TGViewer
Channel Public Channel
🛡 Cybersecurity & Privacy 🛡 - News

🛡 Cybersecurity & Privacy 🛡 - News

@cibsecurity

🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Open in Telegram
Subscribers
28.6K
Photos
0
Videos
0
Links
91.2K

Showing posts older than #90353 · Back to latest

Older Posts 20 shown
Post #90352 200
🖋️ Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks 🖋️

Cybersecurity and intelligence agencies from South Korea and the U.S. warned of Gunra ransomware attacks targeting critical infrastructure sectors and organizations across the world. Targets of these attacks include healthcare and public health, financial services, government services and facilities, and professional and nonprofit services. "Gunra is another variant in the ongoing trend of.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90351 164
🖋️ Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets 🖋️

A malicious tool server connected to an AI coding assistant can quietly walk off with SSH keys, environment secrets, source code, and customer data without ever sending one obviously harmful instruction. The trick can work even after a blunt version of the same theft is refused split the request into fragments that each look routine, place them in channels the assistant already uses, and let.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90350 200
🖋️ Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11 🖋️

Windows Plug and Play can be abused to fetch signed vendor software for an emulated USB device and execute privileged installation components that researchers chained to SYSTEM access on a fully updated Windows 11 machine. The same PnP path can be triggered over Remote Desktop without physical hardware when supported Plug and Play or lowlevel USB redirection is enabled Microsoft says that.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90349 180
🖋️ Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers 🖋️

Security researchers invented a cryptocurrency startup, advertised developer jobs, and hired three people they believe were North Korean operatives. Every virtual machine the company issued was recording. The onboarding paperwork is the part hiring teams can use. The first hire claimed to live in Pasadena, Texas, then sent a California driver's license and a New York bank account. The.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90348 162
🖋️ Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repo 🖋️

Mozilla has scrapped the cryptographic key behind Firefox and Thunderbird downloads for Linux after an unencrypted copy of it was committed by mistake to one of the company's own private code repositories. That key is how a user, or a Linux distribution packaging the browser, confirms a downloaded Firefox tarball came from Mozilla and was not tampered with. That decision carries a cost for.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90347 185
🖋️ A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT Devices 🖋️

A malicious SIM card can order the device it sits in to run commands of the attacker's choosing. On the cellular modules built into electricvehicle chargers, industrial routers, and car telematics units, that is enough to take the whole device over. Researchers at the University of Birmingham and the security firm Fuzzware tested 26 phones and cellular modules for the capability, found it.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90346 159
🖋️ OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Development 🖋️

OpenAI on Monday unveiled a new cybersecurityfocused model called GPT5.6Cyber that it said is focused on vulnerability research, penetration testing, and incident response. "Built on GPT5.6 Sol, it is trained to improve capabilities on several specialized cybersecurity tasks e.g., finding zeroday vulnerabilities and developing exploit chains and to reduce refusals for certain higherrisk.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90343 357
📢 OpenAI has paused work on its Astra AI model after it passed a 'critical threshold' in cyber capability – but it’s not the one that breached Hugging Face 📢

The firm said it's Astra model can "develop functional zeroday exploits of all severity levels".

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
IT Pro OpenAI has paused work on its Astra AI model after it passed a 'critical threshold' in cyber capability – but it’s not the one… The firm said it's Astra model can "develop functional zero-day exploits of all severity levels"
  • ❤ 2
Post #90342 519
🖋️ Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine 🖋️

Attackers shut down a steam turbine and the processwater treatment system at a Polish combined heat and power plant by coming in over the private cellular network the local grid operator uses to reach remote equipment. The plant supplies heat to roughly 50,000 residents. Recovery began at about 730 a.m. while the intruders were still active inside the network, and customers lost neither heat.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
  • ❤ 3
Post #90341 455
🚀 Are AI tutors safe for your kids? 🚀

AI tutors can offer useful support, but their quality and safeguards vary widely. Heres what parents should check before handing one to a child.

📖 Read more.

🔗 Via "ESET - WeLiveSecurity"

----------
👁️ Seen on @cibsecurity
Welivesecurity Are AI tutoring tools safe for your kids? AI tutors can offer useful support, but their quality and safeguards vary widely. Here’s what parents should check before handing one to a child.
Post #90340 419
🖋️ BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins 🖋️

Cybersecurity researchers have warned of a supply chain compromise impacting WordPress plugin vendor BdThemes, prompting the content management systems CMS platform's plugins team to temporarily disable their downloads. "Unlike traditional software supply chain attacks, zero source code files were modified within the official WordPress.org repository," Wordfence researcher Paolo Tresso said.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90338 313
🖋️ ⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors 🖋️

A lot of security problems still begin with someone doing a completely normal thing. Cloning a repo. Answering a call. Leaving a box exposed. Trusting the default. That pretty much covers the mood this week. Old bugs are back, supply chains are getting stranger, and some exploit paths are so short you wonder what was supposed to stop them in the first place. Thats only part of it. Heres.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90337 286
🖋️ China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw 🖋️

Microsoft has disclosed that Storm1175, a financially motivated threat actor linked to China, has deployed a previously undocumented ransomware strain called StormEncryptor. The use of StormEncryptor marks a shift from the adversary's previous use of Medusa ransomware, the Microsoft Threat Intelligence Team said. "StormEncryptor is written in C and appends the file name extension .encrypted.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90336 231
🖋️ Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed Development 🖋️

AI is helping development teams produce far more code, far faster. But security teams still have to review vulnerabilities, manage dependencies, prioritize fixes, and control risk at human speed. When software output jumps 10 to 50 times, the problem is no longer just finding vulnerabilities. It is keeping security from becoming the bottleneck, or worse, losing control of what gets shipped.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90335 180
🦿 Fake The Odyssey Downloads Are Hiding Password-Stealing Malware 🦿

Fake downloads of The Odyssey are spreading Lumma Stealer malware capable of stealing passwords, cookies, payment data, and cryptocurrency information. The post Fake The Odyssey Downloads Are Hiding PasswordStealing Malware appeared first on TechRepublic.

📖 Read more.

🔗 Via "Tech Republic"

----------
👁️ Seen on @cibsecurity
TechRepublic Fake The Odyssey Downloads Are Hiding Password-Stealing Malware Fake downloads of The Odyssey are spreading Lumma Stealer malware capable of stealing passwords, cookies, payment data, and cryptocurrency information.
Post #90334 149
🦿 77 Counterfeit Open VSX Extensions Collected Developer and CI/CD Data 🦿

Security researchers found 150 lookalike Open VSX extensions published under trusted names, highlighting how extension marketplaces can expose developer credentials, source code, and CICD systems to supplychain risk. The post 77 Counterfeit Open VSX Extensions Collected Developer and CICD Data appeared first on TechRepublic.

📖 Read more.

🔗 Via "Tech Republic"

----------
👁️ Seen on @cibsecurity
TechRepublic 77 Counterfeit Open VSX Extensions Collected Developer and CI/CD Data - TechRepublic 150 lookalike Open VSX extensions exposed developer supply-chain risks. Learn how to audit VS Code extensions and reduce credential exposure.
Post #90333 202
🦿 Klaviyo Sign-Up Bug May Have Exposed Passwords to Ad Trackers 🦿

Klaviyo says fewer than 200 people are known to be affected by a signup bug that may have exposed passwords to thirdparty trackers. The post Klaviyo SignUp Bug May Have Exposed Passwords to Ad Trackers appeared first on TechRepublic.

📖 Read more.

🔗 Via "Tech Republic"

----------
👁️ Seen on @cibsecurity
TechRepublic Klaviyo Sign-Up Bug May Have Exposed Passwords to Ad Trackers - TechRepublic Klaviyo fixed a sign-up bug that may have exposed passwords and account data to third-party trackers, but the full number of affected users is unknown.
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →