πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.1K subscribers
88.5K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ“” TikTok's Handling of EU User Data in China Comes Under Scrutiny Again πŸ“”

A new probe, opened two months after a 530m fine to TikTok, will investigate the tech giants storage of EU users data in China.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1
πŸ–‹οΈ New ZuRu Malware Variant Targeting Developers via Trojanized Termius macOS App πŸ–‹οΈ

Cybersecurity researchers have discovered new artifacts associated with an Apple macOS malware called ZuRu, which is known to propagate via trojanized versions of legitimate software. SentinelOne, in a new report shared with The Hacker News, said the malware has been observed masquerading as the crossplatform SSH client and servermanagement tool Termius in late May 2025. "ZuRu malware.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Four Arrested in Connection with April UK Retail Attacks πŸ“”

The NCA has arrested four individuals on suspicion of involvement in the attacks on MS, Coop and Harrods.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Four Arrested in Connection with April UK Retail Attacks πŸ“”

The NCA has arrested four individuals on suspicion of involvement in the attacks on MS, Coop and Harrods.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ New ZuRu Malware Variant Targeting Developers via Trojanized Termius macOS App πŸ–‹οΈ

Cybersecurity researchers have discovered new artifacts associated with an Apple macOS malware called ZuRu, which is known to propagate via trojanized versions of legitimate software. SentinelOne, in a new report shared with The Hacker News, said the malware has been observed masquerading as the crossplatform SSH client and servermanagement tool Termius in late May 2025. "ZuRu malware.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ New ZuRu Malware Variant Targeting Developers via Trojanized Termius macOS App πŸ–‹οΈ

Cybersecurity researchers have discovered new artifacts associated with an Apple macOS malware called ZuRu, which is known to propagate via trojanized versions of legitimate software. SentinelOne, in a new report shared with The Hacker News, said the malware has been observed masquerading as the crossplatform SSH client and servermanagement tool Termius in late May 2025. "ZuRu malware.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Nippon Steel IT Subsidiary Hit by "Zero-Day Attack," Causing Data Breach πŸ“”

Personal data of Nippon Steel Solutions customers, partners and employees may be compromised.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ AMD Warns of New Transient Scheduler Attacks Impacting a Wide Range of CPUs πŸ–‹οΈ

Semiconductor company AMD is warning of a new set of vulnerabilities affecting a broad range of chipsets that could lead to information disclosure. The flaws, collectively called Transient Scheduler Attacks TSA, manifest in the form of a speculative side channel in its CPUs that leverage execution timing of instructions under specific microarchitectural conditions. "In some cases, an attacker.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ AMD Warns of New Transient Scheduler Attacks Impacting a Wide Range of CPUs πŸ–‹οΈ

Semiconductor company AMD is warning of a new set of vulnerabilities affecting a broad range of chipsets that could lead to information disclosure. The flaws, collectively called Transient Scheduler Attacks TSA, manifest in the form of a speculative side channel in its CPUs that leverage execution timing of instructions under specific microarchitectural conditions. "In some cases, an attacker.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ AMD Warns of New Transient Scheduler Attacks Impacting a Wide Range of CPUs πŸ–‹οΈ

Semiconductor company AMD is warning of a new set of vulnerabilities affecting a broad range of chipsets that could lead to information disclosure. The flaws, collectively called Transient Scheduler Attacks TSA, manifest in the form of a speculative side channel in its CPUs that leverage execution timing of instructions under specific microarchitectural conditions. "In some cases, an attacker.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Nippon Steel IT Subsidiary Hit by "Zero-Day Attack," Causing Data Breach πŸ“”

Personal data of Nippon Steel Solutions customers, partners and employees may be compromised.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ ServiceNow Flaw CVE-2025-3648 Could Lead to Data Exposure via Misconfigured ACLs πŸ–‹οΈ

A highseverity security flaw has been disclosed in ServiceNow's platform that, if successfully exploited, could result in data exposure and exfiltration. The vulnerability, tracked as CVE20253648 CVSS score 8.2, has been described as a case of data inference in Now Platform through conditional access control list ACL rules. It has been codenamed Counter Strike. "A vulnerability has.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Tribunal Ruling Brings ICO’s Β£12.7m TikTok Fine Closer πŸ“”

The UK ICO has welcomed a ruling in its favor in a longrunning battle to issue a fine to TikTok.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1
πŸ“” Tribunal Ruling Brings ICO’s Β£12.7m TikTok Fine Closer πŸ“”

The UK ICO has welcomed a ruling in its favor in a longrunning battle to issue a fine to TikTok.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1
πŸ–‹οΈ ServiceNow Flaw CVE-2025-3648 Could Lead to Data Exposure via Misconfigured ACLs πŸ–‹οΈ

A highseverity security flaw has been disclosed in ServiceNow's platform that, if successfully exploited, could result in data exposure and exfiltration. The vulnerability, tracked as CVE20253648 CVSS score 8.2, has been described as a case of data inference in Now Platform through conditional access control list ACL rules. It has been codenamed Counter Strike. "A vulnerability has.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ ServiceNow Flaw CVE-2025-3648 Could Lead to Data Exposure via Misconfigured ACLs πŸ–‹οΈ

A highseverity security flaw has been disclosed in ServiceNow's platform that, if successfully exploited, could result in data exposure and exfiltration. The vulnerability, tracked as CVE20253648 CVSS score 8.2, has been described as a case of data inference in Now Platform through conditional access control list ACL rules. It has been codenamed Counter Strike. "A vulnerability has.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Gold Melody IAB Exploits Exposed ASP.NET Machine Keys for Unauthorized Access to Targets πŸ–‹οΈ

The Initial Access Broker IAB known as Gold Melody has been attributed to a campaign that exploits leaked ASP.NET machine keys to obtain unauthorized access to organizations and peddle that access to other threat actors. The activity is being tracked by Palo Alto Networks Unit 42 under the moniker TGRCRI0045, where "TGR" stands for "temporary group" and "CRI" refers to criminal motivation.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Qantas Confirms 5.7 Million Customers Hit by Data Breach πŸ“”

Qantas says nearly six million passengers were impacted by a recent data breach.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Qantas Confirms 5.7 Million Customers Hit by Data Breach πŸ“”

Qantas says nearly six million passengers were impacted by a recent data breach.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Gold Melody IAB Exploits Exposed ASP.NET Machine Keys for Unauthorized Access to Targets πŸ–‹οΈ

The Initial Access Broker IAB known as Gold Melody has been attributed to a campaign that exploits leaked ASP.NET machine keys to obtain unauthorized access to organizations and peddle that access to other threat actors. The activity is being tracked by Palo Alto Networks Unit 42 under the moniker TGRCRI0045, where "TGR" stands for "temporary group" and "CRI" refers to criminal motivation.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Gold Melody IAB Exploits Exposed ASP.NET Machine Keys for Unauthorized Access to Targets πŸ–‹οΈ

The Initial Access Broker IAB known as Gold Melody has been attributed to a campaign that exploits leaked ASP.NET machine keys to obtain unauthorized access to organizations and peddle that access to other threat actors. The activity is being tracked by Palo Alto Networks Unit 42 under the moniker TGRCRI0045, where "TGR" stands for "temporary group" and "CRI" refers to criminal motivation.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity