TGViewer
Channel Public Channel
🛡 Cybersecurity & Privacy 🛡 - News

🛡 Cybersecurity & Privacy 🛡 - News

@cibsecurity

🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Open in Telegram
Subscribers
28.7K
Photos
0
Videos
0
Links
91.3K

Showing posts older than #90053 · Back to latest

Older Posts 20 shown
Post #90051 313
📔 Microsoft Launches Flurry of AI Security Initiatives to Combat AI-Enabled Threats 📔

Microsoft has launched a new agentic security system for cyber defenders as well as its first cyberfocused AI model.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Infosecurity Magazine Microsoft Launches Flurry of AI Security Initiatives Microsoft has launched a new agentic security system for cyber defenders as well as its first cyber-focused AI model
Post #90050 253
📔 Phishing Dominates as Initial Entry Method for Cyber-Attacks, as Hackers Hone Evasion Techniques 📔

Analysis of reallife incident response cases by Cisco Talos warns that phishing remains a powerful method of initial compromise.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Infosecurity Magazine Phishing Dominates as Initial Entry Method for Cyber-Attacks Analysis of real-life incident response cases by Cisco Talos warns that phishing remains a powerful method of initial compromise
  • ❤ 1
Post #90048 274
📔 Bugs in Hugging Face Diffusers Bypass Custom Code Safeguard 📔

Three CVEs in Hugging Face diffusers let a malicious model repo run code on any machine that loads it.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Post #90047 178
🖋️ NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework 🖋️

NVIDIA and 36 other organizations have formed the Open Secure AI Alliance to develop and share open technologies, techniques, and tools for securing software and artificial intelligence AI agents. The 37member group spans cloud, security, enterprise software, and AI companies, including Microsoft, Cisco, Cloudflare, CrowdStrike, Hugging Face, IBM, Palo Alto Networks, Red Hat, and the Linux.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90046 184
🖋️ Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw 🖋️

A maximumseverity security flaw impacting onpremises versions of Arista VeloCloud Orchestrator VCO has come under active exploitation in the wild. The vulnerability, tracked as CVE202616812 CVSS score 10.0, is a case of operating system command injection that could pave the way for arbitrary code execution. "VeloCloud Orchestrator VCO onprem has a security issue where this issue.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90045 202
🖋️ Microsoft Says New Cybersecurity AI Model Helps MDASH Score 95.95% at Half the Cost 🖋️

Microsoft has launched its first cybersecurityspecific model inside MDASH, its multimodel vulnerability identification and remediation harness. The company says MDASH, using MAICyber1Flash and GPT5.4, scored 95.95 on CyberGym. It also claims the configuration costs 50 less than its current best MDASH combination of GPT5.4, GPT5.4 mini, and GPT5.3 Codex. Access is limited to approved.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90044 292
🖋️ Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit 🖋️

STAR Labs has published a Linux kernel exploit that turns an ordinary local user into root on the CentOS Stream 9 build it targeted. The flaw, tracked as CVE202653264 CVSS score 7.8, is a useafterfree race in the kernel's network trafficcontrol subsystem.Researcher Lee Jia Jie said artificial intelligence AI helped him find the bug and speed up exploit development. This is local.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90043 232
🖋️ Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In 🖋️

JetBrains is urging customers of onpremise versions of TeamCity to update to the latest version following the discovery of a critical security issue that could result in arbitrary code execution. The vulnerability, assigned CVE202663077 CVSS score 9.8, affects all TeamCity OnPremises versions. It has been addressed in versions 2025.11.7 and 2026.1.3. TeamCity Cloud instances have already.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90042 236
🖋️ Nimbus Manticore Deploys NightLedger and Turns Victim Systems Into Covert Relays 🖋️

The Iranian statebacked hacking group tracked as Nimbus Manticore aka GalaxyGato, Mirage Kitten, Smoke Sandstorm, Subtle Snail, and UNC1549 has been attributed to a fresh set of attacks targeting entities across the Middle East, Africa, and South Asia. The intrusions involve the use of a previously undocumented Windows backdoor called NightLedger and two custom WebSocket tunnelers,.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90041 224
🖋️ Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root 🖋️

OpenWrt has shipped version 24.10.8 to close a critical DHCPv6 stack overflow and a wider set of remotely triggerable flaws in network services enabled by default. The critical issue, tracked as CVE202653921 and rated 9.8 on CVSS 3.1 in OpenWrt's GitHub advisory, lets an unauthenticated attacker able to reach the DHCPv6 server overwrite a stack buffer in odhcpd through a crafted DHCPv6.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90040 217
🖋️ JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach 🖋️

JFrog has confirmed that OpenAI models exploited a zeroday in selfhosted Artifactory while trying to reach the open internet from a sealed evaluation environment. Artifactory is JFrog's software repository manager. OpenAI says the models then escalated privileges and moved laterally until they reached an internetconnected node. JFrog says it has since developed and released fixes for cloud.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90039 252
🖋️ 24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login 🖋️

Cybersecurity researchers have sounded an alert after finding more than 36,000 Baseboard Management Controller BMC management interfaces exposing Intelligent Platform Management Interface IPMI protocol to the public internet. Of the 36,872 internetexposed servermanagement interfaces running IPMI, 24,650 have been found to disclose passwordderived authentication hashes before login due to.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90038 236
🖋️ Tengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its Process 🖋️

A new Miraiderived botnet called Tengu can use a compromised Linux device's hardware watchdog to trigger a reboot when defenders kill its main process. If that happens, Tengu's other persistence mechanisms get another chance to relaunch it. Nozomi Networks Labs observed the dropper reaching its honeypots through Telnet credential brute force. Tengu supports 25 distributed denialofservice .

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90037 319
🦿 Origin Energy Data Breach Exposes Customer and Partial Card Details 🦿

Origin Energy confirms hackers stole customer and partial paymentcard data, but the number affected and the method of access remain unknown. The post Origin Energy Data Breach Exposes Customer and Partial Card Details appeared first on TechRepublic.

📖 Read more.

🔗 Via "Tech Republic"

----------
👁️ Seen on @cibsecurity
TechRepublic Origin Energy Data Breach Exposes Customer and Partial Card Details Origin Energy confirms hackers stole customer and partial payment-card data, but the number affected and the method of access remain unknown.
Post #90036 360
🦿 House Lawmakers Propose Mandatory Kill Switches for Frontier AI Systems 🦿

The AI Kill Switch Act would let DHS order developers to slow or shut down frontier models after catastrophic incidents, raising enterprise continuity concerns. The post House Lawmakers Propose Mandatory Kill Switches for Frontier AI Systems appeared first on TechRepublic.

📖 Read more.

🔗 Via "Tech Republic"

----------
👁️ Seen on @cibsecurity
TechRepublic House Bill Proposes Kill Switches for Frontier AI The AI Kill Switch Act would let DHS order developers to slow or shut down frontier models after catastrophic incidents, raising enterprise continuity concerns.
Post #90035 344
🦿 Nvidia Forms AI Security Alliance as Major Frontier Labs Sit Out 🦿

Nvidias Open Secure AI Alliance brings major tech and cybersecurity firms together to develop shared protections for enterprise AI agents and systems. The post Nvidia Forms AI Security Alliance as Major Frontier Labs Sit Out appeared first on TechRepublic.

📖 Read more.

🔗 Via "Tech Republic"

----------
👁️ Seen on @cibsecurity
TechRepublic Nvidia Forms Open Secure AI Alliance Without Top AI Labs Nvidia’s Open Secure AI Alliance brings major tech and cybersecurity firms together to develop shared protections for enterprise AI agents and systems.
Post #90034 468
🦿 Meta Launches Free Facebook Verification Badge for Personal Accounts 🦿

Meta is introducing a free Facebook badge that uses video selfies to verify humanrun accounts, but questions remain about privacy and trust. The post Meta Launches Free Facebook Verification Badge for Personal Accounts appeared first on TechRepublic.

📖 Read more.

🔗 Via "Tech Republic"

----------
👁️ Seen on @cibsecurity
TechRepublic Meta Launches Free Facebook Verification Badge for Personal Accounts Meta is introducing a free Facebook badge that uses video selfies to verify human-run accounts, but questions remain about privacy and trust.
  • ❤ 1
Post #90033 606
📢 Hugging Face CEO calls for ‘radical transparency’ in wake of OpenAI attack 📢

The AI library chief has called for investment to help build powerful cyber defenses, as alleged weaknesses in OpenAIs monitoring emerge.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
IT Pro Hugging Face CEO calls for ‘radical transparency’ in wake of OpenAI attack The AI library chief has called for investment to help “build powerful cyber defenses”, as alleged weaknesses in OpenAI’s monitoring emerge
  • ❤ 1
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →