πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
26K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
🦿 UK Considers Banning Ransomware Payments 🦿

The proposed mandate intends to discourage criminals from targeting critical national infrastructure and public services, as there will be no financial motivation.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 Patch Tuesday: January 2025 Security Update Patches Exploited Elevation of Privilege Attacks 🦿

Microsofts monthly patches cover HyperV NT Kernel Integration VSPs, Git in Visual Studio, and more.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” CISA Launches Playbook to Boost AI Cybersecurity Collaboration πŸ“”

CISA launched the JCDC AI Cybersecurity Playbook to enhance collaboration on AI cybersecurity risks.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 5 Emerging AI Threats Australian Cyber Pros Must Watch in 2025 🦿

AI cloning and deepfakes rank among the top challenges for Australian cybersecurity professionals in 2025.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
❀1
πŸ–‹οΈ Google Ads Users Targeted in Malvertising Scam Stealing Credentials and 2FA Codes πŸ–‹οΈ

Cybersecurity researchers have alerted to a new malvertising campaign that's targeting individuals and businesses advertising via Google Ads by attempting to phish for their credentials via fraudulent ads on Google. "The scheme consists of stealing as many advertiser accounts as possible by impersonating Google Ads and redirecting victims to fake login pages," Jrme Segura, senior director of.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Lazarus Group Targets Web3 Developers with Fake LinkedIn Profiles in Operation 99 πŸ–‹οΈ

The North Korealinked Lazarus Group has been attributed to a new cyber attack campaign dubbed Operation 99 that targeted software developers looking for freelance Web3 and cryptocurrency work to deliver malware. "The campaign begins with fake recruiters, posing on platforms like LinkedIn, luring developers with project tests and code reviews," Ryan Sherstobitoff, senior vice president of Threat.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1
πŸ•΅οΈβ€β™‚οΈ Attackers Hijack Google Advertiser Accounts to Spread Malware πŸ•΅οΈβ€β™‚οΈ

It's an especially brazen form of malvertising, researchers say, striking at the heart of Google's business the tech giant says it's aware of the issue and is working quickly to address the problem.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Python-Based Malware Powers RansomHub Ransomware to Exploit Network Flaws πŸ–‹οΈ

Cybersecurity researchers have detailed an attack that involved a threat actor utilizing a Pythonbased backdoor to maintain persistent access to compromised endpoints and then leveraged this access to deploy the RansomHub ransomware throughout the target network. According to GuidePoint Security, initial access is said to have been facilitated by means of a JavaScript malware downloaded named.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Researcher Uncovers Critical Flaws in Multiple Versions of Ivanti Endpoint Manager πŸ–‹οΈ

Ivanti has rolled out security updates to address several security flaws impacting Avalanche, Application Control Engine, and Endpoint Manager EPM, including four critical bugs that could lead to information disclosure. All the four critical security flaws, rated 9.8 out of 10.0 on the CVSS scale, are rooted in EPM, and concern absolute path traversal flaws that allow a remote unauthenticated.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” EU To Launch New Support Centre by 2026 to Boost Healthcare Cybersecurity πŸ“”

A new EU action plan will be structured around four pillars prevention, threat detection and identification, response to cyberattacks and deterrence.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Personal data compromised in Gateshead Council cyber attack πŸ“’

The Medusa ransomware group has claimed responsibility for the attack.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ US authorities just purged malware from thousands of devices across the world πŸ“’

After taking control of the PlugX malwares commandandcontrol server, the coalition were able to trigger a selfdelete mechanism to remove the malicious program.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Risk, Reputational Scores Enjoy Mixed Success as Security Tools πŸ•΅οΈβ€β™‚οΈ

Part predictive analysis, part intuition, risk and reputation services are imperfect instruments at best and better than nothing for most organizations and insurers.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Trusted Apps Sneak a Bug Into the UEFI Boot Process πŸ•΅οΈβ€β™‚οΈ

Seven system recovery programs contained what amounted to a backdoor for injecting any untrusted file into the system startup process.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ CISA's AI Playbook Pushes For More Information Sharing πŸ•΅οΈβ€β™‚οΈ

The Joint Cyber Defense Collaborative playbook seeks to establish a "a unified approach" on how to handle AIrelated cybersecurity threats.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
🧠 The current state of ransomware: Weaponizing disclosure rules and more 🧠

As we near the end of 2024, ransomware remains a dominant and evolving threat against any organization. Cyber criminals are more sophisticated and creative than ever. They integrate new technologies, leverage geopolitical tensions and even use legal regulations to their advantage. What once seemed like a disruptive but relatively straightforward crime has evolved into a The post The current state of ransomware Weaponizing disclosure rules and more appeared first on Security Intelligence.

πŸ“– Read more.

πŸ”— Via "Security Intelligence"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Ready to Simplify Trust Management? Join Free Webinar to See DigiCert ONE in Action πŸ–‹οΈ

The digital world is exploding. IoT devices are multiplying like rabbits, certificates are piling up faster than you can count, and compliance requirements are tightening by the day. Keeping up with it all can feel like trying to juggle chainsaws while riding a unicycle. Traditional trust management? Forget it. It's simply not built for today's fastpaced, hybrid environments. You need a.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ The $10 Cyber Threat Responsible for the Biggest Breaches of 2024 πŸ–‹οΈ

You can tell the story of the current state of stolen credentialbased attacks in three numbers Stolen credentials were the 1 attacker action in 202324, and the breach vector for 80 of web app attacks. Source Verizon. Cybersecurity budgets grew again in 2024, with organizations now spending almost 1,100 per user Source Forrester.  Stolen credentials on criminal forums cost as.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ New UEFI Secure Boot Vulnerability Could Allow Attackers to Load Malicious Bootkits πŸ–‹οΈ

Details have emerged about a nowpatched security vulnerability that could allow a bypass of the Secure Boot mechanism in Unified Extensible Firmware Interface UEFI systems. The vulnerability, assigned the CVE identifier CVE20247344 CVSS score 6.7, resides in a UEFI application signed by Microsoft's "Microsoft Corporation UEFI CA 2011" thirdparty UEFI certificate, according to a new.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Researchers Find Exploit Allowing NTLMv1 Despite Active Directory Restrictions πŸ–‹οΈ

Cybersecurity researchers have found that the Microsoft Active Directory Group Policy that's designed to disable NT LAN Manager NTLM v1 can be trivially bypassed by a misconfiguration. "A simple misconfiguration in onpremise applications can override the Group Policy, effectively negating the Group Policy designed to stop NTLMv1 authentications," Silverfort researcher Dor Segal said in a.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Hackers Hide Malware in Images to Deploy VIP Keylogger and 0bj3ctivity Stealer πŸ–‹οΈ

Threat actors have been observed concealing malicious code in images to deliver malware such as VIP Keylogger and 0bj3ctivity Stealer as part of separate campaigns. "In both campaigns, attackers hid malicious code in images they uploaded to archive.org, a filehosting website, and used the same .NET loader to install their final payloads," HP Wolf Security said in its Threat Insights Report.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity