🛡 Cybersecurity & Privacy 🛡 - News
26K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
🖋️ Cisco Warns of Actively Exploited SNMP Vulnerability Allowing RCE or DoS in IOS Software 🖋️

Cisco has warned of a highseverity security flaw in IOS Software and IOS XE Software that could allow a remote attacker to execute arbitrary code or trigger a denialofservice DoS condition under specific circumstances. The company said the vulnerability, CVE202520352 CVSS score 7.7, has been exploited in the wild, adding it became aware of it "after local Administrator credentials were.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Cisco Warns of Actively Exploited SNMP Vulnerability Allowing RCE or DoS in IOS Software 🖋️

Cisco has warned of a highseverity security flaw in IOS Software and IOS XE Software that could allow a remote attacker to execute arbitrary code or trigger a denialofservice DoS condition under specific circumstances. The company said the vulnerability, CVE202520352 CVSS score 7.7, has been exploited in the wild, adding it became aware of it "after local Administrator credentials were.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📔 Vegas Gambling Giant Hit by Cyber Incident, Employee Data Exposed 📔

Boyd Gaming Corporation has disclosed that an unauthorized actor removed data from its systems, including information about employees and other individuals.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 ShadowV2 Botnet Exposes Rise of DDoS-as-a-service Platforms 📔

New campaign merges traditional malware with DevOps tools, using GitHub CodeSpaces for DDoS attacks.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🖋️ Two Critical Flaws Uncovered in Wondershare RepairIt Exposing User Data and AI Models 🖋️

Cybersecurity researchers have disclosed two security flaws in Wondershare RepairIt that exposed private user data and potentially exposed the system to artificial intelligence AI model tampering and supply chain risks. The criticalrated vulnerabilities in question, discovered by Trend Micro, are listed below CVE202510643 CVSS score 9.1 An authentication bypass vulnerability that.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Chinese Hackers RedNovember Target Global Governments Using Pantegana and Cobalt Strike 🖋️

A suspected cyber espionage activity cluster that was previously found targeting global government and private sector organizations spanning Africa, Asia, North America, South America, and Oceania has been assessed to be a Chinese statesponsored threat actor. Recorded Future, which was tracking the activity under the moniker TAG100, has now graduated it to a hacking group dubbed RedNovember.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📔 Vegas Gambling Giant Hit by Cyber Incident, Employee Data Exposed 📔

Boyd Gaming Corporation has disclosed that an unauthorized actor removed data from its systems, including information about employees and other individuals.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🖋️ Chinese Hackers RedNovember Target Global Governments Using Pantegana and Cobalt Strike 🖋️

A suspected cyber espionage activity cluster that was previously found targeting global government and private sector organizations spanning Africa, Asia, North America, South America, and Oceania has been assessed to be a Chinese statesponsored threat actor. Recorded Future, which was tracking the activity under the moniker TAG100, has now graduated it to a hacking group dubbed RedNovember.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Chinese Hackers RedNovember Target Global Governments Using Pantegana and Cobalt Strike 🖋️

A suspected cyber espionage activity cluster that was previously found targeting global government and private sector organizations spanning Africa, Asia, North America, South America, and Oceania has been assessed to be a Chinese statesponsored threat actor. Recorded Future, which was tracking the activity under the moniker TAG100, has now graduated it to a hacking group dubbed RedNovember.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📔 Cell Tower Hacking Gear Seized Ahead of UN General Assembly 📔

The equipment could be used to disable cell phone towers and conduct denialofservices attacks across New York City.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 Vegas Gambling Giant Hit by Cyber Incident, Employee Data Exposed 📔

Boyd Gaming Corporation has disclosed that an unauthorized actor removed data from its systems, including information about employees and other individuals.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🖋️ How One Bad Password Ended a 158-Year-Old Business 🖋️

Most businesses don't make it past their fifth birthday studies show that roughly 50 of small businesses fail within the first five years. So when KNP Logistics Group formerly Knights of Old celebrated more than a century and a half of operations, it had mastered the art of survival. For 158 years, KNP adapted and endured, building a transport business that operated 500 trucks.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ UNC5221 Uses BRICKSTORM Backdoor to Infiltrate U.S. Legal and Technology Sectors 🖋️

Companies in the legal services, softwareasaservice SaaS providers, Business Process Outsourcers BPOs, and technology sectors in the U.S. have been targeted by a suspected Chinanexus cyber espionage group to deliver a known backdoor referred to as BRICKSTORM. The activity, attributed to UNC5221 and closely related, suspected Chinanexus threat clusters, is designed to facilitate.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📔 Cell Tower Hacking Gear Seized Ahead of UN General Assembly 📔

The equipment could be used to disable cell phone towers and conduct denialofservices attacks across New York City.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🖋️ UNC5221 Uses BRICKSTORM Backdoor to Infiltrate U.S. Legal and Technology Sectors 🖋️

Companies in the legal services, softwareasaservice SaaS providers, Business Process Outsourcers BPOs, and technology sectors in the U.S. have been targeted by a suspected Chinanexus cyber espionage group to deliver a known backdoor referred to as BRICKSTORM. The activity, attributed to UNC5221 and closely related, suspected Chinanexus threat clusters, is designed to facilitate.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ UNC5221 Uses BRICKSTORM Backdoor to Infiltrate U.S. Legal and Technology Sectors 🖋️

Companies in the legal services, softwareasaservice SaaS providers, Business Process Outsourcers BPOs, and technology sectors in the U.S. have been targeted by a suspected Chinanexus cyber espionage group to deliver a known backdoor referred to as BRICKSTORM. The activity, attributed to UNC5221 and closely related, suspected Chinanexus threat clusters, is designed to facilitate.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📔 npm Package Uses QR Code Steganography to Steal Credentials 📔

Malicious npm package Fezbox uses QR codes to steal credentials from browser cookies.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🖋️ Cisco Warns of Actively Exploited SNMP Vulnerability Allowing RCE or DoS in IOS Software 🖋️

Cisco has warned of a highseverity security flaw in IOS Software and IOS XE Software that could allow a remote attacker to execute arbitrary code or trigger a denialofservice DoS condition under specific circumstances. The company said the vulnerability, CVE202520352 CVSS score 7.7, has been exploited in the wild, adding it became aware of it "after local Administrator credentials were.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Cisco Warns of Actively Exploited SNMP Vulnerability Allowing RCE or DoS in IOS Software 🖋️

Cisco has warned of a highseverity security flaw in IOS Software and IOS XE Software that could allow a remote attacker to execute arbitrary code or trigger a denialofservice DoS condition under specific circumstances. The company said the vulnerability, CVE202520352 CVSS score 7.7, has been exploited in the wild, adding it became aware of it "after local Administrator credentials were.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Two Critical Flaws Uncovered in Wondershare RepairIt Exposing User Data and AI Models 🖋️

Cybersecurity researchers have disclosed two security flaws in Wondershare RepairIt that exposed private user data and potentially exposed the system to artificial intelligence AI model tampering and supply chain risks. The criticalrated vulnerabilities in question, discovered by Trend Micro, are listed below CVE202510643 CVSS score 9.1 An authentication bypass vulnerability that.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📔 Federal Agency Compromised Via GeoServer Exploit, CISA Reveals 📔

An unnamed federal agency was hacked last year after threat actors exploited a critical GeoServer vulnerability.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity