πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
26.1K subscribers
89.3K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
🦿 Microsoft Extends Windows 10 Security Updates for EEA Customers 🦿

Although Microsoft still plans to end support for Windows 10 in October, users in the European Economic Area will be able to enjoy free updates for a little while longer. The post Microsoft Extends Windows 10 Security Updates for EEA Customers appeared first on TechRepublic.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ $50 Battering RAM Attack Breaks Intel and AMD Cloud Security Protections πŸ–‹οΈ

A group of academics from KU Leuven and the University of Birmingham has demonstrated a new vulnerability called Battering RAM to bypass the latest defenses on Intel and AMD cloud processors. "We built a simple, 50 interposer that sits quietly in the memory path, behaving transparently during startup and passing all trust checks," researchers Jesse De Meulemeester, David Oswald, Ingrid.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Phantom Taurus: New China-Linked Hacker Group Hits Governments With Stealth Malware πŸ–‹οΈ

Government and telecommunications organizations across Africa, the Middle East, and Asia have emerged as the target of a previously undocumented Chinaaligned nationstate actor dubbed Phantom Taurus over the past twoandahalf years. "Phantom Taurus' main focus areas include ministries of foreign affairs, embassies, geopolitical events, and military operations," Palo Alto Networks Unit 42.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Researchers Disclose Google Gemini AI Flaws Allowing Prompt Injection and Cloud Exploits πŸ–‹οΈ

Cybersecurity researchers have disclosed three nowpatched security vulnerabilities impacting Google's Gemini artificial intelligence AI assistant that, if successfully exploited, could have exposed users to major privacy risks and data theft. "They made Gemini vulnerable to searchinjection attacks on its Search Personalization Model logtoprompt injection attacks against Gemini Cloud.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Microsoft Expands Sentinel Into Agentic Security Platform With Unified Data Lake πŸ–‹οΈ

Microsoft on Tuesday unveiled the expansion of its Sentinel Security Incidents and Event Management solution SIEM as a unified agentic platform with the general availability of the Sentinel data lake. In addition, the tech giant said it's also releasing a public preview of Sentinel Graph and Sentinel Model Context Protocol MCP server. "With graphbased context, semantic access, and agentic.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Stop Alert Chaos: Context Is the Key to Effective Incident Response πŸ–‹οΈ

The Problem Legacy SOCs and Endless Alert Noise Every SOC leader knows the feeling hundreds of alerts pouring in, dashboards lighting up like a slot machine, analysts scrambling to keep pace. The harder they try to scale people or buy new tools, the faster the chaos multiplies. The problem is not just volume it is the model itself. Traditional SOCs start with rules, wait for alerts to fire,.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Urgent: China-Linked Hackers Exploit New VMware Zero-Day Since October 2024 πŸ–‹οΈ

A newly patched security flaw impacting Broadcom VMware Tools and VMware Aria Operations has been exploited in the wild as a zeroday since midOctober 2024 by a threat actor called UNC5174, according to NVISO Labs. The vulnerability in question is CVE202541244 CVSS score 7.8, a local privilege escalation bug affecting the following versions VMware Cloud Foundation 4.x and 5.x VMware.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ New Android Trojan β€œDatzbro” Tricking Elderly with AI-Generated Facebook Travel Events πŸ–‹οΈ

Cybersecurity researchers have flagged a previously undocumented Android banking trojan called Datzbro that can conduct device takeover DTO attacks and perform fraudulent transactions by preying on the elderly. Dutch mobile security company ThreatFabric said it discovered the campaign in August 2025 after users in Australia reported scammers managing Facebook groups promoting "active senior.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Evolving Enterprise Defense to Secure the Modern AI Supply Chain πŸ–‹οΈ

The world of enterprise technology is undergoing a dramatic shift. GenAI adoption is accelerating at an unprecedented pace, and SaaS vendors are embedding powerful LLMs directly into their platforms. Organizations are embracing AIpowered applications across every function, from marketing and development to finance and HR. This transformation unlocks innovation and efficiency, but it also.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ U.K. Police Just Seized Β£5.5 Billion in Bitcoin β€” The World’s Largest Crypto Bust πŸ–‹οΈ

A Chinese national has been convicted for her role in a fraudulent cryptocurrency scheme after law enforcement authorities in the U.K. confiscated 5.5 billion about 7.39 billion during a raid of her home in London. The cryptocurrency seizure, amounting to 61,000 Bitcoin, is believed to be the single largest such effort in the world, the Metropolitan Police said. Zhimin Qian aka Yadi Zhang,.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ CISA Sounds Alarm on Critical Sudo Flaw Actively Exploited in Linux and Unix Systems πŸ–‹οΈ

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a critical security flaw impacting the Sudo commandline utility for Linux and Unixlike operating systems to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The vulnerability in question is CVE202532463 CVSS score 9.3, which affects Sudo versions prior to.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘3
πŸ“’ Cybersecurity leaders must stop seeing resilience as a "tick box exercise" to achieve meaningful protection, says Gartner expert πŸ“’

Collaboration between departments and a better understanding of organizational metrics are key to addressing security blindspots.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ A new 'top-tier' Chinese espionage group is stealing sensitive data πŸ“’

Phantom Taurus has been operating for two years and uses custombuilt malware to maintain longterm access to critical targets.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ OneLogin Bug Let Attackers Use API Keys to Steal OIDC Secrets and Impersonate Apps πŸ–‹οΈ

A highseverity security flaw has been disclosed in the One Identity OneLogin Identity and Access Management IAM solution that, if successfully exploited, could expose sensitive OpenID Connect OIDC application client secrets under certain circumstances. The vulnerability, tracked as CVE202559363, has been assigned a CVSS score of 7.7 out of 10.0. It has been described as a case of.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ OneLogin Bug Let Attackers Use API Keys to Steal OIDC Secrets and Impersonate Apps πŸ–‹οΈ

A highseverity security flaw has been disclosed in the One Identity OneLogin Identity and Access Management IAM solution that, if successfully exploited, could expose sensitive OpenID Connect OIDC application client secrets under certain circumstances. The vulnerability, tracked as CVE202559363, has been assigned a CVSS score of 7.7 out of 10.0. It has been described as a case of.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Learn How Leading Security Teams Blend AI + Human Workflows (Free Webinar) πŸ–‹οΈ

AI is changing automationbut not always for the better. Thats why were hosting a new webinar, "Workflow Clarity Where AI Fits in Modern Automation," with Thomas Kinsella, Cofounder Chief Customer Officer at Tines, to explore how leading teams are cutting through the hype and building workflows that actually deliver.The rise of AI has changed how organizations think about automation.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Learn How Leading Security Teams Blend AI + Human Workflows (Free Webinar) πŸ–‹οΈ

AI is changing automationbut not always for the better. Thats why were hosting a new webinar, "Workflow Clarity Where AI Fits in Modern Automation," with Thomas Kinsella, Cofounder Chief Customer Officer at Tines, to explore how leading teams are cutting through the hype and building workflows that actually deliver.The rise of AI has changed how organizations think about automation.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Red Hat OpenShift AI Flaw Exposes Hybrid Cloud Infrastructure to Full Takeover πŸ–‹οΈ

A severe security flaw has been disclosed in the Red Hat OpenShift AI service that could allow attackers to escalate privileges and take control of the complete infrastructure under certain conditions. OpenShift AI is a platform for managing the lifecycle of predictive and generative artificial intelligence GenAI models at scale and across hybrid cloud environments. It also facilitates data.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Red Hat OpenShift AI Flaw Exposes Hybrid Cloud Infrastructure to Full Takeover πŸ–‹οΈ

A severe security flaw has been disclosed in the Red Hat OpenShift AI service that could allow attackers to escalate privileges and take control of the complete infrastructure under certain conditions. OpenShift AI is a platform for managing the lifecycle of predictive and generative artificial intelligence GenAI models at scale and across hybrid cloud environments. It also facilitates data.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ 2025 Cybersecurity Reality Check: Breaches Hidden, Attack Surfaces Growing, and AI Misperceptions Rising πŸ–‹οΈ

Bitdefenders 2025 Cybersecurity Assessment Report paints a sobering picture of todays cyber defense landscape mounting pressure to remain silent after breaches, a gap between leadership and frontline teams, and a growing urgency to shrink the enterprise attack surface. The annual research combines insights from over 1,200 IT and security professionals across six countries, along with an.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ 2025 Cybersecurity Reality Check: Breaches Hidden, Attack Surfaces Growing, and AI Misperceptions Rising πŸ–‹οΈ

Bitdefenders 2025 Cybersecurity Assessment Report paints a sobering picture of todays cyber defense landscape mounting pressure to remain silent after breaches, a gap between leadership and frontline teams, and a growing urgency to shrink the enterprise attack surface. The annual research combines insights from over 1,200 IT and security professionals across six countries, along with an.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity