TGViewer
Channel Public Channel
🛡 Cybersecurity & Privacy 🛡 - News

🛡 Cybersecurity & Privacy 🛡 - News

@cibsecurity

🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Open in Telegram
Subscribers
28.6K
Photos
0
Videos
0
Links
91.2K

Showing posts older than #90333 · Back to latest

Older Posts 20 shown
Post #90332 157
🕵️‍♂️ Sherlock Holmes was the “OG” Social Engineer 🕵️‍♂️

The crime solver wore disguises, spied on targets, and built intelligence networks long before modernday tactics emerged. He has lessons for todays ethical and nonethicalhat hackers.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
Dark Reading Sherlock Holmes Was the 'OG' Social Engineer The crime solver wore disguises, spied on targets, and built intelligence networks long before modern-day tactics emerged.
Post #90331 223
🕵️‍♂️ Outdated Cybercrime Laws Put Security Researchers at Risk 🕵️‍♂️

A public policy expert mapped global cybercrime laws to develop a fivepoint framework for protecting ethical hackers and goodfaith security research.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
Dark Reading Outdated Cybercrime Laws Put Security Researchers at Risk A public policy expert mapped global cybercrime laws to develop a five-point framework for protecting ethical hackers and good-faith security research.
  • 👍 1
Post #90330 212
🕵️‍♂️ Coruna, DarkSword iOS Exploits Proliferate Globally 🕵️‍♂️

Sophisticated iPhone exploit chains previously limited to nationstates are spreading far and wide to organized cybercrime groups.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
Dark Reading Coruna, DarkSword iOS Exploits Proliferate Globally Nation-state grade iOS exploit chains Coruna and DarkSword are proliferating among cybercriminals, with 17,000 domains hosting variants.
Post #90329 217
🕵️‍♂️ The Patch Gap: Why Defenders Need to Think in Chains, Not Checklists 🕵️‍♂️

It's time to turn from CVSSbacked patching to chokepoint patching focused on breaking chains to critical assets.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
Dark Reading Defenders Need to Think in Chains, Not Checklists It's time to turn from CVSS-backed patching to choke-point patching focused on breaking chains to critical assets.
Post #90328 225
🕵️‍♂️ Metabase SQL Zero-Day Attacks Could Have Wide Blast Radius 🕵️‍♂️

The maximumseverity vulnerability, which still has no CVE, allows malicious, remote administrator access to the businessanalytics platform and its downstream users.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
Dark Reading Metabase SQL Zero-Day Attacks Could Have Wide Blast Radius The max-severity vuln, which still has no CVE, allows malicious, remote administrator access to the business-analytics platform and its downstream users.
Post #90327 247
🕵️‍♂️ Multistate Water System Attacks Widen, Iran Suspected 🕵️‍♂️

Attacks targeting water systems just keep flowing across a dozen states, against illsecured, Internetexposed PLCs.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
Dark Reading Multistate Water System Attacks Widen, Iran Suspected Attacks targeting water systems just keep flowing across a dozen states, against ill-secured, Internet-exposed PLCs.
  • ❤ 1
Post #90326 419
🕵️‍♂️ 'GhostJacking' Exposes Identity Governance Gaps in AI Agents 🕵️‍♂️

New research shows how attackers can use security alerts and blocked events to manipulate and hijack AI agents.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
Dark Reading "GhostJacking" Exposes Identity Governance Gaps in AI Agents New research shows how attackers can use security alerts and blocked events to manipulate and hijack AI agents.
Post #90323 560
🖋️ Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development 🖋️

North Korea's state hackers are no longer content to type prompts into public chatbots. One of the country's main espionage groups has begun running artificial intelligence AI offline on its own servers, connecting documentsearch tools to files in its possession, and collecting the software parts needed to build AI into its malware. South Korean security firm Genians says it uncovered the.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90322 476
🦅 Ransomware Now Shows Up in Nearly Half of All Breaches: A Survival Playbook for Lean Security Teams 🦅

Ransomware stopped being an isolated incident type in 2025. It became the dominant force behind the modern breach landscape, and the ransomware data breach statistics from Cyble's own tracking make the shift impossible to ignore. For organizations facing this growing threat, having a ransomware incident response plan in place is becoming just as important as preventing an attack in the first place. Cyble's Global Cybersecurity Report 2025 documented 5,967 ransomware attacks for the year, a 50 yearoveryear jump. Against the 6,046 data breaches and leaks recorded in the same period, ransomware accounted for nearly half 49.7 of the combined ransomwareandbreach total tracked by Cyble Research and Intelligence Labs CRIL. That's the "nearly half" this blog's title refers to, and it isn'...

📖 Read more.

🔗 Via "CYBLE"

----------
👁️ Seen on @cibsecurity
Cyble Ransomware Now Shows Up in Nearly Half of All Breaches: A Survival Playbook for Lean Security Teams A ransomware incident response plan helps teams prepare for rising attacks. Explore 2025-2026 ransomware data, RaaS threats, recovery and prevention.
Post #90321 391
🖋️ TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore 🖋️

The threat actor known as Head Mare has been observed weaponizing security flaws in unpatched TrueConf servers once again in attacks targeting Russian companies spanning instrumentation, electronics, transport, energy, IT, and software development sectors. Russian cybersecurity vendor Kaspersky said it detected the attacks in July 2026. The activity involves exploiting a vulnerability chain.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
  • 🔥 1
Post #90320 373
🖋️ Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed Development 🖋️

AI is helping development teams produce far more code, far faster. But security teams still have to review vulnerabilities, manage dependencies, prioritize fixes, and control risk at human speed. When software output jumps 10 to 50 times, the problem is no longer just finding vulnerabilities. It is keeping security from becoming the bottleneck, or worse, losing control of what gets shipped.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90319 338
🖋️ New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA 🖋️

Three separate research efforts last week demonstrated ways to defeat passkey protections without breaking the cryptography they rest on. Passkeys are designed to replace reusable passwords and resist phishing. The attacks instead reused signed authentication material that Windows had exposed, abused a cloudsynced passkey system from malware already on the victim's machine, and used a .

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90318 374
📢 Trust your AI agents? New research shows ‘memory poisoning’ can dupe them into ‘remembering’ fake information – and it’s a huge security risk 📢

Memory poisoning allows hidden text on a webpage to be treated as fact and used to make harmful decisions.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
IT Pro Trust your AI agents? New research shows ‘memory poisoning’ can dupe them into ‘remembering’ fake information – and it’s a huge… Memory poisoning allows hidden text on a webpage to be treated as fact and used to make harmful decisions
Post #90317 354
🌊 11 Most Affordable AI SOC Platforms in 2026: What Each Pricing Tier Actually Covers for Small and Mid-Market Teams 🌊

Explore affordable AI SOC platforms with 247 coverage. See real costs, tier gaps, and compliance support for CTOs and security leads. The post 11 Most Affordable AI SOC Platforms in 2026 What Each Pricing Tier Actually Covers for Small and MidMarket Teams appeared first on UnderDefense.

📖 Read more.

🔗 Via "UnderDefense"

----------
👁️ Seen on @cibsecurity
UnderDefense 11 Most Affordable AI SOC Platforms in 2026: What Each Pricing Tier Actually Covers for Small and Mid-Market Teams Explore affordable AI SOC platforms with 24/7 coverage. See real costs, tier gaps, and compliance support for CTOs and security leads.
Post #90315 275
📔 “Ghostjacking” Exploits AI Agents’ Trusted Access to Evade Firewall Controls 📔

Tenet reported that half of Fortune 500 companies are vulnerable to the Ghostjacking technique, which involves tricking AI agents with fake reports.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Infosecurity Magazine “Ghostjacking” Exploits AI Agents’ Trusted Access to Evade Firewall Co Tenet reported that half of Fortune 500 companies are vulnerable to the Ghostjacking technique, which involves tricking AI agents with fake reports
Post #90314 286
📢 Swiss authorities urge calm amid fears over SharePoint credential leak 📢

The Federal Office for Information Technology and Telecommunication said that while accounts have been compromised, no sensitive data has been accessed.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
IT Pro Swiss authorities urge calm amid fears over SharePoint credential leak The Federal Office for Information Technology and Telecommunication said that while accounts have been compromised, no sensitive data has been accessed
Post #90313 356
📢 Swiss authorities urge calm amid fears over SharePoint credential leak 📢

The Federal Office for Information Technology and Telecommunication said that while accounts have been compromised, no sensitive data has been accessed.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
IT Pro Swiss authorities urge calm amid fears over SharePoint credential leak The Federal Office for Information Technology and Telecommunication said that while accounts have been compromised, no sensitive data has been accessed
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →