πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
26.2K subscribers
89.3K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
🦿 Top Vulnerability Management Tools: Reviews & Comparisons 2024 🦿

There are a great many vulnerability management tools available. But which is best? Here are our top picks for a variety of use cases.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ AI recruitment tools are still a privacy nightmare – here's how the ICO plans to crack down on misuse πŸ“’

The ICO has issued guidance for recruiters and AI developers after finding that many are mishandling data.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Nokia waves off IntelBroker breach claims, says leaked source code came from a third party application πŸ“’

Notorious threat actor IntelBroker released a cache of stolen data.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Cybersecurity salaries are rising, but some professionals wonder if the stress and burnout is worth it πŸ“’

Salaries in cybersecurity have increased 7 above inflation in the last few years.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ IcePeony and Transparent Tribe Target Indian Entities with Cloud-Based Tools πŸ–‹οΈ

Highprofile entities in India have become the target of malicious campaigns orchestrated by the Pakistanbased Transparent Tribe threat actor and a previously unknown Chinanexus cyber espionage group dubbed IcePeony. The intrusions linked to Transparent Tribe involve the use of a malware called ElizaRAT and a new stealer payload dubbed ApoloStealer on specific victims of interest, Check Point.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ The vCISO Academy: Transforming MSPs and MSSPs into Cybersecurity Powerhouses πŸ–‹οΈ

Weve all heard a million times growing demand for robust cybersecurity in the face of rising cyber threats is undeniable. Globally small and mediumsized businesses SMBs are increasingly targeted by cyberattacks but often lack the resources for fulltime Chief Information Security Officers CISOs. This gap is driving the rise of the virtual CISO vCISO model, offering a costeffective.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Malicious NPM Packages Target Roblox Users with Data-Stealing Malware πŸ–‹οΈ

A new campaign has targeted the npm package repository with malicious JavaScript libraries that are designed to infect Roblox users with opensource stealer malware such as Skuld and BlankGrabber. "This incident highlights the alarming ease with which threat actors can launch supply chain attacks by exploiting trust and human error within the open source ecosystem, and using readily available.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Webinar: Learn How Storytelling Can Make Cybersecurity Training Fun and Effective πŸ–‹οΈ

Lets face ittraditional security training can feel as thrilling as reading the fine print on a software update. Its routine, predictable, and, lets be honest, often forgotten the moment it's over. Now, imagine cybersecurity training thats as unforgettable as your favorite show. Remember how "Hamilton" made history come alive, or how "The Office" taught us CPR Staying Alive beat, anyone??.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Major Oilfield Supplier Hit by Ransomware Attack πŸ“”

International energy solution provider Newpark Resources has confirmed it was hit by a ransomware attack that disrupted critical systems.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” North Korean Actor Deploys Novel Malware Campaign Against Crypto Firms πŸ“”

SentinelLabs observed the North Korean group BlueNoroff targeting crypto firms via a multistage malware campaign which utilizes a novel persistence mechanism.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ¦… Weekly ICS Vulnerability Intelligence Report: Rockwell Automation, Delta Electronics, Solar-Log πŸ¦…

Overview Cyble Research Intelligence Labs CRIL has investigated significant ICS vulnerabilities this week, providing essential insights derived from advisories issued by the Cybersecurity and Infrastructure Security Agency CISA. This weeks report highlights multiple vulnerabilities across critical ICS products, with specific focus on those from Rockwell Automation, Delta Electronics, and SolarLog. CISA released three security advisories addressing four ICS vulnerabilities across these products, underscoring the urgent need for mitigation. Among the most notable is a CrossSite Scripting XSS flaw in SolarLog Base 15, a widely used photovoltaic energy management product, which poses heightened risks due to internetfacing deployments identified by Cybles ODIN scanner. ICS Vulne...

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity
🧠 SpyAgent malware targets crypto wallets by stealing screenshots 🧠

A new Android malware strain known as SpyAgent is making the rounds and stealing screenshots as it goes. Using optical character recognition OCR technology, the malware is after cryptocurrency recovery phrases often stored in screenshots on user devices. Heres how to dodge the bullet. Attackers shooting their screen shot Attacks start as always The post SpyAgent malware targets crypto wallets by stealing screenshots appeared first on Security Intelligence.

πŸ“– Read more.

πŸ”— Via "Security Intelligence"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ How Developers Drive Security Professionals Crazy πŸ•΅οΈβ€β™‚οΈ

The journey toward a successful DevSecOps implementation is complex, requiring a strategic approach to overcome the myriad challenges it presents.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1
πŸ–‹οΈ AndroxGh0st Malware Integrates Mozi Botnet to Target IoT and Cloud Services πŸ–‹οΈ

The threat actors behind the AndroxGh0st malware are now exploiting a broader set of security flaws impacting various internetfacing applications, while also deploying the Mozi botnet malware. "This botnet utilizes remote code execution and credentialstealing methods to maintain persistent access, leveraging unpatched vulnerabilities to infiltrate critical infrastructures," CloudSEK said in a.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Webinar: Learn How Storytelling Can Make Cybersecurity Training Fun and Effective πŸ–‹οΈ

Lets face ittraditional security training can feel as thrilling as reading the fine print on a software update. Its routine, predictable, and, lets be honest, often forgotten the moment it's over. Now, imagine cybersecurity training thats as unforgettable as your favorite show. Remember how "Hamilton" made history come alive, or how "The Office" taught us CPR Staying Alive beat, anyone??.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Pro-Russian Hacktivists Target South Korea as North Korea Joins Ukraine War πŸ“”

South Korea warned that proRussian groups have attacked government and private sector websites following the deployment of North Korean soldiers in Ukraine.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🀬2
πŸ¦… CISA Finds Palo Alto Networks’ CVE-2024-5910 Exploited in the Wild πŸ¦…

Overview The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday alerted federal agencies regarding active exploitation of a critical missing authentication vulnerability in Palo Alto Networks Expedition, a tool widely used by administrators for firewall migration and configuration management. This flaw, designated CVE20245910, has been actively exploited by attackers since its patch release in July, underscoring the urgency for immediate remediation. Expedition is a popular migration tool designed to assist administrators in transitioning firewall configurations from vendors such as Check Point and Cisco to Palo Altos PANOS. However, due to a missing authentication mechanism, this tool now presents a significant risk for compromised credentials and potentia...

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ 6 Infotainment Bugs Allow Mazdas to Be Hacked With USBs πŸ•΅οΈβ€β™‚οΈ

Direct cyberattacks on vehicles are all but unheard of. In theory though, the opportunity is there to cause real damage data extraction, full system compromise, even gaining access to safetycritical systems.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Mystery Hackers Target Texas Oilfield Supplier in Ransomware Attack πŸ•΅οΈβ€β™‚οΈ

It remains unclear how the attackers gained access to Newpark Resources' system, or what they plan to do with any stolen data the strike may have spewed out.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Preparing for DORA Amid Technical Controls Ambiguity πŸ•΅οΈβ€β™‚οΈ

The European Union's Digital Operational Resilience Act requires financial entities to focus on thirdparty risk, resilience, and testing.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 HackerOne: Nearly Half of Security Professionals Believe AI Is Risky 🦿

The HackerPowered Security Report showed mixed feelings toward AI in the security community, with many seeing leaked training data as a threat.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity