🛡 Cybersecurity & Privacy 🛡 - News
25K subscribers
88.4K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
🖋️ WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site Backdoors 🖋️

Cybersecurity researchers are warning about a largescale phishing campaign targeting WooCommerce users with a fake security alert urging them to download a "critical patch" but deploy a backdoor instead. WordPress security company Patchstack described the activity as sophisticated and a variant of another campaign observed in December 2023 that employed a fake CVE ploy to breach sites running.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Hackers Exploit Critical Craft CMS Flaws; Hundreds of Servers Likely Compromised 🖋️

Threat actors have been observed exploiting two newly disclosed critical security flaws in Craft CMS in zeroday attacks to breach servers and gain unauthorized access. The attacks, first observed by Orange Cyberdefense SensePost on February 14, 2025, involve chaining the below vulnerabilities CVE202458136 CVSS score 9.0 An improper protection of alternate path flaw in the Yii PHP.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📔 Government Set to Ban SIM Farms in European First 📔

The UK government says it will ban the possession or supply of SIM farms, in a fraud crackdown.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🖋️ Hackers Exploit Critical Craft CMS Flaws; Hundreds of Servers Likely Compromised 🖋️

Threat actors have been observed exploiting two newly disclosed critical security flaws in Craft CMS in zeroday attacks to breach servers and gain unauthorized access. The attacks, first observed by Orange Cyberdefense SensePost on February 14, 2025, involve chaining the below vulnerabilities CVE202458136 CVSS score 9.0 An improper protection of alternate path flaw in the Yii PHP.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site Backdoors 🖋️

Cybersecurity researchers are warning about a largescale phishing campaign targeting WooCommerce users with a fake security alert urging them to download a "critical patch" but deploy a backdoor instead. WordPress security company Patchstack described the activity as sophisticated and a variant of another campaign observed in December 2023 that employed a fake CVE ploy to breach sites running.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Hackers Exploit Critical Craft CMS Flaws; Hundreds of Servers Likely Compromised 🖋️

Threat actors have been observed exploiting two newly disclosed critical security flaws in Craft CMS in zeroday attacks to breach servers and gain unauthorized access. The attacks, first observed by Orange Cyberdefense SensePost on February 14, 2025, involve chaining the below vulnerabilities CVE202458136 CVSS score 9.0 An improper protection of alternate path flaw in the Yii PHP.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Hackers Exploit Critical Craft CMS Flaws; Hundreds of Servers Likely Compromised 🖋️

Threat actors have been observed exploiting two newly disclosed critical security flaws in Craft CMS in zeroday attacks to breach servers and gain unauthorized access. The attacks, first observed by Orange Cyberdefense SensePost on February 14, 2025, involve chaining the below vulnerabilities CVE202458136 CVSS score 9.0 An improper protection of alternate path flaw in the Yii PHP.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Earth Kurma Targets Southeast Asia With Rootkits and Cloud-Based Data Theft Tools 🖋️

Government and telecommunications sectors in Southeast Asia have become the target of a "sophisticated" campaign undertaken by a new advanced persistent threat APT group called Earth Kurma since June 2024. The attacks, per Trend Micro, have leveraged custom malware, rootkits, and cloud storage services for data exfiltration. The Philippines, Vietnam, Thailand, and Malaysia are among the.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📔 ISACA Highlights Critical Lack of Quantum Threat Mitigation Strategies 📔

An ISACA survey found that just 5 of organizations have a defined strategy to defend against quantumenabled threats.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🦿 4 Different Types of VPNs & When to Use Them 🦿

Learn about the different types of VPNs and when to use them. Find out which type of VPN suits your needs with this comprehensive guide.

📖 Read more.

🔗 Via "Tech Republic"

----------
👁️ Seen on @cibsecurity
🖋️ How Breaches Start: Breaking Down 5 Real Vulns 🖋️

Not every security vulnerability is high risk on its own but in the hands of an advanced attacker, even small weaknesses can escalate into major breaches. These five real vulnerabilities, uncovered by Intruders bughunting team, reveal how attackers turn overlooked flaws into serious security incidents. 1. Stealing AWS Credentials with a Redirect ServerSide Request Forgery SSRF is a.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📢 Cisco takes aim at AI security at RSAC with ServiceNow partnership 📢

The companies claim Cisco AI Defense and ServiceNow SecOps will help address new challenges raised by AI.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ DoJ Data Security Program Highlights Data Sharing Challenges 🕵️‍♂️

The Department of Justice announced compliance rules for the Data Security Program that will require organizations to reexamine how they do business and with whom.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🌊 Tech Lead – SDK (C++) 🌊

The post Tech Lead SDK C appeared first on UnderDefense.

📖 Read more.

🔗 Via "UnderDefense"

----------
👁️ Seen on @cibsecurity
📔 Researchers Note 16.7% Increase in Automated Scanning Activity 📔

According to the 2025 Global Threat Landscape Report from FortiGuard, threat actors are executing 36,000 scans per second.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🌊 C++ Developer 🌊

The post C Developer appeared first on UnderDefense.

📖 Read more.

🔗 Via "UnderDefense"

----------
👁️ Seen on @cibsecurity
📢 Blackouts in Spain and Portugal could be a cyber attack 📢

Both countries are "paralyzed" by nationwide power outages.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
🖋️ Weekly Recap: Critical SAP Exploit, AI-Powered Phishing, Major Breaches, New CVEs & More 🖋️

What happens when cybercriminals no longer need deep skills to breach your defenses? Todays attackers are armed with powerful tools that do the heavy lifting from AIpowered phishing kits to large botnets ready to strike. And theyre not just after big corporations. Anyone can be a target when fake identities, hijacked infrastructure, and insider tricks are used to slip past security.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📔 Half of Mobile Devices Run Outdated Operating Systems 📔

50 of mobile devices run outdated operating systems, increasing vulnerability to cyberattacks, according to the latest report from Zimperium.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🌊 Step-by-Step Guide to Switching Cyber Security Providers 🌊

When your provider stops delivering, its time for a change. This stepbystep guide shows you how to switch MSSP, MDR, MXDR... The post StepbyStep Guide to Switching Cyber Security Providers appeared first on UnderDefense.

📖 Read more.

🔗 Via "UnderDefense"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Forget the Stack; Focus on Control 🕵️‍♂️

Security teams are under more pressure than ever and cybersecurity debt is adding fuel to the fire. While it can't be eliminated overnight, it can be managed.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity