πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
24.8K subscribers
88.3K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ“’ FBI takes down botnet exploiting aging routers πŸ“’

Organizations warned they should replace potentially affected devices.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ FBI takes down botnet exploiting aging routers πŸ“’

Organizations warned they should replace potentially affected devices.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ MITRE’s near miss: Lessons learned for security and vulnerability management πŸ“’

Cybersecurity leaders can use recent CVE database worries as inspiration to better protect themselves.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ ⚑ Weekly Recap: Zero-Day Exploits, Developer Malware, IoT Botnets, and AI-Powered Scams πŸ–‹οΈ

What do a source code editor, a smart billboard, and a web server have in common? Theyve all become launchpads for attacksbecause cybercriminals are rethinking what counts as infrastructure. Instead of chasing highvalue targets directly, threat actors are now quietly taking over the overlooked outdated software, unpatched IoT devices, and opensource packages. It's not just cleverits.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ The Persistence Problem: Why Exposed Credentials Remain Unfixedβ€”and How to Change That πŸ–‹οΈ

Detecting leaked credentials is only half the battle. The real challengeand often the neglected half of the equationis what happens after detection. New research from GitGuardian's State of Secrets Sprawl 2025 report reveals a disturbing trend the vast majority of exposed company secrets discovered in public repositories remain valid for years after detection, creating an expanding attack.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Fake AI Tools Used to Spread Noodlophile Malware, Targeting 62,000+ via Facebook Lures πŸ–‹οΈ

Threat actors have been observed leveraging fake artificial intelligence AIpowered tools as a lure to entice users into downloading an information stealer malware dubbed Noodlophile. "Instead of relying on traditional phishing or cracked software sites, they build convincing AIthemed platforms often advertised via legitimatelooking Facebook groups and viral social media campaigns,".

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” EU Launches Free Entry-Level Cyber Training Program πŸ“”

SheCyber training program is focused on improving the representation of women and other underrepresented groups in the cybersecurity industry.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” FreeDrain Phishing Scam Drains Crypto Hobbyists' Wallets πŸ“”

A global cryptocurrency phishing operation likely based in India or Sri Lanka has been stealing digital assets since at least 2022.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Japanese Account Hijackers Make $2bn+ of Illegal Trades πŸ“”

Hackers have compromised Japanese trading accounts in an apparent attempt to manipulate the stock market.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” German Police Shutter β€œeXch” Money Laundering Service πŸ“”

Germanys BKA has seized the infrastructure behind the crypto swapping service eXch.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1
πŸ¦… Weekly Vulnerability Report: IT, ICS Alerts Issued by Cyble πŸ¦…

Cyble Weekly Vulnerability Report IT, ICS Alerts Issued by Cyble " dataimagecaption"Cyble Weekly Vulnerability Report IT, ICS Alerts Issued by Cyble " datamediumfile"httpscyble.comwpcontentuploads202505CybleBlogsWeeklyVulnerabilityICS300x150.jpg" datalargefile"httpscyble.comwpcontentuploads202505CybleBlogsWeeklyVulnerabilityICS.jpg" title"Weekly Vulnerability Report IT, ICS Alerts Issued by Cyble 1" In the weekly vulnerability report, Cyble identified several IT and industrial control system ICS vulnerabilities that pose significant risk and should be prioritized by security teams for patching or mitigation. The reports examined nearly 60 vulnerabilities in all, and also looked at vulnerabilities discussed by threat actors on the dark web and attack attempts detected by Cyble honeypo...

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Vulnerability Detection Tops Agentic AI at RSAC's Startup Competition πŸ•΅οΈβ€β™‚οΈ

Agenticnative startups threaten to reduce the zeroday problem to just a zerohour issue. Of course, AI agents will accelerate offensive attacks as well.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” #Infosec2025: Experts to Shine Light on Vendor Supply Chain Resilience Against Third-Party Risks πŸ“”

During Infosecurity Europe 2025 experts will explore how to strengthen organizational resilience against persistent thirdparty risks.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Can Cybersecurity Keep Up In the AI Arms Race? πŸ•΅οΈβ€β™‚οΈ

New research shows China is quickly catching up with the US in AI innovation. Experts weigh in on what it means for cyber defenders.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Criminal Proxy Network Infects Thousands of IoT Devices πŸ“”

The criminal proxy network infected thousands of IoT and endoflife devices, creating dangerous botnet.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ ASUS Patches DriverHub RCE Flaws Exploitable via HTTP and Crafted .ini Files πŸ–‹οΈ

ASUS has released updates to address two security flaws impacting ASUS DriverHub that, if successfully exploited, could enable an attacker to leverage the software in order to achieve remote code execution. DriverHub is a tool that's designed to automatically detect the motherboard model of a computer and display necessary driver updates for subsequent installation by communicating with a.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Hacktivist Attacks on India Overstated Amid APT36 Espionage Threat πŸ“”

Hacktivist claims on Indian infrastructure raised alarms, but investigations showed minimal damage.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ”₯1
πŸ•΅οΈβ€β™‚οΈ 4 Hackers Arrested After Millions Made in Global Botnet Business πŸ•΅οΈβ€β™‚οΈ

The cybercriminals infected older wireless Internet routers with Anyproxy and 5socks malware in order to reconfigure them all without the users' knowledge.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 Forrester’s Top 10 Emerging Tech for 2025: Which 3 are Standouts? 🦿

A Forrester VP explains to TechRepublic readers why three of these 10 emerging technologies for the year should be on managers' radar now.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ NSO Group's Legal Loss May Do Little to Curtail Spyware πŸ•΅οΈβ€β™‚οΈ

The 168 million judgment against NSO Group underscores how citizens put little store in the spyware industry's justifications for circumventing security but will it matter?.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ€”1
πŸ•΅οΈβ€β™‚οΈ Attackers Lace Fake Generative AI Tools With 'Noodlophile' Malware πŸ•΅οΈβ€β™‚οΈ

Threat actors are scamming users by advertising legitimatelooking generative AI websites that, when visited, install credentialstealing malware onto the victim's computer.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1