TGViewer
Channel Public Channel
🛡 Cybersecurity & Privacy 🛡 - News

🛡 Cybersecurity & Privacy 🛡 - News

@cibsecurity

🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Open in Telegram
Subscribers
28.7K
Photos
0
Videos
0
Links
91.3K

Showing posts older than #90013 · Back to latest

Older Posts 20 shown
Post #90012 824
📢 Health tech firm Craneware admits “significant volume” of customer and employee data exposed in cyber attack 📢

The incident has been contained and Craneware has launched a probe into the breach.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
IT Pro Health tech firm Craneware admits “significant volume” of customer and employee data exposed in cyber attack The incident has been contained and Craneware has launched a probe into the breach
Post #90011 1.31K
🌊 Splunk SOC Detection Engineering: Claimed Coverage vs. Measured Coverage 🌊

Compare 12 enterprise SIEM solutions for 2026 by AI detection, pricing, compliance, and deployment. Vendorneutral rankings from 500 SOC environments. Evaluate now. The post Splunk SOC Detection Engineering Claimed Coverage vs. Measured Coverage appeared first on UnderDefense.

📖 Read more.

🔗 Via "UnderDefense"

----------
👁️ Seen on @cibsecurity
UnderDefense SIEM Solutions Compared: 12 Top Platforms for Enterprise Security Teams in 2026 Compare 12 enterprise SIEM solutions for 2026 by AI detection, pricing, compliance, and deployment. Vendor-neutral rankings from 500+ SOC environments. Evaluate now.
Post #90010 788
🌊 Pentest Preparation Guide and Scoping Questionnaire: Scope, Credentials, RFP, and Attestation Workflow 🌊

Explore a complete pentest preparation checklist scope, credentials, RFP, vendor scoring, and the retest and attestation workflow auditors accept. The post Pentest Preparation Guide and Scoping Questionnaire Scope, Credentials, RFP, and Attestation Workflow appeared first on UnderDefense.

📖 Read more.

🔗 Via "UnderDefense"

----------
👁️ Seen on @cibsecurity
UnderDefense Pentest Preparation Guide and Scoping Questionnaire: Scope, Credentials, RFP, and Attestation Workflow Explore a complete pentest preparation checklist: scope, credentials, RFP, vendor scoring, and the retest and attestation workflow auditors accept.
Post #90009 545
📔 23andMe Faces New Security Mandates in $18m Data Breach Settlement 📔

23andMe has agreed to an 18m settlement with 42 US attorneys general over its 2023 data breach, including enhanced data protection requirements.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Infosecurity Magazine 23andMe Faces New Security Mandates in $18m Data Breach Settlement 23andMe has agreed to an $18m settlement with 42 US attorneys general over its 2023 data breach, including enhanced data protection requirements
Post #90008 427
📔 Government Agencies Falling Victim to Ransomware Daily, Warns Study 📔

Government organizations are targeted by attackers who know agencies cannot afford disruption to public services.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Infosecurity Magazine Government Agencies Falling Victim to Ransomware Daily, Warns Study Government organizations are targeted by attackers who know agencies cannot afford disruption to public services
Post #90007 536
🖋️ New GoSerpent Malware Targets Southeast Asian Governments and Diplomats for Espionage 🖋️

Cybersecurity researchers have discovered a previously undocumented malware called GoSerpent that has been put to use in cyber attacks targeting entities in Southeast Asia since late 2025 with a focus on longterm access and intelligence gathering. Russian cybersecurity company Kaspersky, which uncovered the activity in February 2026, said it was aimed at government and diplomatic entities in.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90006 343
🖋️ ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files 🖋️

ACR Stealer, an infostealer in circulation since 2024, is walking out of enterprise networks with saved browser passwords, live session tokens, PDFs, Microsoft 365 documents, and files from synced OneDrive and SharePoint folders. It gets in because someone pasted a command into a Run box and pressed Enter. Microsoft laid out two of the delivery chains on Thursday. Its Defender Experts team, the.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90005 324
🖋️ Armenia Detains Russian Tourist on U.S. Warrant for REvil Hacker, Lawyers Say Wrong Man 🖋️

Armenia has held a Russian tourist named Aleksandr Ermakov in a detention center since June 28, on a U.S. extradition request for a REvil ransomware suspect named Aleksandr Ermakov. His wife, Maria Yurova, told REN TV that border officers pulled him out of the departure hall at Yerevan's Zvartnots airport, held up a phone with a photo of him off his VKontakte page, and walked him into a side.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90004 265
🖋️ The Race to Field Military Autonomy Is On, Can Trusted Information Infrastructure Keep Pace? 🖋️

Military forces are under increasing pressure to field autonomous capabilities faster than ever before. Across the U.S., UK, and NATO, new investment, evolving defense strategies, and accelerated acquisition pathways are transforming how capability is delivered, rewarding programs that can move from concept to operational deployment at commercial speed. Now the focus shifts to the trusted.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90003 244
🖋️ E.U. Orders Google to Open Android Mic, Camera and Screen to Rival AI Assistants 🖋️

The European Commission on Thursday ordered Google to give rival AI assistants the same reach into Android that Gemini already has the camera, the microphone, whatever is on screen, a wake word that fires with the display off, and the ability to drive other apps in the background by imitating taps and typing. Google has to ship it in the next major release, Android 18, and by 1 August 2027 at.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90002 302
🖋️ Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images 🖋️

North Korean threat actors linked to the Contagious Interview campaign have been observed employing steganography in SVG image files to conceal malicious payloads as part of a campaign using fake job postings and coding challenges. "Any user who ran the project ended up with a fourstage payload aligned with OTTERCOOKIE a browser credential and crypto wallet stealer, a file stealer, a.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90001 560
🖋️ GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft 🖋️

Cybersecurity researchers have attributed the April 2026 DigiCert security incident to a threat activity cluster dubbed CylindricalCanine. Expel, which shared technical details of the event, described the threat actor as a subgroup of GoldenEyeDog aka APTQ27, Dragon Breath, and Miuuti Group, a Chinese cybercrime group known for its targeting of the gambling and gaming sectors using.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90000 320
🖋️ New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens 🖋️

A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator's own dashboard claims 3,811 unique AWS keys. A Shodan harvester keeps the scan queue stocked with ComfyUI, Ollama, n8n, Open WebUI, Langflow, and Gradio the image generators, local model runners, and workflow builders that teams stand up fast and firewall late. The intel feed behind that counter.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #89999 237
🖋️ Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT 🖋️

Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of a software supply chain attack. The malicious package campaign, codenamed ViteVenom by Checkmarx, marks an expansion of ChainVeil, which was observed using an "unprecedented" fourtier blockchainbased commandandcontrol C2 infrastructure spanning Tron,.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #89998 236
🖋️ OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests 🖋️

Eleven bytes will make an unpatched OpenSSL server set aside up to 131 KB of memory for a message that never arrives. On the glibc systems Okta tested, that memory is gone until the process restarts. OpenSSL shipped the HollowByte fix in June with no CVE, no advisory, and no changelog entry pointing at it. Okta's Red Team, which reported the denialofservice bug and named it, published the.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #89997 376
🖋️ New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code 🖋️

Updated July 18, 2026 the two flaws now carry CVE IDs, the full mechanism has been published, a persistentobjectcache condition has surfaced, and a working proofofconcept is public. The story below reflects all of it. An anonymous HTTP request can run code on a WordPress site. The bug is in core, so a bare install with zero plugins is exploitable. Every 6.9 and 7.0 site was in range until.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #89996 278
🖋️ ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files 🖋️

ACR Stealer, an infostealer in circulation since 2024, is walking out of enterprise networks with saved browser passwords, live session tokens, PDFs, Microsoft 365 documents, and files from synced OneDrive and SharePoint folders. It gets in because someone pasted a command into a Run box and pressed Enter. Microsoft laid out two of the delivery chains on Thursday. Its Defender Experts team, the.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #89995 269
🖋️ Armenia Detains Russian Tourist on U.S. Warrant for REvil Hacker, Lawyers Say Wrong Man 🖋️

Armenia has held a Russian tourist named Aleksandr Ermakov in a detention center since June 28, on a U.S. extradition request for a REvil ransomware suspect named Aleksandr Ermakov. His wife, Maria Yurova, told REN TV that border officers pulled him out of the departure hall at Yerevan's Zvartnots airport, held up a phone with a photo of him off his VKontakte page, and walked him into a side.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #89994 218
🖋️ The Race to Field Military Autonomy Is On, Can Trusted Information Infrastructure Keep Pace? 🖋️

Military forces are under increasing pressure to field autonomous capabilities faster than ever before. Across the U.S., UK, and NATO, new investment, evolving defense strategies, and accelerated acquisition pathways are transforming how capability is delivered, rewarding programs that can move from concept to operational deployment at commercial speed. Now the focus shifts to the trusted.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #89993 226
🖋️ E.U. Orders Google to Open Android Mic, Camera and Screen to Rival AI Assistants 🖋️

The European Commission on Thursday ordered Google to give rival AI assistants the same reach into Android that Gemini already has the camera, the microphone, whatever is on screen, a wake word that fires with the display off, and the ability to drive other apps in the background by imitating taps and typing. Google has to ship it in the next major release, Android 18, and by 1 August 2027 at.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →