πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
26K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ“’ Ransomware protection for all: How consumption-based subscription models can lower the entry point for cyber resilience πŸ“’

Consumptionbased immutable backup makes enterprisegrade ransomware resilience affordable to all.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 Microsoft: Critical Windows Admin Center Flaw Allows Privilege Escalation 🦿

A highseverity Windows Admin Center vulnerability CVE202626119 could allow privilege escalation in enterprise environments. Heres what to know and how to mitigate risk. The post Microsoft Critical Windows Admin Center Flaw Allows Privilege Escalation appeared first on TechRepublic.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 Substack Breach May Have Leaked Nearly 700,000 User Details Online 🦿

Substack says hackers accessed user emails, phone numbers, and internal metadata in October 2025, with a database of 697,313 records later posted online. The post Substack Breach May Have Leaked Nearly 700,000 User Details Online appeared first on TechRepublic.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ CRESCENTHARVEST Campaign Targets Iran Protest Supporters With RAT Malware πŸ–‹οΈ

Cybersecurity researchers have disclosed details of a new campaign dubbed CRESCENTHARVEST, likely targeting supporters of Iran's ongoing protests to conduct information theft and longterm espionage. The Acronis Threat Research Unit TRU said it observed the activity after January 9, with the attacks designed to deliver a malicious payload that serves as a remote access trojan RAT and.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Citizen Lab Finds Cellebrite Tool Used on Kenyan Activist’s Phone in Police Custody πŸ–‹οΈ

New research from the Citizen Lab has found signs that Kenyan authorities used a commercial forensic extraction tool manufactured by Israeli company Cellebrite to break into a prominent dissident's phone, making it the latest case of abuse of the technology targeting civil society. The interdisciplinary research unit at the University of Toronto's Munk School of Global Affairs Public.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Grandstream GXP1600 VoIP Phones Exposed to Unauthenticated Remote Code Execution πŸ–‹οΈ

Cybersecurity researchers have disclosed a critical security flaw in the Grandstream GXP1600 series of VoIP phones that could allow an attacker to seize control of susceptible devices. The vulnerability, tracked as CVE20262329, carries a CVSS score of 9.3 out of a maximum of 10.0. It has been described as a case of unauthenticated stackbased buffer overflow that could result in remote code.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Critical Flaws Found in Four VS Code Extensions with Over 125 Million Installs πŸ–‹οΈ

Cybersecurity researchers have disclosed multiple security vulnerabilities in four popular Microsoft Visual Studio Code VS Code extensions that, if successfully exploited, could allow threat actors to steal local files and execute code remotely. The extensions, which have been collectively installed more than 125 million times, are Live Server, Code Runner, Markdown Preview Enhanced, and.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Cybersecurity Tech Predictions for 2026: Operating in a World of Permanent Instability πŸ–‹οΈ

In 2025, navigating the digital seas still felt like a matter of direction. Organizations charted routes, watched the horizon, and adjusted course to reach safe harbors of resilience, trust, and compliance. In 2026, the seas are no longer calm between storms. Cybersecurity now unfolds in a state of continuous atmospheric instability AIdriven threats that adapt in real time, expanding.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Dell RecoverPoint for VMs Zero-Day CVE-2026-22769 Exploited Since Mid-2024 πŸ–‹οΈ

A maximum severity security vulnerability in Dell RecoverPoint for Virtual Machines has been exploited as a zeroday by a suspected Chinanexus threat cluster dubbed UNC6201 since mid2024, according to a new report from Google Mandiant and Google Threat Intelligence Group GTIG. The activity involves the exploitation of CVE202622769 CVSS score 10.0, a case of hardcoded credentials.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ 3 Ways to Start Your Intelligent Workflow Program πŸ–‹οΈ

Security, IT, and engineering teams today are under relentless pressure to accelerate outcomes, cut operational drag, and unlock the full potential of AI and automation. But simply investing in tools isnt enough. 88 of AI proofsofconcept never make it to production, even though 70 of workers cite freeing time for highvalue work as the primary AI automation motivation. Real impact comes.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Notepad++ Fixes Hijacked Update Mechanism Used to Deliver Targeted Malware πŸ–‹οΈ

Notepad has released a security fix to plug gaps that were exploited by an advanced threat actor from China to hijack the software update mechanism to selectively deliver malware to targets of interest. The version 8.9.2 update incorporates what maintainer Don Ho calls a "double lock" design that aims to make the update process "robust and effectively unexploitable." This includes verification.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ CISA Flags Four Security Flaws Under Active Exploitation in Latest KEV Update πŸ–‹οΈ

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added four security flaws to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The list of vulnerabilities is as follows CVE20262441 CVSS score 8.8 A useafterfree vulnerability in Google Chrome that could allow a remote attacker to potentially exploit heap.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Cryptojacking Campaign Exploits Driver to Boost Monero Mining πŸ“”

Cryptojacking campaign used pirated software to deploy a persistent XMRig miner with stealth tactics.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” AI Assistants Used as Covert Command-and-Control Relays πŸ“”

AIs like Grok and Microsoft Copilot can be exploited as covert C2 channels for malware communication.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Record Number of Ransomware Victims and Groups in 2025 πŸ“”

Searchlight Cyber reports a 30 annual increase in ransomware victim numbers in 2025.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Chinese APT Group Exploits Dell Zero-Day for Two Years πŸ“”

Mandiant reveals campaign featuring exploit of a CVSS 10.0 CVE in Dell RecoverPoint for Virtual Machines.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 Business Development Representative for Channels 🌊

The post Business Development Representative for Channels appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 From Ambiguous Alert to Fileless Attack: A Banking Security Breach Prevented 🌊

See how human expertise identified malicious ViewState code injection hiding in IIS memory before data was compromised. The post From Ambiguous Alert to Fileless Attack A Banking Security Breach Prevented appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Researchers Reveal Six New OpenClaw Vulnerabilities πŸ“”

Endor Labs has published details of six new vulnerabilities in popular AI assistant OpenClaw.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Fake IPTV Apps Spread Massiv Android Malware Targeting Mobile Banking Users πŸ–‹οΈ

Cybersecurity researchers have disclosed details of a new Android trojan called Massiv that's designed to facilitate device takeover DTO attacks for financial theft. The malware, according to ThreatFabric, masquerades as seemingly harmless IPTV apps to deceive victims, indicating that the activity is primarily singling out users looking for the online TV applications. "This new threat, while.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ¦… India’s AI Revolution: Why This Is India’s Most Significant Moment πŸ¦…

By Beenu Arora, CoFounder and CEO, Cyble  I believe we're witnessing the most significant event India has ever experienced. The nation stands at the cusp of a major global shift, and I want to share why I'm so bullish about India's role in the AI revolutionand the critical security challenges we must address together.  India Right Place, Right Time  No country will prosper without making significant changes in their AI capabilities. India is uniquely positioned to lead this transformation. We've already pioneered the entire FinTech ecosystem, processing payments for more than half a billion people globally. This foundation puts India at the perfect intersection of technological capability and market opportunity to ride the AI wave.  httpswww.youtube.comwatch?v9WVlAzrhN0k ...

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity