πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
26K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ“” Global Cyber Agencies Issue New SBOMs for AI Guidance to Tackle AI Supply Chain Risks πŸ“”

The G7 Cybersecurity Working Group releases new SBOM for AI guidance, outlining seven key data clusters to boost transparency and security across AI supply chains.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” UK Cybersecurity Market Expands to Β£14.7bn with Strong Growth in AI Security Firms πŸ“”

UK cybersecurity sector reaches 14.7bn in revenue, driven by rapid growth in AI security firms, increased investment and rising employment across the industry.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Microsoft Fixes 17 Critical Flaws in May Patch Tuesday πŸ“”

Microsoft has patched 120 vulnerabilities in this months security update round.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 B2B Growth Marketing Manager (Events & Partnerships) 🌊

The post B2B Growth Marketing Manager Events Partnerships appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Most Organizations Now Use AI Agents for Sensitive Security Tasks πŸ“”

Semperis study finds 74 of organizations believe AI will increase attacks on identity infrastructure.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ¦… Why Australian Dark Web Data Is Now Being Sold in Bundles β€” and What It Means for Organizational Exposure in 2026 πŸ¦…

In 2026, opportunistic assaults and isolated breaches will no longer characterize Australia's cyber risk environment. Industrialized data theft, in which stolen data is packaged, repackaged, and marketed on underground marketplaces, is influencing it.  Threat actors are already combining Australian data into composite "breach packages," increasing both its commercial worth and its downstream danger, as opposed to singlecompany breaches occurring in isolation. This trend is also intensifying concerns around Australian dark web data, where aggregated breach packages are increasingly traded and monetized.  This move has a direct impact on how exposed enterprises will be in 2026 and is not merely cosmetic rather, it represents a structural shift in how cybercriminal ecosystems monetiz...

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity
❀1
πŸ–‹οΈ Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation πŸ–‹οΈ

An anonymous cybersecurity researcher who disclosed three Microsoft Defender vulnerabilities has returned with two more zerodays involving a BitLocker bypass and a privilege escalation impacting Windows Collaborative Translation Framework CTFMON. The security defects have been codenamed YellowKey and GreenPlasma, respectively, by the researcher, who goes by the online aliases Chaotic Eclipse.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Industrial organizations under increasing fire as attackers target operational technology πŸ“’

Firms continue to underestimate their operational technology exposure, NCC Group warns.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ β€˜Most organizations are losing ground’: Identity security risks are skyrocketing, and enterprises can’t keep up πŸ“’

Most organizations are being hit at least once a year, and experts warn incidents are accelerating.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ AI is getting better at security – and it's doing it faster than expected πŸ“’

UK AISI warns that AI models are already exceeding existing benchmarks for testing.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure πŸ–‹οΈ

Threat actors have been observed attempting to exploit a recently disclosed security vulnerability in PraisonAI, an opensource multiagent orchestration framework, within four hours of public disclosure. The vulnerability in question is CVE202644338 CVSS score 7.3, a case of missing authentication that exposes sensitive endpoints to anyone, potentially allowing an attacker to invoke the.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ How AI Hallucinations Are Creating Real Security Risks πŸ–‹οΈ

AI hallucinations are introducing serious security risks into critical infrastructure decisionmaking by exploiting human trust through highly confident yet incorrect outputs. When an AI model lacks certainty, it doesnt have a mechanism to recognize that. Instead, it generates the most probable response based on patterns in its training data, even if that response is inaccurate. These outputs.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” New Fragnesia Flaw Hands Linux Local Users Root Access πŸ“”

New Fragnesia kernel flaw lets unprivileged local users escalate to root on Linux systems.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Google Launches Android Spyware Forensics Tool for High-Risk Users πŸ“”

Googles Android Advanced Protection Mode is getting a new feature allowing trusted security experts to investigate potential spyware infections.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Ghostwriter Targets Ukrainian Government With Geofenced PDF Phishing, Cobalt Strike πŸ–‹οΈ

The Belarusaligned threat group known as Ghostwriter has been attributed to a fresh set of attacks targeting governmental organizations in Ukraine. Active since at least 2016, Ghostwriter has been linked to both cyber espionage and influence operations targeting neighboring countries, particularly Ukraine. It's also tracked under the monikers FrostyNeighbor, PUSHCHA, Storm0257, TA445, UAC0057.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ What is continuous authentication? πŸ“’

Learn how continuous authentication minimizes the risk of account takeover or misuse.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 Apple’s iPhone Privacy Feature Expands to More Users Worldwide 🦿

Apple expanded Limit Precise Location in iOS 26.5, but the carrier privacy feature still requires select iPhones and iPads. The post Apples iPhone Privacy Feature Expands to More Users Worldwide appeared first on TechRepublic.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Mustang Panda Linked to Updated FDMTP Backdoor in Asia-Pacific Espionage Campaign πŸ“”

Mustang Panda campaign deploys updated FDMTP backdoor against AsiaPacific and Japan networks.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 Anatomy of a Targeted Phishing Attack: How We Caught a DocuSign Impersonation Campaign 🌊

Not all phishing emails are created equal. While most organizations deal with massblast spam that security tools catch routinely, targeted phishing, also known as spear phishing, is a different beast The post Anatomy of a Targeted Phishing Attack How We Caught a DocuSign Impersonation Campaign appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity