πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
27.3K subscribers
89.9K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ“” Broadcom Issues Patches for VMware NSX and vCenter Security Flaws πŸ“”

Broadcom has released security patches for critical flaws affecting several VMware products.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 UK Police Convicts Pair in £5.5 Billion Bitcoin Launder Case 🦿

Two defendants pleaded guilty in a Bitcoin laundering case tied to the UK's record crypto seizure. The Mets sevenyear probe moves to sentencing 1011 November. The post UK Police Convicts Pair in 5.5 Billion Bitcoin Launder Case appeared first on TechRepublic.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 Google Adds AI-Powered Ransomware Protection and Recovery to Drive for Desktop 🦿

This new ransomware detection is available in beta in Google Drive for desktop on Windows or macOS, with a general release expected by the end of the year. The post Google Adds AIPowered Ransomware Protection and Recovery to Drive for Desktop appeared first on TechRepublic.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ New WireTap Attack Extracts Intel SGX ECDSA Key via DDR4 Memory-Bus Interposer πŸ–‹οΈ

In yet another piece of research, academics from Georgia Institute of Technology and Purdue University have demonstrated that the security guarantees offered by Intel's Software Guard eXtensions SGX can be bypassed on DDR4 systems to passively decrypt sensitive data. SGX is designed as a hardware feature in Intel server processors that allows applications to be run in a Trusted Execution.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 What Does the Government Shutdown Mean for Cybersecurity? 🦿

CISA is among the government agencies affected. The shutdown is a reminder for government contractors to harden their cybersecurity. The post What Does the Government Shutdown Mean for Cybersecurity? appeared first on TechRepublic.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ CometJacking: One Click Can Turn Perplexity’s Comet AI Browser Into a Data Thief πŸ–‹οΈ

Cybersecurity researchers have disclosed details of a new attack called CometJacking targeting Perplexity's agentic AI browser Comet by embedding malicious prompts within a seemingly innocuous link to siphon sensitive data, including from connected services, like email and calendar. The sneaky prompt injection attack plays out in the form of a malicious link that, when clicked, triggers the.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Scanning Activity on Palo Alto Networks Portals Jump 500% in One Day πŸ–‹οΈ

Threat intelligence firm GreyNoise disclosed on Friday that it has observed a spike in scanning activity targeting Palo Alto Networks login portals. The company said it observed a nearly 500 increase in IP addresses scanning Palo Alto Networks login portals on October 3, 2025, the highest level recorded in the last three months. It described the traffic as targeted and structured, and aimed.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
❀1
πŸ–‹οΈ CometJacking: One Click Can Turn Perplexity’s Comet AI Browser Into a Data Thief πŸ–‹οΈ

Cybersecurity researchers have disclosed details of a new attack called CometJacking targeting Perplexity's agentic AI browser Comet by embedding malicious prompts within a seemingly innocuous link to siphon sensitive data, including from connected services, like email and calendar. The sneaky prompt injection attack plays out in the form of a malicious link that, when clicked, triggers the.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Scanning Activity on Palo Alto Networks Portals Jump 500% in One Day πŸ–‹οΈ

Threat intelligence firm GreyNoise disclosed on Friday that it has observed a spike in scanning activity targeting Palo Alto Networks login portals. The company said it observed a nearly 500 increase in IP addresses scanning Palo Alto Networks login portals on October 3, 2025, the highest level recorded in the last three months. It described the traffic as targeted and structured, and aimed.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ CometJacking: One Click Can Turn Perplexity’s Comet AI Browser Into a Data Thief πŸ–‹οΈ

Cybersecurity researchers have disclosed details of a new attack called CometJacking targeting Perplexity's agentic AI browser Comet by embedding malicious prompts within a seemingly innocuous link to siphon sensitive data, including from connected services, like email and calendar. The sneaky prompt injection attack plays out in the form of a malicious link that, when clicked, triggers the.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ CometJacking: One Click Can Turn Perplexity’s Comet AI Browser Into a Data Thief πŸ–‹οΈ

Cybersecurity researchers have disclosed details of a new attack called CometJacking targeting Perplexity's agentic AI browser Comet by embedding malicious prompts within a seemingly innocuous link to siphon sensitive data, including from connected services, like email and calendar. The sneaky prompt injection attack plays out in the form of a malicious link that, when clicked, triggers the.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ CometJacking: One Click Can Turn Perplexity’s Comet AI Browser Into a Data Thief πŸ–‹οΈ

Cybersecurity researchers have disclosed details of a new attack called CometJacking targeting Perplexity's agentic AI browser Comet by embedding malicious prompts within a seemingly innocuous link to siphon sensitive data, including from connected services, like email and calendar. The sneaky prompt injection attack plays out in the form of a malicious link that, when clicked, triggers the.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
❀1
πŸ–‹οΈ Scanning Activity on Palo Alto Networks Portals Jump 500% in One Day πŸ–‹οΈ

Threat intelligence firm GreyNoise disclosed on Friday that it has observed a spike in scanning activity targeting Palo Alto Networks login portals. The company said it observed a nearly 500 increase in IP addresses scanning Palo Alto Networks login portals on October 3, 2025, the highest level recorded in the last three months. It described the traffic as targeted and structured, and aimed.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Scanning Activity on Palo Alto Networks Portals Jump 500% in One Day πŸ–‹οΈ

Threat intelligence firm GreyNoise disclosed on Friday that it has observed a spike in scanning activity targeting Palo Alto Networks login portals. The company said it observed a nearly 500 increase in IP addresses scanning Palo Alto Networks login portals on October 3, 2025, the highest level recorded in the last three months. It described the traffic as targeted and structured, and aimed.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Scanning Activity on Palo Alto Networks Portals Jump 500% in One Day πŸ–‹οΈ

Threat intelligence firm GreyNoise disclosed on Friday that it has observed a spike in scanning activity targeting Palo Alto Networks login portals. The company said it observed a nearly 500 increase in IP addresses scanning Palo Alto Networks login portals on October 3, 2025, the highest level recorded in the last three months. It described the traffic as targeted and structured, and aimed.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 CrowdStrike vs. SentinelOne (2025): Who’s Building the Better AI SOC Brain? 🌊

CrowdStrike and SentinelOne are both strapping AI boosters onto the SOC engine. Same destination faster, smarter defense. But they fly in totally different airspace. Lets unpack CrowdStrike vs. SentinelOne whos The post CrowdStrike vs. SentinelOne 2025 Whos Building the Better AI SOC Brain? appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 Palo Alto Networks vs. SentinelOne: Who Offers Better AI SOC Models in 2025? 🌊

Youre not choosing between toys. Palo Alto Networks and SentinelOne are the strongest players in AIaugmented SOC. The real debate is which operating model you want to live with Palo The post Palo Alto Networks vs. SentinelOne Who Offers Better AI SOC Models in 2025? appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Oracle patches EBS amid extortion attacks πŸ“’

Red alert Companies told to drop everything and take action now.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ TD Synnex adds Boxphish security awareness training to UK&I portfolio πŸ“’

Partners can now provide customers with Boxphish's security training, combined with phishing simulations and dark web monitoring services.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Agentic AI poses major challenge for security professionals, says Palo Alto Networks’ EMEA CISO πŸ“’

Runtime security and employee oversight are necessary to achieve success with AI agents, according to Haider Pasha.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ 13-Year-Old Redis Flaw Exposed: CVSS 10.0 Vulnerability Lets Attackers Run Code Remotely πŸ–‹οΈ

Redis has disclosed details of a maximumseverity security flaw in its inmemory database software that could result in remote code execution under certain circumstances. The vulnerability, tracked as CVE202549844 aka RediShell, has been assigned a CVSS score of 10.0. "An authenticated user may use a specially crafted Lua script to manipulate the garbage collector, trigger a useafterfree,.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity