🛡 Cybersecurity & Privacy 🛡 - News
26.2K subscribers
89.3K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
🕵️‍♂️ Oh, the Humanity! How to Make Humans Part of Cybersecurity Design 🕵️‍♂️

Government and industry want to jumpstart the conversation around "humancentric cybersecurity" to boost the usability and effectiveness of security products and services.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ How to Win at Cyber by Influencing People 🕵️‍♂️

Zero trust is a mature approach that will improve your organization's security.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Dark Reading Confidential: Quantum Has Landed, So Now What? 🕵️‍♂️

Episode 4 NIST's new postquantum cryptography standards are here, so what comes next? This episode of Dark Reading Confidential digs the world of quantum computing from a cybersecurity practitioner's point of view with guests Matthew McFadden, vice president, Cyber, General Dynamics Information Technology GDIT and Thomas Scanlon, professor, Heinz College, Carnegie Mellon University.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ On Election Day, Disinformation Worries Security Pros the Most 🕵️‍♂️

A Dark Reading poll reveals widespread concern over disinformation about election integrity and voter fraud, even as Russia steps up deepfake attacks meant to sow distrust in the voting process among the electorate.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🦿 VMware Explore Barcelona 2024: Tanzu Platform 10 Enters General Availability 🦿

About a year after Broadcoms acquisition of VMware, the company released VMware Tanzu Data Services to make connections to some thirdparty data engines easier.

📖 Read more.

🔗 Via "Tech Republic"

----------
👁️ Seen on @cibsecurity
🦿 The 7 Best Encryption Software Choices for 2024 🦿

This is a comprehensive list of the best encryption software and tools, covering their features, pricing and more. Use this guide to determine your best fit.

📖 Read more.

🔗 Via "Tech Republic"

----------
👁️ Seen on @cibsecurity
🦿 NordVPN vs ExpressVPN: Which VPN Should You Choose? 🦿

NordVPN or ExpressVPN? Read this indepth comparison to find out which VPN provider comes out on top in terms of features, security, speed, and more.

📖 Read more.

🔗 Via "Tech Republic"

----------
👁️ Seen on @cibsecurity
🛠 Scapy Packet Manipulation Tool 2.6.1 🛠

Scapy is a powerful interactive packet manipulation tool, packet generator, network scanner, network discovery tool, and packet sniffer. It provides classes to interactively create packets or sets of packets, manipulate them, send them over the wire, sniff other packets from the wire, match answers and replies, and more. Interaction is provided by the Python interpreter, so Python programming structures can be used such as variables, loops, and functions. Report modules are possible and easy to make. It is intended to do the same things as ttlscan, nmap, hping, queso, p0f, xprobe, arping, arpsk, arpspoof, firewalk, irpas, tethereal, tcpdump, etc.

📖 Read more.

🔗 Via "Packet Storm - Tools"

----------
👁️ Seen on @cibsecurity
🧠 Skills shortage directly tied to financial loss in data breaches 🧠

The cybersecurity skills gap continues to widen, with serious consequences for organizations worldwide. According to IBMs 2024 Cost Of A Data Breach Report, more than half of breached organizations now face severe security staffing shortages, a whopping 26.2 increase from the previous year. And thats expensive. This skills deficit adds an average of 1.76 million in The post Skills shortage directly tied to financial loss in data breaches appeared first on Security Intelligence.

📖 Read more.

🔗 Via "Security Intelligence"

----------
👁️ Seen on @cibsecurity
🖋️ New Android Banking Malware 'ToxicPanda' Targets Users with Fraudulent Money Transfers 🖋️

Over 1,500 Android devices have been infected by a new strain of Android banking malware called ToxicPanda that allows threat actors to conduct fraudulent banking transactions. "ToxicPanda's main goal is to initiate money transfers from compromised devices via account takeover ATO using a wellknown technique called ondevice fraud ODF," Cleafy researchers Michele Roviello, Alessandro Strino.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
1
🖋️ Leveraging Wazuh for Zero Trust security 🖋️

Zero Trust security changes how organizations handle security by doing away with implicit trust while continuously analyzing and validating access requests. Contrary to perimeterbased security, users within an environment are not automatically trusted upon gaining access. Zero Trust security encourages continuous monitoring of every device and user, which ensures sustained protection after.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📔 ToxicPanda Malware Targets Banking Apps on Android Devices 📔

ToxicPanda malware targets banking apps on Android, spreading through Italy, Portugal and Spain.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 US Voters Urged to Use Official Sources for Election Information 📔

A joint US government advisory warned about increasing foreign influence efforts designed to undermine the legitimacy of the Presidential Election.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 Pakistani Hackers Targeted High-Profile Indian Entities using Custom RAT 📔

APT36 evolved its remote access trojan, ElizaRAT, along with introducing a new stealer payload called ApoloStealer.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 Oasis Fans Losing Up to £1000 Each to Ticket Scammers 📔

Lloyds Bank has revealed that Oasis fans comprise the vast majority of ticket scam victims it deals with.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🦅 Cybersecurity and Influence Operations Threaten Integrity of U.S. Elections, Warns FBI, CISA, and ODNI 🦅

As the U.S. Elections nears, Russia and Iran intensify influence operations, spreading disinformation to undermine trust in the election process, particularly in swing states.

📖 Read more.

🔗 Via "CYBLE"

----------
👁️ Seen on @cibsecurity
🦅 Critical Vulnerabilities in PTZ Cameras: CISA Adds New Exploits to Its Catalog 🦅

CISA added two critical vulnerabilities CVE20248956 CVE20248957 in PTZ cameras to its KEV Catalog, exposing systems to OS command injections and authentication bypass.

📖 Read more.

🔗 Via "CYBLE"

----------
👁️ Seen on @cibsecurity
1👍1
♟️ Canadian Man Arrested in Snowflake Data Extortions ♟️

A 26yearold man in Ontario, Canada has been arrested for allegedly stealing data from and extorting more than 160 companies that used the cloud data service Snowflake. On October 30, Canadian authorities arrested Alexander Moucka, a.k.a. Connor Riley Moucka of Kitchener, Ontario, on a provisional arrest warrant from the United States. Bloomberg first reported Moucka's alleged ties to the Snowflake hacks on Monday. At the end of 2023, malicious hackers learned that many large companies had uploaded huge volumes of sensitive customer data to Snowflake accounts that were protected with little more than a username and password no multifactor authentication required. After scouring darknet markets for stolen Snowflake account credentials, the hackers began raiding the data storage reposito...

📖 Read more.

🔗 Via "Krebs on Security"

----------
👁️ Seen on @cibsecurity
🖋️ FBI Seeks Public Help to Identify Chinese Hackers Behind Global Cyber Intrusions 🖋️

The U.S. Federal Bureau of Investigation FBI has sought assistance from the public in connection with an investigation involving the breach of edge devices and computer networks belonging to companies and government entities. "An Advanced Persistent Threat group allegedly created and deployed malware CVE202012271 as part of a widespread series of indiscriminate computer intrusions designed.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📔 ClickFix Exploits Users with Fake Errors and Malicious Code 📔

ClickFix exploits fake error messages across multiple platforms, such as Google Meet and Zoom.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Canadian Authorities Arrest Attacker Who Stole Snowflake Data 🕵️‍♂️

The suspect, tracked as UNC5537, allegedly bragged about hacking several Snowflake victims on Telegram, drawing attention to himself.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity