🛡 Cybersecurity & Privacy 🛡 - News
26K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
🕵️‍♂️ Telefonica Breach Exposes Jira Tickets, Customer Data 🕵️‍♂️

The Hellcat ransomware group has stolen roughly 5,000 documents, potentially containing confidential information, from the telecom giant's internal database.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🧠 How CTEM is providing better cybersecurity resilience for organizations 🧠

Organizations today continuously face a number of fastmoving cyber threats that regularly challenge the effectiveness of their cybersecurity defenses. However, to keep pace, businesses need a proactive and adaptive approach to their security planning and execution. Cyber threat exposure management CTEM is an effective way to achieve this goal. It provides organizations with a reliable The post How CTEM is providing better cybersecurity resilience for organizations appeared first on Security Intelligence.

📖 Read more.

🔗 Via "Security Intelligence"

----------
👁️ Seen on @cibsecurity
📔 Russian Malware Campaign Hits Central Asian Diplomatic Files 📔

Diplomatic entities in Kazakhstan and Central Asia have been targeted by UAC0063 using weaponized Word docs deploying HATVIBE malware.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Microsoft Cracks Down on Malicious Copilot AI Use 🕵️‍♂️

According to the tech giant, it has observed a threat group seeking out vulnerable customer accounts using generative AI, then creating tools to abuse these services.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Cloud Attackers Exploit Max-Critical Aviatrix RCE Flaw 🕵️‍♂️

The security vulnerability tracked as CVE202450603, which rates 10 out of 10 on the CVSS scale, enables unauthenticated remote code execution on affected systems, which cyberattackers are using to plant malware.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🦿 US Chip Export Rule Proposes Limits to Thwart Chinese GPUs 🦿

The Biden administration states the rule will prevent U.S. chips from passing to China through countries loosely allied or not politically allied with the U.S.

📖 Read more.

🔗 Via "Tech Republic"

----------
👁️ Seen on @cibsecurity
🖋️ CISA Adds Second BeyondTrust Flaw to KEV Catalog Amid Active Attacks 🖋️

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a second security flaw impacting BeyondTrust Privileged Remote Access PRA and Remote Support RS products to the Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The vulnerability in question is CVE202412686 CVSS score 6.6, a mediumseverity bug that could.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📔 Critical Infrastructure Urged to Scrutinize Product Security During Procurement 📔

A joint government advisory has set out steps critical infrastructure firms should take to ensure any OT products they purchase are secure by design.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🖋️ Illicit HuiOne Telegram Market Surpasses Hydra, Hits $24 Billion in Crypto Transactions 🖋️

The Telegrambased online marketplace known as HuiOne Guarantee and its vendors have cumulatively received at least 24 billion in cryptocurrency, dwarfing the nowdefunct Hydra to become the largest online illicit marketplace to have ever operated. The figures, released by blockchain analytics firm Elliptic, show that monthly inflows have increased by 51 since July 2024. Huione Guarantee, part.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Zero-Day Vulnerability Suspected in Attacks on Fortinet Firewalls with Exposed Interfaces 🖋️

Threat hunters are calling attention to a new campaign that has targeted Fortinet FortiGate firewall devices with management interfaces exposed on the public internet. "The campaign involved unauthorized administrative logins on management interfaces of firewalls, creation of new accounts, SSL VPN authentication through those accounts, and various other configuration changes," cybersecurity firm.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📔 Remediation Times Drop Sharply as Cyber Hygiene Take Up Surges 📔

CISA claims US critical infrastructure providers are improving cyber hygiene and remediation activities.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 UK Registry Nominet Breached Via Ivanti Zero-Day 📔

The .uk registry Nominet has been breached by a recently disclosed zeroday vulnerability in Ivanti products.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📢 UK government officials consider banning ransomware payments 📢

Public bodies could be prevented from paying out to hackers to regain control of systems.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
👍1
🖋️ 4 Reasons Your SaaS Attack Surface Can No Longer be Ignored 🖋️

What do identity risks, data security risks and thirdparty risks all have in common? They are all made much worse by SaaS sprawl. Every new SaaS account adds a new identity to secure, a new place where sensitive data can end up, and a new source of third party risk. Learn how you can protect this sprawling attack surface in 2025. What do identity risks, data security risks and thirdparty.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📔 Manchester Law Firm Leads 15,000 to Sue Google and Microsoft over AI Data 📔

Barings Law is planning to sue the two tech giants over numerous alleged violations of data misuse, including for AI training.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 UK Considers Ban on Ransomware Payments by Public Bodies 📔

A UK government consultation has proposed banning public sector and critical infrastructure organizations from making ransomware payments to disincentivize attackers from targeting these services.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🧠 Why do software vendors have such deep access into customer systems? 🧠

To the naked eye, organizations are independent entities trying to make their individual mark on the world. But that was never the reality. Companies rely on other businesses to stay up and running. A grocery store needs its food suppliers a tech company relies on the business making semiconductors and hardware. No one can go The post Why do software vendors have such deep access into customer systems? appeared first on Security Intelligence.

📖 Read more.

🔗 Via "Security Intelligence"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ New Startups Focus on Deepfakes, Data-in-Motion & Model Security 🕵️‍♂️

In times of unprecedented change, innovative mindsets and attentiveness of startup culture make for a community everyone can leverage to understand the world and guard against its dangers.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🦿 Windscribe VPN Review (2025): Features, Pricing, and Security 🦿

We evaluate the features, performance, security, and pricing of Windscribe VPN to help you determine if it's a reliable VPN service for your needs.

📖 Read more.

🔗 Via "Tech Republic"

----------
👁️ Seen on @cibsecurity
📔 New AI Rule Aims to Prevent Misuse of US Technology 📔

A new Interim Final Rule on Artificial Intelligence Diffusion issued in the US strengthens security, streamlines chip sales and prevents misuse of AI technology.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 Browser-Based Cyber-Threats Surge as Email Malware Declines 📔

Browserbased cyberthreats surged in 2024, with credential abuse and infostealers on the rise.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity