πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25K subscribers
88.4K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ•΅οΈβ€β™‚οΈ Google Brings End-to-End Encryption to Gmail πŸ•΅οΈβ€β™‚οΈ

The new Google Workspace features will make it easier for enterprise customers to implement endtoend encryption within Gmail.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Surge in Scans on PAN GlobalProtect VPNs Hints at Attacks πŸ•΅οΈβ€β™‚οΈ

Over the past few weeks, bad actors from different regions have been scanning devices with the VPN for potential vulnerabilities.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ As CISA Downsizes, Where Can Enterprises Get Support? πŸ•΅οΈβ€β™‚οΈ

In this roundtable, cybersecurity experts including two former CISA executives weigh in on alternate sources for threat intel, incident response, and other essential cybersecurity services.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Japan Bolsters Cybersecurity Safeguards With Cyber Defense Bill πŸ•΅οΈβ€β™‚οΈ

The bill will allow Japan to implement safeguards and strategies that have been in use by other countries for some time.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Check Point Disputes Hacker's Breach Claims πŸ•΅οΈβ€β™‚οΈ

The security vendor counters that none of the information came directly from its systems but rather was acquired over a period of time by targeting individuals.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 Developers Wanted: OpenAI Seeks Feedback About Open Model That Will Be Revealed β€˜In the Coming Months’ 🦿

Find out how to provide OpenAI with your input about its upcoming open language model, which Sam Altman stated will be a "reasoning" model like OpenAI o1.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Over 1,500 PostgreSQL Servers Compromised in Fileless Cryptocurrency Mining Campaign πŸ–‹οΈ

Exposed PostgreSQL instances are the target of an ongoing campaign designed to gain unauthorized access and deploy cryptocurrency miners. Cloud security firm Wiz said the activity is a variant of an intrusion set that was first flagged by Aqua Security in August 2024 that involved the use of a malware strain dubbed PGMEM. The campaign has been attributed to a threat actor Wiz tracks as.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Enterprise Gmail Users Can Now Send End-to-End Encrypted Emails to Any Platform πŸ–‹οΈ

On the 21st birthday of Gmail, Google has announced a major update that allows enterprise users to send endtoend encrypted E2EE to any user in any email inbox in a few clicks. The feature is rolling out starting today in beta, allowing users to send E2EE emails to Gmail users within an organization, with plans to send E2EE emails to any Gmail inbox in the coming weeks and to any email inbox.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” WP Ultimate CSV Importer Flaws Expose 20,000 Websites to Attacks πŸ“”

WP Ultimate CSV Importer flaws expose 20,000 websites to attacks enabling attackers to achieve full site compromise.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Ukraine Blames Russia for Railway Hack, Labels It "Act of Terrorism" πŸ“”

The CERTUA investigation concluded that the attacks techniques were characteristic of Russian intelligence services.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ New Malware Loaders Use Call Stack Spoofing, GitHub C2, and .NET Reactor for Stealth πŸ–‹οΈ

Cybersecurity researchers have discovered an updated version of a malware loader called Hijack Loader that implements new features to evade detection and establish persistence on compromised systems. "Hijack Loader released a new module that implements call stack spoofing to hide the origin of function calls e.g., API and system calls," Zscaler ThreatLabz researcher Muhammed Irfan V A said in.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 Get a Lifetime of 1TB Cloud Storage for Only $60 with FolderFort 🦿

Fast, affordable cloud storage isnt always easy to find for businesses, but now you can have a massive amount with maximum security.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ FIN7 Deploys Anubis Backdoor to Hijack Windows Systems via Compromised SharePoint Sites πŸ–‹οΈ

The financially motivated threat actor known as FIN7 has been linked to a Pythonbased backdoor called Anubis not to be confused with an Android banking trojan of the same name that can grant them remote access to compromised Windows systems. "This malware allows attackers to execute remote shell commands and other system operations, giving them full control over an infected machine," Swiss.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” ICO Apologizes After Data Protection Response Snafu πŸ“”

The UKs data protection regulator says it is overwhelmed with complaints from the public.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Google warns that fake North Korean IT workers have expanded to Europe πŸ“’

Individuals from the Democratic People's Republic of Korea DPRK are now infiltrating European organizations.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Surging DDoS attack rates show no sign of slowing down - here’s why πŸ“’

The number of DDoS attacks has shot up since the first half of last year, according to new research.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ MSPs face scrutiny in Cyber Security and Resilience Bill πŸ“’

Renewed emphasis on supply chain security sees the channel called out in UK cyber security bill.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ How SSL Misconfigurations Impact Your Attack Surface πŸ–‹οΈ

When assessing an organizations external attack surface, encryptionrelated issues especially SSL misconfigurations receive special attention. Why? Their widespread use, configuration complexity, and visibility to attackers as well as users make them more likely to be exploited.  This highlights how important your SSL configurations are in maintaining your web application security and.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Steam Surges to Top of Most Spoofed Brands List in Q1 πŸ“”

Gaming community Steam appeared most often in phishing emails and texts detected by Guardio in Q1 2025.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” North Korea's Fake IT Worker Scheme Sets Sights on Europe πŸ“”

Google has found a significant increase in North Korean actors attempting to gain employment as IT workers in European companies, leading to data theft and extortion.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Helping Your Clients Achieve NIST Compliance: A Step by Step Guide for Service Providers πŸ–‹οΈ

Introduction As the cybersecurity landscape evolves, service providers play an increasingly vital role in safeguarding sensitive data and maintaining compliance with industry regulations. The National Institute of Standards and Technology NIST offers a comprehensive set of frameworks that provide a clear path to achieving robust cybersecurity practices. For service providers, adhering to NIST.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity