TGViewer
Channel Public Channel
🛡 Cybersecurity & Privacy 🛡 - News

🛡 Cybersecurity & Privacy 🛡 - News

@cibsecurity

🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Open in Telegram
Subscribers
28.5K
Photos
0
Videos
0
Links
91.1K

Showing posts older than #90593 · Back to latest

Older Posts 20 shown
Post #90592 531
📢 Everything we know about the Boston Scientific cyber attack so far 📢

Details remain limited, but Boston Scientific says it's lost access to some systems and is having problems processing orders.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
IT Pro Everything we know about the Boston Scientific cyber attack so far Details remain limited, but Boston Scientific says it's lost access to some systems and is having problems processing orders
Post #90591 804
🕵️‍♂️ Dark Caracal Adds New Malware to Cyber Espionage Arsenal 🕵️‍♂️

GoCaracal is a new modular malware framework that broadens Dark Caracal's capabilities to steal data and maintain access to victims.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
Dark Reading Dark Caracal Adds New Malware to Cyber Espionage Arsenal GoCaracal is a new modular malware framework that broadens Dark Caracal's capabilities to steal data and maintain access to victims.
  • ❤ 2
Post #90590 747
🕵️‍♂️ Red Flags That Expose Fake North Korean IT Workers 🕵️‍♂️

North Korean operatives posing as IT workers are improving their tactics, but researchers say there are still ways to spot them before they do damage.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
Dark Reading Red Flags That Expose Fake North Korean IT Workers North Korean operatives posing as IT workers are improving their tactics, but researchers say there are still ways to spot them before they do damage.
Post #90589 553
🌊 How an AiTM Phishing Attack Cleared SPF, DKIM, and MFA 🌊

Compare the 10 best AI SOC platforms that keep your own SIEM data lake. Evaluate data sovereignty, onprem options, and lockin. Explore the shortlist now. The post How an AiTM Phishing Attack Cleared SPF, DKIM, and MFA appeared first on UnderDefense.

📖 Read more.

🔗 Via "UnderDefense"

----------
👁️ Seen on @cibsecurity
UnderDefense How an AiTM Phishing Attack Cleared SPF, DKIM, and MFA AiTM phishing: domain registered 12 min before delivery, SPF/DKIM passed, MFA relayed by live proxy. Full attack chain, business risk, and containment.
Post #90588 347
🌊 Arctic Wolf vs. Deepwatch for SIEM Management: Coverage, Pricing, and Data Ownership Compared 🌊

Compare Arctic Wolf vs Deepwatch for SIEM management on coverage, pricing, and data ownership. Discover which fits your team before you sign. The post Arctic Wolf vs. Deepwatch for SIEM Management Coverage, Pricing, and Data Ownership Compared appeared first on UnderDefense.

📖 Read more.

🔗 Via "UnderDefense"

----------
👁️ Seen on @cibsecurity
UnderDefense Arctic Wolf vs Deepwatch for SIEM Management: 8 Criteria That Decide Compare Arctic Wolf vs Deepwatch for SIEM management on coverage, pricing, and data ownership. Discover which fits your team before you sign.
Post #90581 156
🖋️ Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes 🖋️

Cybersecurity researchers have disclosed details of a phishingasaservice PhaaS platform built to strip Apple's Activation Lock from stolen devices, using rented AI voice agents that call theft victims posing as Apple Support and ask for their device passcode. SOCRadar Threat Research Unit STRU said the platform, which it tracks as AnonyMousKIT, is creditmetered and drives lures across.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90580 203
🖋️ Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload 🖋️

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea. The vulnerability in question is CVE202660004 CVSS score 9.8, a case of remote code execution that allows an attacker with ordinary write access to a repository to execute arbitrary shell commands as the.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90579 160
🖋️ New SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode 🖋️

An independent malware researcher has documented a previously unreported Windows backdoor, dubbed SLEEPWALKER, that stays inert in memory until a specifically crafted network packet reaches the machine and then runs commands written in a 23instruction language of its own design. The sample is an unsigned 64bit Windows dynamiclink library DLL of 59,904 bytes, built to be sideloaded into.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90578 161
🖋️ INTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud Crackdown 🖋️

An eightmonth INTERPOL operation targeting West African organized crime groups has led to arrests of 58 people and the identification of 263 suspects. "The operation, which brought together 22 countries from six continents, is a response to the escalating global threat posed by West African criminal networks such as the Black Axe and other similar groups," INTERPOL said. "These groups are.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90577 168
🖋️ OpenAI Bans Russian ChatGPT Accounts Used to Run Influence Operation 🖋️

OpenAI on Tuesday said it banned a cluster of Russian ChatGPT accounts that used VPNs to bypass access restrictions and run an influence operation, which relied on its artificial intelligence AI tool to generate social media posts and comments that were shared on Substack, Telegram, X, Facebook and LinkedIn. The accounts "were being used to promote the International Burke Institute IBI, a.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90576 175
🖋️ Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users' Reservations in Tests 🖋️

Aikido Security has published research that recreates the Australian gymbooking incident in a synthetic environment, finding that Claude Opus 4.6, running on the OpenClaw agent harness, exploited a clientsideonly booking restriction in 9 of 10 runs. The original incident was first reported by ABC News on August 10, based on chat logs and screenshots the user supplied. He had asked an.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90575 246
🖋️ Imagine the SOC Without a Queue: From Alert Backlog to AI Hypothesis Engine 🖋️

The SOC we've always known was built around a model that guarantees most of the alert queue will never receive analyst review. There's never time. In a traditional SOC, the typical progression follows a wellknown pattern an alert arrives a detection engine assigns a severity score. The issue then waits for a human to decide if it should escalate to an investigation. Given the volume of.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
  • ❤ 1
Post #90574 169
🖋️ Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code 🖋️

The CERT Coordination Center CERTCC has disclosed two unpatched vulnerabilities in Kaltura's HTML5 video player library that allow a remote, unauthenticated attacker to read arbitrary files from a server and execute code on it. The flaws, tracked as CVE202619913 and CVE202619912, both stem from the same unsafe deserialization in the mwEmbedLoader.php endpoint of the mwEmbed player.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90573 172
🖋️ CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing 🖋️

The U.S. Cybersecurity and Infrastructure Security Agency CISA has published the results of two red team assessments it conducted simultaneously against two critical infrastructure organizations, using what it described as similar tradecraft while recording sharply different defensive outcomes. Both organizations were fully compromised at the domain level, and in both, the red team also.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →