πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
26.2K subscribers
89.3K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ–‹οΈ North Korean Hackers Target Crypto Firms with Hidden Risk Malware on macOS πŸ–‹οΈ

A threat actor with ties to the Democratic People's Republic of Korea DPRK has been observed targeting cryptocurrencyrelated businesses with a multistage malware capable of infecting Apple macOS devices. Cybersecurity company SentinelOne, which dubbed the campaign Hidden Risk, attributed it with high confidence to BlueNoroff, which has been previously linked to malware families such as.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ A Hacker's Guide to Password Cracking πŸ–‹οΈ

Defending your organizations security is like fortifying a castleyou need to understand where attackers will strike and how theyll try to breach your walls. And hackers are always searching for weaknesses, whether its a lax password policy or a forgotten backdoor. To build a stronger defense, you must think like a hacker and anticipate their moves. Read on to learn more about hackers'.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ 5 Most Common Malware Techniques in 2024 πŸ–‹οΈ

Tactics, techniques, and procedures TTPs form the foundation of modern defense strategies. Unlike indicators of compromise IOCs, TTPs are more stable, making them a reliable way to identify specific cyber threats. Here are some of the most commonly used techniques, according to ANY.RUN's Q3 2024 report on malware trends, complete with realworld examples. Disabling of Windows Event Logging.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ SteelFox and Rhadamanthys Malware Use Copyright Scams, Driver Exploits to Target Victims πŸ–‹οΈ

An ongoing phishing campaign is employing copyright infringementrelated themes to trick victims into downloading a newer version of the Rhadamanthys information stealer since July 2024. Cybersecurity firm Check Point is tracking the largescale campaign under the name CopyRhightadamantys. Targeted regions include the United States, Europe, East Asia, and South America. "The campaign.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ China-Aligned MirrorFace Hackers Target EU Diplomats with World Expo 2025 Bait πŸ–‹οΈ

The Chinaaligned threat actor known as MirrorFace has been observed targeting a diplomatic organization in the European Union, marking the first time the hacking crew has targeted an entity in the region. "During this attack, the threat actor used as a lure the upcoming World Expo, which will be held in 2025 in Osaka, Japan," ESET said in its APT Activity Report for the period April to.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Cisco Releases Patch for Critical URWB Vulnerability in Industrial Wireless Systems πŸ–‹οΈ

Cisco has released security updates to address a maximum severity security flaw impacting UltraReliable Wireless Backhaul URWB Access Points that could permit unauthenticated, remote attackers to run commands with elevated privileges. Tracked as CVE202420418 CVS score 10.0, the vulnerability has been described as stemming from a lack of input validation to the webbased management.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Malicious PyPI Package β€˜Fabrice’ Found Stealing AWS Keys from Thousands of Developers πŸ–‹οΈ

Cybersecurity researchers have discovered a malicious package on the Python Package Index PyPI that has racked up thousands of downloads for over three years while stealthily exfiltrating developers' Amazon Web Services AWS credentials. The package in question is "fabrice," which typosquats a popular Python library known as "fabric," which is designed to execute shell commands remotely over.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Androxgh0st Botnet Adopts Mozi Payloads, Expands IoT Reach πŸ“”

Androxgh0st botnet has expanded, integrating Mozi IoT payloads and targeting web server vulnerabilities.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ”₯1
πŸ“” Interlock Ransomware Targets US Healthcare, IT and Government Sectors πŸ“”

Interlock employs both biggame hunting and double extortion tactics against its victims.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” UK Regulator Urges Stronger Data Protection in AI Recruitment Tools πŸ“”

An ICO audit of AI recruitment tools found numerous data privacy issues that may lead to jobseekers being discriminated against and privacy compromised.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Canada Orders Shutdown of Local TikTok Branch Over Security Concerns πŸ“”

TikTok Technology Canada, Inc, the subsidiary of Chinese group ByteDance, will have to cease its operations in Canada.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” NCSC Publishes Tips to Tackle Malvertising Threat πŸ“”

The UKs National Cyber Security Centre has released malvertising guidance for brands and their ad partners.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” UK Cybersecurity Wages Soar Above Inflation as Stress Levels Rise πŸ“”

CIISec report reveals the average wage for UK security professionals is now over 87,000.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Canada Closes TikTok Offices, Citing National Security πŸ•΅οΈβ€β™‚οΈ

Questions remain over what a corporate ban will achieve, since Canadians will still be able to use the app.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Cisco Bug Could Lead to Command Injection Attacks πŸ•΅οΈβ€β™‚οΈ

Though Cisco reports of no known malicious exploitation attempts, three of its wireless access points are vulnerable to these attacks.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ 'SteelFox' Malware Blitz Infects 11K Victims With Bundle of Pain πŸ•΅οΈβ€β™‚οΈ

The malware combines a miner and data stealer, and it packs functions that make detection and mitigation a challenge.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ New CRON#TRAP Malware Infects Windows by Hiding in Linux VM to Evade Antivirus πŸ–‹οΈ

Cybersecurity researchers have flagged a new malware campaign that infects Windows systems with a Linux virtual instance containing a backdoor capable of establishing remote access to the compromised hosts. The "intriguing" campaign, codenamed CRONTRAP, starts with a malicious Windows shortcut LNK file likely distributed in the form of a ZIP archive via a phishing email. "What makes the CRON.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ CISA Alerts to Active Exploitation of Critical Palo Alto Networks Vulnerability πŸ–‹οΈ

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a nowpatched critical security flaw impacting Palo Alto Networks Expedition to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE20245910 CVSS score 9.3, concerns a case of missing authentication in the Expedition migration tool that.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸš€ ESET APT Activity Report Q2 2024–Q3 2024 πŸš€

An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q2 2024 and Q3 2024.

πŸ“– Read more.

πŸ”— Via "ESET - WeLiveSecurity"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 Top Vulnerability Management Tools: Reviews & Comparisons 2024 🦿

There are a great many vulnerability management tools available. But which is best? Here are our top picks for a variety of use cases.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ AI recruitment tools are still a privacy nightmare – here's how the ICO plans to crack down on misuse πŸ“’

The ICO has issued guidance for recruiters and AI developers after finding that many are mishandling data.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity