πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.9K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
🧠 Are successful deepfake scams more common than we realize? 🧠

Many times a day worldwide, a boss asks one of their team members to perform a task during a video call. But is the person assigning tasks actually who they say they are? Or is it a deepfake? Instead of blindly following orders, employees must now ask themselves if they are becoming a victims of The post Are successful deepfake scams more common than we realize? appeared first on Security Intelligence.

πŸ“– Read more.

πŸ”— Via "Security Intelligence"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ DoJ Busts Up Another Multinational DPRK IT Worker Scam πŸ•΅οΈβ€β™‚οΈ

A departmentwide initiative has now led to five major law enforcement actions, in an attempt to curb the increasingly common trend of North Korean hackers posing as IT job applicants.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ MITRE's Latest ATT&CK Simulations Tackles Cloud Defenses πŸ•΅οΈβ€β™‚οΈ

The MITRE framework's applied exercise provides defenders with critical feedback about how to detect and defend against common, but sophisticated, attacks.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Cisco: Critical Meeting Management Bug Requires Urgent Patch πŸ•΅οΈβ€β™‚οΈ

The bug has been given a 9.9 CVSS score, and could allow authenticated threat actors to escalate their privileges to adminlevel if exploited.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ 3 Use Cases for Third-Party API Security πŸ•΅οΈβ€β™‚οΈ

Thirdparty API security requires a tailored approach for different scenarios. Learn how to adapt your security strategy to outbound data flows, inbound traffic, and SaaStoSaaS interconnections.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1
πŸ•΅οΈβ€β™‚οΈ CISOs Are Gaining C-Suite Swagger, but Has It Come With a Cost? πŸ•΅οΈβ€β™‚οΈ

The number of CISOs who report directly to the CEO is up sharply in recent years, but many still say it's not enough to secure adequate resources.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Meta's Llama Framework Flaw Exposes AI Systems to Remote Code Execution Risks πŸ–‹οΈ

A highseverity security flaw has been disclosed in Meta's Llama large language model LLM framework that, if successfully exploited, could allow an attacker to execute arbitrary code on the llamastack inference server.  The vulnerability, tracked as CVE202450050, has been assigned a CVSS score of 6.3 out of 10.0. Supply chain security firm Snyk, on the other hand, has assigned it a.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘2
πŸ–‹οΈ MintsLoader Delivers StealC Malware and BOINC in Targeted Cyber Attacks πŸ–‹οΈ

Threat hunters have detailed an ongoing campaign that leverages a malware loader called MintsLoader to distribute secondary payloads such as the StealC information stealer and a legitimate opensource network computing platform called BOINC. "MintsLoader is a PowerShell based malware loader that has been seen delivered via spam emails with a link to KongtukeClickFix pages or a JScript file,".

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ GamaCopy Mimics Gamaredon Tactics in Cyber Espionage Targeting Russian Entities πŸ–‹οΈ

A previously unknown threat actor has been observed copying the tradecraft associated with the Kremlinaligned Gamaredon hacking group in its cyber attacks targeting Russianspeaking entities. The campaign has been attributed to a threat cluster dubbed GamaCopy, which is assessed to share overlaps with another hacking group named Core Werewolf, also tracked as Awaken Likho and PseudoGamaredon.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Change Healthcare Breach Almost Doubles in Size to 190 Million Victims πŸ“”

Change Healthcare has claimed 190 million customers were affected by a megabreach last year.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
❀1
πŸ“” Subaru Bug Enabled Remote Vehicle Tracking and Hijacking πŸ“”

A nowpatched vulnerability could have enabled threat actors to remotely control Subaru cars.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ UnitedHealth reveals 190 million US citizens were impacted by the Change Healthcare breach πŸ“’

UnitedHealth has confirmed that 190 million US citizens were affected by the Change Healthcare cyber attack in 2024.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Developers can't get a handle on application security risks πŸ“’

Research by Legit Security shows a majority of organizations have high risk applications in developer environments.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 1Password Review: Features, Pricing & Security 🦿

1Passwords toptier security and sleek user interface make it a solid password manager to try this year. Read our handson 1Password review to learn more.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ ⚑ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [27 January] πŸ–‹οΈ

Welcome to your weekly cybersecurity scoop! Ever thought about how the same AI meant to protect our hospitals could also compromise them? This week, were breaking down the sophisticated world of AIdriven threats, key updates in regulations, and some urgent vulnerabilities in healthcare tech that need our attention. As we unpack these complex topics, we'll equip you with sharp insights to.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Do We Really Need The OWASP NHI Top 10? πŸ–‹οΈ

The Open Web Application Security Project has recently introduced a new Top 10 project the NonHuman Identity NHI Top 10. For years, OWASP has provided security professionals and developers with essential guidance and actionable frameworks through its Top 10 projects, including the widely used API and Web Application security lists.  Nonhuman identity security represents an emerging.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” CISOs Boost Crisis Simulation Budgets Amid High-Profile Cyber-Attacks πŸ“”

74 of CISOs plan to increase their cyber crisis simulation budgets in 2025.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ¦… United Against Cybercrime: ASEAN Ministers Forge New Security Pathways πŸ¦…

Overview The digital world in Southeast Asia is evolving rapidly, with nations striving to balance innovation, inclusivity, and security. The recently held 5th ASEAN Digital Ministers' Meeting ADGMIN in Bangkok, Thailand, marked a significant milestone in this journey. The meeting highlighted the importance of cybersecurity in shaping a resilient digital future for the region. The ASEAN Digital Masterplan 2025 ADM 2025 continues to serve as a guiding framework for fostering collaboration, enabling trust in digital services, and promoting the safe and inclusive use of technology. From addressing online scams to operationalizing the ASEAN Regional Computer Emergency Response Team CERT and advancing AI governance, the event showcased ASEAN's commitment to fortifying its digital eco...

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” New Phishing Campaign Targets Mobile Devices with Malicious PDFs πŸ“”

A novel phishing campaign identified by Zimperium targets mobile users with malicious PDFs, impersonating USPS to steal credentials.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” SaaS Breaches Skyrocket 300% as Traditional Defenses Fall Short πŸ“”

Obsidian found that threat actors are focusing on SaaS applications to steal sensitive data, with most organizations' security measures not set up to deal with these attacks.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ The Case for Proactive, Scalable Data Protection πŸ•΅οΈβ€β™‚οΈ

Whether you're facing growing data demands and increased cyber threats, or simply looking to futureproof your business, it's time to consider the longterm benefits of transitioning to a cloudfirst infrastructure.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity