πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.9K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ“” WhatsApp Patches Zero-Day, Zero-Click Flaw πŸ“”

WhatsApp has fixed a zeroday vulnerability linked to a sophisticated cyberattack.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ¦… Supply Chain Attacks Have Doubled. What’s Driving the Increase? πŸ¦…

supply chain attacks " dataimagecaption"" datamediumfile"httpscyble.comwpcontentuploads202509supplychainattacks300x150.webp" datalargefile"httpscyble.comwpcontentuploads202509supplychainattacks.webp" title"Supply Chain Attacks Have Doubled. Whats Driving the Increase?  1" Software supply chain attacks have been occurring at twice their longterm average in recent months and have shown no sign of slowing down.  The uptick in supply chain attacks began in April 2025, when Cyble dark web researchers observed claims of 31 such attacks. Since then, cyberattacks with supply chain implications have averaged 26 a month, twice the rate seen from early 2024 through March 2025 chart below.  Cybles most recent threat landscape report registration required documented 30 supply chain incidents...

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Ransomware attack on IT supplier disrupts hundreds of Swedish municipalities πŸ“’

The attack on IT systems supplier Miljdata has impacted public sector services across the country.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 Build Job-Ready IT and Cybersecurity Skills with Hands-On Labs 🦿

Get lifetime access to The 2025 Complete Defensive Cyber Security Bundle for 39.99 reg. 240.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 Build Job-Ready IT and Cybersecurity Skills with Hands-On Labs 🦿

Get lifetime access to The 2025 Complete Defensive Cyber Security Bundle for 39.99 reg. 240.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ¦… Supply Chain Attacks Have Doubled. What’s Driving the Increase? πŸ¦…

supply chain attacks " dataimagecaption"" datamediumfile"httpscyble.comwpcontentuploads202509supplychainattacks300x150.webp" datalargefile"httpscyble.comwpcontentuploads202509supplychainattacks.webp" title"Supply Chain Attacks Have Doubled. Whats Driving the Increase?  1" Software supply chain attacks have been occurring at twice their longterm average in recent months and have shown no sign of slowing down.  The uptick in supply chain attacks began in April 2025, when Cyble dark web researchers observed claims of 31 such attacks. Since then, cyberattacks with supply chain implications have averaged 26 a month, twice the rate seen from early 2024 through March 2025 chart below.  Cybles most recent threat landscape report registration required documented 30 supply chain incidents...

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ¦… Supply Chain Attacks Have Doubled. What’s Driving the Increase? πŸ¦…

supply chain attacks " dataimagecaption"" datamediumfile"httpscyble.comwpcontentuploads202509supplychainattacks300x150.webp" datalargefile"httpscyble.comwpcontentuploads202509supplychainattacks.webp" title"Supply Chain Attacks Have Doubled. Whats Driving the Increase?  1" Software supply chain attacks have been occurring at twice their longterm average in recent months and have shown no sign of slowing down.  The uptick in supply chain attacks began in April 2025, when Cyble dark web researchers observed claims of 31 such attacks. Since then, cyberattacks with supply chain implications have averaged 26 a month, twice the rate seen from early 2024 through March 2025 chart below.  Cybles most recent threat landscape report registration required documented 30 supply chain incidents...

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity
❀1
πŸ–‹οΈ ScarCruft Uses RokRAT Malware in Operation HanKook Phantom Targeting South Korean Academics πŸ–‹οΈ

Cybersecurity researchers have discovered a new phishing campaign undertaken by the North Korealinked hacking group called ScarCruft aka APT37 to deliver a malware known as RokRAT. The activity has been codenamed Operation HanKook Phantom by Seqrite Labs, stating the attacks appear to target individuals associated with the National Intelligence Research Association, including academic figures.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
❀1
πŸ“” Amazon Stops Russian APT29 Watering Hole Attack Exploiting Microsoft Auth πŸ“”

The campaign shows APT29s intentions to cast a wider net in their intelligence collection efforts, said Amazon.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ¦… Supply Chain Attacks Have Doubled. What’s Driving the Increase? πŸ¦…

supply chain attacks " dataimagecaption"" datamediumfile"httpscyble.comwpcontentuploads202509supplychainattacks300x150.webp" datalargefile"httpscyble.comwpcontentuploads202509supplychainattacks.webp" title"Supply Chain Attacks Have Doubled. Whats Driving the Increase?  1" Software supply chain attacks have been occurring at twice their longterm average in recent months and have shown no sign of slowing down.  The uptick in supply chain attacks began in April 2025, when Cyble dark web researchers observed claims of 31 such attacks. Since then, cyberattacks with supply chain implications have averaged 26 a month, twice the rate seen from early 2024 through March 2025 chart below.  Cybles most recent threat landscape report registration required documented 30 supply chain incidents...

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ¦… Supply Chain Attacks Have Doubled. What’s Driving the Increase? πŸ¦…

supply chain attacks " dataimagecaption"" datamediumfile"httpscyble.comwpcontentuploads202509supplychainattacks300x150.webp" datalargefile"httpscyble.comwpcontentuploads202509supplychainattacks.webp" title"Supply Chain Attacks Have Doubled. Whats Driving the Increase?  1" Software supply chain attacks have been occurring at twice their longterm average in recent months and have shown no sign of slowing down.  The uptick in supply chain attacks began in April 2025, when Cyble dark web researchers observed claims of 31 such attacks. Since then, cyberattacks with supply chain implications have averaged 26 a month, twice the rate seen from early 2024 through March 2025 chart below.  Cybles most recent threat landscape report registration required documented 30 supply chain incidents...

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ ScarCruft Uses RokRAT Malware in Operation HanKook Phantom Targeting South Korean Academics πŸ–‹οΈ

Cybersecurity researchers have discovered a new phishing campaign undertaken by the North Korealinked hacking group called ScarCruft aka APT37 to deliver a malware known as RokRAT. The activity has been codenamed Operation HanKook Phantom by Seqrite Labs, stating the attacks appear to target individuals associated with the National Intelligence Research Association, including academic figures.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Amazon Stops Russian APT29 Watering Hole Attack Exploiting Microsoft Auth πŸ“”

The campaign shows APT29s intentions to cast a wider net in their intelligence collection efforts, said Amazon.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Enterprises need to patch these Citrix flaws now πŸ“’

Organizations should move quickly to install patches, according to Citrix.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ When Browsers Become the Attack Surface: Rethinking Security for Scattered Spider πŸ–‹οΈ

As enterprises continue to shift their operations to the browser, security teams face a growing set of cyber challenges. In fact, over 80 of security incidents now originate from web applications accessed via Chrome, Edge, Firefox, and other browsers. One particularly fastevolving adversary, Scattered Spider, has made it their mission to wreak havoc on enterprises by specifically targeting.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Ransomware Attack on Pennsylvania’s AG Office Disrupts Court Cases πŸ“”

Pennsylvanias Attorney General confirmed the OAG had refused to pay a ransom demand to the attackers after files were encrypted.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 Regional Sales Manager (Eastern USA) 🌊

The post Regional Sales Manager Eastern USA appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
β™ŸοΈ The Ongoing Fallout from a Breach at AI Chatbot Maker Salesloft β™ŸοΈ

The recent masstheft of authentication tokens from Salesloft, whose AI chatbot is used by a broad swath of corporate America to convert customer interaction into Salesforce leads, has left many companies racing to invalidate the stolen credentials before hackers can exploit them. Now Google warns the breach goes far beyond access to Salesforce data, noting the hackers responsible also stole valid authentication tokens for hundreds of online services that customers can integrate with Salesloft, including Slack, Google Workspace, Amazon S3, Microsoft Azure, and OpenAI.

πŸ“– Read more.

πŸ”— Via "Krebs on Security"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Android Droppers Now Deliver SMS Stealers and Spyware, Not Just Banking Trojans πŸ–‹οΈ

Cybersecurity researchers are calling attention to a new shift in the Android malware landscape where dropper apps, which are typically used to deliver banking trojans, to also distribute simpler malware such as SMS stealers and basic spyware. These campaigns are propagated via dropper apps masquerading as government or banking apps in India and other parts of Asia, ThreatFabric said in a report.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ ⚑ Weekly Recap: WhatsApp 0-Day, Docker Bug, Salesforce Breach, Fake CAPTCHAs, Spyware App & More πŸ–‹οΈ

Cybersecurity today is less about single attacks and more about chains of small weaknesses that connect into big risks. One overlooked update, one misused account, or one hidden tool in the wrong hands can be enough to open the door. The news this week shows how attackers are mixing methodscombining stolen access, unpatched software, and clever tricks to move from small entry points to large.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Silver Fox Exploits Signed Drivers to Deploy ValleyRAT Backdoor πŸ“”

Silver Fox APT abuses Microsoftsigned drivers to kill antivirus and deploy ValleyRAT remoteaccess backdoor.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity