πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
27.2K subscribers
89.9K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ–‹οΈ Critical Exploit Lets Hackers Bypass Authentication in WordPress Service Finder Theme πŸ–‹οΈ

Threat actors are actively exploiting a critical security flaw impacting the Service Finder WordPress theme that makes it possible to gain unauthorized access to any account, including administrators, and take control of susceptible sites. The authentication bypass vulnerability, tracked as CVE20255947 CVSS score 9.8, affects the Service Finder Bookings, a WordPress plugin bundled with the.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Hackers Exploit WordPress Sites to Power Next-Gen ClickFix Phishing Attacks πŸ–‹οΈ

Cybersecurity researchers are calling attention to a nefarious campaign targeting WordPress sites to make malicious JavaScript injections that are designed to redirect users to sketchy sites. "Site visitors get injected content that was driveby malware like fake Cloudflare verification," Sucuri researcher Puja Srivastava said in an analysis published last week. The website security company.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Chinese Hackers Weaponize Open-Source Nezha Tool in New Attack Wave πŸ–‹οΈ

Threat actors with suspected ties to China have turned a legitimate opensource monitoring tool called Nezha into an attack weapon, using it to deliver a known malware called Gh0st RAT to targets. The activity, observed by cybersecurity company Huntress in August 2025, is characterized by the use of an unusual technique called log poisoning aka log injection to plant a web shell on a web.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Step Into the Password Graveyard… If You Dare (and Join the Live Session) πŸ–‹οΈ

Every year, weak passwords lead to millions in losses and many of those breaches could have been stopped. Attackers dont need advanced tools they just need one careless login. For IT teams, that means endless resets, compliance struggles, and sleepless nights worrying about the next credential leak. This Halloween, The Hacker News and Specops Software invite you to a live webinar .

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ LockBit, Qilin, and DragonForce Join Forces to Dominate the Ransomware Ecosystem πŸ–‹οΈ

Three prominent ransomware groups DragonForce, LockBit, and Qilin have announced a new strategic ransomware alliance, once underscoring continued shifts in the cyber threat landscape. The coalition is seen as an attempt on the part of the financially motivated threat actors to conduct more effective ransomware attacks, ReliaQuest said in a report shared with The Hacker News. "Announced shortly.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Severe Figma MCP Vulnerability Lets Hackers Execute Code Remotely β€” Patch Now πŸ–‹οΈ

Cybersecurity researchers have disclosed details of a nowpatched vulnerability in the popular figmadevelopermcp Model Context Protocol MCP server that could allow attackers to achieve code execution. The vulnerability, tracked as CVE202553967 CVSS score 7.5, is a command injection bug stemming from the unsanitized use of user input, opening the door to a scenario where an attacker can.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” All SonicWall Cloud Backup Users Have Firewall Configuration Files Stolen πŸ“”

SonicWall said that a threat actor has accessed files containing encrypted credentials and configuration data for all customers who have used its cloud backup service.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” ICO’s Β£7.5m Clearview AI Fine a Step Closer After Legal Victory πŸ“”

The ICO has won an Upper Tribunal appeal against Clearview AI over its ability to fine the company.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” NCSC: Observability and Threat Hunting Must Improve πŸ“”

The UKs National Cyber Security Centre has released new guidance to help firms improve observability and threat hunting.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” High Number of Windows 10 Users Remain as End-of-Life Looms πŸ“”

A new report from TeamViewer found that 40 of global endpoints still run Windows 10, just days before security updates and support ends for the operating system.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Nezha Tool Used in New Cyber Campaign Targeting Web Applications πŸ“”

A cyber campaign using Nezha has been identified, targeting vulnerable web apps with PHP web shells and Ghost RAT.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Digital Fraud Costs Companies Worldwide 7.7% of Annual Revenue πŸ“”

According to TransUnion, digital fraud has cost companies 534bn in losses globally with US business hit hardest.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Using AI to code? Watch your security debt πŸ“’

Black Duck research shows faster development may be causing risks for companies.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ SaaS Breaches Start with Tokens - What Security Teams Must Watch πŸ–‹οΈ

Token theft is a leading cause of SaaS breaches. Discover why OAuth and API tokens are often overlooked and how security teams can strengthen token hygiene to prevent attacks. Most companies in 2025 rely on a whole range of softwareasaservice SaaS applications to run their operations. However, the security of these applications depends on small pieces of data called tokens. Tokens, like.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” ClayRat Spyware Campaign Targets Android Users in Russia πŸ“”

A new ClayRat spyware campaign has been observed targeting Russian users via fake apps on Telegram and exfiltrating data.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Researchers Warn of Security Gaps in AI Browsers πŸ“”

A new report from SquareX Labs highlights security weaknesses in AI browsers like Comet, revealing new cyberrisks.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Hackers Access SonicWall Cloud Firewall Backups, Spark Urgent Security Checks πŸ–‹οΈ

SonicWall on Wednesday disclosed that an unauthorized party accessed firewall configuration backup files for all customers who have used the cloud backup service. "The files contain encrypted credentials and configuration data while encryption remains in place, possession of these files could increase the risk of targeted attacks," the company said. It also noted that it's working to notify all.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ ThreatsDay Bulletin: MS Teams Hack, MFA Hijacking, $2B Crypto Heist, Apple Siri Probe & More πŸ–‹οΈ

Cyber threats are evolving faster than ever. Attackers now combine social engineering, AIdriven manipulation, and cloud exploitation to breach targets once considered secure. From communication platforms to connected devices, every system that enhances convenience also expands the attack surface. This edition of ThreatsDay Bulletin explores these converging risks and the safeguards that help.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
❀2
πŸ–‹οΈ From HealthKick to GOVERSHELL: The Evolution of UTA0388's Espionage Malware πŸ–‹οΈ

A Chinaaligned threat actor codenamed UTA0388 has been attributed to a series of spearphishing campaigns targeting North America, Asia, and Europe that are designed to deliver a Gobased implant known as GOVERSHELL. "The initially observed campaigns were tailored to the targets, and the messages purported to be sent by senior researchers and analysts from legitimatesounding, completely.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps πŸ–‹οΈ

A rapidly evolving Android spyware campaign called ClayRat has targeted users in Russia using a mix of Telegram channels and lookalike phishing websites by impersonating popular apps like WhatsApp, Google Photos, TikTok, and YouTube as lures to install them. "Once active, the spyware can exfiltrate SMS messages, call logs, notifications, and device information taking photos with the front.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 Why SIEM Alone Isn’t Enough: Lessons from a Fortune-500 Ransomware Breach 🌊

In December 2024, hackers slipped into our clients network without setting off any alarms. They went unnoticed until January 2025, when the attackers unleashed the ransomware breach and caused a The post Why SIEM Alone Isnt Enough Lessons from a Fortune500 Ransomware Breach appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity