πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
27.3K subscribers
89.9K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ“’ 77% of security leaders say they'd fire staff who fall for phishing scams, even though they've done the same thing πŸ“’

A new report uncovers worrying complacency amongst IT and security leaders.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ 77% of security leaders say they'd fire staff who fall for phishing scams, even though they've done the same thing πŸ“’

A new report uncovers worrying complacency amongst IT and security leaders.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ 77% of security leaders say they'd fire staff who fall for phishing scams, even though they've done the same thing πŸ“’

A new report uncovers worrying complacency amongst IT and security leaders.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Hackers stole source code, bug details in disastrous F5 security incident – here’s everything we know and how to protect yourself πŸ“’

CISA has warned the F5 security incident presents a serious threat to federal networks.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Hackers stole source code, bug details in disastrous F5 security incident – here’s everything we know and how to protect yourself πŸ“’

CISA has warned the F5 security incident presents a serious threat to federal networks.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Hackers stole source code, bug details in disastrous F5 security incident – here’s everything we know and how to protect yourself πŸ“’

CISA has warned the F5 security incident presents a serious threat to federal networks.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Been offered a job at Google? Think again. This new phishing scam is duping tech workers looking for a career change πŸ“’

A new Google Careers phishing scam is targeting tech workers looking for a change of scenery here's how to stay safe.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Been offered a job at Google? Think again. This new phishing scam is duping tech workers looking for a career change πŸ“’

A new Google Careers phishing scam is targeting tech workers looking for a change of scenery here's how to stay safe.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Been offered a job at Google? Think again. This new phishing scam is duping tech workers looking for a career change πŸ“’

A new Google Careers phishing scam is targeting tech workers looking for a change of scenery here's how to stay safe.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ North Korean Hackers Use EtherHiding to Hide Malware Inside Blockchain Smart Contracts πŸ–‹οΈ

A threat actor with ties to the Democratic People's Republic of Korea aka North Korea has been observed leveraging the EtherHiding technique to distribute malware and enable cryptocurrency theft, marking the first time a statesponsored hacking group has embraced the method. The activity has been attributed by Google Threat Intelligence Group GTIG to a threat cluster it tracks as UNC5342,.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ North Korean Hackers Use EtherHiding to Hide Malware Inside Blockchain Smart Contracts πŸ–‹οΈ

A threat actor with ties to the Democratic People's Republic of Korea aka North Korea has been observed leveraging the EtherHiding technique to distribute malware and enable cryptocurrency theft, marking the first time a statesponsored hacking group has embraced the method. The activity has been attributed by Google Threat Intelligence Group GTIG to a threat cluster it tracks as UNC5342,.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ North Korean Hackers Use EtherHiding to Hide Malware Inside Blockchain Smart Contracts πŸ–‹οΈ

A threat actor with ties to the Democratic People's Republic of Korea aka North Korea has been observed leveraging the EtherHiding technique to distribute malware and enable cryptocurrency theft, marking the first time a statesponsored hacking group has embraced the method. The activity has been attributed by Google Threat Intelligence Group GTIG to a threat cluster it tracks as UNC5342,.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Hackers Abuse Blockchain Smart Contracts to Spread Malware via Infected WordPress Sites πŸ–‹οΈ

A financially motivated threat actor codenamed UNC5142 has been observed abusing blockchain smart contracts as a way to facilitate the distribution of information stealers such as Atomic AMOS, Lumma, Rhadamanthys aka RADTHIEF, and Vidar, targeting both Windows and Apple macOS systems. "UNC5142 is characterized by its use of compromised WordPress websites and 'EtherHiding,' a technique used.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ LinkPro Linux Rootkit Uses eBPF to Hide and Activates via Magic TCP Packets πŸ–‹οΈ

An investigation into the compromise of an Amazon Web Services AWShosted infrastructure has led to the discovery of a new GNULinux rootkit dubbed LinkPro, according to findings from Synacktiv. "This backdoor features functionalities relying on the installation of two eBPF extended Berkeley Packet Filter modules, on the one hand to conceal itself, and on the other hand to be remotely.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Architectures, Risks, and Adoption: How to Assess and Choose the Right AI-SOC Platform πŸ–‹οΈ

Scaling the SOC with AI Why now?  Security Operations Centers SOCs are under unprecedented pressure. According to SACRs AISOC Market Landscape 2025, the average organization now faces around 960 alerts per day, while large enterprises manage more than 3,000 alerts daily from an average of 28 different tools. Nearly 40 of those alerts go uninvestigated, and 61 of security teams admit.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Hackers Deploy Linux Rootkits via Cisco SNMP Flaw in "Zero Disco' Attacks πŸ–‹οΈ

Cybersecurity researchers have disclosed details of a new campaign that exploited a recently disclosed security flaw impacting Cisco IOS Software and IOS XE Software to deploy Linux rootkits on older, unprotected systems. The activity, codenamed Operation Zero Disco by Trend Micro, involves the weaponization of CVE202520352 CVSS score 7.7, a stack overflow vulnerability in the Simple.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Beware the Hidden Costs of Pen Testing πŸ–‹οΈ

Penetration testing helps organizations ensure IT systems are secure, but it should never be treated in a onesizefitsall approach. Traditional approaches can be rigid and cost your organization time and money while producing inferior results.  The benefits of pen testing are clear. By empowering white hat hackers to attempt to breach your system using similar tools and techniques to.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ ThreatsDay Bulletin: $15B Crypto Bust, Satellite Spying, Billion-Dollar Smishing, Android RATs & More πŸ–‹οΈ

The online world is changing fast. Every week, new scams, hacks, and tricks show how easy its become to turn everyday technology into a weapon. Tools made to help us work, connect, and stay safe are now being used to steal, spy, and deceive. Hackers dont always break systems anymore they use them. They hide inside trusted apps, copy real websites, and trick people into giving up control.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ CISA Flags Adobe AEM Flaw with Perfect 10.0 Score β€” Already Under Active Attack πŸ–‹οΈ

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a critical security flaw impacting Adobe Experience Manager to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The vulnerability in question is CVE202554253 CVSS score 10.0, a maximumseverity misconfiguration bug that could result in arbitrary code execution.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Microsoft Revokes 200 Fraudulent Certificates Used in Rhysida Ransomware Campaign πŸ–‹οΈ

Microsoft on Thursday disclosed that it revoked more than 200 certificates used by a threat actor it tracks as Vanilla Tempest to fraudulently sign malicious binaries in ransomware attacks. The certificates were "used in fake Teams setup files to deliver the Oyster backdoor and ultimately deploy Rhysida ransomware," the Microsoft Threat Intelligence team said in a post shared on X. The tech.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Thousands of exposed civil servant passwords are up for grabs online πŸ“’

While the password security failures are concerning, they pale in comparison to other nations.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity