ThinManager. The alert, designated ICSA2430501, outlines serious security risks that could affect users of the software. With a CVSS v4 score of 9.3, these vulnerabilities demand immediate attention from security teams to safeguard industrial control systems. The vulnerabilities identified in Rockwell Automation's FactoryTalk ThinManager include "Missing Authentication for Critical Function" and "OutofBounds Read." These issues can allow remote attackers to manipulate databases or cause denialofservice conditions. The successful exploitation of these vulnerabilities poses a risk to users. Attackers could send specially crafted messages to ...📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
Cyble
Rockwell Automation FactoryTalk ThinManager Vulnerabilities
CISA warns of critical vulnerabilities in Rockwell Automation's FactoryTalk ThinManager, demanding urgent action from security teams.
🖋️ German Police Disrupt DDoS-for-Hire Platform dstat[.]cc; Suspects Arrested 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
German law enforcement authorities have announced the disruption of a criminal service called dstat.cc that made it possible for other threat actors to easily mount distributed denialofservice DDoS attacks. "The platform made such DDoS attacks accessible to a wide range of users, even those without any indepth technical skills of their own," the Federal Criminal Police Office aka.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
👍1
🖋️ THN Recap: Top Cybersecurity Threats, Tools, and Practices (Oct 28 - Nov 03) 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
This week was a total digital dumpster fire! Hackers were like, "Let's cause some chaos!" and went after everything from our browsers to those fancy cameras that zoom and spin. You know, the ones they use in spy movies? We're talking passwordstealing bots, sneaky extensions that spy on you, and even cloudhacking ninjas! It's enough to make you want to chuck your phone in the ocean.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 Supply Chain Attack Uses Smart Contracts for C2 Ops 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Checkmarx has observed a novel npm supply chain attack using Ethereum smart contracts to manage commandandcontrol C2 operations.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Supply Chain Attack Uses Smart Contracts for C2 Ops
Checkmarx has observed a novel npm supply chain attack using Ethereum smart contracts to manage command-and-control (C2) operations
📢 Warning issued after SharePoint flaw puts entire corporate networks at risk 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
A threat actor was able to remain undetected on a corporate network for over two weeks after exploiting a highseverity SharePoint vulnerability.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
ITPro
Warning issued after SharePoint flaw puts entire corporate networks at risk
A threat actor was able to remain undetected on a corporate network for over two weeks after exploiting a high-severity SharePoint vulnerability
🕵️♂️ Google: Big Sleep AI Agent Puts SQLite Software Bug to Bed 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
A research tool by the company found a vulnerability in the SQLite open source database, demonstrating the "defensive potential" for using LLMs to find vulnerabilities in applications before they're publicly released.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Darkreading
Google: Big Sleep AI Agent Puts SQLite Software Bug to Bed
A research tool by the company found a real-world vulnerability in the SQLite open source database, demonstrating the "defensive potential" for using LLMs to find vulnerabilities in applications before they are publicly released.
🕵️♂️ Name That Edge Toon: Aerialist's Choice 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Feeling creative? Submit your caption and our panel of experts will reward the winner with a 25 Amazon gift card.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Darkreading
Name That Edge Toon: Aerialist's Choice
Feeling creative? Submit your caption for the November Name That Edge Toon Contest and our panel of experts will reward the winner with a $25 Amazon gift card.
🕵️♂️ Can Automatic Updates for Critical Infrastructure Be Trusted? 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
The true measure of our cybersecurity prowess lies in our capacity to endure.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Darkreading
Can Auto Updates for Critical Infrastructure Be Trusted?
The true measure of our cybersecurity prowess lies in our capacity to endure.
🦿 How AI Is Changing the Cloud Security and Risk Equation 🦿
📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
Discover how AI amplifies cloud security risks and how to mitigate them, with insights from Tenables Liat Hayun on managing data sensitivity, misconfigurations, and overprivileged access.📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
TechRepublic
How AI Is Changing the Cloud Security and Risk Equation
Discover how AI amplifies cloud security risks and how to mitigate them, with insights from Tenable’s Liat Hayun.
🛠 TOR Virtual Network Tunneling Tool 0.4.8.13 🛠
📖 Read more.
🔗 Via "Packet Storm - Tools"
----------
👁️ Seen on @cibsecurity
Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. It also enables software developers to create new communication tools with builtin privacy features. It provides the foundation for a range of applications that allow organizations and individuals to share information over public networks without compromising their privacy. Individuals can use it to keep remote Websites from tracking them and their family members. They can also use it to connect to resources such as news sites or instant messaging services that are blocked by their local Internet service providers ISPs. This is the source code release.📖 Read more.
🔗 Via "Packet Storm - Tools"
----------
👁️ Seen on @cibsecurity
packetstorm.news
Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories, and Whitepapers