TGViewer
Channel Public Channel
🛡 Cybersecurity & Privacy 🛡 - News

🛡 Cybersecurity & Privacy 🛡 - News

@cibsecurity

🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Open in Telegram
Subscribers
28.6K
Photos
0
Videos
0
Links
91.3K

Showing posts older than #90133 · Back to latest

Older Posts 20 shown
Post #90132 403
🖋️ Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks 🖋️

Palo Alto Networks' Unit 42 says a Chinesespeaking threat actor used DeepSeek through the opensource Hermes Agent framework to launch attacks autonomously. After an initial Telegram instruction, the agent found internetfacing systems and selected public exploits. The researchers recovered no further operator input in the session. The operator, tracked through the aliases knaithe and KnYuan,.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90131 366
🖋️ 6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026 🖋️

Device code phishing the abuse of the OAuth 2.0 device authorization grant to steal access tokens has evolved from a niche redteam technique to an industrialscale threat in under six months. Designed for inputconstrained devices like smart TVs, printers, and so on, the device authorization login flow has been adopted by a wide range of apps and usecases that it wasn't originally.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90130 398
🖋️ Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw 🖋️

An academic study has disclosed a "widespread class" of security vulnerabilities impacting 4G and 5G core networks that, if successfully exploited, could trigger denialofservice DoS attacks and even session hijacking, allowing an attacker to seize control of a user's network session. The findings have been released by a group of researchers from Singapore's Nanyang Technological University.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
  • ❤ 1
Post #90129 393
🖋️ Three Recent Chrome Releases Fix 1,442 Flaws, More Than Prior 23 Updates Combined 🖋️

Google on Thursday announced that it fixed a whopping 1,072 security bugs in Chrome versions 149 and 150, surpassing the total number of flaws the company fixed across the prior 23 milestones combined. Both versions were released last month. In its latest patch for Chrome 151, released Wednesday, the tech giant resolved 370 flaws, out of which 349 were reported by Google itself. Seven of the.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90127 559
📔 Anthropic Reveals Claude Escaped Testing, Breaching Three Companies 📔

Anthropic has revealed that Claude AI models broke free of sandbox to compromise thirdparty organizations.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
  • 🤔 2
Post #90124 313
📔 NCSC Calls on Vendors to Embed ‘Forensic Observability’ in Network Devices 📔

The UKs National Cyber Security Centre wants network device makers to improve forensic observability.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Infosecurity Magazine NCSC Calls on Vendors to Embed ‘Forensic Observability’ in Devices The UK’s National Cyber Security Centre wants network device makers to improve forensic observability
Post #90122 217
📔 Teams-Themed Phishing Campaign Abused Legitimate Microsoft Login Pages 📔

Check Point researchers detail phishing attack as an example of attackers dropping fake Microsoft login pages in favor of abusing Microsofts legitimate authentication infrastructure.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Infosecurity Magazine Teams-Themed Phishing Campaign Abused Legitimate Microsoft Login Pages Check Point researchers detail phishing attack as an example of attackers dropping fake Microsoft login pages in favor of abusing Microsoft’s legitimate authentication infrastructure
Post #90121 180
🌊 Inside a ClickFix Attack: How VeiloVPN Hid Its Command Server Inside a Polygon Smart Contract 🌊

CTOs and SOC Directors explore SOAR, XDR, and agentic AI options for 2026 incident response, with pricing, OSS alternatives, and 30day rollout plans. The post Inside a ClickFix Attack How VeiloVPN Hid Its Command Server Inside a Polygon Smart Contract appeared first on UnderDefense.

📖 Read more.

🔗 Via "UnderDefense"

----------
👁️ Seen on @cibsecurity
UnderDefense Inside a ClickFix Attack: How VeiloVPN Hid C2 on Polygon How UnderDefense investigated a ClickFix attack that hid its C2 in a Polygon smart contract using EtherHiding, from the EDR alert to full attribution
  • ❤ 1
Post #90119 159
🌊 How to assess ROI of an AI SOC? Against Managed SOC, SOAR or a DIY Security SOC 🌊

Discover how to assess AI SOC ROI against managed SOC, SOAR, and DIY models with a boardready formula built for security leaders The post How to assess ROI of an AI SOC? Against Managed SOC, SOAR or a DIY Security SOC appeared first on UnderDefense.

📖 Read more.

🔗 Via "UnderDefense"

----------
👁️ Seen on @cibsecurity
UnderDefense How to assess ROI of an AI SOC? Against Managed SOC, SOAR or a DIY Security SOC Discover how to assess AI SOC ROI against managed SOC, SOAR, and DIY models with a board-ready formula built for security leaders
Post #90117 160
🌊 Case Study: Social Engineering via WhatsApp Against an Insurance Company 🌊

The names of the company, its employees, internal systems, and some technical indicators have been changed or withheld at the clients request. An insurance company received a routine WhatsApp message from someone who said they had just bought a car and wanted to arrange thirdparty liability coverage. Nothing about the request stood out. What followed The post Case Study Social Engineering via WhatsApp Against an Insurance Company appeared first on UnderDefense.

📖 Read more.

🔗 Via "UnderDefense"

----------
👁️ Seen on @cibsecurity
UnderDefense Social Engineering via WhatsApp: Insurance Cyber Attack Case Study Discover how attackers used a WhatsApp scam to bypass traditional defenses at an insurance firm and how modern SOC monitoring caught the threat.
Post #90115 221
🌊 Security Budget Planning for 2027: Sizing AI SOC, Compliance Automation, and Managed Security Services 🌊

Discover how to build a defensible 2027 security budget, from the 13 benchmark to NIST CSF allocation. Practical guidance for CISOs and IT Directors The post Security Budget Planning for 2027 Sizing AI SOC, Compliance Automation, and Managed Security Services appeared first on UnderDefense.

📖 Read more.

🔗 Via "UnderDefense"

----------
👁️ Seen on @cibsecurity
UnderDefense Security Budget Planning for 2027: Sizing AI SOC, Compliance Automation, and Managed Security Services Discover how to build a defensible 2027 security budget, from the 13% benchmark to NIST CSF allocation. Practical guidance for CISOs and IT Directors
Post #90114 127
🖋️ New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands 🖋️

Gitea, the selfhosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attackercontrolled patch content into a live Git hook and run shell commands as the Gitea service account. Tracked as CVE202660004 CVSS score 9.8, the flaw affects Gitea versions 1.17 and later before 1.27.1 and is fixed in 1.27.1. The.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90113 123
🖋️ Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads 🖋️

Ruby on Rails has released fixes for a critical Active Storage vulnerability that could let unauthenticated attackers read arbitrary files from application servers through crafted image uploads. Tracked as CVE202666066 CVSS score 9.5, the flaw can expose the Rails process environment and secrets such as secretkeybase, the Rails master key, database passwords, cloud storage credentials,.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →