🛡 Cybersecurity & Privacy 🛡 - News
24.8K subscribers
88.3K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
🦿 Malwarebytes vs McAfee: Which Antivirus Is Right for You? 🦿

Malwarebytes and McAfee are both firmly established in the antivirus business, but which is better? Read this guide to find out.

📖 Read more.

🔗 Via "Tech Republic"

----------
👁️ Seen on @cibsecurity
🖋️ Why CTEM is the Winning Bet for CISOs in 2025 🖋️

Continuous Threat Exposure Management CTEM has moved from concept to cornerstone, solidifying its role as a strategic enabler for CISOs. No longer a theoretical framework, CTEM now anchors todays cybersecurity programs by continuously aligning security efforts with realworld risk. At the heart of CTEM is the integration of Adversarial Exposure Validation AEV, an advanced, offensive.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Firefox Patches 2 Zero-Days Exploited at Pwn2Own Berlin with $100K in Rewards 🖋️

Mozilla has released security updates to address two critical security flaws in its Firefox browser that could be potentially exploited to access sensitive data or achieve code execution. The vulnerabilities, both of which were exploited as a zeroday at Pwn2Own Berlin, are listed below CVE20254918 An outofbounds access vulnerability when resolving Promise objects that could allow an.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
👍2
🖋️ Weekly Recap: Zero-Day Exploits, Insider Threats, APT Targeting, Botnets and More 🖋️

Cybersecurity leaders arent just dealing with attackstheyre also protecting trust, keeping systems running, and maintaining their organizations reputation. This weeks developments highlight a bigger issue as we rely more on digital tools, hidden weaknesses can quietly grow.  Just fixing problems isnt enough anymoreresilience needs to be built into everything from the ground up.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📔 GDPR Changes Risk Undermining its Principles, Civil Society Groups Warn 📔

Civil society groups and academics are calling for the EU's GDPR to remain unchanged following the EU Commission's plans to revisit it.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
👍1
📔 SEC SIM Swapper Gets 14 Months for X Account Hijack 📔

An Alabama man has been sentenced to 14 months for hacking the SECs X account.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 Legal Aid Agency Admits Major Breach of Applicant Data 📔

The UK government says that hackers accessed a large amount of personal information in attack on Legal Aid Agency.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 #Infosec2025: How CISOs Can Stay Ahead of Evolving Cloud Threats 📔

Security experts tell Infosecurity about the cloud attack trends in the past year, and how CISOs can mitigate evolving techniques.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🦅 The Week in Vulnerabilities: IT, ICS Fixes Prioritized by Cyble 🦅

Cyble The Week in Vulnerabilities IT, ICS Fixes Prioritized by Cyble " dataimagecaption"Cyble The Week in Vulnerabilities IT, ICS Fixes Prioritized by Cyble " datamediumfile"httpscyble.comwpcontentuploads202505CybleBlogsITICS300x150.jpg" datalargefile"httpscyble.comwpcontentuploads202505CybleBlogsITICS.jpg" title"The Week in Vulnerabilities IT, ICS Fixes Prioritized by Cyble 1" In reports to clients last week, Cyble analyzed over 60 IT and industrial control system ICS vulnerabilities to identify highpriority fixes for security teams. The vulnerabilities included 16 critical vulnerabilities and eight that were the target of exploits circulating on underground and dark web forums. From the list, Cyble researchers identified nine IT vulnerabilities that can lead to system compromise,...

📖 Read more.

🔗 Via "CYBLE"

----------
👁️ Seen on @cibsecurity
📢 NHS England launches cyber charter to shore up vendor security practices 📢

Voluntary charter follows a series of highprofile ransomware attacks.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
📔 RCE Vulnerability Found in RomethemeKit For Elementor Plugin 📔

RomethemeKit for Elementor has released a patch addressing an RCE vulnerability exposing 30,000 sites.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🖋️ Ransomware Gangs Use Skitnet Malware for Stealthy Data Theft and Remote Access 🖋️

Several ransomware actors are using a malware called Skitnet as part of their postexploitation efforts to steal sensitive data and establish remote control over compromised hosts. "Skitnet has been sold on underground forums like RAMP since April 2024," Swiss cybersecurity company PRODAFT told The Hacker News. "However, since early 2025, we have observed multiple ransomware operators using it.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📔 New Malware on PyPI Poses Threat to Open-Source Developers 📔

Malicious dbgpkg package on PyPI poses as a debugging utility but acts as a delivery mechanism for a stealthy backdoor.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🖋️ RVTools Official Site Hacked to Deliver Bumblebee Malware via Trojanized Installer 🖋️

The official site for RVTools has been hacked to serve a compromised installer for the popular VMware environment reporting utility. "Robware.net and RVTools.com are currently offline. We are working expeditiously to restore service and appreciate your patience," the company said in a statement posted on its website. "Robware.net and RVTools.com are the only authorized and supported websites for.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ 'Operation RoundPress' Targets Ukraine in XSS Webmail Attacks 🕵️‍♂️

A cyberespionage campaign is targeting Ukrainian government entities with a series of sophisticated spearphishing attacks that exploit XSS vulnerabilities.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ S. Dakota CIO Gottumukkala Signs on as CISA Deputy Director 🕵️‍♂️

The addition is an important hire for the No. 2 position at the cyber agency. The main director role remains unfilled postEasterly, with Bridget Bean taking over acting duties for now.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
📢 Wifi network attacks: The risk to businesses 📢

Addressing common issues such as misconfiguration and weak encryption can turn workers into victims.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
📔 Critical Zero-Days Found in Versa Networks SD-WAN/SASE Platform 📔

The unpatched vulnerabilities, with a CVSS score of 8.6 to 10.0, can lead to remote code execution via authentication bypass.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📢 Wifi network attacks: The risk to businesses 📢

Addressing common issues such as misconfiguration and weak encryption can turn workers into victims.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ The Security Threats of Open Source AI Exposed by DeepSeek 🕵️‍♂️

DeepSeek's risks must be carefully considered, and ultimately mitigated, in order to enjoy the many benefits of generative AI in a manner that is safe and secure for all organizations and users.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
📔 Critical Zero-Days Found in Versa Networks SD-WAN/SASE Platform 📔

The unpatched vulnerabilities, with a CVSS score of 8.6 to 10.0, can lead to remote code execution via authentication bypass.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity