πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
24.9K subscribers
88.4K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ–‹οΈ Webinar: Learn How to Build a Reasonable and Legally Defensible Cybersecurity Program πŸ–‹οΈ

Its not enough to be secure. In todays legal climate, you need to prove it. Whether youre protecting a small company or managing compliance across a global enterprise, one thing is clear cybersecurity can no longer be left to guesswork, vague frameworks, or besteffort intentions. Regulators and courts are now holding organizations accountable for how reasonable their security programs are.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Global Law Enforcers and Microsoft Seize 2300+ Lumma Stealer Domains πŸ“”

Law enforcers worldwide have teamed up with Microsoft to disrupt the infrastructure behind Lumma Stealer.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Identity Security Has an Automation Problemβ€”And It's Bigger Than You Think πŸ–‹οΈ

For many organizations, identity security appears to be under control. On paper, everything checks out. But new research from Cerby, based on insights from over 500 IT and security leaders, reveals a different reality too much still depends on peoplenot systemsto function. In fact, fewer than 4 of security teams have fully automated their core identity workflows. Core workflows, like.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Western Logistics and Tech Firms Targeted by Russia’s APT28 πŸ“”

NSA, NCSC and allies warn Western tech and logistics firms of Russian APT28 cyberespionage threat.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Unpatched Versa Concerto Flaws Let Attackers Escape Docker and Compromise Host πŸ–‹οΈ

Cybersecurity researchers have uncovered multiple critical security vulnerabilities impacting the Versa Concerto network security and SDWAN orchestration platform that could be exploited to take control of susceptible instances. It's worth noting that the identified shortcomings remain unpatched despite responsible disclosure on February 13, 2025, prompting a public release of the issues.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” #Infosec2025: NCC Group Expert Warns UK Firms to Prepare for Cyber Security and Resilience Bill πŸ“”

UK businesses should start to plan for required changes to their cybersecurity programs ahead of the Cyber Security and Resilience Bill.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ FBI and Europol Disrupt Lumma Stealer Malware Network Linked to 10 Million Infections πŸ–‹οΈ

A sprawling operation undertaken by global law enforcement agencies and a consortium of private sector firms has disrupted the online infrastructure associated with a commodity information stealer known as Lumma aka LummaC or LummaC2, seizing 2,300 domains that acted as the commandandcontrol C2 backbone to commandeer infected Windows systems. "Malware like LummaC2 is deployed to steal.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
🚨 UK and allies expose Russian intelligence campaign targeting western logistics and technology organisations 🚨

Organisations urged to familiarise themselves with the threat and take immediate action to protect themselves.

πŸ“– Read more.

πŸ”— Via "UK NCSC"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ CISA Warns of Suspected Broader SaaS Attacks Exploiting App Secrets and Cloud Misconfigs πŸ–‹οΈ

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday revealed that Commvault is monitoring cyber threat activity targeting applications hosted in their Microsoft Azure cloud environment. "Threat actors may have accessed client secrets for Commvault's Metallic Microsoft 365 M365 backup softwareasaservice SaaS solution, hosted in Azure," the agency said. "This.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ GitLab Duo Vulnerability Enabled Attackers to Hijack AI Responses with Hidden Prompts πŸ–‹οΈ

Cybersecurity researchers have discovered an indirect prompt injection flaw in GitLab's artificial intelligence AI assistant Duo that could have allowed attackers to steal source code and inject untrusted HTML into its responses, which could then be used to direct victims to malicious websites. GitLab Duo is an artificial intelligence AIpowered coding assistant that enables users to write,.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ U.S. Dismantles DanaBot Malware Network, Charges 16 in $50M Global Cybercrime Operation πŸ–‹οΈ

The U.S. Department of Justice DoJ on Thursday announced the disruption of the online infrastructure associated with DanaBot aka DanaTools and unsealed charges against 16 individuals for their alleged involvement in the development and deployment of the malware, which it said was controlled by a Russiabased cybercrime organization. The malware, the DoJ said, infected more than 300,000.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 Sixteen Doors In: A Red Team Tale of Phishing, Certificates, and Domain Takeover 🌊

What happens when one phishing email opens sixteen different doors into a targets environment? In this realworld red team operation, our experts used minimal resources to simulate how an attacker could move from a single email to full domain takeover, without triggering a single alert. This isnt your average we got in story. Its a The post Sixteen Doors In A Red Team Tale of Phishing, Certificates, and Domain Takeover appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” DragonForce Engages in "Turf War" for Ransomware Dominance πŸ“”

Sophos has observed DragonForce attacking rival ransomware operators including RansomHub as it seeks to expand its reach in the cybercrime marketplace.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ It's been a bad week for ransomware operators πŸ“’

A host of ransomware strains have been neutralized, servers seized, and key players indicted.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ SafeLine WAF: Open Source Web Application Firewall with Zero-Day Detection and Bot Protection πŸ–‹οΈ

From zeroday exploits to largescale bot attacks the demand for a powerful, selfhosted, and userfriendly web application security solution has never been greater. SafeLine is currently the most starred opensource Web Application Firewall WAF on GitHub, with over 16.4K stars and a rapidly growing global user base. This walkthrough covers what SafeLine is, how it works, and why its.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Law Enforcement Busts Initial Access Malware Used to Launch Ransomware πŸ“”

A new Europolled operation has dismantled infrastructure for key initial access malware used to launch ransomware attacks.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Global Dark Web Sting Sees 270 Arrested πŸ“”

Operation Raptor also resulted in the seizure of 184m and a record amount of illegal drugs, firearms and drug trafficking proceeds.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ¦… The Week in Vulnerabilities: Firefox, Roundcube and ICS Flaws Flagged by Cyble πŸ¦…

Cyble The Week in Vulnerabilities Firefox, Roundcube and ICS Flaws Flagged by Cyble " dataimagecaption"Cyble The Week in Vulnerabilities Firefox, Roundcube and ICS Flaws Flagged by Cyble " datamediumfile"httpscyble.comwpcontentuploads202505CybleBlogsITVulnerability300x150.jpg" datalargefile"httpscyble.comwpcontentuploads202505CybleBlogsITVulnerability.jpg" title"The Week in Vulnerabilities Firefox, Roundcube and ICS Flaws Flagged by Cyble 1" Cyble vulnerability intelligence researchers investigated nearly 100 IT and industrial control system ICS vulnerabilities this week and flagged eight as meriting highpriority attention by security teams including two targeted by Russian threat actors. In all, Cyble investigated 21 IT vulnerabilities this week, 68 ICS vulnerabilities, and eight v...

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1
πŸ–‹οΈ 300 Servers and €3.5M Seized as Europol Strikes Ransomware Networks Worldwide πŸ–‹οΈ

As part of the latest "season" of Operation Endgame, a coalition of law enforcement agencies have taken down about 300 servers worldwide, neutralized 650 domains, and issued arrest warrants against 20 targets. Operation Endgame, first launched in May 2024, is an ongoing law enforcement operation targeting services and infrastructures assisting in or directly providing initial or consolidating.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ€”1
πŸ–‹οΈ ViciousTrap Uses Cisco Flaw to Build Global Honeypot from 5,300 Compromised Devices πŸ–‹οΈ

Cybersecurity researchers have disclosed that a threat actor codenamed ViciousTrap has compromised nearly 5,300 unique network edge devices across 84 countries and turned them into a honeypotlike network. The threat actor has been observed exploiting a critical security flaw impacting Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers CVE202320118 to corral them into.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Critical Bugs Left Unpatched in Versa's Concerto Tool πŸ•΅οΈβ€β™‚οΈ

Three zerodays allow an attacker to completely compromise the Concerto application and the host system running it. The vendor has yet to address the issues after being notified three months ago.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity