πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.9K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ“” CISA Issues Emergency Directive Over Exploited Cisco SD-WAN Flaws πŸ“”

CISA issued urgent directive as attackers exploit Cisco SDWAN flaw granting admin access to networks.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 AI SOC Vs Traditional SOC: Compare Rules vs. Intelligence, Manual vs. Automated Triage, Non-Deterministic Risk 🌊

Compare AI SOC and traditional SOC across 11 dimensions. Get pricing, performance metrics, and a readiness checklist for your upgrade decision. The post AI SOC Vs Traditional SOC Compare Rules vs. Intelligence, Manual vs. Automated Triage, NonDeterministic Risk appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Police Scotland Fined After Sharing Victim’s Phone Data πŸ“”

The ICO has fined Police Scotland after it shared the entire contents of a victims phone with her alleged attacker.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 How to Get GRC Buy-In in 2026: The Business Case Executives Actually Approve 🌊

In 2026, most organizations dont need convincing that risk has increased. They feel it every day in regulatory pressure, thirdparty exposure, AI adoption, cyber incidents, and boardlevel scrutiny. The The post How to Get GRC BuyIn in 2026 The Business Case Executives Actually Approve appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Iran Claims Massive Cyber-Attack on MedTech Firm Stryker πŸ“”

The proIran Handala group claims to have wiped 200,000 systems in destructive wiper malware attack on US firm Stryker.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 What Is an AI SOC? A Complete Guide to How Artificial Intelligence Security Operations Work 🌊

What is an AI SOC? Learn how agentic AI replaces manual triage, spot AIwashing, and evaluate vendors. Built by practitioners. The post What Is an AI SOC? A Complete Guide to How Artificial Intelligence Security Operations Work appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” France: National Cybersecurity Agency Reports Ransomware Attack Drop in 2025 πŸ“”

French small and medium businesses remained the organizations most targeted by ransomware in 2025.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 AI SOC Explainability: Evidence Trails, Accuracy Benchmarks, and Decision Accountability 🌊

AI SOC transparency matters for audits, insurance, and trust. Learn what evidence trails, decision metrics, and accuracy benchmarks to demand. The post AI SOC Explainability Evidence Trails, Accuracy Benchmarks, and Decision Accountability appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Infosecurity Europe Announces 2026 Keynote Line Up πŸ“”

Infosecurity Europe 2026 reveals its keynote lineup, featuring Jason Fox, Shlomo Kramer, Cynthia Kaiser and more, with sessions on AI, cloud security and post quantum threats.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 AI SOC Breach Warranty Guide: What Financial Protection Providers Actually Offer? 🌊

Evaluate AI SOC breach warranty exclusions, perdevice caps, and identity attack gaps. Get the 7clause negotiation framework for your next renewal. The post AI SOC Breach Warranty Guide What Financial Protection Providers Actually Offer? appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ OpenClaw AI Agent Flaws Could Enable Prompt Injection and Data Exfiltration πŸ–‹οΈ

China's National Computer Network Emergency Response Technical Team CNCERT has issued a warning about the security stemming from the use of OpenClaw formerly Clawdbot and Moltbot, an opensource and selfhosted autonomous artificial intelligence AI agent. In a post shared on WeChat, CNCERT noted that the platform's "inherently weak default security configurations," coupled with its.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ GlassWorm Supply-Chain Attack Abuses 72 Open VSX Extensions to Target Developers πŸ–‹οΈ

Cybersecurity researchers have flagged a new iteration of the GlassWorm campaign that they say represents a "significant escalation" in how it propagates through the Open VSX registry. "Instead of requiring every malicious listing to embed the loader directly, the threat actor is now abusing extensionPack and extensionDependencies to turn initially standalonelooking extensions into transitive.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Chinese Hackers Target Southeast Asian Militaries with AppleChris and MemFun Malware πŸ–‹οΈ

A suspected Chinabased cyber espionage operation has targeted Southeast Asian military organizations as part of a statesponsored campaign that dates back to at least 2020. Palo Alto Networks Unit 42 is tracking the threat activity under the moniker CLSTA1087, where CL refers to cluster, and STA stands for statebacked motivation. "The activity demonstrated strategic operational patience and.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Meta to Shut Down Instagram End-to-End Encrypted Chat Support Starting May 2026 πŸ–‹οΈ

Meta has announced plans to discontinue support for endtoend encryption E2EE for chats on Instagram after May 8, 2026. "If you have chats that are impacted by this change, you will see instructions on how you can download any media or messages you may want to keep," the social media giant said in a help document. "If you're on an older version of Instagram, you may also need to update the.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ INTERPOL Dismantles 45,000 Malicious IPs, Arrests 94 in Global Cybercrime πŸ–‹οΈ

INTERPOL on Friday announced the takedown of 45,000 malicious IP addresses and servers used in connection with phishing, malware, and ransomware campaigns, as part of the agency's ongoing efforts to dismantle criminal networks, disrupt emerging threats, and safeguard victims from scams. The effort is part of an international law enforcement operation that involved 72 countries and territories.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Storm-2561 Spreads Trojan VPN Clients via SEO Poisoning to Steal Credentials πŸ–‹οΈ

Microsoft has disclosed details of a credential theft campaign that employs fake virtual private network VPN clients distributed through search engine optimization SEO poisoning techniques. "The campaign redirects users searching for legitimate enterprise software to malicious ZIP files on attackercontrolled websites to deploy digitally signed trojans that masquerade as trusted VPN clients.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Investigating a New Click-Fix Variant πŸ–‹οΈ

Disclaimer This report has been prepared by the Threat Research Center to enhance cybersecurity awareness and support the strengthening of defense capabilities. It is based on independent research and observations of the current threat landscape available at the time of publication. The content is intended for informational and preparedness purposes only. Read more blogs around threat.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Google Fixes Two Chrome Zero-Days Exploited in the Wild Affecting Skia and V8 πŸ–‹οΈ

Google on Thursday released security updates for its Chrome web browser to address two highseverity vulnerabilities that it said have been exploited in the wild. The list of vulnerabilities is as follows CVE20263909 CVSS score 8.8 An outofbounds write vulnerability in the Skia 2D graphics library that allows a remote attacker to perform outofbounds memory access via a crafted HTML.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Nine CrackArmor Flaws in Linux AppArmor Enable Root Escalation, Bypass Container Isolation πŸ–‹οΈ

Cybersecurity researchers have disclosed multiple security vulnerabilities within the Linux kernel's AppArmor module that could be exploited by unprivileged users to circumvent kernel protections, escalate to root, and undermine container isolation guarantees. The nine confused deputy vulnerabilities have been collectively codenamed CrackArmor by the Qualys Threat Research Unit TRU. The.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Authorities Disrupt SocksEscort Proxy Botnet Exploiting 369,000 IPs Across 163 Countries πŸ–‹οΈ

A courtauthorized international law enforcement operation has dismantled a criminal proxy service named SocksEscort that enslaved thousands of residential routers worldwide into a botnet for committing largescale fraud. "SocksEscort infected home and small business internet routers with malware," the U.S. Department of Justice DoJ said. "The malware allowed SocksEscort to direct internet.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Veeam Patches 7 Critical Backup & Replication Flaws Allowing Remote Code Execution πŸ–‹οΈ

Veeam has released security updates to address multiple critical vulnerabilities in its Backup Replication software that, if successfully exploited, could result in remote code execution. The vulnerabilities are as follows CVE202621666 CVSS score 9.9 A vulnerability that allows an authenticated domain user to perform remote code execution on the Backup Server. CVE202621667 .

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity