πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.1K subscribers
88.4K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ“” Hands-On Skills Now Key to Landing Your First Cyber Role πŸ“”

An ISC2 study found that 90 of security hiring managers would consider entrylevel candidates with only previous IT work experience.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Researcher Finds Five Zero-Days and 20+ Misconfigurations in Salesforce Cloud πŸ“”

The products affected by the issues are part of the Salesforce OmniStudio suite, including FlexCards and Data Mappers.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Half of Mobile Users Now Face Daily Scams πŸ“”

Malwarebytes claims 44 of mobile users are exposed to scams every day.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Two Microsoft Zero-Days for Admins to Fix in June Patch Tuesday πŸ“”

Microsoft has patched two zero days this month, one of which is being exploited in the wild.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 Partnership with Cryptos Systems: Strengthening Cybersecurity Across LATAM 🌊

Were excited to share the news our strategic partnership with Cryptos Systems, a respected cybersecurity consulting firm with a strong presence across Latin America. This collaboration marks a major leap towards bringing firstrate security services closer to regional businesses to help them stay compliant and prepared for modern cyber threat challenges. An Alliance for The post Partnership with Cryptos Systems Strengthening Cybersecurity Across LATAM appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸͺ– The Impact of Artificial Intelligence on the Cybersecurity Workforce πŸͺ–

The NICE Workforce Framework for Cybersecurity NICE Framework was revised in November 2020 as NIST Special Publication 800181 rev.1 to enable more effective and rapid updates to the NICE Framework Components, including how the advent of emerging technologies would impact cybersecurity work. NICE has been actively engaging in conversations with federal departments and agencies industry education, training, and certification providers and international representatives to understand how Artificial Intelligence AI might affect the nature of our Nations digital work. NICE has also led.

πŸ“– Read more.

πŸ”— Via "NIST"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Apple Zero-Click Flaw in Messages Exploited to Spy on Journalists Using Paragon Spyware πŸ–‹οΈ

Apple has disclosed that a nowpatched security flaw present in its Messages app was actively exploited in the wild to target civil society members in sophisticated cyber attacks. The vulnerability, tracked as CVE202543200, was addressed on February 10, 2025, as part of iOS 18.3.1, iPadOS 18.3.1, iPadOS 17.7.5, macOS Sequoia 15.3.1, macOS Sonoma 14.7.4, macOS Ventura 13.7.4, watchOS 11.3.1,.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ LockBit data dump reveals a treasure trove of intel on the notorious hacker group πŸ“’

An analysis of May's SQL database dump shows how much LockBit was really making.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” European Journalists Targeted by Paragon Spyware, Citizen Lab Confirms πŸ“”

This is the first forensic evidence that journalists devices have been infected with Paragons Graphite spyware.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
❀1
πŸ“’ AI security blunders have cyber professionals scrambling πŸ“’

Growing AI security incidents have cyber teams fending off an array of threats.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Application security risk: How leaders can protect their businesses πŸ“’

Application security risk is higher than ever, as new services and expanding attack surfaces put pressure on cyber leaders.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Why CISOs Must Align Business Objectives & Cybersecurity πŸ•΅οΈβ€β™‚οΈ

This alignment makes a successful CISO, but creating the same sentiment across business leadership creates a culture of commitment and greatly contributes to achieving goals.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Cyberattacks on Humanitarian Orgs Jump Worldwide πŸ•΅οΈβ€β™‚οΈ

These groups suffered three times the cyberattacks as the year previous, with DDoS attacks dominating and vulnerability scans and SQL injection also more common.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Ransomware Gangs Exploit Unpatched SimpleHelp Flaws to Target Victims with Double Extortion πŸ–‹οΈ

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday disclosed that ransomware actors are targeting unpatched SimpleHelp Remote Monitoring and Management RMM instances to compromise customers of an unnamed utility billing software provider. "This incident reflects a broader pattern of ransomware actors targeting organizations through unpatched versions of SimpleHelp.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ CTEM is the New SOC: Shifting from Monitoring Alerts to Measuring Risk πŸ–‹οΈ

Introduction Security at a Tipping Point Security Operations Centers SOCs were built for a different era, one defined by perimeterbased thinking, known threats, and manageable alert volumes. But todays threat landscape doesnt play by those rules. The sheer volume of telemetry, overlapping tools, and automated alerts has pushed traditional SOCs to the edge. Security teams are overwhelmed,.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” European Journalists Targeted by Paragon Spyware, Citizen Lab Confirms πŸ“”

This is the first forensic evidence that journalists devices have been infected with Paragons Graphite spyware.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Ransomware Gang Exploits SimpleHelp RMM to Compromise Utility Billing Firm πŸ“”

A CISA advisory urged all software vendors and downstream customers to check if they are impacted by unpatched versions of the SimpleHelp RMM tool.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Microsoft 365 Copilot: New Zero-Click AI Vulnerability Allows Corporate Data Theft πŸ“”

Researchers have found a flaw in Microsoft 365 Copilot that allows the exfiltration of sensitive corporate data with a simple email.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 12 Best MSSP Providers Businesses Trust and Grow With 🌊

Managed security services providers, or MSSP providers for short, have become essential allies to businesses in the face of soaring cyber attacks. These thirdparty experts step in to fill the critical cybersecurity gaps, delivering managed security servicesall backed by deep expertise that many inhouse teams simply cant afford. To help you find the right security The post 12 Best MSSP Providers Businesses Trust and Grow With appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
❀1
🌊 Python Developer 🌊

The post Python Developer appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ¦… The Week in Vulnerabilities: Ivanti, Versa Flaws Flagged by Cyble πŸ¦…

Cyble The Week in Vulnerabilities Ivanti, Versa Flaws Flagged by Cyble " dataimagecaption"Cyble The Week in Vulnerabilities Ivanti, Versa Flaws Flagged by Cyble " datamediumfile"httpscyble.comwpcontentuploads202506CybleBlogsVulnerabilitiesIvanti300x150.png" datalargefile"httpscyble.comwpcontentuploads202506CybleBlogsVulnerabilitiesIvanti1024x512.png" title"The Week in Vulnerabilities Ivanti, Versa Flaws Flagged by Cyble 1" Cyble vulnerability intelligence researchers highlighted several highrisk IT and ICS vulnerabilities this week, including some that are actively targeted in attack attempts detected by Cyble honeypot sensors. As the week also included Patch Tuesday for many vendors, several new critical vulnerabilities emerged, including some that are already under active attack or...

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity