TGViewer
Channel Public Channel
🛡 Cybersecurity & Privacy 🛡 - News

🛡 Cybersecurity & Privacy 🛡 - News

@cibsecurity

🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Open in Telegram
Subscribers
28.6K
Photos
0
Videos
0
Links
91.2K

Showing posts older than #90373 · Back to latest

Older Posts 20 shown
Post #90372 335
🖋️ Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client 🖋️

Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone watching could have taken over the presenter's. The flaw sat in the annotation tool, the feature that lets participants draw and type on a shared screen, and it asked nothing of the victim beyond being in the meeting. No click, no download, no prompt, and nothing on screen to show it.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90371 272
🖋️ Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client 🖋️

Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone watching could have taken over the presenter's. The flaw sat in the annotation tool, the feature that lets participants draw and type on a shared screen, and it asked nothing of the victim beyond being in the meeting. No click, no download, no prompt, and nothing on screen to show it.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90370 249
🖋️ Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing 🖋️

Cybersecurity researchers have discovered a new version of the KimwolfAISURU Android and Internet of Things IoT botnet that comes with significant improvements to improve its operational resilience and conduct distributed denialofservice DDoS attacks. The new version, tracked as Kimwolf v7, was discovered by Palo Alto Networks Unit 42 in February 2026. "Kimwolf v7 adds an HTTP2based.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90369 204
🖋️ Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing 🖋️

Cybersecurity researchers have discovered a new version of the KimwolfAISURU Android and Internet of Things IoT botnet that comes with significant improvements to improve its operational resilience and conduct distributed denialofservice DDoS attacks. The new version, tracked as Kimwolf v7, was discovered by Palo Alto Networks Unit 42 in February 2026. "Kimwolf v7 adds an HTTP2based.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90368 198
🖋️ Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack 🖋️

Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in attacks. The bug sits in a core Windows kernel driver that handles network socket operations. An attacker with code already running on a machine can use it to escalate to SYSTEM. That patch goes out first. The flaw is tracked as CVE202668820 CVSS score 7.0 and is the only.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90367 190
🖋️ Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack 🖋️

Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in attacks. The bug sits in a core Windows kernel driver that handles network socket operations. An attacker with code already running on a machine can use it to escalate to SYSTEM. That patch goes out first. The flaw is tracked as CVE202668820 CVSS score 7.0 and is the only.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90366 202
♟️ Microsoft Plugs Nearly 400 Security Holes ♟️

Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already being actively exploited and two others that were publicly detailed prior to today.

📖 Read more.

🔗 Via "Krebs on Security"

----------
👁️ Seen on @cibsecurity
Krebs on Security Microsoft Plugs Nearly 400 Security Holes – Krebs on Security Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already being actively exploited and two others that were publicly detailed prior to today.
Post #90365 298
🕵️‍♂️ Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA 🕵️‍♂️

The ransomwareasaservice operation is finding success against critical infrastructure targets with leaked Conti code and old flaws in firewalls and VPN appliances.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
Dark Reading Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA The ransomware-as-a-service operation is finding success with leaked Conti code and old flaws in firewalls and VPN appliances.
Post #90364 319
🕵️‍♂️ Microsoft's Patch Tuesday Deluge Continues With August Updates 🕵️‍♂️

Security experts say prioritization should be the main focus for the August updates, not the massive CVE volume.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
Dark Reading Microsoft's Patch Tuesday Deluge Continues With August Updates The most concerning bug is CVE-2026-62878 (CVSS: 9.8), a remote code execution (RCE) vulnerability in Windows DNS Server requiring no user interaction.
Post #90363 450
🖋️ DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt 🖋️

The ransomware group known as DeadLock has been observed using decentralized infrastructure to facilitate victim communications and data leak operations in a bid to improve operational resilience. "Its recovery ecosystem combines the Session messaging network with blockchainbacked services that store and deliver resources used throughout the extortion process," the Microsoft Threat.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
  • ❤ 1
Post #90362 394
🖋️ Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE 🖋️

Security researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, with no valid account. A significant part of the work that found it was done through an AI agent. The flaw, tracked as CVE202655040 CVSS 9.1, affects SharePoint Server Subscription Edition, SharePoint Server 2019, and SharePoint Server 2016. Microsoft's.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
  • 👍 1
Post #90360 384
🌊 AI SOC Cloud Threat Coverage: MITRE ATT&CK Cloud Techniques Compared Across Leading Platforms in 2026 🌊

Discover how to validate MITRE ATTCK cloud coverage claims, prioritize identity techniques, and pick an AI SOC that responds in minutes. The post AI SOC Cloud Threat Coverage MITRE ATTCK Cloud Techniques Compared Across Leading Platforms in 2026 appeared first on UnderDefense.

📖 Read more.

🔗 Via "UnderDefense"

----------
👁️ Seen on @cibsecurity
UnderDefense AI SOC MITRE ATT&CK Cloud Coverage Compared Across Leading Platforms 2026 Discover how to validate MITRE ATT&CK cloud coverage claims, prioritize identity techniques, and pick an AI SOC that responds in minutes.
Post #90359 247
📔 Only Half of UK Manufacturers Have a Cyber Incident Response Plan 📔

Make UK reveals major cyber resilience gaps as 30 of UK manufacturers report recent cyber incidents.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Post #90356 191
📔 OpenAI Launches Two-Tier Security Access Program Alongside GPT 5.6 Cyber 📔

Daybreak Blue removes some OpenAImade guardrails while Daybreak Red grants the use of cyberfocused frontier AI models.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Infosecurity Magazine OpenAI Launches Two-Tier Access Program Alongside GPT 5.6 Cyber Daybreak Blue removes some OpenAI-made guardrails while Daybreak Red grants the use of cyber-focused frontier AI models
Post #90355 191
📔 Suisan City, California, Responds to Cyber Incident Amid Wave of US Local Government Attacks 📔

Police and fire response has been impacted by the attack on Suisan City, while two other local authorities have been hit by cyber incidents in the past week also.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Infosecurity Magazine Suisan City, California, Responds to Cyber Incident Amid Wave of US Lo Police and fire response has been impacted by the attack on Suisan City, while two other local authorities have been hit by cyber incidents in the past week also
Post #90354 171
📔 Cursor Security Bug Allowed Repositories to Execute Commands Before Trust Verification 📔

Cursor fixed a pretrust code execution path in three days then closed the report as informative.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Infosecurity Magazine Cursor Security Bug Allowed Repositories to Execute Commands Pre Trust Cursor fixed a pre-trust code execution path in three days then closed the report as informative
Post #90353 160
📔 Six npm Packages Read C2 Addresses From Ethereum Wallet 📔

Six npm packages queried an Ethereum wallet to locate C2 infrastructure.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →