🛡 Cybersecurity & Privacy 🛡 - News
26.2K subscribers
89.3K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
📔 UK Regulator Urges Stronger Data Protection in AI Recruitment Tools 📔

An ICO audit of AI recruitment tools found numerous data privacy issues that may lead to jobseekers being discriminated against and privacy compromised.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 Canada Orders Shutdown of Local TikTok Branch Over Security Concerns 📔

TikTok Technology Canada, Inc, the subsidiary of Chinese group ByteDance, will have to cease its operations in Canada.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 NCSC Publishes Tips to Tackle Malvertising Threat 📔

The UKs National Cyber Security Centre has released malvertising guidance for brands and their ad partners.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 UK Cybersecurity Wages Soar Above Inflation as Stress Levels Rise 📔

CIISec report reveals the average wage for UK security professionals is now over 87,000.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Canada Closes TikTok Offices, Citing National Security 🕵️‍♂️

Questions remain over what a corporate ban will achieve, since Canadians will still be able to use the app.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Cisco Bug Could Lead to Command Injection Attacks 🕵️‍♂️

Though Cisco reports of no known malicious exploitation attempts, three of its wireless access points are vulnerable to these attacks.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ 'SteelFox' Malware Blitz Infects 11K Victims With Bundle of Pain 🕵️‍♂️

The malware combines a miner and data stealer, and it packs functions that make detection and mitigation a challenge.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🖋️ New CRON#TRAP Malware Infects Windows by Hiding in Linux VM to Evade Antivirus 🖋️

Cybersecurity researchers have flagged a new malware campaign that infects Windows systems with a Linux virtual instance containing a backdoor capable of establishing remote access to the compromised hosts. The "intriguing" campaign, codenamed CRONTRAP, starts with a malicious Windows shortcut LNK file likely distributed in the form of a ZIP archive via a phishing email. "What makes the CRON.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ CISA Alerts to Active Exploitation of Critical Palo Alto Networks Vulnerability 🖋️

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a nowpatched critical security flaw impacting Palo Alto Networks Expedition to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE20245910 CVSS score 9.3, concerns a case of missing authentication in the Expedition migration tool that.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🚀 ESET APT Activity Report Q2 2024–Q3 2024 🚀

An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q2 2024 and Q3 2024.

📖 Read more.

🔗 Via "ESET - WeLiveSecurity"

----------
👁️ Seen on @cibsecurity
🦿 Top Vulnerability Management Tools: Reviews & Comparisons 2024 🦿

There are a great many vulnerability management tools available. But which is best? Here are our top picks for a variety of use cases.

📖 Read more.

🔗 Via "Tech Republic"

----------
👁️ Seen on @cibsecurity
📢 AI recruitment tools are still a privacy nightmare – here's how the ICO plans to crack down on misuse 📢

The ICO has issued guidance for recruiters and AI developers after finding that many are mishandling data.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
📢 Nokia waves off IntelBroker breach claims, says leaked source code came from a third party application 📢

Notorious threat actor IntelBroker released a cache of stolen data.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
📢 Cybersecurity salaries are rising, but some professionals wonder if the stress and burnout is worth it 📢

Salaries in cybersecurity have increased 7 above inflation in the last few years.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
🖋️ IcePeony and Transparent Tribe Target Indian Entities with Cloud-Based Tools 🖋️

Highprofile entities in India have become the target of malicious campaigns orchestrated by the Pakistanbased Transparent Tribe threat actor and a previously unknown Chinanexus cyber espionage group dubbed IcePeony. The intrusions linked to Transparent Tribe involve the use of a malware called ElizaRAT and a new stealer payload dubbed ApoloStealer on specific victims of interest, Check Point.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ The vCISO Academy: Transforming MSPs and MSSPs into Cybersecurity Powerhouses 🖋️

Weve all heard a million times growing demand for robust cybersecurity in the face of rising cyber threats is undeniable. Globally small and mediumsized businesses SMBs are increasingly targeted by cyberattacks but often lack the resources for fulltime Chief Information Security Officers CISOs. This gap is driving the rise of the virtual CISO vCISO model, offering a costeffective.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Malicious NPM Packages Target Roblox Users with Data-Stealing Malware 🖋️

A new campaign has targeted the npm package repository with malicious JavaScript libraries that are designed to infect Roblox users with opensource stealer malware such as Skuld and BlankGrabber. "This incident highlights the alarming ease with which threat actors can launch supply chain attacks by exploiting trust and human error within the open source ecosystem, and using readily available.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Webinar: Learn How Storytelling Can Make Cybersecurity Training Fun and Effective 🖋️

Lets face ittraditional security training can feel as thrilling as reading the fine print on a software update. Its routine, predictable, and, lets be honest, often forgotten the moment it's over. Now, imagine cybersecurity training thats as unforgettable as your favorite show. Remember how "Hamilton" made history come alive, or how "The Office" taught us CPR Staying Alive beat, anyone??.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📔 Major Oilfield Supplier Hit by Ransomware Attack 📔

International energy solution provider Newpark Resources has confirmed it was hit by a ransomware attack that disrupted critical systems.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 North Korean Actor Deploys Novel Malware Campaign Against Crypto Firms 📔

SentinelLabs observed the North Korean group BlueNoroff targeting crypto firms via a multistage malware campaign which utilizes a novel persistence mechanism.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🦅 Weekly ICS Vulnerability Intelligence Report: Rockwell Automation, Delta Electronics, Solar-Log 🦅

Overview Cyble Research Intelligence Labs CRIL has investigated significant ICS vulnerabilities this week, providing essential insights derived from advisories issued by the Cybersecurity and Infrastructure Security Agency CISA. This weeks report highlights multiple vulnerabilities across critical ICS products, with specific focus on those from Rockwell Automation, Delta Electronics, and SolarLog. CISA released three security advisories addressing four ICS vulnerabilities across these products, underscoring the urgent need for mitigation. Among the most notable is a CrossSite Scripting XSS flaw in SolarLog Base 15, a widely used photovoltaic energy management product, which poses heightened risks due to internetfacing deployments identified by Cybles ODIN scanner. ICS Vulne...

📖 Read more.

🔗 Via "CYBLE"

----------
👁️ Seen on @cibsecurity