π΅οΈββοΈ Zambia's Updated Cyber Laws Prompt Surveillance Warnings π΅οΈββοΈ
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Critics which include the US embassy in Zambia contend the justsigned Cyber Security Act and the Cyber Crime Act allow suppression of dissent and too much concentration of power.π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Darkreading
Zambia's Updated Cyber Laws Prompt Surveillance Warnings
Critics β which include the US embassy in Zambia β contend the just-signed Cyber Security Act and the Cyber Crime Act allow suppression of dissent and too much concentration of power.
π΅οΈββοΈ Verizon: Edge Bugs Soar, Ransoms Lag, SMBs Bedeviled π΅οΈββοΈ
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
The cybersecurity landscape confounded expectations in 2024, as anticipated threats and risk didn't materialize and less widely touted attack scenarios shot up.π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Darkreading
Verizon: Edge Bugs Soar, Ransoms Lag, SMBs Bedeviled
The cybersecurity landscape confounded expectations in 2024, as anticipated threats and risk didn't materialize and less widely touted attack scenarios shot up.
βοΈ DOGE Workerβs Code Supports NLRB Whistleblower βοΈ
π Read more.
π Via "Krebs on Security"
----------
ποΈ Seen on @cibsecurity
A whistleblower at the National Labor Relations Board NLRB alleged last week that denizens of Elon Musk's Department of Government Efficiency DOGE siphoned gigabytes of data from the agency's sensitive case files in early March. The whistleblower said accounts created for DOGE at the NLRB downloaded three code repositories from GitHub. Further investigation into one of those code bundles shows it is remarkably similar to a program published in January 2025 by Marko Elez, a 25yearold DOGE employee who has worked at a number of Musk's companies.π Read more.
π Via "Krebs on Security"
----------
ποΈ Seen on @cibsecurity
Krebs on Security
DOGE Workerβs Code Supports NLRB Whistleblower
A whistleblower at the National Labor Relations Board (NLRB) alleged last week that denizens of Elon Musk's Department of Government Efficiency (DOGE) siphoned gigabytes of data from the agency's sensitive case files in early March. The whistleblower saidβ¦
ποΈ DPRK Hackers Steal $137M from TRON Users in Single-Day Phishing Attack ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
Multiple threat activity clusters with ties to North Korea aka Democratic People's Republic of Korea or DPRK have been linked to attacks targeting organizations and individuals in the Web3 and cryptocurrency space. "The focus on Web3 and cryptocurrency appears to be primarily financially motivated due to the heavy sanctions that have been placed on North Korea," Googleowned Mandiant said in.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
ποΈ Iran-Linked Hackers Target Israel with MURKYTOUR Malware via Fake Job Campaign ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
The Irannexus threat actor known as UNC2428 has been observed delivering a backdoor known as MURKYTOUR as part of a jobthemed social engineering campaign aimed at Israel in October 2024. Googleowned Mandiant described UNC2428 as a threat actor aligned with Iran that engages in cyber espionagerelated operations. The intrusion set is said to have distributed the malware through a "complex.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
ποΈ Android Spyware Disguised as Alpine Quest App Targets Russian Military Devices ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
Cybersecurity researchers have revealed that Russian military personnel are the target of a new malicious campaign that distributes Android spyware under the guise of the Alpine Quest mapping software. "The attackers hide this trojan inside modified Alpine Quest mapping software and distribute it in various ways, including through one of the Russian Android app catalogs," Doctor Web said in an.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
ποΈ Three Reasons Why the Browser is Best for Stopping Phishing Attacks ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
Phishing attacks remain a huge challenge for organizations in 2025. In fact, with attackers increasingly leveraging identitybased techniques over software exploits, phishing arguably poses a bigger threat than ever before. Attackers are increasingly leveraging identitybased techniques over software exploits, with phishing and stolen credentials a byproduct of phishing now the primary.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
π1
ποΈ Russian Hackers Exploit Microsoft OAuth to Target Ukraine Allies via Signal and WhatsApp ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
Multiple suspected Russialinked threat actors are "aggressively" targeting individuals and organizations with ties to Ukraine and human rights with an aim to gain unauthorized access to Microsoft 365 accounts since early March 2025. The highly targeted social engineering operations, per Volexity, are a shift from previously documented attacks that leveraged a technique known as device code.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
π±1
ποΈ Ripple's xrpl.js npm Package Backdoored to Steal Private Keys in Major Supply Chain Attack ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
The Ripple cryptocurrency npm JavaScript library named xrpl.js has been compromised by unknown threat actors as part of a software supply chain attack designed to harvest and exfiltrate users' private keys. The malicious activity has been found to affect five different versions of the package 4.2.1, 4.2.2, 4.2.3, 4.2.4, and 2.14.2. The issue has been addressed in versions 4.2.5 and 2.14.3.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
ποΈ Google Drops Cookie Prompt in Chrome, Adds IP Protection to Incognito ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
Google on Tuesday revealed that it will no longer offer a standalone prompt for thirdparty cookies in its Chrome browser as part of its Privacy Sandbox initiative. "We've made the decision to maintain our current approach to offering users thirdparty cookie choice in Chrome, and will not be rolling out a new standalone prompt for thirdparty cookies," Anthony Chavez, vice president of Privacy.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
π€1
π Verizon's DBIR Reveals 34% Jump in Vulnerability Exploitation π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
After a 180 rise in last years report, the exploitation of vulnerabilities continues to grow, now accounting for 20 of all breaches.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Verizon's DBIR Reveals 34% Jump in Vulnerability Exploitation
After a 180% rise in last yearβs report, the exploitation of vulnerabilities continues to grow, now accounting for 20% of all breaches
π FBI Reveals βStaggeringβ $16.6bn Lost to Cybercrime in 2024 π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
The FBI found that cybercrime losses climbed by 33 compared to 2023, driven by tactics like investment fraud and BEC.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
FBI Reveals βStaggeringβ $16.6bn Lost to Cybercrime in 2024
The FBI found that cybercrime losses climbed by 33% compared to 2023, driven by tactics like investment fraud and BEC
π Vulnerability Exploitation and Credential Theft Now Top Initial Access Vectors π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Mandiants MTrends report found that credential theft rose significantly in 2024, driven by the growing use of infostealers.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Vulnerability Exploitation and Credential Theft Now Top Initial Access Vectors
Mandiantβs M-Trends report found that credential theft rose significantly in 2024, driven by the growing use of infostealers
π US Data Breach Victim Count Surges 26% Annually π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
The latest ITRC data finds breach volumes remained flat in Q1 but victim numbers increased 26 annually.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
US Data Breach Victim Count Surges 26% Annually
The latest ITRC data finds breach volumes remained flat in Q1 but victim numbers increased 26% annually
π M&S Grapples with Cyber Incident Affecting In-Store Services π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Marks and Spencer has confirmed that it has been managing a cyber incident for the past few days which affected its contactless payments and click and collect services.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
M&S Grapples with Cyber Incident Affecting In-Store Services
Marks and Spencer has confirmed that it has been managing a cyber incident for the past few days which affected its contactless payments and click and collect services
π Dutch Warn of βWhole of Societyβ Russian Cyber-Threat π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Dutch intelligence report warns of growing Russian aggression with hybrid warfare.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Dutch Warn of βWhole of Societyβ Russian Cyber-Threat
Dutch intelligence report warns of growing Russian aggression with hybrid warfare
π UK Romance Scams Spike 20% as Online Dating Grows π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Barclays found that romance scam victims lost 8000 on average in 2024, a significant increase from the previous year.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
UK Romance Scams Spike 20% as Online Dating Grows
Barclays found that romance scam victims lost Β£8000 on average in 2024, a significant increase from the previous year
π΅οΈββοΈ 'Industrial-Scale' Asian Scam Centers Expand Globally π΅οΈββοΈ
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
The convergence of cybercrime, financial fraud, and organized crime poses a significant threat, especially where these syndicates excel at operating under the radar.π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Darkreading
'Industrial-Scale' Asian Scam Centers Expand Globally
The convergence of cybercrime, financial fraud, and organized crime poses a significant threat, especially where these syndicates excel at operating under the radar.
β€2
ποΈ WhatsApp Adds Advanced Chat Privacy to Blocks Chat Exports and Auto-Downloads ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
WhatsApp has introduced an extra layer of privacy called Advanced Chat Privacy that allows users to block participants from sharing the contents of a conversation in traditional chats and groups. "This new setting available in both chats and groups helps prevent others from taking content outside of WhatsApp for when you may want extra privacy," WhatsApp said in a statement. The optional feature.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
π2π€1
π’ Hackers are using Zoomβs remote control feature to infect devices with malware π’
π Read more.
π Via "ITPro"
----------
ποΈ Seen on @cibsecurity
Security experts have issued an alert over a new social engineering campaign using Zooms remote control features to take over victim devices.π Read more.
π Via "ITPro"
----------
ποΈ Seen on @cibsecurity
IT Pro
Hackers are using Zoomβs remote control feature to infect devices with malware
The Zoom feature could let threat actors install malware or exfiltrate data
π1
π¦Ώ Google Chrome Keeps Third-Party Cookies Settings, Lets Users βMake an Informed Choiceβ π¦Ώ
π Read more.
π Via "Tech Republic"
----------
ποΈ Seen on @cibsecurity
Privacy Sandbox, originally pitched as an alternative to crosssite ad tracking, will not show a standalone prompt. Instead, Chrome is readying a different informed choice.π Read more.
π Via "Tech Republic"
----------
ποΈ Seen on @cibsecurity
TechRepublic
Google Chrome Keeps Third-Party Cookies Settings, Lets Users βMake an Informed Choiceβ
Privacy Sandbox, originally pitched as an alternative to cross-site ad tracking, will not show a standalone prompt. Instead, Chrome is readying a different βinformed choice.β
π€1