πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.1K subscribers
88.5K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ•΅οΈβ€β™‚οΈ North American APT Uses Exchange Zero-Day to Attack China πŸ•΅οΈβ€β™‚οΈ

Stories about Chinese APTs attacking the US and Canada are plentiful. In a turnabout, researchers found what they believe is a North American entity attacking a Chinese entity, thanks to a mysterious issue in Microsoft Exchange.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Browser Exploits Wane as Users Become the Attack Surface πŸ•΅οΈβ€β™‚οΈ

For browsers, exploitation is out and getting users to compromise their own systems is in. Improved browser security has forced attackers to adapt their tactics, and they've accepted the challenge.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Browser Exploits Wane as Users Become the Attack Surface πŸ•΅οΈβ€β™‚οΈ

For browsers, exploitation is out and getting users to compromise their own systems is in. Improved browser security has forced attackers to adapt their tactics, and they've accepted the challenge.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ ServiceNow Flaw CVE-2025-3648 Could Lead to Data Exposure via Misconfigured ACLs πŸ–‹οΈ

A highseverity security flaw has been disclosed in ServiceNow's platform that, if successfully exploited, could result in data exposure and exfiltration. The vulnerability, tracked as CVE20253648 CVSS score 8.2, has been described as a case of data inference in Now Platform through conditional access control list ACL rules. It has been codenamed Counter Strike. "A vulnerability has.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ North American APT Uses Exchange Zero-Day to Attack China πŸ•΅οΈβ€β™‚οΈ

Stories about Chinese APTs attacking the US and Canada are plentiful. In a turnabout, researchers found what they believe is a North American entity attacking a Chinese entity, thanks to a mysterious issue in Microsoft Exchange.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Browser Exploits Wane as Users Become the Attack Surface πŸ•΅οΈβ€β™‚οΈ

For browsers, exploitation is out and getting users to compromise their own systems is in. Improved browser security has forced attackers to adapt their tactics, and they've accepted the challenge.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Browser Exploits Wane as Users Become the Attack Surface πŸ•΅οΈβ€β™‚οΈ

For browsers, exploitation is out and getting users to compromise their own systems is in. Improved browser security has forced attackers to adapt their tactics, and they've accepted the challenge.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Browser Exploits Wane as Users Become the Attack Surface πŸ•΅οΈβ€β™‚οΈ

For browsers, exploitation is out and getting users to compromise their own systems is in. Improved browser security has forced attackers to adapt their tactics, and they've accepted the challenge.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Browser Exploits Wane as Users Become the Attack Surface πŸ•΅οΈβ€β™‚οΈ

For browsers, exploitation is out and getting users to compromise their own systems is in. Improved browser security has forced attackers to adapt their tactics, and they've accepted the challenge.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Gold Melody IAB Exploits Exposed ASP.NET Machine Keys for Unauthorized Access to Targets πŸ–‹οΈ

The Initial Access Broker IAB known as Gold Melody has been attributed to a campaign that exploits leaked ASP.NET machine keys to obtain unauthorized access to organizations and peddle that access to other threat actors. The activity is being tracked by Palo Alto Networks Unit 42 under the moniker TGRCRI0045, where "TGR" stands for "temporary group" and "CRI" refers to criminal motivation.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Four Arrested in Β£440M Cyber Attack on Marks & Spencer, Co-op, and Harrods πŸ–‹οΈ

The U.K. National Crime Agency NCA on Thursday announced that four people have been arrested in connection with cyber attacks targeting major retailers Marks Spencer, Coop, and Harrods. The arrested individuals include two men aged 19, a third aged 17, and a 20yearold woman. They were apprehended in the West Midlands and London on suspicion of Computer Misuse Act offenses, blackmail,.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Four Arrested in Β£440M Cyber Attack on Marks & Spencer, Co-op, and Harrods πŸ–‹οΈ

The U.K. National Crime Agency NCA on Thursday announced that four people have been arrested in connection with cyber attacks targeting major retailers Marks Spencer, Coop, and Harrods. The arrested individuals include two men aged 19, a third aged 17, and a 20yearold woman. They were apprehended in the West Midlands and London on suspicion of Computer Misuse Act offenses, blackmail,.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Four Arrested in Β£440M Cyber Attack on Marks & Spencer, Co-op, and Harrods πŸ–‹οΈ

The U.K. National Crime Agency NCA on Thursday announced that four people have been arrested in connection with cyber attacks targeting major retailers Marks Spencer, Coop, and Harrods. The arrested individuals include two men aged 19, a third aged 17, and a 20yearold woman. They were apprehended in the West Midlands and London on suspicion of Computer Misuse Act offenses, blackmail,.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Four Arrested in Β£440M Cyber Attack on Marks & Spencer, Co-op, and Harrods πŸ–‹οΈ

The U.K. National Crime Agency NCA on Thursday announced that four people have been arrested in connection with cyber attacks targeting major retailers Marks Spencer, Coop, and Harrods. The arrested individuals include two men aged 19, a third aged 17, and a 20yearold woman. They were apprehended in the West Midlands and London on suspicion of Computer Misuse Act offenses, blackmail,.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Four Arrested in Β£440M Cyber Attack on Marks & Spencer, Co-op, and Harrods πŸ–‹οΈ

The U.K. National Crime Agency NCA on Thursday announced that four people have been arrested in connection with cyber attacks targeting major retailers Marks Spencer, Coop, and Harrods. The arrested individuals include two men aged 19, a third aged 17, and a 20yearold woman. They were apprehended in the West Midlands and London on suspicion of Computer Misuse Act offenses, blackmail,.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” TikTok's Handling of EU User Data in China Comes Under Scrutiny Again πŸ“”

A new probe, opened two months after a 530m fine to TikTok, will investigate the tech giants storage of EU users data in China.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1
πŸ–‹οΈ What Security Leaders Need to Know About AI Governance for SaaS πŸ–‹οΈ

Generative AI is not arriving with a bang, its slowly creeping into the software that companies already use on a daily basis. Whether it is video conferencing or CRM, vendors are scrambling to integrate AI copilots and assistants into their SaaS applications. Slack can now provide AI summaries of chat threads, Zoom can provide meeting summaries, and office suites such as Microsoft 365 contain.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ What Security Leaders Need to Know About AI Governance for SaaS πŸ–‹οΈ

Generative AI is not arriving with a bang, its slowly creeping into the software that companies already use on a daily basis. Whether it is video conferencing or CRM, vendors are scrambling to integrate AI copilots and assistants into their SaaS applications. Slack can now provide AI summaries of chat threads, Zoom can provide meeting summaries, and office suites such as Microsoft 365 contain.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ What Security Leaders Need to Know About AI Governance for SaaS πŸ–‹οΈ

Generative AI is not arriving with a bang, its slowly creeping into the software that companies already use on a daily basis. Whether it is video conferencing or CRM, vendors are scrambling to integrate AI copilots and assistants into their SaaS applications. Slack can now provide AI summaries of chat threads, Zoom can provide meeting summaries, and office suites such as Microsoft 365 contain.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” TikTok's Handling of EU User Data in China Comes Under Scrutiny Again πŸ“”

A new probe, opened two months after a 530m fine to TikTok, will investigate the tech giants storage of EU users data in China.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1
πŸ–‹οΈ Four Arrested in Β£440M Cyber Attack on Marks & Spencer, Co-op, and Harrods πŸ–‹οΈ

The U.K. National Crime Agency NCA on Thursday announced that four people have been arrested in connection with cyber attacks targeting major retailers Marks Spencer, Coop, and Harrods. The arrested individuals include two men aged 19, a third aged 17, and a 20yearold woman. They were apprehended in the West Midlands and London on suspicion of Computer Misuse Act offenses, blackmail,.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity