πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
26K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
🦿 Veeam’s β€˜Agent Commander’: Bringing Guardrails and Resilience to the Wild West of AI 🦿

Veeams Agent Commander turns backup into an AIera command center, giving enterprises the guardrails, visibility, and precision undo they need to safely scale autonomous agents. The post Veeams Agent Commander Bringing Guardrails and Resilience to the Wild West of AI appeared first on TechRepublic.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
β™ŸοΈ Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker β™ŸοΈ

A hacktivist group with links to Iran's intelligence agencies is claiming responsibility for a datawiping attack against Stryker, a global medical technology company based in Michigan. News reports out of Ireland, Stryker's largest hub outside of the United States, said the company sent home more than 5,000 workers there today. Meanwhile, a voicemail message at Stryker's main U.S. headquarters says the company is currently experiencing a building emergency.

πŸ“– Read more.

πŸ”— Via "Krebs on Security"

----------
πŸ‘οΈ Seen on @cibsecurity
❀1
β™ŸοΈ Microsoft Patch Tuesday, March 2026 Edition β™ŸοΈ

Microsoft Corp. today pushed security updates to fix at least 77 vulnerabilities in its Windows operating systems and other software. There are no pressing "zeroday" flaws this month compared to February's five zeroday treat, but as usual some patches may deserve more rapid attention from organizations using Windows. Here are a few highlights from this month's Patch Tuesday.

πŸ“– Read more.

πŸ”— Via "Krebs on Security"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ OpenClaw AI Agent Flaws Could Enable Prompt Injection and Data Exfiltration πŸ–‹οΈ

China's National Computer Network Emergency Response Technical Team CNCERT has issued a warning about the security stemming from the use of OpenClaw formerly Clawdbot and Moltbot, an opensource and selfhosted autonomous artificial intelligence AI agent. In a post shared on WeChat, CNCERT noted that the platform's "inherently weak default security configurations," coupled with its.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ GlassWorm Supply-Chain Attack Abuses 72 Open VSX Extensions to Target Developers πŸ–‹οΈ

Cybersecurity researchers have flagged a new iteration of the GlassWorm campaign that they say represents a "significant escalation" in how it propagates through the Open VSX registry. "Instead of requiring every malicious listing to embed the loader directly, the threat actor is now abusing extensionPack and extensionDependencies to turn initially standalonelooking extensions into transitive.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Chinese Hackers Target Southeast Asian Militaries with AppleChris and MemFun Malware πŸ–‹οΈ

A suspected Chinabased cyber espionage operation has targeted Southeast Asian military organizations as part of a statesponsored campaign that dates back to at least 2020. Palo Alto Networks Unit 42 is tracking the threat activity under the moniker CLSTA1087, where CL refers to cluster, and STA stands for statebacked motivation. "The activity demonstrated strategic operational patience and.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Meta to Shut Down Instagram End-to-End Encrypted Chat Support Starting May 2026 πŸ–‹οΈ

Meta has announced plans to discontinue support for endtoend encryption E2EE for chats on Instagram after May 8, 2026. "If you have chats that are impacted by this change, you will see instructions on how you can download any media or messages you may want to keep," the social media giant said in a help document. "If you're on an older version of Instagram, you may also need to update the.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ INTERPOL Dismantles 45,000 Malicious IPs, Arrests 94 in Global Cybercrime πŸ–‹οΈ

INTERPOL on Friday announced the takedown of 45,000 malicious IP addresses and servers used in connection with phishing, malware, and ransomware campaigns, as part of the agency's ongoing efforts to dismantle criminal networks, disrupt emerging threats, and safeguard victims from scams. The effort is part of an international law enforcement operation that involved 72 countries and territories.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Storm-2561 Spreads Trojan VPN Clients via SEO Poisoning to Steal Credentials πŸ–‹οΈ

Microsoft has disclosed details of a credential theft campaign that employs fake virtual private network VPN clients distributed through search engine optimization SEO poisoning techniques. "The campaign redirects users searching for legitimate enterprise software to malicious ZIP files on attackercontrolled websites to deploy digitally signed trojans that masquerade as trusted VPN clients.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Investigating a New Click-Fix Variant πŸ–‹οΈ

Disclaimer This report has been prepared by the Threat Research Center to enhance cybersecurity awareness and support the strengthening of defense capabilities. It is based on independent research and observations of the current threat landscape available at the time of publication. The content is intended for informational and preparedness purposes only. Read more blogs around threat.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Google Fixes Two Chrome Zero-Days Exploited in the Wild Affecting Skia and V8 πŸ–‹οΈ

Google on Thursday released security updates for its Chrome web browser to address two highseverity vulnerabilities that it said have been exploited in the wild. The list of vulnerabilities is as follows CVE20263909 CVSS score 8.8 An outofbounds write vulnerability in the Skia 2D graphics library that allows a remote attacker to perform outofbounds memory access via a crafted HTML.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
❀1
πŸ–‹οΈ Nine CrackArmor Flaws in Linux AppArmor Enable Root Escalation, Bypass Container Isolation πŸ–‹οΈ

Cybersecurity researchers have disclosed multiple security vulnerabilities within the Linux kernel's AppArmor module that could be exploited by unprivileged users to circumvent kernel protections, escalate to root, and undermine container isolation guarantees. The nine confused deputy vulnerabilities have been collectively codenamed CrackArmor by the Qualys Threat Research Unit TRU. The.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Authorities Disrupt SocksEscort Proxy Botnet Exploiting 369,000 IPs Across 163 Countries πŸ–‹οΈ

A courtauthorized international law enforcement operation has dismantled a criminal proxy service named SocksEscort that enslaved thousands of residential routers worldwide into a botnet for committing largescale fraud. "SocksEscort infected home and small business internet routers with malware," the U.S. Department of Justice DoJ said. "The malware allowed SocksEscort to direct internet.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Veeam Patches 7 Critical Backup & Replication Flaws Allowing Remote Code Execution πŸ–‹οΈ

Veeam has released security updates to address multiple critical vulnerabilities in its Backup Replication software that, if successfully exploited, could result in remote code execution. The vulnerabilities are as follows CVE202621666 CVSS score 9.9 A vulnerability that allows an authenticated domain user to perform remote code execution on the Backup Server. CVE202621667 .

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
❀1
πŸ–‹οΈ Rust-Based VENON Malware Targets 33 Brazilian Banks with Credential-Stealing Overlays πŸ–‹οΈ

Cybersecurity researchers have disclosed details of a new banking malware targeting Brazilian users that's written in Rust, marking a significant departure from other known Delphibased malware families associated with the Latin American cybercrime ecosystem. The malware, which is designed to infect Windows systems and was first discovered last month, has been codenamed VENON by Brazilian.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Hive0163 Uses AI-Assisted Slopoly Malware for Persistent Access in Ransomware Attacks πŸ–‹οΈ

Cybersecurity researchers have disclosed details of a suspected artificial intelligence AIgenerated malware codenamed Slopoly put to use by a financially motivated threat actor named Hive0163. "Although still relatively unspectacular, AIgenerated malware such as Slopoly shows how easily threat actors can weaponize AI to develop new malware frameworks in a fraction of the time it used to take.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ OpenClaw AI Agent Flaws Could Enable Prompt Injection and Data Exfiltration πŸ–‹οΈ

China's National Computer Network Emergency Response Technical Team CNCERT has issued a warning about the security stemming from the use of OpenClaw formerly Clawdbot and Moltbot, an opensource and selfhosted autonomous artificial intelligence AI agent. In a post shared on WeChat, CNCERT noted that the platform's "inherently weak default security configurations," coupled with its.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ How to Scale Phishing Detection in Your SOC: 3 Steps for CISOs πŸ–‹οΈ

Phishing has quietly turned into one of the hardest enterprise threats to expose early. Instead of crude lures and obvious payloads, modern campaigns rely on trusted infrastructure, legitimatelooking authentication flows, and encrypted traffic that conceals malicious behavior from traditional detection layers. For CISOs, the priority is now clear scale phishing detection in a way that helps.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ GlassWorm Supply-Chain Attack Abuses 72 Open VSX Extensions to Target Developers πŸ–‹οΈ

Cybersecurity researchers have flagged a new iteration of the GlassWorm campaign that they say represents a "significant escalation" in how it propagates through the Open VSX registry. "Instead of requiring every malicious listing to embed the loader directly, the threat actor is now abusing extensionPack and extensionDependencies to turn initially standalonelooking extensions into transitive.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ ThreatsDay Bulletin: OAuth Trap, EDR Killer, Signal Phishing, Zombie ZIP, AI Platform Hack & More πŸ–‹οΈ

Another Thursday, another pile of weird security stuff that somehow happened in just seven days. Some of it is clever. Some of it is lazy. A few bits fall into that uncomfortable category of yeah this is probably going to show up in real incidents sooner than wed like. The pattern this week feels familiar in a slightly annoying way. Old tricks are getting polished. New research shows how.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Chinese Hackers Target Southeast Asian Militaries with AppleChris and MemFun Malware πŸ–‹οΈ

A suspected Chinabased cyber espionage operation has targeted Southeast Asian military organizations as part of a statesponsored campaign that dates back to at least 2020. Palo Alto Networks Unit 42 is tracking the threat activity under the moniker CLSTA1087, where CL refers to cluster, and STA stands for statebacked motivation. "The activity demonstrated strategic operational patience and.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity