πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25K subscribers
88.4K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ“” Law Enforcement Crackdowns Drive Novel Ransomware Affiliate Schemes πŸ“”

Increased law enforcement pressure has forced ransomware groups like DragonForce and Anubis to move away from traditional affiliate models.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” SAP Fixes Critical Vulnerability After Evidence of Exploitation πŸ“”

A maximum severity flaw affecting SAP NetWeaver has been exploited by threat actors.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” M&S Shuts Down Online Orders Amid Ongoing Cyber Incident πŸ“”

British retailer MS continues to tackle a cyber incident with online orders now paused for customers.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Security Experts Flag Chrome Extension Using AI Engine to Act Without User Input πŸ“”

Researchers have found a Chrome extension that can act on the users behalf by using a popular AI agent orchestration protocol.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” US Data Breach Lawsuits Total $155M Amid Cybersecurity Failures πŸ“”

Panaseer's latest cybersecurity study revealed that US companies have paid 155M in data breach lawsuit settlements over just six months.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Popular LLMs Found to Produce Vulnerable Code by Default πŸ“”

Backslash Security found that nave prompts resulted in code vulnerable to at least four of the of the 10 most common vulnerabilities across popular LLMs.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Mobile Applications: A Cesspool of Security Issues πŸ•΅οΈβ€β™‚οΈ

An analysis of more than a halfmillion mobile apps find encryption problems, privacy issues, and known vulnerabilities in thirdparty code. What can users and developers do?.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 Breakthrough Could Lead to Quantum Encryption in 10 Years 🦿

This research might also help pave the way for the quantum internet and other quantum systems in perhaps 4050 years.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site Backdoors πŸ–‹οΈ

Cybersecurity researchers are warning about a largescale phishing campaign targeting WooCommerce users with a fake security alert urging them to download a "critical patch" but deploy a backdoor instead. WordPress security company Patchstack described the activity as sophisticated and a variant of another campaign observed in December 2023 that employed a fake CVE ploy to breach sites running.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site Backdoors πŸ–‹οΈ

Cybersecurity researchers are warning about a largescale phishing campaign targeting WooCommerce users with a fake security alert urging them to download a "critical patch" but deploy a backdoor instead. WordPress security company Patchstack described the activity as sophisticated and a variant of another campaign observed in December 2023 that employed a fake CVE ploy to breach sites running.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site Backdoors πŸ–‹οΈ

Cybersecurity researchers are warning about a largescale phishing campaign targeting WooCommerce users with a fake security alert urging them to download a "critical patch" but deploy a backdoor instead. WordPress security company Patchstack described the activity as sophisticated and a variant of another campaign observed in December 2023 that employed a fake CVE ploy to breach sites running.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site Backdoors πŸ–‹οΈ

Cybersecurity researchers are warning about a largescale phishing campaign targeting WooCommerce users with a fake security alert urging them to download a "critical patch" but deploy a backdoor instead. WordPress security company Patchstack described the activity as sophisticated and a variant of another campaign observed in December 2023 that employed a fake CVE ploy to breach sites running.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 Breakthrough Could Lead to Quantum Encryption in 10 Years 🦿

This research might also help pave the way for the quantum internet and other quantum systems in perhaps 4050 years.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Hackers Exploit Critical Craft CMS Flaws; Hundreds of Servers Likely Compromised πŸ–‹οΈ

Threat actors have been observed exploiting two newly disclosed critical security flaws in Craft CMS in zeroday attacks to breach servers and gain unauthorized access. The attacks, first observed by Orange Cyberdefense SensePost on February 14, 2025, involve chaining the below vulnerabilities CVE202458136 CVSS score 9.0 An improper protection of alternate path flaw in the Yii PHP.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Hackers Exploit Critical Craft CMS Flaws; Hundreds of Servers Likely Compromised πŸ–‹οΈ

Threat actors have been observed exploiting two newly disclosed critical security flaws in Craft CMS in zeroday attacks to breach servers and gain unauthorized access. The attacks, first observed by Orange Cyberdefense SensePost on February 14, 2025, involve chaining the below vulnerabilities CVE202458136 CVSS score 9.0 An improper protection of alternate path flaw in the Yii PHP.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site Backdoors πŸ–‹οΈ

Cybersecurity researchers are warning about a largescale phishing campaign targeting WooCommerce users with a fake security alert urging them to download a "critical patch" but deploy a backdoor instead. WordPress security company Patchstack described the activity as sophisticated and a variant of another campaign observed in December 2023 that employed a fake CVE ploy to breach sites running.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Hackers Exploit Critical Craft CMS Flaws; Hundreds of Servers Likely Compromised πŸ–‹οΈ

Threat actors have been observed exploiting two newly disclosed critical security flaws in Craft CMS in zeroday attacks to breach servers and gain unauthorized access. The attacks, first observed by Orange Cyberdefense SensePost on February 14, 2025, involve chaining the below vulnerabilities CVE202458136 CVSS score 9.0 An improper protection of alternate path flaw in the Yii PHP.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
❀1
πŸ“” FBI Asks for Help Tracking Chinese Salt Typhoon Actors πŸ“”

The US authorities have asked the public to help them unmask Chinas Salt Typhoon threat actors.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1
πŸ–‹οΈ WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site Backdoors πŸ–‹οΈ

Cybersecurity researchers are warning about a largescale phishing campaign targeting WooCommerce users with a fake security alert urging them to download a "critical patch" but deploy a backdoor instead. WordPress security company Patchstack described the activity as sophisticated and a variant of another campaign observed in December 2023 that employed a fake CVE ploy to breach sites running.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Hackers Exploit Critical Craft CMS Flaws; Hundreds of Servers Likely Compromised πŸ–‹οΈ

Threat actors have been observed exploiting two newly disclosed critical security flaws in Craft CMS in zeroday attacks to breach servers and gain unauthorized access. The attacks, first observed by Orange Cyberdefense SensePost on February 14, 2025, involve chaining the below vulnerabilities CVE202458136 CVSS score 9.0 An improper protection of alternate path flaw in the Yii PHP.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site Backdoors πŸ–‹οΈ

Cybersecurity researchers are warning about a largescale phishing campaign targeting WooCommerce users with a fake security alert urging them to download a "critical patch" but deploy a backdoor instead. WordPress security company Patchstack described the activity as sophisticated and a variant of another campaign observed in December 2023 that employed a fake CVE ploy to breach sites running.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity