πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25K subscribers
88.4K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
🦿 Happy 21st Birthday, Gmail! Google’s Present to Enterprise Gmail Users: End-to-End Encryption 🦿

The new feature is more accessible than SMIME because it eliminates the need for certificate management.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Lazarus APT Jumps on ClickFix Bandwagon in Recent Attacks πŸ•΅οΈβ€β™‚οΈ

A continuation of the North Korean nationstate threat's campaign against employment seekers uses the social engineering attack to target CeFi organizations with the GolangGhost backdoor.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” New Phishing Attack Combines Vishing and DLL Sideloading Techniques πŸ“”

A new attack targeting Microsoft Teams users used vishing, remote access tools and DLL sideloading to deploy a JavaScript backdoor.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ FDA's Critical Role in Keeping Medical Devices Secure πŸ•΅οΈβ€β™‚οΈ

The FDA's regulations and guidance aim to strike a balance between ensuring rigorous oversight and enabling manufacturers to act swiftly when vulnerabilities are discovered.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Google 'ImageRunner' Bug Enabled Privilege Escalation πŸ•΅οΈβ€β™‚οΈ

Tenable released details of a Google Cloud Run flaw that prior to remediation allowed a threat actor to escalate privileges.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Lucid PhaaS Hits 169 Targets in 88 Countries Using iMessage and RCS Smishing πŸ–‹οΈ

A new sophisticated phishingasaservice PhaaS platform called Lucid has targeted 169 entities in 88 countries using smishing messages propagated via Apple iMessage and Rich Communication Services RCS for Android. Lucid's unique selling point lies in its weaponizing of legitimate communication platforms to sidestep traditional SMSbased detection mechanisms. "Its scalable,.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Malaysian Airport's Cyber Disruption a Warning for Asia πŸ•΅οΈβ€β™‚οΈ

Transportation facilities and networks slowly adapt to changes and threats, leaving them vulnerable to agile cyberattackers, as demonstrated by the 10 million ransomware attack.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Google Brings End-to-End Encryption to Gmail πŸ•΅οΈβ€β™‚οΈ

The new Google Workspace features will make it easier for enterprise customers to implement endtoend encryption within Gmail.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Surge in Scans on PAN GlobalProtect VPNs Hints at Attacks πŸ•΅οΈβ€β™‚οΈ

Over the past few weeks, bad actors from different regions have been scanning devices with the VPN for potential vulnerabilities.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ As CISA Downsizes, Where Can Enterprises Get Support? πŸ•΅οΈβ€β™‚οΈ

In this roundtable, cybersecurity experts including two former CISA executives weigh in on alternate sources for threat intel, incident response, and other essential cybersecurity services.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Japan Bolsters Cybersecurity Safeguards With Cyber Defense Bill πŸ•΅οΈβ€β™‚οΈ

The bill will allow Japan to implement safeguards and strategies that have been in use by other countries for some time.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Check Point Disputes Hacker's Breach Claims πŸ•΅οΈβ€β™‚οΈ

The security vendor counters that none of the information came directly from its systems but rather was acquired over a period of time by targeting individuals.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 Developers Wanted: OpenAI Seeks Feedback About Open Model That Will Be Revealed β€˜In the Coming Months’ 🦿

Find out how to provide OpenAI with your input about its upcoming open language model, which Sam Altman stated will be a "reasoning" model like OpenAI o1.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Over 1,500 PostgreSQL Servers Compromised in Fileless Cryptocurrency Mining Campaign πŸ–‹οΈ

Exposed PostgreSQL instances are the target of an ongoing campaign designed to gain unauthorized access and deploy cryptocurrency miners. Cloud security firm Wiz said the activity is a variant of an intrusion set that was first flagged by Aqua Security in August 2024 that involved the use of a malware strain dubbed PGMEM. The campaign has been attributed to a threat actor Wiz tracks as.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Enterprise Gmail Users Can Now Send End-to-End Encrypted Emails to Any Platform πŸ–‹οΈ

On the 21st birthday of Gmail, Google has announced a major update that allows enterprise users to send endtoend encrypted E2EE to any user in any email inbox in a few clicks. The feature is rolling out starting today in beta, allowing users to send E2EE emails to Gmail users within an organization, with plans to send E2EE emails to any Gmail inbox in the coming weeks and to any email inbox.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” WP Ultimate CSV Importer Flaws Expose 20,000 Websites to Attacks πŸ“”

WP Ultimate CSV Importer flaws expose 20,000 websites to attacks enabling attackers to achieve full site compromise.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Ukraine Blames Russia for Railway Hack, Labels It "Act of Terrorism" πŸ“”

The CERTUA investigation concluded that the attacks techniques were characteristic of Russian intelligence services.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ New Malware Loaders Use Call Stack Spoofing, GitHub C2, and .NET Reactor for Stealth πŸ–‹οΈ

Cybersecurity researchers have discovered an updated version of a malware loader called Hijack Loader that implements new features to evade detection and establish persistence on compromised systems. "Hijack Loader released a new module that implements call stack spoofing to hide the origin of function calls e.g., API and system calls," Zscaler ThreatLabz researcher Muhammed Irfan V A said in.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 Get a Lifetime of 1TB Cloud Storage for Only $60 with FolderFort 🦿

Fast, affordable cloud storage isnt always easy to find for businesses, but now you can have a massive amount with maximum security.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ FIN7 Deploys Anubis Backdoor to Hijack Windows Systems via Compromised SharePoint Sites πŸ–‹οΈ

The financially motivated threat actor known as FIN7 has been linked to a Pythonbased backdoor called Anubis not to be confused with an Android banking trojan of the same name that can grant them remote access to compromised Windows systems. "This malware allows attackers to execute remote shell commands and other system operations, giving them full control over an infected machine," Swiss.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” ICO Apologizes After Data Protection Response Snafu πŸ“”

The UKs data protection regulator says it is overwhelmed with complaints from the public.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity