🖋️ The High-Stakes Disconnect For ICS/OT Security 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Why does ICSOT need specific controls and its own cybersecurity budget today? Because treating ICSOT security with an IT security playbook isnt just ineffectiveits high risk. In the rapidly evolving domain of cybersecurity, the specific challenges and needs for Industrial Control Systems ICS and Operational Technology OT security distinctly stand out from traditional IT security. ICSOT.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 Multi-Cloud Adoption Surges Amid Rising Security Concerns 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
A new report from Fortinet reveals increased adoption of multicloud strategies and hybrid implementations combining onpremises and public cloud infrastructure.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Multi-Cloud Adoption Surges Amid Rising Security Concerns
A new report from Fortinet reveals increased adoption of multi-cloud strategies and hybrid implementations combining on-premises and public cloud infrastructure
📔 Chinese PlugX Malware Deleted in Global Law Enforcement Operation 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
The FBI deleted Chinese PlugX malware from thousands of devices in the US, using a technique developed by French cybersecurity firm Sekoia.io.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Chinese PlugX Malware Deleted in Global Law Enforcement Operation
The FBI deleted Chinese PlugX malware from thousands of devices in the US, using a technique developed by French cybersecurity firm Sekoia.io
📔 Illicit Crypto-Inflows Set to Top $51bn in a Year 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Chainalysis estimates threat actors made at least 51bn through crypto crime in 2024.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Illicit Crypto-Inflows Set to Top $51bn in a Year
Chainalysis estimates threat actors made at least $51bn through crypto crime in 2024
🦅 Fortinet’s Authentication Bypass Zero-Day: Mitigation Strategies and IoCs for Enhanced Security 🦅
📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
Overview Fortinet has disclosed a critical authentication bypass vulnerability affecting FortiOS and FortiProxy systems, identified as CVE202455591. With a CVSS score of 9.6, this vulnerability allows unauthenticated attackers to execute unauthorized code or commands, granting them superadmin privileges. The exploitation of this vulnerability has already been observed in the wild, stressing the urgency for affected organizations to act immediately. Key Details Vulnerability Summary CVE202455591 arises from a flaw in the Node.js websocket module, specifically within FortiOS and FortiProxy, where an alternate path or channel can bypass authentication mechanisms CWE288. This allows remote attackers to gain administrative access and compromise device configurations. Affe...📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
Cyble
Fortinet Patches Authentication Bypass Zero-Day
Fortinet has disclosed a critical authentication bypass vulnerability affecting FortiOS and FortiProxy systems. Identified as CVE-2024-55591, bug grants “super-admin” privileges.
🦿 Enhancing Health Care Cybersecurity: Bridging HIPAA Gaps with Innovation 🦿
📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
The proposed HIPAA Security Rule introduces mandatory measures to prevent malicious cyberattacks in health care.📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
TechRepublic
Enhancing Health Care Cybersecurity: Bridging HIPAA Gaps with Innovation
The proposed HIPAA Security Rule introduces mandatory measures that reflect the growing sophistication of cyber threats in health care.
🦿 CyberGhost VPN Review (2025): Features, Pricing, and Security 🦿
📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
In this comprehensive review of CyberGhost VPN, we cover its features, pricing, security, and overall performance. Find out if this is the right VPN for you.📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
TechRepublic
CyberGhost VPN Review (2025): Features, Pricing, and Security
Is CyberGhost VPN truly fast, secure, and great for streaming? Explore its performance, privacy features, and streaming compatibility in our review.
🖋️ North Korean IT Worker Fraud Linked to 2016 Crowdfunding Scam and Fake Domains 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity researchers have identified infrastructure links between the North Korean threat actors behind the fraudulent IT worker schemes and a 2016 crowdfunding scam. The new evidence suggests that Pyongyangbased threamoret groups may have pulled off illicit moneymaking scams that predate the use of IT workers, SecureWorks Counter Threat Unit CTU said in a report shared with The Hacker.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📢 How the channel can simplify cybersecurity to build trust and agility for SMBs 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
There's an opportunity for the channel to move from tech resellers to trusted advisors on security and help alleviate the security burden on SMBs.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
ChannelPro
How the channel can simplify cybersecurity to build trust and agility for SMBs
There's an opportunity for the channel to move from tech resellers to trusted advisors on security and help alleviate the security burden on SMBs
🕵️♂️ CISA: Second BeyondTrust Vulnerability Added to KEV Catalog 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
BeyondTrust has patched all cloud instances of the vulnerability and has released patches for selfhosted versions.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Darkreading
CISA: Second BeyondTrust Vulnerability Added to KEV Catalog
BeyondTrust has patched all cloud instances of the vulnerability and has released patches for self-hosted versions.
🕵️♂️ Extension Poisoning Campaign Highlights Gaps in Browser Security 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Evidence suggests that some of the payloads and extensions may date as far back as April 2023.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Darkreading
Extension Poisoning Campaign Highlights Gaps in Browser Security
Evidence suggests that some of the payloads and extensions may date as far back as April 2023.
🕵️♂️ North Korea's Lazarus APT Evolves Developer-Recruitment Attacks 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
"Operation 99" uses job postings to lure freelance software developers into downloading malicious Git repositories. From there, malware infiltrates developer projects to steal source code, secrets, and cryptocurrency.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Darkreading
North Korea's Lazarus Evolves Developer-Recruitment Attacks
"Operation 99" uses job postings to lure freelance software developers into downloading malicious Git repositories. From there, malware infiltrates developer projects to steal source code, secrets, and cryptocurrency.
🕵️♂️ OWASP's New LLM Top 10 Shows Emerging AI Threats 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Ultimately, there is no replacement for an intuitive, securityfocused developer working with the critical thinking required to drive down the risk of both AI and human error.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Darkreading
OWASP's New LLM Top 10 Shows Emerging AI Threats
Ultimately, there is no replacement for an intuitive, security-focused developer working with the critical thinking required to drive down the risk of both AI and human error.
🦿 UK Considers Banning Ransomware Payments 🦿
📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
The proposed mandate intends to discourage criminals from targeting critical national infrastructure and public services, as there will be no financial motivation.📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
TechRepublic
UK Considers Banning Ransomware Payments
The U.K. government is considering banning ransomware payments to make critical industries “unattractive targets for criminals.”
🦿 Patch Tuesday: January 2025 Security Update Patches Exploited Elevation of Privilege Attacks 🦿
📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
Microsofts monthly patches cover HyperV NT Kernel Integration VSPs, Git in Visual Studio, and more.📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
TechRepublic
Patch Tuesday: January 2025 Security Update Patches Exploited Elevation of Privilege Attacks
Microsoft’s monthly patches cover Hyper-V NT Kernel Integration VSPs, Git in Visual Studio, and more.
📔 CISA Launches Playbook to Boost AI Cybersecurity Collaboration 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
CISA launched the JCDC AI Cybersecurity Playbook to enhance collaboration on AI cybersecurity risks.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
CISA Launches Playbook to Boost AI Cybersecurity Collaboration
CISA launched the JCDC AI Cybersecurity Playbook to enhance collaboration on AI cybersecurity risks
🦿 5 Emerging AI Threats Australian Cyber Pros Must Watch in 2025 🦿
📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
AI cloning and deepfakes rank among the top challenges for Australian cybersecurity professionals in 2025.📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
TechRepublic
5 Emerging AI Threats Australian Cyber Pros Must Watch in 2025
AI cloning and deepfakes rank among the top challenges for Australian cybersecurity professionals in 2025.
❤1
🖋️ Google Ads Users Targeted in Malvertising Scam Stealing Credentials and 2FA Codes 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity researchers have alerted to a new malvertising campaign that's targeting individuals and businesses advertising via Google Ads by attempting to phish for their credentials via fraudulent ads on Google. "The scheme consists of stealing as many advertiser accounts as possible by impersonating Google Ads and redirecting victims to fake login pages," Jrme Segura, senior director of.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Lazarus Group Targets Web3 Developers with Fake LinkedIn Profiles in Operation 99 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
The North Korealinked Lazarus Group has been attributed to a new cyber attack campaign dubbed Operation 99 that targeted software developers looking for freelance Web3 and cryptocurrency work to deliver malware. "The campaign begins with fake recruiters, posing on platforms like LinkedIn, luring developers with project tests and code reviews," Ryan Sherstobitoff, senior vice president of Threat.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
👍1
🕵️♂️ Attackers Hijack Google Advertiser Accounts to Spread Malware 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
It's an especially brazen form of malvertising, researchers say, striking at the heart of Google's business the tech giant says it's aware of the issue and is working quickly to address the problem.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
🖋️ Python-Based Malware Powers RansomHub Ransomware to Exploit Network Flaws 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity researchers have detailed an attack that involved a threat actor utilizing a Pythonbased backdoor to maintain persistent access to compromised endpoints and then leveraged this access to deploy the RansomHub ransomware throughout the target network. According to GuidePoint Security, initial access is said to have been facilitated by means of a JavaScript malware downloaded named.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity