πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
26K subscribers
89.3K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ“” Green Bay Packers Pro Shop Data Breach Compromises Customers πŸ“”

The Green Bay Packers disclosed on Monday that their official online store was breached and customer information stolen.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Critical Ivanti Zero-Day Exploited in the Wild πŸ“”

Ivanti customers are urged to patch two new bugs in the security vendor's products, one of which is being actively exploited.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
❀1
πŸ“’ UK cyber experts on red alert after Salt Typhoon attacks on US telcos πŸ“’

The UK could be next in a spate of statesponsored attacks on telecoms infrastructure.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ China cyber threats: What businesses can do to protect themselves πŸ“’

As attacks from the likes of Salt Typhoon escalate, business leaders must take a proactive approach to improving their cyber capabilities.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ "Thinly spread": Questions raised over UK government’s latest cyber funding scheme πŸ“’

The funding will go towards bolstering cyber skills, though some industry experts have questioned the size of the price tag.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Product Review: How Reco Discovers Shadow AI in SaaS πŸ–‹οΈ

As SaaS providers race to integrate AI into their product offerings to stay competitive and relevant, a new challenge has emerged in the world of AI shadow AI.  Shadow AI refers to the unauthorized use of AI tools and copilots at organizations. For example, a developer using ChatGPT to assist with writing code, a salesperson downloading an AIpowered meeting transcription tool, or a.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Webinar: Learn How to Stop Encrypted Attacks Before They Cost You Millions πŸ–‹οΈ

Ransomware isnt slowing downits getting smarter. Encryption, designed to keep our online lives secure, is now being weaponized by cybercriminals to hide malware, steal data, and avoid detection.The result? A 10.3 surge in encrypted attacks over the past year and some of the most shocking ransom payouts in history, including a 75 million ransom in 2024. Are you prepared to fight back? Join.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ MirrorFace Leverages ANEL and NOOPDOOR in Multi-Year Cyberattacks on Japan πŸ–‹οΈ

Japan's National Police Agency NPA and National Center of Incident Readiness and Strategy for Cybersecurity NCSC accused a Chinalinked threat actor named MirrorFace of orchestrating a persistent attack campaign targeting organizations, businesses, and individuals in the country since 2019. The primary objective of the attack campaign is to steal information related to Japan's national.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Critical RCE Flaw in GFI KerioControl Allows Remote Code Execution via CRLF Injection πŸ–‹οΈ

Threat actors are attempting to take advantage of a recently disclosed security flaw impacting GFI KerioControl firewalls that, if successfully exploited, could allow malicious actors to achieve remote code execution RCE. The vulnerability in question, CVE202452875, refers to a carriage return line feed CRLF injection attack, paving the way for HTTP response splitting, which could then.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” EU Commission Liable for Breaching EU’s Own Data Protection Rules πŸ“”

A court has ruled the EU Commission infringed an individuals right to the protection of their personal data by transferring their details to the US.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Government Launches Β£1.9m Initiative to Boost UK’s Cyber Resilience πŸ“”

The UK government has pledged nearly 2m to 30 new Cyber Local projects designed to enhance cyber resilience.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 DevOps/SecOps 🌊

The post DevOpsSecOps appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ¦… HexaLocker V2: Skuld Stealer Paving the Way prior to Encryption πŸ¦…

Key Takeaways HexaLocker was first discovered in mid2024, with version 2 introducing significant updates and enhanced functionalities. HexaLocker V2 includes a persistence mechanism that modifies registry keys to ensure continued execution after the affected system reboots. The updated version downloads Skuld Stealer, which extracts sensitive information from the victims system before encryption. Unlike its predecessor, HexaLocker V2 exfiltrates victim files before encrypting them, following the double extortion method of data theft and file encryption. HexaLocker V2 utilizes a combination of advanced encryption algorithms, including AESGCM for string encryption, Argon2 for key derivation, and ChaCha20 for file encryption. HexaLocker V2 replaces the TOXID communication me...

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ¦… Lithuania’s New Cyber Command is a Strategic Step Towards National and NATO Cybersecurity Resilience πŸ¦…

Overview  On January 1, Lithuania marked a pivotal moment in its national defense strategy with the official launch of the Lithuanian Cyber Command LTCYBERCOM. Spearheaded by the Ministry of National Defence, this new military unit aims to enhance the country's cybersecurity posture while strengthening its collaboration with NATO and other international partners.  A New Era in Cyber Defense with Lithuanian Cyber Command  LTCYBERCOM is tasked with conducting cyberspace operations and managing strategic communications and information systems CIS. Its creation reflects Lithuanias recognition of the growing importance of cyberspace in modern warfare and national security. By consolidating cyber defense resources under one command, LTCYBERCOM ensures a unified and efficient approach ...

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity
🧠 Cybersecurity trends: IBM’s predictions for 2025 🧠

Cybersecurity concerns in 2024 can be summed up in two letters AI or five letters if you narrow it down to gen AI. Organizations are still in the early stages of understanding the risks and rewards of this technology. For all the good it can do to improve data protection, keep up with compliance regulations The post Cybersecurity trends IBMs predictions for 2025 appeared first on Security Intelligence.

πŸ“– Read more.

πŸ”— Via "Security Intelligence"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ New Banshee Stealer Variant Bypasses Antivirus with Apple’s XProtect-Inspired Encryption πŸ–‹οΈ

Cybersecurity researchers have uncovered a new, stealthier version of a macOSfocused informationstealing malware called Banshee Stealer. "Once thought dormant after its source code leak in late 2024, this new iteration introduces advanced string encryption inspired by Apple's XProtect," Check Point Research said in a new analysis shared with The Hacker News. "This development allows it to.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ New AI Challenges Will Test CISOs & Their Teams in 2025 πŸ•΅οΈβ€β™‚οΈ

CISOs need to recognize the new threats AI can present while also embracing AIpowered solutions to stay ahead of those threats.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 IPVanish VPN Review: Is It Really as Secure as Claimed? 🦿

Read our comprehensive review of IPVanish VPN. Discover its features, pricing, and more to determine if it meets your online security and privacy needs.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Japan Faces Prolonged Cyber-Attacks Linked to China’s MirrorFace πŸ“”

Cyberattacks by Chinalinked MirrorFace targeted Japans national security information in major campaigns operating since 2019.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” PowerSchool Reportedly Pays Ransom to Prevent Student Data Leak πŸ“”

A school district said that PowerSchool paid a ransom to prevent the attackers releasing data it accessed of students and teachers in North America.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘3
πŸ“” Fancy Product Designer Plugin Flaws Expose WordPress Sites πŸ“”

Critical Fancy Product Designer plugin flaws risk remote code execution and SQL injection attacks on WordPress sites.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1