TGViewer
Channel Public Channel
🛡 Cybersecurity & Privacy 🛡 - News

🛡 Cybersecurity & Privacy 🛡 - News

@cibsecurity

🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Open in Telegram
Subscribers
28.5K
Photos
0
Videos
0
Links
90.9K

Showing posts older than #90713 · Back to latest

Older Posts 20 shown
Post #90712 736
🕵️‍♂️ AI Is Ending the Era of Hidden Vulnerabilities — Are Vendors Ready? 🕵️‍♂️

A tidal wave of bug reports is overwhelming software vendors, exposing securebydesign failures and creating disclosure bottlenecks.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
Dark Reading AI Will End the Era of Hidden Vulnerabilities. Are Vendors Ready? The Vulnpocalypse is a reckoning for software vendors as AI accelerates bug discovery, overwhelming remediation capacity and straining disclosure systems.
  • ❤ 1
Post #90709 724
🖋️ US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries 🖋️

An RMM phishing campaign initially associated with Canadian targeting due to its use of Canada Revenue Agency CRA tax forms as lures has turned out to be part of a broader campaign spanning 46 countries. Around 45 of observed activity was associated with the United States, making it the campaign's top geographic target. ANY.RUN research connected 601 cases to the wider operation, which uses.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90708 619
📔 US and Canadian Court Records Breached Following Thomson Reuters Incident 📔

Thomson Reuters has disclosed a cyber incident affecting its CTrack court management software, potentially exposing court records in Canada and the US.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Infosecurity Magazine US and Canadian Court Records Breached Following Thomson Reuters Incid Thomson Reuters has disclosed a cyber incident affecting its C-Track court management software, potentially exposing court records in Canada and the US
Post #90707 511
🖋️ Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Means 🖋️

In early August, GitGuardian researchers found that a recent ShaiHulud infostealer worm variant had evolved to scan for credentials across 469 locations across developer environments, Continuous IntegrationContinuous Deployment CICD tooling, cloud configurations, and even AI tool configs. Earlier variants of the infostealer worm only checked 189 paths. The jump says a lot. Attackers have.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90706 477
🖋️ Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks 🖋️

Threat actors are leveraging the trusted Node.js JavaScript runtime in multiple cyber attacks as a way to deploy malicious payloads. According to a new report published by the Symantec Threat Hunter Team today, the attack method has been put to use in attacks targeting government departments, technology companies, and hotels since February 2026. "The technique's appeal is that node.exe the.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90705 429
📢 Security experts warn cyber insurance ‘should not be treated as a get-out-of-jail-free card’ 📢

Cyber insurance might alleviate financial losses after an attack, but building resilience is still the best defense.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
IT Pro Security experts warn cyber insurance ‘should not be treated as a get-out-of-jail-free card’ Cyber insurance might alleviate financial losses after an attack, but building resilience is still the best defense
Post #90704 396
🖋️ Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone 🖋️

The iPhone belonging to a member of Serbia's student protest movement was infected with NSO Group's Pegasus spyware, according to new findings from the Citizen Lab in collaboration with the SHARE Foundation. "Our analysis confirmed that an iMessage zeroclick exploit was used to infect the device with NSO Group's Pegasus spyware," the Citizen Lab said. "We found highconfidence indicators of.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90703 367
📢 Everything we know about the Dropbox breach so far 📢

The company has confirmed that thousands of accounts connected through Lenovo ID and lacking Dropbox twofactor authentication have been affected.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
IT Pro Everything we know about the Dropbox breach so far The company has confirmed that thousands of accounts connected through Lenovo ID and lacking Dropbox two-factor authentication have been affected
  • ❤ 1
Post #90702 278
📢 Manchester Airports Group attack: Millions of holidaymakers urged to look out for scams as hackers publish stolen data online 📢

The Manchester Airports Group attack could lead to fraud and scams, experts warn.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
IT Pro Manchester Airports Group attack: Millions of holidaymakers urged to look out for scams as hackers publish stolen data online The Manchester Airports Group attack could lead to fraud and scams, experts warn
Post #90701 279
📢 ‘Popular’ AI use cases aren’t those delivering results. Gartner says focus on the basics for success and easy wins 📢

Focusing on hypedriven AI use cases rarely delivers, so its important to start with the basics and build from there.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
IT Pro ‘Popular’ AI use cases aren’t those delivering results. Gartner says focus on the basics for success and easy wins Focusing on hype-driven AI use cases rarely delivers, so it’s important to start with the basics and build from there
Post #90700 384
📔 FBI Probes Possible Breach of 153 Million Driver’s Licenses 📔

The FBI is investigating how scans of over 153 million drivers licenses are being sold on the dark web.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Post #90699 456
🦅 Supply Chain Attacks in 2026: Why Threat Intelligence Is the Only Early Warning System That Works 🦅

Supply chain attacks in 2026 are no longer an edgecase risk buried in a vendor questionnaire they are a primary breach vector that regulators, incident responders, and CISOs now treat as a firstorder threat. Verizon's 2026 Data Breach Investigations Report found thirdparty involvement in 48 of breaches, up 60 year over year, following the 2025 edition, which already recorded a jump from 15 to 30.   Every vendor integration, every opensource dependency, and every managed file transfer tool expands the attack surface that an organization does not directly control. That is the core problem with supply chain security today the weakest link is rarely the enterprise itself.   It is the supplier three tiers removed that nobody in procurement flagged as highrisk.  What Is a Supply Chai...

📖 Read more.

🔗 Via "CYBLE"

----------
👁️ Seen on @cibsecurity
Cyble Supply Chain Attacks in 2026: Why Threat Intelligence Is the Only Early Warning System That Works Supply chain attacks in 2026 are rising, exposing vendor dependencies and software risks that traditional security tools often fail to detect.
Post #90697 353
🖋️ CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners 🖋️

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added seven security flaws to its Known Exploited Vulnerabilities KEV catalog after they landed in attackers' crosshairs. The vulnerabilities are as follows CVE202683548 CVSS score 10.0 A serverside request forgery vulnerability in SonicWall SMA 1000 Appliances that could allow a remote unauthenticated.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90696 300
🖋️ Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon 🖋️

The security researcher known as Chaotic Eclipse aka INFINITE NIGHTMARE, MSNightmare, and NightmareEclipse has dropped a new zeroday dubbed FalconFlank, a privilege escalation flaw impacting Crowdstrike Falcon. "FalconFlank is a 0day privilege escalation that abuses the office malicious macros remediation in CrowdStrike Falcon Sensor," the researcher said in a GitHub README file, adding.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90693 197
📔 Nutex Health Says Patient Data Stolen, Hackers Threaten Leak 📔

The US healthcare provider confirmed that sensitive patient and employee data, alongside financial and business information, were exfiltrated by a third party.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Infosecurity Magazine Nutex Health Says Patient Data Stolen, Hackers Threaten Leak The US healthcare provider confirmed that sensitive patient and employee data, alongside financial and business information, were exfiltrated by a third party
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →