πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
26K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ“’ UK government officials consider banning ransomware payments πŸ“’

Public bodies could be prevented from paying out to hackers to regain control of systems.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1
πŸ–‹οΈ 4 Reasons Your SaaS Attack Surface Can No Longer be Ignored πŸ–‹οΈ

What do identity risks, data security risks and thirdparty risks all have in common? They are all made much worse by SaaS sprawl. Every new SaaS account adds a new identity to secure, a new place where sensitive data can end up, and a new source of third party risk. Learn how you can protect this sprawling attack surface in 2025. What do identity risks, data security risks and thirdparty.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Manchester Law Firm Leads 15,000 to Sue Google and Microsoft over AI Data πŸ“”

Barings Law is planning to sue the two tech giants over numerous alleged violations of data misuse, including for AI training.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” UK Considers Ban on Ransomware Payments by Public Bodies πŸ“”

A UK government consultation has proposed banning public sector and critical infrastructure organizations from making ransomware payments to disincentivize attackers from targeting these services.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🧠 Why do software vendors have such deep access into customer systems? 🧠

To the naked eye, organizations are independent entities trying to make their individual mark on the world. But that was never the reality. Companies rely on other businesses to stay up and running. A grocery store needs its food suppliers a tech company relies on the business making semiconductors and hardware. No one can go The post Why do software vendors have such deep access into customer systems? appeared first on Security Intelligence.

πŸ“– Read more.

πŸ”— Via "Security Intelligence"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ New Startups Focus on Deepfakes, Data-in-Motion & Model Security πŸ•΅οΈβ€β™‚οΈ

In times of unprecedented change, innovative mindsets and attentiveness of startup culture make for a community everyone can leverage to understand the world and guard against its dangers.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 Windscribe VPN Review (2025): Features, Pricing, and Security 🦿

We evaluate the features, performance, security, and pricing of Windscribe VPN to help you determine if it's a reliable VPN service for your needs.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” New AI Rule Aims to Prevent Misuse of US Technology πŸ“”

A new Interim Final Rule on Artificial Intelligence Diffusion issued in the US strengthens security, streamlines chip sales and prevents misuse of AI technology.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Browser-Based Cyber-Threats Surge as Email Malware Declines πŸ“”

Browserbased cyberthreats surged in 2024, with credential abuse and infostealers on the rise.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Microsoft Uncovers macOS Vulnerability CVE-2024-44243 Allowing Rootkit Installation πŸ–‹οΈ

Microsoft has shed light on a nowpatched security flaw impacting Apple macOS that, if successfully exploited, could have allowed an attacker running as "root" to bypass the operating system's System Integrity Protection SIP and install malicious kernel drivers by loading thirdparty kernel extensions. The vulnerability in question is CVE202444243 CVSS score 5.5, a mediumseverity bug.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Google OAuth Vulnerability Exposes Millions via Failed Startup Domains πŸ–‹οΈ

New research has pulled back the curtain on a "deficiency" in Google's "Sign in with Google" authentication flow that exploits a quirk in domain ownership to gain access to sensitive data. "Google's OAuth login doesn't protect against someone purchasing a failed startup's domain and using it to recreate email accounts for former employees," Truffle Security cofounder and CEO Dylan Ayrey said.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Zero-Day Security Bug Likely Fueling Fortinet Firewall Attacks πŸ•΅οΈβ€β™‚οΈ

An ongoing campaign targeting FortiGate devices with management interfaces exposed on the public Internet is leading to unauthorized administrative logins and configuration changes, creating new accounts, and performing SSL VPN authentication.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Microsoft Rings in 2025 With Record Security Update πŸ•΅οΈβ€β™‚οΈ

Company has issued patches for an unprecedented 159 CVEs, including eight zerodays, three of which attackers are already exploiting.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Apple Bug Allows Root Protections Bypass Without Physical Access πŸ•΅οΈβ€β™‚οΈ

Emergent macOS vulnerability lets adversaries circumvent Apple's System Integrity Protection SIP by loading thirdparty kernels.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ FBI Wraps Up Eradication Effort of Chinese 'PlugX' Malware πŸ•΅οΈβ€β™‚οΈ

Two hacker groups were paid to develop malware targeting victims in the US, Europe, and Asia, as well as various Chinese dissident groups.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 Australian Government Agencies Failing to Keep Up With Cyber Security Change 🦿

Cyber security maturity declines among Australian government agencies in 2024, as legacy IT systems hinder progress under the Essential Eight framework.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
β™ŸοΈ Microsoft: Happy 2025. Here’s 161 Security Updates β™ŸοΈ

Microsoft today unleashed updates to plug a whopping 161 security vulnerabilities in Windows and related software, including three "zeroday" weaknesses that are already under active attack. Redmond's inaugural Patch Tuesday of 2025 bundles more fixes than the company has shipped in one go since 2017.

πŸ“– Read more.

πŸ”— Via "Krebs on Security"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ As Tensions Mount With China, Taiwan Sees Surge in Cyberattacks πŸ•΅οΈβ€β™‚οΈ

In 2024, the Taiwanese government saw the daily average of attempted attacks by China double to 2.4 million, with a focus on government targets and telecommunications firms.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ 3 Actively Exploited Zero-Day Flaws Patched in Microsoft's Latest Security Update πŸ–‹οΈ

Microsoft kicked off 2025 with a new set of patches for a total of 161 security vulnerabilities across its software portfolio, including three zerodays that have been actively exploited in attacks. Of the 161 flaws, 11 are rated Critical, and 149 are rated Important in severity. One other flaw, a nonMicrosoft CVE related to a Windows Secure Boot bypass CVE20247344, has not been assigned.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Critical SimpleHelp Flaws Allow File Theft, Privilege Escalation, and RCE Attacks πŸ–‹οΈ

Cybersecurity researchers have disclosed multiple security flaws in SimpleHelp remote access software that could lead to information disclosure, privilege escalation, and remote code execution. Horizon3.ai researcher Naveen Sunkavally, in a technical report detailing the findings, said the "vulnerabilities are trivial to reverse and exploit." The list of identified flaws is as follows .

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ FBI Deletes PlugX Malware from 4,250 Hacked Computers in Multi-Month Operation πŸ–‹οΈ

The U.S. Department of Justice DoJ on Tuesday disclosed that a courtauthorized operation allowed the Federal Bureau of Investigation FBI to delete PlugX malware from over 4,250 infected computers as part of a "multimonth law enforcement operation." PlugX, also known as Korplug, is a remote access trojan RAT widely used by threat actors associated with the People's Republic of China PRC.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity