🛡 Cybersecurity & Privacy 🛡 - News
28.6K subscribers
91.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
📔 OpenAI Launches Two-Tier Security Access Program Alongside GPT 5.6 Cyber 📔

Daybreak Blue removes some OpenAImade guardrails while Daybreak Red grants the use of cyberfocused frontier AI models.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 Logistics Giant Ceva Suffers Data Breach Impacting European Clients 📔

Supply chain attack and data breach at Ceva Logistics appears to have a large blast radius.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 OpenAI Pauses Some Development of Astra Model on Security Concerns 📔

OpenAI is tightening restrictions on testing of its upcoming Astra model due to security concerns.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
📔 Only Half of UK Manufacturers Have a Cyber Incident Response Plan 📔

Make UK reveals major cyber resilience gaps as 30 of UK manufacturers report recent cyber incidents.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
🌊 AI SOC Cloud Threat Coverage: MITRE ATT&CK Cloud Techniques Compared Across Leading Platforms in 2026 🌊

Discover how to validate MITRE ATTCK cloud coverage claims, prioritize identity techniques, and pick an AI SOC that responds in minutes. The post AI SOC Cloud Threat Coverage MITRE ATTCK Cloud Techniques Compared Across Leading Platforms in 2026 appeared first on UnderDefense.

📖 Read more.

🔗 Via "UnderDefense"

----------
👁️ Seen on @cibsecurity
📢 UK manufacturers urged to bolster resilience as cyber threats surge 📢

Growing cyber threats mean manufacturers need to shake up resilience strategies and preparedness.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
🖋️ Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE 🖋️

Security researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, with no valid account. A significant part of the work that found it was done through an AI agent. The flaw, tracked as CVE202655040 CVSS 9.1, affects SharePoint Server Subscription Edition, SharePoint Server 2019, and SharePoint Server 2016. Microsoft's.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
👍1
🖋️ DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt 🖋️

The ransomware group known as DeadLock has been observed using decentralized infrastructure to facilitate victim communications and data leak operations in a bid to improve operational resilience. "Its recovery ecosystem combines the Session messaging network with blockchainbacked services that store and deliver resources used throughout the extortion process," the Microsoft Threat.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
❤1
🕵️‍♂️ Microsoft's Patch Tuesday Deluge Continues With August Updates 🕵️‍♂️

Security experts say prioritization should be the main focus for the August updates, not the massive CVE volume.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA 🕵️‍♂️

The ransomwareasaservice operation is finding success against critical infrastructure targets with leaked Conti code and old flaws in firewalls and VPN appliances.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
♟️ Microsoft Plugs Nearly 400 Security Holes ♟️

Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already being actively exploited and two others that were publicly detailed prior to today.

📖 Read more.

🔗 Via "Krebs on Security"

----------
👁️ Seen on @cibsecurity
🖋️ Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack 🖋️

Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in attacks. The bug sits in a core Windows kernel driver that handles network socket operations. An attacker with code already running on a machine can use it to escalate to SYSTEM. That patch goes out first. The flaw is tracked as CVE202668820 CVSS score 7.0 and is the only.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack 🖋️

Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in attacks. The bug sits in a core Windows kernel driver that handles network socket operations. An attacker with code already running on a machine can use it to escalate to SYSTEM. That patch goes out first. The flaw is tracked as CVE202668820 CVSS score 7.0 and is the only.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing 🖋️

Cybersecurity researchers have discovered a new version of the KimwolfAISURU Android and Internet of Things IoT botnet that comes with significant improvements to improve its operational resilience and conduct distributed denialofservice DDoS attacks. The new version, tracked as Kimwolf v7, was discovered by Palo Alto Networks Unit 42 in February 2026. "Kimwolf v7 adds an HTTP2based.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing 🖋️

Cybersecurity researchers have discovered a new version of the KimwolfAISURU Android and Internet of Things IoT botnet that comes with significant improvements to improve its operational resilience and conduct distributed denialofservice DDoS attacks. The new version, tracked as Kimwolf v7, was discovered by Palo Alto Networks Unit 42 in February 2026. "Kimwolf v7 adds an HTTP2based.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client 🖋️

Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone watching could have taken over the presenter's. The flaw sat in the annotation tool, the feature that lets participants draw and type on a shared screen, and it asked nothing of the victim beyond being in the meeting. No click, no download, no prompt, and nothing on screen to show it.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client 🖋️

Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone watching could have taken over the presenter's. The flaw sat in the annotation tool, the feature that lets participants draw and type on a shared screen, and it asked nothing of the victim beyond being in the meeting. No click, no download, no prompt, and nothing on screen to show it.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands 🖋️

The Computer Emergency Response Team of Ukraine CERTUA has disclosed details of a new social engineering campaign orchestrated by Russian nationstate threat actors targeting IT workers in the country by masquerading as recruiters to trick them into installing malware. CERTUA pinned the activity on a threat cluster it tracks as UAC0145, which is a subgroup within Sandworm aka APT44,.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands 🖋️

The Computer Emergency Response Team of Ukraine CERTUA has disclosed details of a new social engineering campaign orchestrated by Russian nationstate threat actors targeting IT workers in the country by masquerading as recruiters to trick them into installing malware. CERTUA pinned the activity on a threat cluster it tracks as UAC0145, which is a subgroup within Sandworm aka APT44,.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
📢 Delta Airlines flight Wi-Fi tampered with after DEF CON conference 📢

A rogue network named 'Delta WiFi Fast' was created in an apparent inflight phishing attack.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Ransomware Hits Colombian Justice Ministry Days Before Presidential Transition 🕵️‍♂️

Attackers continue to target critical infrastructure and governmentlinked organizations in the country, mirroring the increased activity across Latin America.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity