πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
26K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ–‹οΈ Cisco Warns of Actively Exploited SNMP Vulnerability Allowing RCE or DoS in IOS Software πŸ–‹οΈ

Cisco has warned of a highseverity security flaw in IOS Software and IOS XE Software that could allow a remote attacker to execute arbitrary code or trigger a denialofservice DoS condition under specific circumstances. The company said the vulnerability, CVE202520352 CVSS score 7.7, has been exploited in the wild, adding it became aware of it "after local Administrator credentials were.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” npm Package Uses QR Code Steganography to Steal Credentials πŸ“”

Malicious npm package Fezbox uses QR codes to steal credentials from browser cookies.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Federal Agency Compromised Via GeoServer Exploit, CISA Reveals πŸ“”

An unnamed federal agency was hacked last year after threat actors exploited a critical GeoServer vulnerability.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ How One Bad Password Ended a 158-Year-Old Business πŸ–‹οΈ

Most businesses don't make it past their fifth birthday studies show that roughly 50 of small businesses fail within the first five years. So when KNP Logistics Group formerly Knights of Old celebrated more than a century and a half of operations, it had mastered the art of survival. For 158 years, KNP adapted and endured, building a transport business that operated 500 trucks.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” European Police Bust €100m Crypto-Fraud Ring πŸ“”

Police have arrested five suspects linked to a 100m cryptocurrency fraud ring.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ iframe Security Exposed: The Blind Spot Fueling Payment Skimmer Attacks πŸ–‹οΈ

Think payment iframes are secure by design? Think again. Sophisticated attackers have quietly evolved malicious overlay techniques to exploit checkout pages and steal credit card data by bypassing the very security policies designed to stop them. Download the complete iframe security guide here.  TLDR iframe Security Exposed Payment iframes are being actively exploited by attackers using.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ How One Bad Password Ended a 158-Year-Old Business πŸ–‹οΈ

Most businesses don't make it past their fifth birthday studies show that roughly 50 of small businesses fail within the first five years. So when KNP Logistics Group formerly Knights of Old celebrated more than a century and a half of operations, it had mastered the art of survival. For 158 years, KNP adapted and endured, building a transport business that operated 500 trucks.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ UNC5221 Uses BRICKSTORM Backdoor to Infiltrate U.S. Legal and Technology Sectors πŸ–‹οΈ

Companies in the legal services, softwareasaservice SaaS providers, Business Process Outsourcers BPOs, and technology sectors in the U.S. have been targeted by a suspected Chinanexus cyber espionage group to deliver a known backdoor referred to as BRICKSTORM. The activity, attributed to UNC5221 and closely related, suspected Chinanexus threat clusters, is designed to facilitate.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” European Police Bust €100m Crypto-Fraud Ring πŸ“”

Police have arrested five suspects linked to a 100m cryptocurrency fraud ring.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ How One Bad Password Ended a 158-Year-Old Business πŸ–‹οΈ

Most businesses don't make it past their fifth birthday studies show that roughly 50 of small businesses fail within the first five years. So when KNP Logistics Group formerly Knights of Old celebrated more than a century and a half of operations, it had mastered the art of survival. For 158 years, KNP adapted and endured, building a transport business that operated 500 trucks.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” ShadowV2 Botnet Exposes Rise of DDoS-as-a-service Platforms πŸ“”

New campaign merges traditional malware with DevOps tools, using GitHub CodeSpaces for DDoS attacks.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Vegas Gambling Giant Hit by Cyber Incident, Employee Data Exposed πŸ“”

Boyd Gaming Corporation has disclosed that an unauthorized actor removed data from its systems, including information about employees and other individuals.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ UNC5221 Uses BRICKSTORM Backdoor to Infiltrate U.S. Legal and Technology Sectors πŸ–‹οΈ

Companies in the legal services, softwareasaservice SaaS providers, Business Process Outsourcers BPOs, and technology sectors in the U.S. have been targeted by a suspected Chinanexus cyber espionage group to deliver a known backdoor referred to as BRICKSTORM. The activity, attributed to UNC5221 and closely related, suspected Chinanexus threat clusters, is designed to facilitate.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Chinese Hackers RedNovember Target Global Governments Using Pantegana and Cobalt Strike πŸ–‹οΈ

A suspected cyber espionage activity cluster that was previously found targeting global government and private sector organizations spanning Africa, Asia, North America, South America, and Oceania has been assessed to be a Chinese statesponsored threat actor. Recorded Future, which was tracking the activity under the moniker TAG100, has now graduated it to a hacking group dubbed RedNovember.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ New YiBackdoor Malware Shares Major Code Overlaps with IcedID and Latrodectus πŸ–‹οΈ

Cybersecurity researchers have disclosed details of a new malware family dubbed YiBackdoor that has been found to share "significant" source code overlaps with IcedID and Latrodectus. "The exact connection to YiBackdoor is not yet clear, but it may be used in conjunction with Latrodectus and IcedID during attacks," Zscaler ThreatLabz said in a Tuesday report. "YiBackdoor is able to execute.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” European Police Bust €100m Crypto-Fraud Ring πŸ“”

Police have arrested five suspects linked to a 100m cryptocurrency fraud ring.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ New YiBackdoor Malware Shares Major Code Overlaps with IcedID and Latrodectus πŸ–‹οΈ

Cybersecurity researchers have disclosed details of a new malware family dubbed YiBackdoor that has been found to share "significant" source code overlaps with IcedID and Latrodectus. "The exact connection to YiBackdoor is not yet clear, but it may be used in conjunction with Latrodectus and IcedID during attacks," Zscaler ThreatLabz said in a Tuesday report. "YiBackdoor is able to execute.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” NCA Arrest Man as HardBit Ransomware Blamed for Airport Outages πŸ“”

The UKs National Crime Agency has arrested a suspect in connection with a ransomware attack on Collins Aerospace.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ NCA confirms arrest after airport cyber disruption πŸ“’

Disruption is easing across Europe following the ransomware incident.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ NCA confirms arrest after airport cyber disruption πŸ“’

Disruption is easing across Europe following the ransomware incident.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Cyber skills shortages are pushing firms into dangerous shortcuts – and it’s putting them at huge risk of security breaches πŸ“’

Chronic cyber skills shortages mean many businesses are implementing quick fixes.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity