🛡 Cybersecurity & Privacy 🛡 - News
25.1K subscribers
88.5K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
📔 Privilege Escalation Flaw Found in Azure Machine Learning Service 📔

A critical Azure Machine Learning flaw allows privilege escalation, risking subscription compromise.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🖋️ Over 40 Malicious Firefox Extensions Target Cryptocurrency Wallets, Stealing User Assets 🖋️

Cybersecurity researchers have uncovered over 40 malicious browser extensions for Mozilla Firefox that are designed to steal cryptocurrency wallet secrets, putting users' digital assets at risk. "These extensions impersonate legitimate wallet tools from widelyused platforms such as Coinbase, MetaMask, Trust Wallet, Phantom, Exodus, OKX, Keplr, MyMonero, Bitget, Leap, Ethereum Wallet, and Filfox.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Over 40 Malicious Firefox Extensions Target Cryptocurrency Wallets, Stealing User Assets 🖋️

Cybersecurity researchers have uncovered over 40 malicious browser extensions for Mozilla Firefox that are designed to steal cryptocurrency wallet secrets, putting users' digital assets at risk. "These extensions impersonate legitimate wallet tools from widelyused platforms such as Coinbase, MetaMask, Trust Wallet, Phantom, Exodus, OKX, Keplr, MyMonero, Bitget, Leap, Ethereum Wallet, and Filfox.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📔 WordPress Plugin Flaw Exposes 600,000 Sites to File Deletion 📔

A severe flaw identified in the Forminator WordPress plugin allows arbitrary file deletion and potential site takeover.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🖋️ Over 40 Malicious Firefox Extensions Target Cryptocurrency Wallets, Stealing User Assets 🖋️

Cybersecurity researchers have uncovered over 40 malicious browser extensions for Mozilla Firefox that are designed to steal cryptocurrency wallet secrets, putting users' digital assets at risk. "These extensions impersonate legitimate wallet tools from widelyused platforms such as Coinbase, MetaMask, Trust Wallet, Phantom, Exodus, OKX, Keplr, MyMonero, Bitget, Leap, Ethereum Wallet, and Filfox.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ The Hidden Weaknesses in AI SOC Tools that No One Talks About 🖋️

If youre evaluating AIpowered SOC platforms, youve likely seen bold claims faster triage, smarter remediation, and less noise. But under the hood, not all AI is created equal. Many solutions rely on pretrained AI models that are hardwired for a handful of specific use cases. While that might work for yesterdays SOC, today's reality is different. Modern security operations teams face a.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ The Hidden Weaknesses in AI SOC Tools that No One Talks About 🖋️

If youre evaluating AIpowered SOC platforms, youve likely seen bold claims faster triage, smarter remediation, and less noise. But under the hood, not all AI is created equal. Many solutions rely on pretrained AI models that are hardwired for a handful of specific use cases. While that might work for yesterdays SOC, today's reality is different. Modern security operations teams face a.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📔 CVE Program Launches Two New Forums to Enhance CVE Utilization 📔

The CVE Board has launched a Consumer Working Group and a Researcher Working Group, allowing new stakeholders to shape the future of the CVE Program.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 CVE Program Launches Two New Forums to Enhance CVE Utilization 📔

The CVE Board has launched a Consumer Working Group and a Researcher Working Group, allowing new stakeholders to shape the future of the CVE Program.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 Privilege Escalation Flaw Found in Azure Machine Learning Service 📔

A critical Azure Machine Learning flaw allows privilege escalation, risking subscription compromise.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ New Cyber Blueprint Aims to Guide Organizations on AI Journey 🕵️‍♂️

Deloitte's new blueprint looks to bridge the gap between the massive push for AI adoption and a lack of preparedness among leaders and employees.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🖋️ The Hidden Weaknesses in AI SOC Tools that No One Talks About 🖋️

If youre evaluating AIpowered SOC platforms, youve likely seen bold claims faster triage, smarter remediation, and less noise. But under the hood, not all AI is created equal. Many solutions rely on pretrained AI models that are hardwired for a handful of specific use cases. While that might work for yesterdays SOC, today's reality is different. Modern security operations teams face a.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ New Cyber Blueprint Aims to Guide Organizations on AI Journey 🕵️‍♂️

Deloitte's new blueprint looks to bridge the gap between the massive push for AI adoption and a lack of preparedness among leaders and employees.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🖋️ The Hidden Weaknesses in AI SOC Tools that No One Talks About 🖋️

If youre evaluating AIpowered SOC platforms, youve likely seen bold claims faster triage, smarter remediation, and less noise. But under the hood, not all AI is created equal. Many solutions rely on pretrained AI models that are hardwired for a handful of specific use cases. While that might work for yesterdays SOC, today's reality is different. Modern security operations teams face a.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ The Hidden Weaknesses in AI SOC Tools that No One Talks About 🖋️

If youre evaluating AIpowered SOC platforms, youve likely seen bold claims faster triage, smarter remediation, and less noise. But under the hood, not all AI is created equal. Many solutions rely on pretrained AI models that are hardwired for a handful of specific use cases. While that might work for yesterdays SOC, today's reality is different. Modern security operations teams face a.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ New Cyber Blueprint Aims to Guide Organizations on AI Journey 🕵️‍♂️

Deloitte's new blueprint looks to bridge the gap between the massive push for AI adoption and a lack of preparedness among leaders and employees.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🖋️ Chinese Hackers Exploit Ivanti CSA Zero-Days in Attacks on French Government, Telecoms 🖋️

The French cybersecurity agency on Tuesday revealed that a number of entities spanning governmental, telecommunications, media, finance, and transport sectors in the country were impacted by a malicious campaign undertaken by a Chinese hacking group by weaponizing several zeroday vulnerabilities in Ivanti Cloud Services Appliance CSA devices. The campaign, detected at the beginning of.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📔 Automation and Vulnerability Exploitation Drive Mass Ransomware Breaches 📔

ReliaQuest warns that initial access vulnerability exploitation is driving successful ransomware attacks.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🖋️ Chinese Hackers Exploit Ivanti CSA Zero-Days in Attacks on French Government, Telecoms 🖋️

The French cybersecurity agency on Tuesday revealed that a number of entities spanning governmental, telecommunications, media, finance, and transport sectors in the country were impacted by a malicious campaign undertaken by a Chinese hacking group by weaponizing several zeroday vulnerabilities in Ivanti Cloud Services Appliance CSA devices. The campaign, detected at the beginning of.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Dark Web Vendors Shift to Third Parties, Supply Chains 🕵️‍♂️

As attacks on software supply chains and third parties increase, more data on critical software and infrastructure services is being advertised and sold on the Dark Web.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🖋️ Chinese Hackers Exploit Ivanti CSA Zero-Days in Attacks on French Government, Telecoms 🖋️

The French cybersecurity agency on Tuesday revealed that a number of entities spanning governmental, telecommunications, media, finance, and transport sectors in the country were impacted by a malicious campaign undertaken by a Chinese hacking group by weaponizing several zeroday vulnerabilities in Ivanti Cloud Services Appliance CSA devices. The campaign, detected at the beginning of.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity