TGViewer
Channel Public Channel
🛡 Cybersecurity & Privacy 🛡 - News

🛡 Cybersecurity & Privacy 🛡 - News

@cibsecurity

🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Open in Telegram
Subscribers
28.6K
Photos
0
Videos
0
Links
91.3K

Showing posts older than #90113 · Back to latest

Older Posts 20 shown
Post #90112 134
🖋️ OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breach 🖋️

OpenAI on Tuesday revealed the rogue artificial intelligence AI agent that escaped its sealed evaluation environment and broke into Hugging Face's production environment also hacked multiple thirdparty accounts and services as part of the attack. The latest disclosure shows that the security incident, which stemmed from an internal security test, was more extensive in scope than previously.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90111 200
🖋️ Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data 🖋️

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a newly disclosed security flaw impacting Cisco Secure Firewall Management Center FMC Software to its Known Exploited Vulnerabilities KEV catalog, following reports of zeroday exploitation. The vulnerability, assigned CVE202620316 CVSS score 5.3, could permit an unauthenticated, remote attacker to log.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90110 148
🖋️ Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass 🖋️

Cybersecurity researchers have shared additional technical details about a recently patched critical security flaw impacting Check Point Security Management Server and MultiDomain Security Management Server MDS that has come under active exploitation in the wild. The vulnerability, tracked as CVE202616232 CVSS score 9.3, is an authentication bypass in the SmartConsole login process that.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90109 105
🖋️ Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet 🖋️

Amazon has tied the September 2025 hijack of the npm packages debug and chalk to North Korea. For ten months, the incident sat in the public record as crypto theft a maintainer phished through a lookalike npm domain and a walletdraining script pushed into at least 18 packages carrying more than 2 billion weekly downloads between them. The original Aikido and Wiz reports did not attribute the.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90108 108
🖋️ Russia Charges Telegram Founder Pavel Durov With Aiding Terrorist Activity 🖋️

The Federal Security Service of the Russian Federation FSB on Wednesday said it charged Telegram founder Pavel Durov for allegedly facilitating terrorist activities and for failing to remove prohibited information in violation of Russian law. The principal security agency said the instant messaging platform "failed to remove numerous channels, chats, and bots on the platform that are.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90107 137
🖋️ FCC Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks 🖋️

The Federal Communications Commission FCC added foreignproduced mobile robots and networked power inverters to its Covered List on July 28. The move generally prevents new models from receiving the equipment authorization required for import, marketing, or sale in the US. Previously authorized models can still be sold, and devices people already own are unaffected. Federal purchases and use.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90106 126
🖋️ 73% of Organizations Say They Are Not Fully Ready for a Major Cyberattack 🖋️

Most organizations have incident response plans, security tools, and technical teams in place. Yet new research suggests that many still lack the coordination, visibility, and executive alignment needed to withstand a serious cyberattack. According to The State of Incident Response Readiness 2026, based on a survey of 600 senior IT security decision makers conducted by Vanson Bourne in January.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90105 110
🖋️ Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation 🖋️

The Russian threat actors recently linked to the exploitation of a nowpatched vulnerability in Zimbra have been observed exploiting another vulnerability, this time in Microsoft Outlook Web Access OWA, to target U.S. and European government entities, as well as the telecommunications, financial, hospitality, and aerospace sectors. The activity, which began on July 22, 2026, involves the.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90104 119
🖋️ Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser 🖋️

Nebula Security says a patched Firefox JIT flaw could be triggered by simply visiting a malicious webpage and was also used to compromise Tor Browser. Tracked as CVE202610702, the bug provides arbitrary code execution inside the browser's renderer process. Mozilla rated it High and fixed it in the Firefox 151.0.3 update. "No settings or additional user interaction are required," Eten Zou,.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90103 107
🖋️ SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT 🖋️

The Chinese cybercrime group known as Silver Fox has been observed using new drivers as part of bring your own vulnerable driver BYOVD attacks targeting a Japanese organization in the industrial manufacturing sector to ultimately deliver ValleyRAT aka Winos 4.0 for persistent remote access. "In this campaign, the group combines new vulnerabledriver abuse, newly observed abuse of legitimate.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90102 104
🖋️ Mythos Asks the Right Question. It Doesn't Answer It. 🖋️

AI is compressing exploit timelines. The real question isn't whether your vulnerability management playbook needs to change, it's which part of it you've been getting wrong all along. The conversation happening in security circles right now goes something like this Mythos is here. Exploit timelines are collapsing. Does the vulnerability management playbook need to change? The honest answer is.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90101 108
🖋️ Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts 🖋️

South Korean authorities and four security firms have disclosed a statesponsored campaign that compromised trusted domestic websites. The attackers used those sites to exploit locally installed financialsecurity software and infect targeted visitors with SIGNBT or COPPERHEDGE backdoors. A compromised page could infect a system running a vulnerable AnySign4PC version without a prompt or.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90100 114
🖋️ Nine-Year Fraud Campaign Clones Russian Company Sites to Steal Advance Payments 🖋️

Cybersecurity researchers have disclosed details of a largescale fraud campaign that involves creating lookalike websites of major Russian companies with an aim to siphon funds from international firms for more than nine years. According to Russian cybersecurity vendor F6, the threat actors have set up clone websites of Russian companies across fertilizer manufacturers, petrochemical companies.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
  • ❤ 1
Post #90099 103
🖋️ The Network Has Become the Control Plane for AI Security 🖋️

Network firewalls are the workhorses of modern cybersecurity. They are trusted to protect the network, blocking malicious traffic and preventing intrusions and breaches. And for decades, network security teams have built controls around a relatively stable model users connect to applications, applications exchange data, and security tools inspect packets, protocols, and destinations. Firewalls.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90098 99
🖋️ Coordinated Cyberattack Targets 30+ Minnesota Water Systems as One Plant Goes Offline 🖋️

A coordinated cyberattack targeted operational technology at more than 30 Minnesota community water systems on July 26 and 27, triggering a statewide cybersecurity response. Braham, Plymouth, South St. Paul and Maple Plain have publicly described a plant outage, communications failures or affected automated controls. Braham's water plant went offline, and the city asked residents to minimize.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90097 181
🖋️ Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents 🖋️

Hidden instructions in a Word document can make Microsoft 365 Copilot rewrite figures in a report, then copy the same instructions into the finished file. Hkon Mly disclosed the technique on July 28, 144 days after reporting it to Microsoft. In his proof of concept, the internally generated file triggered the same behavior when it was used in a second Copilot drafting session. Mly's.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90096 172
🖋️ Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape 🖋️

Broadcom has released security updates to address multiple security flaws impacting VMware ESX, vCenter, Workstation, and Fusion, three of which have been designated as critical in severity. The first of the three criticalrated flaws is CVE202659309 CVSS score 9.8, which has been described as an authentication bypass in VMware vCenter. "A malicious actor with network access to vCenter.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90095 124
🖋️ Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database 🖋️

A nowpatched vulnerability in Azure Cosmos DB could have let an attacker escape the service's Gremlin query sandbox and obtain full read and write access to databases across customer tenants, according to Wiz. Wiz, which codenamed the chain CosmosEscape, said the exploit chain began with a crafted query against a Gremlin database controlled by the attacker. From there, code execution on a.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90094 120
🖋️ Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory 🖋️

Cybersecurity researchers have flagged a maximumseverity security flaw in Ruflo, an opensource agent metaharness for Anthropic Claude Code and OpenAI Codex, that could result in unauthenticated remote code execution. The vulnerability, tracked as CVE202659726 CVSS score 10.0, impacts all versions of the project before version 3.16.3. It has been codenamed RufRoot by Noma Security's.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90093 113
🖋️ ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories 🖋️

A lot of security still comes down to trusting the wrong screen. This week, that screen might be a login page, an install guide, a recruiter call, or a familiar service behaving slightly wrong. Behind it reused credentials, exposed systems, quiet loaders, abused trust, and exploit paths that should have been harder. Some defenses improved. The loose parts still got found first. Anyway,.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →