πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.1K subscribers
88.4K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ–‹οΈ Triada Malware Preloaded on Counterfeit Android Phones Infects 2,600+ Devices πŸ–‹οΈ

Counterfeit versions of popular smartphone models that are sold at reduced prices have been found to be preloaded with a modified version of an Android malware called Triada. "More than 2,600 users in different countries have encountered the new version of Triada, the majority in Russia," Kaspersky said in a report. The infections were recorded between March 13 and 27, 2025.  Triada is the.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Cyber Agencies Warn of Fast Flux Threat Bypassing Network Defenses πŸ“”

A joint cybersecurity advisory warns organizations globally about the defense gap in detecting and blocking fast flux techniques, which are exploited for malicious activities.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Tj-actions Supply Chain Attack Traced Back to Single GitHub Token Compromise πŸ“”

The threat actors initially attempted to compromise projects associated with the Coinbase cryptocurrency exchange, said Palo Alto Networks.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Chinese State Hackers Exploiting Newly Disclosed Ivanti Flaw πŸ“”

Mandiant warned that Chinese espionage actor UNC5221 is actively exploiting a critical Ivanti vulnerability, which can lead to remote code execution.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Major Online Platform for Child Exploitation Dismantled πŸ“”

An international law enforcement operation has shut down Kidflix, a platform for child sexual exploitation with 1.8m registered users.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” CrushFTP Vulnerability Exploited Following Disclosure Issues πŸ“”

A critical authentication bypass flaw in CrushFTP is under active exploitation following a mishandled disclosure process.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Amateur Hacker Leverages Russian Bulletproof Hosting Server to Spread Malware πŸ“”

The cybercriminal uses the service of Proton66, an infamous Russianbased bulletproof hosting provider, to deploy malware.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Sensitive Data Breached in Highline Schools Ransomware Incident πŸ“”

Highline Public Schools revealed that sensitive personal, financial and medical data was accessed by ransomware attackers during the September 2024 incident.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Over Half of Attacks on Electricity and Water Firms Are Destructive πŸ“”

Semperis claims 62 of water and electricity providers were hit by cyberattacks in the past year.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Nearly 600 Phishing Domains Emerge Following Bybit Heist πŸ“”

BforeAI researchers discover 596 suspicious Bybitthemed domains designed to defraud visitors.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1
πŸ¦… Ransomware Attack Levels Remain High as Major Change Looms πŸ¦…

Cyble Ransomware Attack Levels Remain High as Major Change Looms " dataimagecaption"Cyble Ransomware Attack Levels Remain High as Major Change Looms " datamediumfile"httpscyble.comwpcontentuploads202504CybleBlogsRansomwareAttacksRaaS300x150.jpg" datalargefile"httpscyble.comwpcontentuploads202504CybleBlogsRansomwareAttacksRaaS.jpg" title"Ransomware Attack Levels Remain High as Major Change Looms 1" March saw notable events, including a potential change at the top of the ransomware world, persistently high attacks, and the emergence of new groups. March 2025 ended on a surprising note when the onionbased data leak site DLS of RansomHub the largest ransomware group over the last year went offline, fueling speculation of a possible takeover. A few days later, rival DragonForce claimed ...

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Medusa Rides Momentum From Ransomware-as-a-Service Pivot πŸ•΅οΈβ€β™‚οΈ

Shifting to a RaaS business model has accelerated the group's growth, and targeting critical industries like healthcare, legal, and manufacturing hasn't hurt either.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Verizon Call Filter API flaw could’ve exposed millions of Americans’ call records πŸ“’

A security flaw in Verizon's Call Filter app couldve allowed threat actors to access details of incoming calls for another user, a security researcher has found.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 DDoS Attacks Now Key Weapons in Geopolitical Conflicts, NETSCOUT Warns 🦿

Hackers now use AI and botnets to launch powerful DDoS attacks, bypassing security and overwhelming servers as law enforcement struggles to keep up.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Minnesota Tribe Struggles After Ransomware Attack πŸ•΅οΈβ€β™‚οΈ

Hotel and casino operations for the Lower Sioux Indians have been canceled or postponed, and the local health center is redirecting those needing medical or dental care.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
β™ŸοΈ Cyber Forensic Expert in 2,000+ Cases Faces FBI Probe β™ŸοΈ

A Minnesota cybersecurity and computer forensics expert whose testimony has featured in thousands of courtroom trials over the past 30 years is facing questions about his credentials and an inquiry from the Federal Bureau of Investigation FBI. Legal experts say the inquiry could be grounds to reopen a number of adjudicated cases in which the expert's testimony may have been pivotal.

πŸ“– Read more.

πŸ”— Via "Krebs on Security"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Gmail Is Not a Secure Way to Send Sensitive Comms: A Friendly Reminder πŸ•΅οΈβ€β™‚οΈ

New endtoend Gmail encryption alone isn't secure enough for an enterprise's most sensitive and prized data, experts say.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1
πŸ•΅οΈβ€β™‚οΈ CISA Warns: Old DNS Trick 'Fast Flux' Is Still Thriving πŸ•΅οΈβ€β™‚οΈ

An old DNS switcheroo technique is still helping attackers keep their infrastructure alive. But is it really a pressing issue in 2025?.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1
πŸ¦… IT Vulnerability Report: VMware, Microsoft Fixes Urged by Cyble πŸ¦…

Cyble IT Vulnerability Report VMware, Microsoft Fixes Urged by Cyble " dataimagecaption"Cyble IT Vulnerability Report VMware, Microsoft Fixes Urged by Cyble " datamediumfile"httpscyble.comwpcontentuploads202504CybleBlogsITVulnerabilityReport300x150.jpg" datalargefile"httpscyble.comwpcontentuploads202504CybleBlogsITVulnerabilityReport.jpg" title"IT Vulnerability Report VMware, Microsoft Fixes Urged by Cyble 1" Overview Cybles vulnerability intelligence unit examined 30 vulnerabilities and 14 dark web exploit claims in recent reports to clients and flagged eight of the vulnerabilities as meriting highpriority attention by security teams. Cyble said the eight vulnerabilities found in products from Microsoft, VMware, Apple, Google, and others can lead to system compromise, data bre...

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 Google’s Sec-Gemini v1 Takes on Hackers & Outperforms Rivals by 11% 🦿

SecGemini v1 has access to realtime cybersecurity data from trusted sources including Google Threat Intelligence, Mandiants attack reports, and the Open Source Vulnerabilities database.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 What Is Cyber Threat Hunting? 🌊

Cyber threat hunting is a proactive approach of searching networks, endpoints, and datasets to uncover hidden cyber threats that have bypassed traditional security measures. Threat hunting in cybersecurity is not just about reacting to alerts its about actively seeking out malicious activities and advanced persistent threats that lurk beneath the surface, potentially causing significant damage The post What Is Cyber Threat Hunting? appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity