TGViewer
Channel Public Channel
🛡 Cybersecurity & Privacy 🛡 - News

🛡 Cybersecurity & Privacy 🛡 - News

@cibsecurity

🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Open in Telegram
Subscribers
28.5K
Photos
0
Videos
0
Links
91.1K

Showing posts older than #90513 · Back to latest

Older Posts 20 shown
Post #90512 388
🖋️ Phishing 3.0: The Fight Moves to Agent Versus Agent 🖋️

Most email defenses still do the job they did a decade ago. Scan the message, look for something malicious, block it. That worked when the danger sat in the payload, a bad link or an attachment. It stopped working when the danger moved into the message's intent, and it is failing now that the sender is no longer a person. From Bad Content to Bad Intent to AI on Both Sides Phishing 1.0 was bad.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90511 348
🖋️ Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P 🖋️

Cybersecurity researchers at Hunt.io have disclosed details of a campaign that they say compromised more than 14,530 Dahua devices between June 17 and July 22, 2026, using credential attacks, two authenticationbypass flaws, and a peertopeer P2P relay technique. The activity, codenamed Operation CameraSwarm, was reconstructed from a 407 MB exposed working directory containing 2,616 files.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90510 335
🖋️ SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs 🖋️

A previously unreported cyber espionage operation dubbed SilkParasite has been observed targeting government bodies in Central Asia. The intrusion set makes use of seven remote access tool RAT families, five of which have never been previously documented DriveSilkRAT, CookiETagRAT, NomadRAT, GoginRAT, and NodeEdgeRAT. SilkParasite, first discovered in late 2025, is assessed to be a.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90509 367
📔 OpenAI Tightens AI Safeguards Following Hugging Face Incident 📔

OpenAI is strengthening safeguards for its most advanced AI models, citing growing risks as frontier systems gain more powerful cyber capabilities.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Post #90508 387
🖋️ Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation 🖋️

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added four critical vulnerabilities to its Known Exploited Vulnerabilities KEV catalog, stating they are being exploited in the wild. The shortcomings added to the KEV catalog are listed below CVE202665400 CVSS score 9.8 An improper authentication vulnerability impacting Apple macOS that could allow an.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
  • 👍 1
Post #90507 355
🖋️ StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data 🖋️

Cybersecurity researchers have flagged a global cybercrime operation that abuses thousands of hacked WordPress websites as infrastructure to disseminate malware, commandeer infected hosts, store stolen documents, screenshots, and activity logs created to track the status of the activity. "The operation doesn't rely on a single piece of malware, but on a whole toolkit of criminal software.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90506 327
📢 ‘The scale of PurpleDelta’s operation is easy to miss’: Fake North Korean IT workers are submitting so many job applications that companies can’t keep up 📢

The PurpleDelta group is applying for thousands of jobs to steal proprietary data, source code, and internal communications.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
IT Pro ‘The scale of PurpleDelta’s operation is easy to miss’: Fake North Korean IT workers are submitting so many job applications that… The PurpleDelta group is applying for thousands of jobs to steal proprietary data, source code, and internal communications
  • 👏 1
Post #90504 306
📔 ICO Urges Police to Improve Data Governance in Facial Recognition Rollouts 📔

The UKs privacy watchdog has called on police using facial recognition to follow its recommendations.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Infosecurity Magazine ICO Urges Police to Improve Data Governance in Facial Recognition Roll The UK’s privacy watchdog has called on police using facial recognition to follow its recommendations
Post #90503 323
📔 Over 500 Critical Infrastructure Organizations Hit by Medusa Ransomware 📔

The FBI warned that the RaaS operation has significantly enhanced its tactics, techniques and procedures, making it harder for defenders to counter.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Infosecurity Magazine Over 500 Critical Infrastructure Organizations Hit by Medusa Ransomwar The FBI warned that the RaaS operation has significantly enhanced its tactics, techniques and procedures, making it harder for defenders to counter
Post #90502 274
🖋️ Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data 🖋️

A JavaServer Pages JSP web shell deployed following the exploitation of a critical security flaw in PTC Windchill and FlexPLM servers is specifically designed for the enterprise Product Lifecycle Management PLM software, according to new findings from ReliaQuest. The cybersecurity company characterized the web shell as a fully equipped extortion platform capable of mapping sensitive vault.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90501 386
🖋️ Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure 🖋️

Microsoft Defender Experts have linked more than 30 web domains to MacSync Stealer, a macOSfocused information stealer, after correlating recurring endpoint and network behaviors across changing infrastructure, tracing the malware from payload retrieval through data collection, staging, and exfiltration. The tech giant said it required multiple endpoint and network behaviors to align before.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90498 461
🖋️ Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000 🖋️

A ransomware affiliate calling itself Ransom Busters has been spotted proactively sending emails to victim organizations and claims to delete stolen data from ransomware groups' servers in exchange for a fee ranging from 20,000 to 60,000. "In these messages, the thirdparty offers to help the victim recover from ransomware attack. This immediately stands out as anomalous," GuidePoint Research.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90497 392
🖋️ Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets 🖋️

Two critical vulnerabilities impacting MLflow, an opensource artificial intelligence AI platform, and FUXA, an opensource, webbased SCADA HMI software built for operational technology OT and industrial automation, are witnessing malicious scanning and exploitation efforts. According to independent reports from watchTowr and VulnCheck, the vulnerabilities in question are as follows .

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90496 316
🖋️ Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps 🖋️

Varonis Threat Labs has disclosed three vulnerabilities in Microsoft Copilot Personal that it said could allow a single click on a crafted link to silently pull data from connected apps and other information available to the victim's Copilot session. The flaws, which the researchers collectively named CoSnitch, turn in part on an undocumented URL parameter that the assistant itself surfaced.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90495 287
🕵️‍♂️ CISOs Break Their Silence in 'Declassified' Docuseries 🕵️‍♂️

Milliondollar heists, divorce, and careerending burnout are all stories told in the latest docuseries revealing a behindthescenes look at the cybersecurity community.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
Dark Reading CISOs Break Their Silence in 'Declassified' Docuseries Million-dollar heists, divorce, and career-ending burnout are all stories told in the latest docuseries revealing a peek into the cybersecurity community.
Post #90494 289
🕵️‍♂️ 'CoSnitch' Attack Tricked Copilot into Mapping Out Architecture 🕵️‍♂️

Researchers discovered a "metahacking" technique that can manipulate the AI service into revealing its own security weaknesses.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
Dark Reading 'CoSnitch' Attack Tricked Copilot Into Revealing Own Architecture Researchers discovered a "meta-hacking" technique that can manipulate the AI service into revealing its own security weaknesses.
Post #90493 379
🕵️‍♂️ Critical GitLab Zero-Click Flaw Poses Mitigation Challenges 🕵️‍♂️

A lack of technical details could make it hard for organizations running selfmanaged GitLab versions to detect potential exploitation of CVE202619478.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
Dark Reading Critical GitLab Zero-Click Flaw Poses Mitigation Challenges A lack of technical details could make it hard for organizations running self-managed GitLab versions to detect potential exploitation of CVE-2026-19478.
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →