πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
26K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ•΅οΈβ€β™‚οΈ Attackers Hijack Google Advertiser Accounts to Spread Malware πŸ•΅οΈβ€β™‚οΈ

It's an especially brazen form of malvertising, researchers say, striking at the heart of Google's business the tech giant says it's aware of the issue and is working quickly to address the problem.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Python-Based Malware Powers RansomHub Ransomware to Exploit Network Flaws πŸ–‹οΈ

Cybersecurity researchers have detailed an attack that involved a threat actor utilizing a Pythonbased backdoor to maintain persistent access to compromised endpoints and then leveraged this access to deploy the RansomHub ransomware throughout the target network. According to GuidePoint Security, initial access is said to have been facilitated by means of a JavaScript malware downloaded named.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Researcher Uncovers Critical Flaws in Multiple Versions of Ivanti Endpoint Manager πŸ–‹οΈ

Ivanti has rolled out security updates to address several security flaws impacting Avalanche, Application Control Engine, and Endpoint Manager EPM, including four critical bugs that could lead to information disclosure. All the four critical security flaws, rated 9.8 out of 10.0 on the CVSS scale, are rooted in EPM, and concern absolute path traversal flaws that allow a remote unauthenticated.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” EU To Launch New Support Centre by 2026 to Boost Healthcare Cybersecurity πŸ“”

A new EU action plan will be structured around four pillars prevention, threat detection and identification, response to cyberattacks and deterrence.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Personal data compromised in Gateshead Council cyber attack πŸ“’

The Medusa ransomware group has claimed responsibility for the attack.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ US authorities just purged malware from thousands of devices across the world πŸ“’

After taking control of the PlugX malwares commandandcontrol server, the coalition were able to trigger a selfdelete mechanism to remove the malicious program.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Risk, Reputational Scores Enjoy Mixed Success as Security Tools πŸ•΅οΈβ€β™‚οΈ

Part predictive analysis, part intuition, risk and reputation services are imperfect instruments at best and better than nothing for most organizations and insurers.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Trusted Apps Sneak a Bug Into the UEFI Boot Process πŸ•΅οΈβ€β™‚οΈ

Seven system recovery programs contained what amounted to a backdoor for injecting any untrusted file into the system startup process.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ CISA's AI Playbook Pushes For More Information Sharing πŸ•΅οΈβ€β™‚οΈ

The Joint Cyber Defense Collaborative playbook seeks to establish a "a unified approach" on how to handle AIrelated cybersecurity threats.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
🧠 The current state of ransomware: Weaponizing disclosure rules and more 🧠

As we near the end of 2024, ransomware remains a dominant and evolving threat against any organization. Cyber criminals are more sophisticated and creative than ever. They integrate new technologies, leverage geopolitical tensions and even use legal regulations to their advantage. What once seemed like a disruptive but relatively straightforward crime has evolved into a The post The current state of ransomware Weaponizing disclosure rules and more appeared first on Security Intelligence.

πŸ“– Read more.

πŸ”— Via "Security Intelligence"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Ready to Simplify Trust Management? Join Free Webinar to See DigiCert ONE in Action πŸ–‹οΈ

The digital world is exploding. IoT devices are multiplying like rabbits, certificates are piling up faster than you can count, and compliance requirements are tightening by the day. Keeping up with it all can feel like trying to juggle chainsaws while riding a unicycle. Traditional trust management? Forget it. It's simply not built for today's fastpaced, hybrid environments. You need a.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ The $10 Cyber Threat Responsible for the Biggest Breaches of 2024 πŸ–‹οΈ

You can tell the story of the current state of stolen credentialbased attacks in three numbers Stolen credentials were the 1 attacker action in 202324, and the breach vector for 80 of web app attacks. Source Verizon. Cybersecurity budgets grew again in 2024, with organizations now spending almost 1,100 per user Source Forrester.  Stolen credentials on criminal forums cost as.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ New UEFI Secure Boot Vulnerability Could Allow Attackers to Load Malicious Bootkits πŸ–‹οΈ

Details have emerged about a nowpatched security vulnerability that could allow a bypass of the Secure Boot mechanism in Unified Extensible Firmware Interface UEFI systems. The vulnerability, assigned the CVE identifier CVE20247344 CVSS score 6.7, resides in a UEFI application signed by Microsoft's "Microsoft Corporation UEFI CA 2011" thirdparty UEFI certificate, according to a new.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Researchers Find Exploit Allowing NTLMv1 Despite Active Directory Restrictions πŸ–‹οΈ

Cybersecurity researchers have found that the Microsoft Active Directory Group Policy that's designed to disable NT LAN Manager NTLM v1 can be trivially bypassed by a misconfiguration. "A simple misconfiguration in onpremise applications can override the Group Policy, effectively negating the Group Policy designed to stop NTLMv1 authentications," Silverfort researcher Dor Segal said in a.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Hackers Hide Malware in Images to Deploy VIP Keylogger and 0bj3ctivity Stealer πŸ–‹οΈ

Threat actors have been observed concealing malicious code in images to deliver malware such as VIP Keylogger and 0bj3ctivity Stealer as part of separate campaigns. "In both campaigns, attackers hid malicious code in images they uploaded to archive.org, a filehosting website, and used the same .NET loader to install their final payloads," HP Wolf Security said in its Threat Insights Report.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” DORA Compliance Costs Soar Past €1m for Many UK and EU Businesses πŸ“”

Compliance with the Digital Operational Resilience Act DORA has cost many businesses over 1 million, according to research from Rubrik.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” New Hacking Group Leaks Configuration of 15,000 Fortinet Firewalls πŸ“”

The leak likely comes from a zeroday exploit affecting Fortinets products.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” GoDaddy Accused of Serious Security Failings by FTC πŸ“”

A proposed settlement order from the FTC will require GoDaddy to strengthen its security practices following multiple data breaches at the web hosting giant.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Hackers Use Image-Based Malware and GenAI to Evade Email Security πŸ“”

HP Wolf highlighted novel techniques used by attackers to bypass email protections, including embedding malicious code inside images and utilizing GenAI.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ¦… Government Sector Bears the Brunt of Cyberattacks in Ukraine: Report πŸ¦…

Overview  Ukraine's fight against cyberthreats has reached new heights, with its top cybersecurity agency releasing the 2024 annual cyberthreat landscape report detailing its efforts to protect critical infrastructure and government systems.   The report, prepared by the State Cyber Defense Center under the State Service for Special Communications and Information Protection, outlines key findings, incident statistics, and strategies employed to counteract persistent cyber threats.  Key Findings  Ukraine processed a staggering 3 million security events in 2024, a reflection of the heightened activity in its cyber domain. Of these, over 1,000 incidents were confirmed as direct cyberthreats.   The year saw a surge in advanced persistent threats APTs and statesponsored cyber esp...

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ¦… ICS Vulnerability Report: Hitachi Energy Network Management Flaw Scores a Perfect 10 πŸ¦…

Overview  Critical vulnerabilities in Hitachi Energy UNEM Network Management Systems were among the highlights in Cybles weekly Industrial Control System ICS Vulnerability Intelligence Report, which also examined flaws in products from Delta Electronics, Schneider Electric and other ICS vendors.  Cyble Research Intelligence Labs CRIL examined 16 vulnerabilities in the report for clients half of which affect Hitachi Energy FOXMANUN products based on ICS alerts by the Cybersecurity and Infrastructure Security Agency CISA between January 814.  Of the 16 vulnerabilities, two are critical, nine are high severity, and five are medium severity. They span Communication, Critical Manufacturing, Chemical, Energy, Wastewater Systems and Commercial Facilities, and could lead to operation...

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity