πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.9K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
🌊 RSAC 2026 Parties & Networking Events: The Unofficial Guide to San Francisco’s Cybersecurity Social Season 🌊

Lets be honest about how RSAC actually works. You fly to San Francisco, you badge in at Moscone, you sit through a keynote or two, and then if youre The post RSAC 2026 Parties Networking Events The Unofficial Guide to San Franciscos Cybersecurity Social Season appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Critical Zero-Click Flaw in n8n Allows Full Server Compromise πŸ“”

The critical vulnerability affecting both cloud and selfhosted n8n instances requires no authentication or even n8n account to be exploited.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 AI SOC vs MDR vs MSSP: Scoring Table, Pricing Data, Response Proof 🌊

Evaluating AI SOC, MDR, MSSP, SOAR, and XDR? Compare response times, TCO, and limitations with our 8criteria scoring framework. The post AI SOC vs MDR vs MSSP Scoring Table, Pricing Data, Response Proof  appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” CISA Issues Emergency Directive Over Exploited Cisco SD-WAN Flaws πŸ“”

CISA issued urgent directive as attackers exploit Cisco SDWAN flaw granting admin access to networks.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 AI SOC Vs Traditional SOC: Compare Rules vs. Intelligence, Manual vs. Automated Triage, Non-Deterministic Risk 🌊

Compare AI SOC and traditional SOC across 11 dimensions. Get pricing, performance metrics, and a readiness checklist for your upgrade decision. The post AI SOC Vs Traditional SOC Compare Rules vs. Intelligence, Manual vs. Automated Triage, NonDeterministic Risk appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Police Scotland Fined After Sharing Victim’s Phone Data πŸ“”

The ICO has fined Police Scotland after it shared the entire contents of a victims phone with her alleged attacker.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 How to Get GRC Buy-In in 2026: The Business Case Executives Actually Approve 🌊

In 2026, most organizations dont need convincing that risk has increased. They feel it every day in regulatory pressure, thirdparty exposure, AI adoption, cyber incidents, and boardlevel scrutiny. The The post How to Get GRC BuyIn in 2026 The Business Case Executives Actually Approve appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Iran Claims Massive Cyber-Attack on MedTech Firm Stryker πŸ“”

The proIran Handala group claims to have wiped 200,000 systems in destructive wiper malware attack on US firm Stryker.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 What Is an AI SOC? A Complete Guide to How Artificial Intelligence Security Operations Work 🌊

What is an AI SOC? Learn how agentic AI replaces manual triage, spot AIwashing, and evaluate vendors. Built by practitioners. The post What Is an AI SOC? A Complete Guide to How Artificial Intelligence Security Operations Work appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” France: National Cybersecurity Agency Reports Ransomware Attack Drop in 2025 πŸ“”

French small and medium businesses remained the organizations most targeted by ransomware in 2025.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 AI SOC Explainability: Evidence Trails, Accuracy Benchmarks, and Decision Accountability 🌊

AI SOC transparency matters for audits, insurance, and trust. Learn what evidence trails, decision metrics, and accuracy benchmarks to demand. The post AI SOC Explainability Evidence Trails, Accuracy Benchmarks, and Decision Accountability appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Infosecurity Europe Announces 2026 Keynote Line Up πŸ“”

Infosecurity Europe 2026 reveals its keynote lineup, featuring Jason Fox, Shlomo Kramer, Cynthia Kaiser and more, with sessions on AI, cloud security and post quantum threats.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 AI SOC Breach Warranty Guide: What Financial Protection Providers Actually Offer? 🌊

Evaluate AI SOC breach warranty exclusions, perdevice caps, and identity attack gaps. Get the 7clause negotiation framework for your next renewal. The post AI SOC Breach Warranty Guide What Financial Protection Providers Actually Offer? appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ OpenClaw AI Agent Flaws Could Enable Prompt Injection and Data Exfiltration πŸ–‹οΈ

China's National Computer Network Emergency Response Technical Team CNCERT has issued a warning about the security stemming from the use of OpenClaw formerly Clawdbot and Moltbot, an opensource and selfhosted autonomous artificial intelligence AI agent. In a post shared on WeChat, CNCERT noted that the platform's "inherently weak default security configurations," coupled with its.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ GlassWorm Supply-Chain Attack Abuses 72 Open VSX Extensions to Target Developers πŸ–‹οΈ

Cybersecurity researchers have flagged a new iteration of the GlassWorm campaign that they say represents a "significant escalation" in how it propagates through the Open VSX registry. "Instead of requiring every malicious listing to embed the loader directly, the threat actor is now abusing extensionPack and extensionDependencies to turn initially standalonelooking extensions into transitive.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Chinese Hackers Target Southeast Asian Militaries with AppleChris and MemFun Malware πŸ–‹οΈ

A suspected Chinabased cyber espionage operation has targeted Southeast Asian military organizations as part of a statesponsored campaign that dates back to at least 2020. Palo Alto Networks Unit 42 is tracking the threat activity under the moniker CLSTA1087, where CL refers to cluster, and STA stands for statebacked motivation. "The activity demonstrated strategic operational patience and.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Meta to Shut Down Instagram End-to-End Encrypted Chat Support Starting May 2026 πŸ–‹οΈ

Meta has announced plans to discontinue support for endtoend encryption E2EE for chats on Instagram after May 8, 2026. "If you have chats that are impacted by this change, you will see instructions on how you can download any media or messages you may want to keep," the social media giant said in a help document. "If you're on an older version of Instagram, you may also need to update the.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ INTERPOL Dismantles 45,000 Malicious IPs, Arrests 94 in Global Cybercrime πŸ–‹οΈ

INTERPOL on Friday announced the takedown of 45,000 malicious IP addresses and servers used in connection with phishing, malware, and ransomware campaigns, as part of the agency's ongoing efforts to dismantle criminal networks, disrupt emerging threats, and safeguard victims from scams. The effort is part of an international law enforcement operation that involved 72 countries and territories.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Storm-2561 Spreads Trojan VPN Clients via SEO Poisoning to Steal Credentials πŸ–‹οΈ

Microsoft has disclosed details of a credential theft campaign that employs fake virtual private network VPN clients distributed through search engine optimization SEO poisoning techniques. "The campaign redirects users searching for legitimate enterprise software to malicious ZIP files on attackercontrolled websites to deploy digitally signed trojans that masquerade as trusted VPN clients.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Investigating a New Click-Fix Variant πŸ–‹οΈ

Disclaimer This report has been prepared by the Threat Research Center to enhance cybersecurity awareness and support the strengthening of defense capabilities. It is based on independent research and observations of the current threat landscape available at the time of publication. The content is intended for informational and preparedness purposes only. Read more blogs around threat.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Google Fixes Two Chrome Zero-Days Exploited in the Wild Affecting Skia and V8 πŸ–‹οΈ

Google on Thursday released security updates for its Chrome web browser to address two highseverity vulnerabilities that it said have been exploited in the wild. The list of vulnerabilities is as follows CVE20263909 CVSS score 8.8 An outofbounds write vulnerability in the Skia 2D graphics library that allows a remote attacker to perform outofbounds memory access via a crafted HTML.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity