🛡 Cybersecurity & Privacy 🛡 - News
26.2K subscribers
89.3K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
📔 UK Cybersecurity Wages Soar Above Inflation as Stress Levels Rise 📔

CIISec report reveals the average wage for UK security professionals is now over 87,000.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Canada Closes TikTok Offices, Citing National Security 🕵️‍♂️

Questions remain over what a corporate ban will achieve, since Canadians will still be able to use the app.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Cisco Bug Could Lead to Command Injection Attacks 🕵️‍♂️

Though Cisco reports of no known malicious exploitation attempts, three of its wireless access points are vulnerable to these attacks.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ 'SteelFox' Malware Blitz Infects 11K Victims With Bundle of Pain 🕵️‍♂️

The malware combines a miner and data stealer, and it packs functions that make detection and mitigation a challenge.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🖋️ New CRON#TRAP Malware Infects Windows by Hiding in Linux VM to Evade Antivirus 🖋️

Cybersecurity researchers have flagged a new malware campaign that infects Windows systems with a Linux virtual instance containing a backdoor capable of establishing remote access to the compromised hosts. The "intriguing" campaign, codenamed CRONTRAP, starts with a malicious Windows shortcut LNK file likely distributed in the form of a ZIP archive via a phishing email. "What makes the CRON.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ CISA Alerts to Active Exploitation of Critical Palo Alto Networks Vulnerability 🖋️

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a nowpatched critical security flaw impacting Palo Alto Networks Expedition to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE20245910 CVSS score 9.3, concerns a case of missing authentication in the Expedition migration tool that.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🚀 ESET APT Activity Report Q2 2024–Q3 2024 🚀

An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q2 2024 and Q3 2024.

📖 Read more.

🔗 Via "ESET - WeLiveSecurity"

----------
👁️ Seen on @cibsecurity
🦿 Top Vulnerability Management Tools: Reviews & Comparisons 2024 🦿

There are a great many vulnerability management tools available. But which is best? Here are our top picks for a variety of use cases.

📖 Read more.

🔗 Via "Tech Republic"

----------
👁️ Seen on @cibsecurity
📢 AI recruitment tools are still a privacy nightmare – here's how the ICO plans to crack down on misuse 📢

The ICO has issued guidance for recruiters and AI developers after finding that many are mishandling data.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
📢 Nokia waves off IntelBroker breach claims, says leaked source code came from a third party application 📢

Notorious threat actor IntelBroker released a cache of stolen data.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
📢 Cybersecurity salaries are rising, but some professionals wonder if the stress and burnout is worth it 📢

Salaries in cybersecurity have increased 7 above inflation in the last few years.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
🖋️ IcePeony and Transparent Tribe Target Indian Entities with Cloud-Based Tools 🖋️

Highprofile entities in India have become the target of malicious campaigns orchestrated by the Pakistanbased Transparent Tribe threat actor and a previously unknown Chinanexus cyber espionage group dubbed IcePeony. The intrusions linked to Transparent Tribe involve the use of a malware called ElizaRAT and a new stealer payload dubbed ApoloStealer on specific victims of interest, Check Point.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ The vCISO Academy: Transforming MSPs and MSSPs into Cybersecurity Powerhouses 🖋️

Weve all heard a million times growing demand for robust cybersecurity in the face of rising cyber threats is undeniable. Globally small and mediumsized businesses SMBs are increasingly targeted by cyberattacks but often lack the resources for fulltime Chief Information Security Officers CISOs. This gap is driving the rise of the virtual CISO vCISO model, offering a costeffective.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Malicious NPM Packages Target Roblox Users with Data-Stealing Malware 🖋️

A new campaign has targeted the npm package repository with malicious JavaScript libraries that are designed to infect Roblox users with opensource stealer malware such as Skuld and BlankGrabber. "This incident highlights the alarming ease with which threat actors can launch supply chain attacks by exploiting trust and human error within the open source ecosystem, and using readily available.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Webinar: Learn How Storytelling Can Make Cybersecurity Training Fun and Effective 🖋️

Lets face ittraditional security training can feel as thrilling as reading the fine print on a software update. Its routine, predictable, and, lets be honest, often forgotten the moment it's over. Now, imagine cybersecurity training thats as unforgettable as your favorite show. Remember how "Hamilton" made history come alive, or how "The Office" taught us CPR Staying Alive beat, anyone??.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📔 Major Oilfield Supplier Hit by Ransomware Attack 📔

International energy solution provider Newpark Resources has confirmed it was hit by a ransomware attack that disrupted critical systems.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 North Korean Actor Deploys Novel Malware Campaign Against Crypto Firms 📔

SentinelLabs observed the North Korean group BlueNoroff targeting crypto firms via a multistage malware campaign which utilizes a novel persistence mechanism.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🦅 Weekly ICS Vulnerability Intelligence Report: Rockwell Automation, Delta Electronics, Solar-Log 🦅

Overview Cyble Research Intelligence Labs CRIL has investigated significant ICS vulnerabilities this week, providing essential insights derived from advisories issued by the Cybersecurity and Infrastructure Security Agency CISA. This weeks report highlights multiple vulnerabilities across critical ICS products, with specific focus on those from Rockwell Automation, Delta Electronics, and SolarLog. CISA released three security advisories addressing four ICS vulnerabilities across these products, underscoring the urgent need for mitigation. Among the most notable is a CrossSite Scripting XSS flaw in SolarLog Base 15, a widely used photovoltaic energy management product, which poses heightened risks due to internetfacing deployments identified by Cybles ODIN scanner. ICS Vulne...

📖 Read more.

🔗 Via "CYBLE"

----------
👁️ Seen on @cibsecurity
🧠 SpyAgent malware targets crypto wallets by stealing screenshots 🧠

A new Android malware strain known as SpyAgent is making the rounds and stealing screenshots as it goes. Using optical character recognition OCR technology, the malware is after cryptocurrency recovery phrases often stored in screenshots on user devices. Heres how to dodge the bullet. Attackers shooting their screen shot Attacks start as always The post SpyAgent malware targets crypto wallets by stealing screenshots appeared first on Security Intelligence.

📖 Read more.

🔗 Via "Security Intelligence"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ How Developers Drive Security Professionals Crazy 🕵️‍♂️

The journey toward a successful DevSecOps implementation is complex, requiring a strategic approach to overcome the myriad challenges it presents.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
👍1
🖋️ AndroxGh0st Malware Integrates Mozi Botnet to Target IoT and Cloud Services 🖋️

The threat actors behind the AndroxGh0st malware are now exploiting a broader set of security flaws impacting various internetfacing applications, while also deploying the Mozi botnet malware. "This botnet utilizes remote code execution and credentialstealing methods to maintain persistent access, leveraging unpatched vulnerabilities to infiltrate critical infrastructures," CloudSEK said in a.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity