TGViewer
Channel Public Channel
🛡 Cybersecurity & Privacy 🛡 - News

🛡 Cybersecurity & Privacy 🛡 - News

@cibsecurity

🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Open in Telegram
Subscribers
28.4K
Photos
0
Videos
0
Links
90.9K
Recent Posts 20 shown
Post #91069 383
🌊 18 Best Threat Hunting Tools in 2026: Enterprise Platforms, Open-Source & AI-Native 🌊

Compare 15 best threat hunting tools by MITRE ATTCK coverage, pricing, and query language. Scored across 500 SOC deployments. Explore our 2026 rankings. The post 18 Best Threat Hunting Tools in 2026 Enterprise Platforms, OpenSource AINative appeared first on UnderDefense.

📖 Read more.

🔗 Via "UnderDefense"

----------
👁️ Seen on @cibsecurity
UnderDefense 18 Best Threat Hunting Tools: Free, Open-Source & AI-Native Compare the 18 best threat hunting tools for 2026, free and paid: enterprise XDR, SIEM, open-source and AI-native, with MITRE ATT&CK evidence and pricing.
Post #91068 988
🦅 Attack Surface Management in 2026: Why Point-in-Time Scans Can’t Keep Up With Cloud Sprawl 🦅

Cloud infrastructure now changes by the hour, yet many security teams still map their external attack surface once a quarter or once a year. That mismatch creates blind spots that can last for months.   A developer spins up a test environment on a Tuesday, an engineer opens a storage bucket for a partner on Wednesday, and a marketing team launches a campaign subdomain on Friday. If the next external assessment is scheduled for December, each of those assets sits exposed and unmonitored until then.  For CISOs, security operations leads, and cloud security leads, the question is no longer whether the attack surface is growing. The question is whether visibility is keeping pace. In 2026, pointintime scanning is structurally unable to do that.  Why Cloud Sprawl Breaks the Quarterly ...

📖 Read more.

🔗 Via "CYBLE"

----------
👁️ Seen on @cibsecurity
Cyble Attack Surface Management in 2026: Why Point-in-Time Scans Can’t Keep Up With Cloud Sprawl Cloud assets change hourly, but most attack surface management run quarterly. See why continuous ASM with Cyble Odin closes the months-long exposure gaps.
Post #91067 590
🌊 UnderDefense Launches MAXI Service Desk, Delivering Direct Native Support for Enterprise Security Teams 🌊

New capability embeds SOC analyst communication directly into the UnderDefense platform, replacing slow ticket queues with contextaware, auditready support Jacksonville, FL, September 18, 2026. UnderDefense, a cybersecurity company delivering Agentic AI SOC and Compliance AI to enterprise clients across the US and EU, today announced the launch of MAXI Service Desk. The new native capability The post UnderDefense Launches MAXI Service Desk, Delivering Direct Native Support for Enterprise Security Teams appeared first on UnderDefense.

📖 Read more.

🔗 Via "UnderDefense"

----------
👁️ Seen on @cibsecurity
UnderDefense UnderDefense Launches MAXI Service Desk for Enterprise SOCs UnderDefense introduces MAXI Service Desk, embedding native SOC analyst communication into its platform to deliver direct, context-aware enterprise support.
  • ❤ 1
  • 👏 1
Post #91064 277
📔 Deepfakes Are Becoming a Costly Reality for Businesses, Report Warns 📔

A quarter of victims of deepfake attacks have lost over 1m. CISOs worry that boardrooms dont understand the threat.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Infosecurity Magazine Deepfakes Are Becoming a Costly Reality for Businesses, Report Warns A quarter of victims of deepfake attacks have lost over $1m. CISOs worry that boardrooms don’t understand the threat
Post #91061 234
🚨 Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway 🚨

The NCSC is urging UK organisations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway, two of which are being actively exploited.

📖 Read more.

🔗 Via "UK NCSC"

----------
👁️ Seen on @cibsecurity
National Cyber Security Centre Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway The NCSC is urging UK organisations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway, two of which are being actively exploited.
Post #91060 184
🖋️ CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally 🖋️

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Sunday added two critical Citrix NetScaler ADC and Gateway flaws to its Known Exploited Vulnerabilities KEV catalog, following reports of active exploitation. The vulnerabilities are listed below CVE202688771 CVSS score 9.5 An improper input validation vulnerability that could allow an unauthenticated attacker to.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #91059 182
🖋️ JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources 🖋️

The threat actor known as JADEPUFFER has been observed orchestrating destructive actions within a Microsoft Azure environment using compromised service principals. Microsoft, which is tracking the activity under the name Storm3168, has called it an evolution of the threat actor's tradecraft. The attack took place in early June 2026 over a period of about 18 hours. "The destructive operations.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #91058 226
🖋️ Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent 🖋️

Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that's targeting exposed Docker daemons to deploy an opensource artificial intelligence AI agent framework called Hermes Agent. "The implant installs the framework unchanged, then overwrites its SOUL.md persona file," ThreatDown said. "The 39line prompt directs it to execute tasks received through.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #91057 236
🖋️ Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI 🖋️

AI agents are moving into production faster than security teams can govern them. They are connecting to apps, handling data, calling APIs, and acting across business systemsoften without the same controls applied to human users. According to Oktas Global CISO Insights 2026 report, only 47 of CISOs are confident they can identify every AI agent in their environment. Even among those who feel.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #91056 181
🖋️ ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats 🖋️

A domain used as harmless placeholder text showed up in roughly 1,700 repositories. Then somebody registered it and started serving malicious lures. That is the kind of week this was forgotten assumptions turning into live attack surface. Elsewhere, weak service accounts, old bugs, exposed systems, phishing kits, and strangely easy exploit paths kept doing useful work for attackers. Nothing.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #91055 192
🖋️ RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims 🖋️

RatHat's operators build and publish the Android banking trojan and control infected phones from a web console, according to security company Cleafy. Cleafy has traced nearly 100 deployments of that console since April 2026. It said this fits a malwareasaservice model, in which each customer runs a separate copy. The console stores what the malware collects from each phone,.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #91054 216
🖋️ Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M 🖋️

The attacker who stole about 388 million from the cryptocurrency exchange Bitget gained access through a vulnerability in a thirdparty security product the exchange used, Bitget said on Monday. The attacker exploited the flaw to obtain highlevel internal credentials and then, on September 24, used them to send fraudulent withdrawal commands to Bitget's wallet system. Exchanges keep most.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #91053 166
🖋️ IAM for AI agents: A Practical Enterprise Framework 🖋️

What is IAM for AI agents? AI agents authenticate, invoke tools, and act across enterprise systems with delegated authority. IAM for AI Agents is the identitycontrol architecture that governs those actors. This guide covers the limits of conventional provisioning, the components that matter, how to evaluate framework choices, and what runtime evidence proves an agent behaved as intended.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Older posts →

About this channel

How can I read @cibsecurity without a Telegram account?
TGViewer shows the public web preview Telegram publishes for 🛡 Cybersecurity & Privacy 🛡 - News: recent posts, photos, videos and the subscriber count, with no app, login or account.
How many subscribers does 🛡 Cybersecurity & Privacy 🛡 - News have?
🛡 Cybersecurity & Privacy 🛡 - News (@cibsecurity) has 28.4K subscribers on Telegram, refreshed roughly every 30 minutes.
Does 🛡 Cybersecurity & Privacy 🛡 - News know I viewed it here?
No. Public channel previews carry no viewer identity, and TGViewer has no accounts or tracking of what you look up.
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →