🛡 Cybersecurity & Privacy 🛡 - News
25.1K subscribers
88.4K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
🖋️ OttoKit WordPress Plugin Admin Creation Vulnerability Under Active Exploitation 🖋️

A newly disclosed highseverity security flaw impacting OttoKit formerly SureTriggers has come under active exploitation within a few hours of public disclosure. The vulnerability, tracked as CVE20253102 CVSS score 8.1, is an authorization bypass bug that could permit an attacker to create administrator accounts under certain conditions and take control of susceptible websites. "The.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
👍1
📔 NVD Revamps Operations as Vulnerability Reporting Surges 📔

The NVD program manager has announced undergoing process improvements to catch up with its growing vulnerability backlog.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 Google Cloud: Top 5 Priorities for Cybersecurity Leaders Today 📔

Experts at the Google Cloud Next event set out how security teams need to adapt their focuses in the wake of trends such as rising cyberattacks and advances in AI.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 Cyble Urges Critical Vulnerability Fixes Affecting Industrial Systems 📔

Rockwell Automation, Hitachi Energy and Inaba Denki Sangyo have products affected by critical vulnerabilities carrying severity ratings as high as 9.9.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
👍1
🕵️‍♂️ Paper Werewolf Threat Actor Targets Flash Drives With New Malware 🕵️‍♂️

The threat actor, also known as Goffee, has been active since at least 2022 and has changed its tactics and techniques over the years while targeting Russian organizations.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
👍1
🕵️‍♂️ Pall Mall Process Progresses but Leads to More Questions 🕵️‍♂️

Nations continue to sign the Code of Practice for States in an effort to curb commercial spyware, yet implementation and enforcement concerns have yet to be figured out.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
👍1
🖋️ Weekly Recap: Windows 0-Day, VPN Exploits, Weaponized AI, Hijacked Antivirus and More 🖋️

Attackers arent waiting for patches anymore they are breaking in before defenses are ready. Trusted security tools are being hijacked to deliver malware. Even after a breach is detected and patched, some attackers stay hidden. This weeks events show a hard truth its not enough to react after an attack. You have to assume that any system you trust today could fail tomorrow. In a world.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
👍1
🖋️ Weekly Recap: Windows 0-Day, VPN Exploits, Weaponized AI, Hijacked Antivirus and More 🖋️

Attackers arent waiting for patches anymore they are breaking in before defenses are ready. Trusted security tools are being hijacked to deliver malware. Even after a breach is detected and patched, some attackers stay hidden. This weeks events show a hard truth its not enough to react after an attack. You have to assume that any system you trust today could fail tomorrow. In a world.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📢 Businesses are taking their eye off the ball with vulnerability patching 📢

Security leaders are overconfident in their organizations security posture while allowing vulnerability patching to fall by the wayside.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
📢 Global cybersecurity spending is set to rise 12% in 2025 – here are the industries ramping up investment 📢

Global cybersecurity spending is expected to surge this year, fueled by escalating statesponsored threats and the rise of generative AI, according to new analysis from IDC.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ A New 'It RAT': Stealthy 'Resolver' Malware Burrows In 🕵️‍♂️

A new infostealer on the market is making big waves globally, replacing Lumma et al. in attacks and employing so many stealth, persistence, and antianalysis tricks that it's downright difficult to count them all.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
1
🕵️‍♂️ 7 RSAC 2025 Cloud Security Sessions You Don't Want to Miss 🕵️‍♂️

Some of the brightest minds in the industry will discuss how to strengthen cloud security.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
2
🕵️‍♂️ How DigitalOcean Moved Away From Manual Identity Management 🕵️‍♂️

DigitalOcean executives describe how they automated and streamlined many of the identity and access management functions that had been previously handled manually.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Morocco Investigates Social Security Agency Data Leak 🕵️‍♂️

A threat actor has claimed responsibility for the alleged politically motivated attack and has uploaded the stolen data to a Dark Web forum.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🦿 How to Use LastPass Password Manager 🦿

Learn how to set up and use LastPass password manager. Start managing and storing your passwords with this stepbystep guide.

📖 Read more.

🔗 Via "Tech Republic"

----------
👁️ Seen on @cibsecurity
🖋️ Phishing Campaigns Use Real-Time Checks to Validate Victim Emails Before Credential Theft 🖋️

Cybersecurity researchers are calling attention to a new type of credential phishing scheme that ensures that the stolen information is associated with valid online accounts. The technique has been codenamed precisionvalidating phishing by Cofense, which it said employs realtime email validation so that only a select set of highvalue targets are served the fake login screens. "This tactic not.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Weekly Recap: Windows 0-Day, VPN Exploits, Weaponized AI, Hijacked Antivirus and More 🖋️

Attackers arent waiting for patches anymore they are breaking in before defenses are ready. Trusted security tools are being hijacked to deliver malware. Even after a breach is detected and patched, some attackers stay hidden. This weeks events show a hard truth its not enough to react after an attack. You have to assume that any system you trust today could fail tomorrow. In a world.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Cybersecurity in the AI Era: Evolve Faster Than the Threats or Get Left Behind 🖋️

AI is changing cybersecurity faster than many defenders realize. Attackers are already using AI to automate reconnaissance, generate sophisticated phishing lures, and exploit vulnerabilities before security teams can react. Meanwhile, defenders are overwhelmed by massive amounts of data and alerts, struggling to process information quickly enough to identify real threats. AI offers a way to.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Pakistan-Linked Hackers Expand Targets in India with CurlBack RAT and Spark RAT 🖋️

A threat actor with ties to Pakistan has been observed targeting various sectors in India with various remote access trojans like Xeno RAT, Spark RAT, and a previously undocumented malware family called CurlBack RAT. The activity, detected by SEQRITE in December 2024, targeted Indian entities under railway, oil and gas, and external affairs ministries, marking an expansion of the hacking crew's.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📔 Major WordPress Plugin Flaw Exploited in Under 4 Hours 📔

Flaw in SureTriggers plugin allows unauthenticated users to create admin accounts on WordPress sites.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 Prodaft Offers "No Judgment" Deal to Buy Dark Web Accounts from Cybercrime Forum Users 📔

Through the SYS Initiative, Prodaft is offering a secure, anonymous channel for individuals to share information about ongoing cybercrime activities.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity