πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.1K subscribers
88.5K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ–‹οΈ Leveraging Credentials As Unique Identifiers: A Pragmatic Approach To NHI Inventories πŸ–‹οΈ

Identitybased attacks are on the rise. Attacks in which malicious actors assume the identity of an entity to easily gain access to resources and sensitive data have been increasing in number and frequency over the last few years. Some recent reports estimate that 83 of attacks involve compromised secrets. According to reports such as the Verizon DBIR, attackers are more commonly using stolen.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ ⚑ Weekly Recap: Airline Hacks, Citrix 0-Day, Outlook Malware, Banking Trojans and more πŸ–‹οΈ

Ever wonder what happens when attackers dont break the rulesthey just follow them better than we do? When systems work exactly as theyre built to, but that by design behavior quietly opens the door to risk? This week brings stories that make you stop and rethink whats truly under control. Its not always about a broken firewall or missed patchits about the small choices, default settings.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” International Taskforce Dismantles €460m Crypto Fraud Network πŸ“”

A 460m cryptocurrency fraud scheme has been disrupted by authorities, leading to five arrests in Spain.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Iranian Cyber Threats Persist Despite Ceasefire, US Intelligence Warns πŸ“”

US Defense Industrial Base DIB companies are at increased risk of cyberattacks from Iranaligned hacking groups.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Food Retailer Ahold Delhaize Discloses Data Breach Impacting 2.2 Million πŸ“”

Ahold Delhaize has confirmed a cyberattack exposed personal data of over 2.2 million individuals in the US.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Canada Bans Chinese CCTV Vendor Hikvision Over National Security Concerns πŸ“”

The ban on Hikvision products follows a national security review under the Investment Canada Act.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1
πŸ“” Scattered Spider Actively Targeting Airlines, FBI Warns πŸ“”

The FBI alert comes amid several reported cyber incidents impacting North Americabased airlines, including Hawaiian Airlines.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” IT Worker Jailed After Revenge Attack on Employer πŸ“”

An IT worker has been jailed for launching a cyberattack after he was suspended at work.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Glasgow City Council Warns of Parking Fine Scam πŸ“”

Glasgow City Council is alerting residents to a parking scam which could be linked to a recent cyberincident.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ¦… The Week in Vulnerabilities: Citrix NetScaler Fixes Urged by Cyble πŸ¦…

Cyble The Week in Vulnerabilities Citrix NetScaler Fixes Urged by Cyble " dataimagecaption"Cyble The Week in Vulnerabilities Citrix NetScaler Fixes Urged by Cyble " datamediumfile"httpscyble.comwpcontentuploads202506CybleBlogsVulnerabilitiesCitrix300x150.jpg" datalargefile"httpscyble.comwpcontentuploads202506CybleBlogsVulnerabilitiesCitrix.jpg" title"The Week in Vulnerabilities Citrix NetScaler Fixes Urged by Cyble  1" In addition to highrisk and actively exploited vulnerabilities, Cyble researchers also observed threat actors on cybercrime forums discussing potential exploits and zeroday vulnerabilities, increasing the chances that those flaws could also be exploited.  What follows are some highlights from Cybles weekly Vulnerability Intelligence and Sensor Intelligence reports.  ...

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Airoha Chip Vulns Put Sony, Bose Earbuds & Headphones at Risk πŸ•΅οΈβ€β™‚οΈ

The vulnerabilities, which have yet to be published, could allow a threat actor to hijack not only Bluetooth earbuds and headphones but also the devices connected to them.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Chinese Company Hikvision Banned By Canadian Government πŸ•΅οΈβ€β™‚οΈ

Though the company's video surveillance products will be prohibited for government use, individuals and private businesses can still buy the vendor's products.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1
πŸ•΅οΈβ€β™‚οΈ Hired Hacker Assists Drug Cartel in Finding, Killing FBI Sources πŸ•΅οΈβ€β™‚οΈ

According to a government report, El Chapo's Sinaloa drug cartel used a hacker to spy on people connected to the FBI's 2018 investigation against the kingpin, which led to deadly consequences.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Scattered Spider Hacking Spree Continues With Airline Sector Attacks πŸ•΅οΈβ€β™‚οΈ

Microsoft has called the hacker collective one of the most dangerous current cyberthreats.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” WordPress Plugin Flaw Exposes 600,000 Sites to File Deletion πŸ“”

A severe flaw identified in the Forminator WordPress plugin allows arbitrary file deletion and potential site takeover.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” WordPress Plugin Flaw Exposes 600,000 Sites to File Deletion πŸ“”

A severe flaw identified in the Forminator WordPress plugin allows arbitrary file deletion and potential site takeover.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” WordPress Plugin Flaw Exposes 600,000 Sites to File Deletion πŸ“”

A severe flaw identified in the Forminator WordPress plugin allows arbitrary file deletion and potential site takeover.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” WordPress Plugin Flaw Exposes 600,000 Sites to File Deletion πŸ“”

A severe flaw identified in the Forminator WordPress plugin allows arbitrary file deletion and potential site takeover.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Privilege Escalation Flaw Found in Azure Machine Learning Service πŸ“”

A critical Azure Machine Learning flaw allows privilege escalation, risking subscription compromise.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Privilege Escalation Flaw Found in Azure Machine Learning Service πŸ“”

A critical Azure Machine Learning flaw allows privilege escalation, risking subscription compromise.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 AI-Generated Phishing Sites Mimic Okta, Microsoft 365 in New Threat Campaign 🦿

Threat actors are exploiting Vercel's AI tool to generate convincing phishing pages. Read Vercels response and Oktas tips for keeping your organization secure.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity