🖋️ Nine CrackArmor Flaws in Linux AppArmor Enable Root Escalation, Bypass Container Isolation 🖋️

Cybersecurity researchers have disclosed multiple security vulnerabilities within the Linux kernel's AppArmor module that could be exploited by unprivileged users to circumvent kernel protections, escalate to root, and undermine container isolation guarantees. The nine confused deputy vulnerabilities have been collectively codenamed CrackArmor by the Qualys Threat Research Unit TRU. The.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity

🖋️ Meta Disables 150K Accounts Linked to Southeast Asia Scam Centers in Global Crackdown 🖋️

Meta on Wednesday said it disabled over 150,000 accounts associated with scam centers in Southeast Asia as part of a coordinated effort in partnership with authorities from Thailand, the U.S., the U.K., Canada, Korea, Japan, Singapore, the Philippines, Australia, New Zealand, and Indonesia. The effort also led to 21 arrests made by the Royal Thai Police, the company said. The action builds upon.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity

🖋️ Authorities Disrupt SocksEscort Proxy Botnet Exploiting 369,000 IPs Across 163 Countries 🖋️

A courtauthorized international law enforcement operation has dismantled a criminal proxy service named SocksEscort that enslaved thousands of residential routers worldwide into a botnet for committing largescale fraud. "SocksEscort infected home and small business internet routers with malware," the U.S. Department of Justice DoJ said. "The malware allowed SocksEscort to direct internet.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity

🖋️ Dozens of Vendors Patch Security Flaws Across Enterprise Software and Network Devices 🖋️

SAP has released security updates to address two critical security flaws that could be exploited to achieve arbitrary code execution on affected systems. The vulnerabilities in question listed below CVE201917571 CVSS score 9.8 A code injection vulnerability in SAP Quotation Management Insurance application FSQUO CVE202627685 CVSS score 9.1 An insecure deserialization.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity

🖋️ Veeam Patches 7 Critical Backup & Replication Flaws Allowing Remote Code Execution 🖋️

Veeam has released security updates to address multiple critical vulnerabilities in its Backup Replication software that, if successfully exploited, could result in remote code execution. The vulnerabilities are as follows CVE202621666 CVSS score 9.9 A vulnerability that allows an authenticated domain user to perform remote code execution on the Backup Server. CVE202621667 .

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity

🖋️ What Boards Must Demand in the Age of AI-Automated Exploitation 🖋️

You knew, and you could have acted. Why didnt you?  This is the question you do not want to be asked. And increasingly, its the question leaders are forced to answer after an incident. For years, many executive teams and boards have treated a large vulnerability backlog as an uncomfortable but tolerable fact of life weve accepted the risk. If youve ever seen a report showing.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity

🖋️ Rust-Based VENON Malware Targets 33 Brazilian Banks with Credential-Stealing Overlays 🖋️

Cybersecurity researchers have disclosed details of a new banking malware targeting Brazilian users that's written in Rust, marking a significant departure from other known Delphibased malware families associated with the Latin American cybercrime ecosystem. The malware, which is designed to infect Windows systems and was first discovered last month, has been codenamed VENON by Brazilian.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity

🖋️ Microsoft Patches 84 Flaws in March Patch Tuesday, Including Two Public Zero-Days 🖋️

Microsoft on Tuesday released patches for a set of 84 new security vulnerabilities affecting various software components, including two that have been listed as publicly known. Of these, eight are rated Critical, and 76 are rated Important in severity. Fortysix of the patched vulnerabilities relate to privilege escalation, followed by 18 remote code execution, 10 information disclosure, four.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity

🖋️ Hive0163 Uses AI-Assisted Slopoly Malware for Persistent Access in Ransomware Attacks 🖋️

Cybersecurity researchers have disclosed details of a suspected artificial intelligence AIgenerated malware codenamed Slopoly put to use by a financially motivated threat actor named Hive0163. "Although still relatively unspectacular, AIgenerated malware such as Slopoly shows how easily threat actors can weaponize AI to develop new malware frameworks in a fraction of the time it used to take.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity

🖋️ UNC6426 Exploits nx npm Supply-Chain Attack to Gain AWS Admin Access in 72 Hours 🖋️

A threat actor known as UNC6426 leveraged keys stolen following the supply chain compromise of the nx npm package last year to completely breach a victim's cloud environment within a span of 72 hours. The attack started with the theft of a developer's GitHub token, which the threat actor then used to gain unauthorized access to the cloud and steal data. "The threat actor, UNC6426, then used this.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity

🖋️ How to Scale Phishing Detection in Your SOC: 3 Steps for CISOs 🖋️

Phishing has quietly turned into one of the hardest enterprise threats to expose early. Instead of crude lures and obvious payloads, modern campaigns rely on trusted infrastructure, legitimatelooking authentication flows, and encrypted traffic that conceals malicious behavior from traditional detection layers. For CISOs, the priority is now clear scale phishing detection in a way that helps.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity

🖋️ Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer Secrets 🖋️

Cybersecurity researchers have discovered five malicious Rust crates that masquerade as timerelated utilities to transmit .env file data to the threat actors. The Rust packages, published to crates.io, are listed below chronoanchor dnp3times timecalibrator timecalibrators timesync The crates, per Socket, impersonate timeapi.io and were published between late February and early March.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity

🖋️ ThreatsDay Bulletin: OAuth Trap, EDR Killer, Signal Phishing, Zombie ZIP, AI Platform Hack & More 🖋️

Another Thursday, another pile of weird security stuff that somehow happened in just seven days. Some of it is clever. Some of it is lazy. A few bits fall into that uncomfortable category of yeah this is probably going to show up in real incidents sooner than wed like. The pattern this week feels familiar in a slightly annoying way. Old tricks are getting polished. New research shows how.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity

🖋️ FortiGate Devices Exploited to Breach Networks and Steal Service Account Credentials 🖋️

Cybersecurity researchers are calling attention to a new campaign where threat actors are abusing FortiGate NextGeneration Firewall NGFW appliances as entry points to breach victim networks.  The activity involves the exploitation of recently disclosed security vulnerabilities or weak credentials to extract configuration files containing service account credentials and network topology.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity

🖋️ Attackers Don't Just Send Phishing Emails. They Weaponize Your SOC's Workload 🖋️

The most dangerous phishing campaigns arent just designed to fool employees. Many are designed to exhaust the analysts investigating them. When a phishing investigation takes 12 hours instead of five minutes, the outcome can shift from a contained incident to a breach. For years, the cybersecurity industry has focused on the front door of phishing defense employee training, email gateways that.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity

🖋️ How to Stop AI Data Leaks: A Webinar Guide to Auditing Modern Agentic Workflows 🖋️

Artificial Intelligence AI is no longer just a tool we talk to it is a tool that does things for us. These are called AI Agents. They can send emails, move data, and even manage software on their own. But there is a problem. While these agents make work faster, they also open a new "back door" for hackers. The Problem "The Invisible Employee" Think of an AI Agent like a new employee who has.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity

🖋️ Apple Issues Security Updates for Older iOS Devices Targeted by Coruna WebKit Exploit 🖋️

Apple on Wednesday backported fixes for a security flaw in iOS, iPadOS, and macOS Sonoma to older versions after it was found to be used as part of the Coruna exploit kit. The vulnerability, tracked as CVE202343010, relates to an unspecified vulnerability in WebKit that could result in memory corruption when processing maliciously crafted web content. The iPhone maker said the issue was.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity

🖋️ KadNap Malware Infects 14,000+ Edge Devices to Power Stealth Proxy Botnet 🖋️

Cybersecurity researchers have discovered a new malware called KadNap that's primarily targeting Asus routers to enlist them into a botnet for proxying malicious traffic. The malware, first detected in the wild in August 2025, has expanded to over 14,000 infected devices, with more than 60 of victims located in the U.S., according to the Black Lotus Labs team at Lumen. A lesser number of.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity

🖋️ Six Android Malware Families Target Pix Payments, Banking Apps, and Crypto Wallets 🖋️

Cybersecurity researchers have discovered halfadozen new Android malware families that come with capabilities to steal data from compromised devices and conduct financial fraud. The Android malware range from traditional banking trojans like PixRevolution, TaxiSpy RAT, BeatBanker, Mirax, and Oblivion RAT to fullfledged remote administration tools such as SURXRAT. PixRevolution, according to.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity

🖋️ OpenClaw AI Agent Flaws Could Enable Prompt Injection and Data Exfiltration 🖋️

China's National Computer Network Emergency Response Technical Team CNCERT has issued a warning about the security stemming from the use of OpenClaw formerly Clawdbot and Moltbot, an opensource and selfhosted autonomous artificial intelligence AI agent. In a post shared on WeChat, CNCERT noted that the platform's "inherently weak default security configurations," coupled with its.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity

🖋️ New "LeakyLooker" Flaws in Google Looker Studio Could Enable Cross-Tenant SQL Queries 🖋️

Cybersecurity researchers have disclosed nine crosstenant vulnerabilities in Google Looker Studio that could have permitted attackers to run arbitrary SQL queries on victims' databases and exfiltrate sensitive data within organizations' Google Cloud environments. The shortcomings have been collectively named LeakyLooker by Tenable. There is no evidence that the vulnerabilities were exploited in.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity