TGViewer
Channel Public Channel
🛡 Cybersecurity & Privacy 🛡 - News

🛡 Cybersecurity & Privacy 🛡 - News

@cibsecurity

🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Open in Telegram
Subscribers
28.7K
Photos
0
Videos
0
Links
91.3K

Showing posts older than #89973 · Back to latest

Older Posts 20 shown
Post #89972 958
🌊 The Budget Line That Did Not Exist Last Year: Where AI SOC Sits in a 2027 Plan 🌊

Explore how to fund the new AI SOC budget line through tool consolidation, NIST CSF mapping, and a boardready lossexposure story. The post The Budget Line That Did Not Exist Last Year Where AI SOC Sits in a 2027 Plan appeared first on UnderDefense.

📖 Read more.

🔗 Via "UnderDefense"

----------
👁️ Seen on @cibsecurity
UnderDefense The Budget Line That Did Not Exist Last Year: Where AI SOC Sits in a 2027 Plan Explore how to fund the new AI SOC budget line through tool consolidation, NIST CSF mapping, and a board-ready loss-exposure story.
Post #89969 461
📔 Russian State Hackers Target Vulnerable Routers Worldwide, Joint Advisory Warns 📔

Cybersecurity agencies from 12 countries have warned that Russian statebacked hackers are actively targeting vulnerable routers using weak SNMP credentials.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Infosecurity Magazine Russian State Hackers Target Vulnerable Routers Worldwide Cybersecurity agencies from 12 countries have warned that Russian state-backed hackers are actively targeting vulnerable routers using weak SNMP credentials
Post #89968 475
📔 Progress Software Warns of "External Security Threat" to ShareFile 📔

Progress Software, the provider of the popular filesharing and data storage solutions, has urged customers to shut down the server hosting their Storage Zone Controller.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Infosecurity Magazine Progress Software Warns of “External Security Threat” to ShareFile Progress Software, the provider of the popular file-sharing and data storage solutions, has urged customers to shut down the server hosting their Storage Zone Controller
Post #89967 367
📔 Novel OAuth Client ID Spoofing Technique Targets Cloud Environments 📔

New research reveals cyberattackers can spoof OAuth Client IDs in Microsoft Entra ID, creating a stealthy path into cloud environments.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Infosecurity Magazine Novel OAuth Client ID Spoofing Technique Targets Cloud Environments New research reveals cyber-attackers can spoof OAuth Client IDs in Microsoft Entra ID, creating a stealthy path into cloud environments
Post #89964 402
🚨 UK and Allies urge critical sectors to improve defences against Russian intelligence targeting 🚨

New advisory highlights Russian state cyber actors global exploitation of poorly configured routers.

📖 Read more.

🔗 Via "UK NCSC"

----------
👁️ Seen on @cibsecurity
National Cyber Security Centre UK and Allies urge critical sectors to improve defences against Russian intelligence targeting New advisory highlights Russian state cyber actors’ global exploitation of poorly configured routers
Post #89963 397
🖋️ iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days 🖋️

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added two maximumseverity security flaws impacting iCagenda and Balbooa extensions for Joomla to its Known Exploited Vulnerabilities KEV catalog, following reports of zeroday exploitation in the wild. The vulnerabilities, both rated 10.0 on the CVSS scoring system, are below CVE202648939 A vulnerability in the.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #89962 321
🖋️ Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365 🖋️

An attacker running a live Microsoft 365 phishing operation left a Python web server listening on a public port with directory listing switched on. The command that did it python3 m http.server 8080, was still sitting in the readable .bashhistory. From that one lapse, French security firm Lexfo lifted the operator's entire toolkit and pivoted through it to two more.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #89961 338
🖋️ Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory 🖋️

Cybersecurity researchers have flagged an intrusion in which an unknown threat actor leveraged a vibecoded PowerShell script for Active Directory AD enumeration. "The script looked for the Domain Controller DC and mapped users, computers, and domains, before creating a directory and exporting out a number of files, and finally creating ADReport.html to measure the success of the.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #89960 516
🖋️ Thinking Fast and Slow in the SOC: The Case for Combining Autonomous AI with Analyst Copilots 🖋️

A few days ago, I was sitting with the CISO of a Fortune 50 company, walking through how his security team was thinking about AI agents in the SOC. Smart team. Serious program. They had already connected Claude to a few detection tools and were seeing real value in specific investigations. But as we mapped out the broader architecture, something kept nagging at me. The design they were building.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #89959 365
🖋️ Meta Files Patent for AI That Can Listen All Day and Track How You're Feeling 🖋️

Meta has filed a patent application for an AI that listens to your voice throughout the day, works out how it thinks you are feeling from the way you sound, and keeps a timestamped log of every read. Each read gets pinned to the moment it happened the time, your location, what you were doing, even how you were using your phone. Some versions in the filing would listen all day others would.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #89958 519
🖋️ Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft 🖋️

A new phishingasaservice PhaaS operation called Forg365 is using a combination of device code phishing, adversaryinthemiddle AitM tactics, antibot evasion, artificial intelligence AIassisted lure creation, and postcompromise mailbox operations targeting Microsoft 365 accounts. Distributed via Telegram and costing 400 a month or 3,800 per year, attack chains leverage phishing.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #89957 331
🖋️ New MemGhost Attack Plants Persistent False Memories in AI Agents Through One Email 🖋️

Give an AI assistant a memory and access to your inbox, and you hand an attacker a way to rewrite what it thinks it knows about you. A single email can trick that agent into saving a false "fact" about the user, hide the change, and quietly steer its answers in later sessions. When it works, the person reads an ordinarylooking reply and never learns their assistant was tampered with. The.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
  • ❤ 1
Post #89956 302
🖋️ ⚡ Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More 🖋️

Somewhere right now, a security tool is quietly finding bugs faster than any human can fix them. That's supposed to be the good news. The catch is that the attackers have the same tools, pointed the other way, and they don't file tickets. That's the shape of this week. Trusted code turns on the people who installed it. Old bugs from last year are still landing because the fix sat in a queue too.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #89955 322
🖋️ Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found 🖋️

Google and Microsoft have pulled ModHeader, a popular headerediting extension with roughly 1.6 million installs across Chrome and Edge, after researchers found a hidden browsinghistory collector built into its official store version. The collector was dormant. An empty allowlist kept it switched off, and no proof has emerged that it ever gathered or sent a single browsing domain. The.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #89954 312
🖋️ CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks 🖋️

Cybersecurity researchers have flagged a new macOS information stealer called CrashStealer that's capable of harvesting sensitive data from compromised systems. Unlike other information stealers that are built on AppleScript droppers or ObjectiveCbased wrappers, CrashStealer is implemented in native C, according to Jamf Threat Labs. "It validates the victim's login password locally before.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #89953 319
♟️ Lessons Learned from CISA’s Recent GitHub Leak ♟️

The Cybersecurity and Infrastructure Security Agency CISA has issued a postmortem on a data leak in which a contractor published dozens of internal CISA credentials including AWS Govcloud keys in a public GitHub repository for almost six months before being notified by KrebsOnSecurity. Experts say the gaps identified in the agency's initial response provide important lessons that all security teams should absorb.

📖 Read more.

🔗 Via "Krebs on Security"

----------
👁️ Seen on @cibsecurity
Krebs on Security Lessons Learned from CISA’s Recent GitHub Leak The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a data leak in which a contractor published dozens of internal CISA credentials -- including AWS Govcloud keys -- in a public GitHub repository for almost six months…
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →