TGViewer
Channel Public Channel
🛡 Cybersecurity & Privacy 🛡 - News

🛡 Cybersecurity & Privacy 🛡 - News

@cibsecurity

🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Open in Telegram
Subscribers
28.4K
Photos
0
Videos
0
Links
90.9K

Showing posts older than #90873 · Back to latest

Older Posts 20 shown
Post #90870 177
🚨 UK and allies expose spyware used by Iranian state actors to target dissidents, activists and journalists 🚨

UK and allies provide advice to help organisations and individuals at risk detect and counter the threat from CHOSEN BRICK malware.

📖 Read more.

🔗 Via "UK NCSC"

----------
👁️ Seen on @cibsecurity
National Cyber Security Centre UK and allies expose spyware used by Iranian state actors to target dissidents, activists and journalists UK and allies provide advice to help organisations and individuals at risk detect and counter the threat from CHOSEN BRICK malware.
Post #90869 129
🚨 UK and allies expose spyware used by Iranian state actors to target dissidents, activists and journalists 🚨

UK and allies provide advice to help organisations and individuals at risk detect and counter the threat from CHOSEN BRICK malware.

📖 Read more.

🔗 Via "UK NCSC"

----------
👁️ Seen on @cibsecurity
National Cyber Security Centre UK and allies expose spyware used by Iranian state actors to target dissidents, activists and journalists UK and allies provide advice to help organisations and individuals at risk detect and counter the threat from CHOSEN BRICK malware.
Post #90868 117
🚨 Iranian cyber targeting of dissidents, activists and journalists 🚨

Advisory on CHOSEN BRICK malware, including technical analysis and advice to help individuals and organisations protect themselves.

📖 Read more.

🔗 Via "UK NCSC"

----------
👁️ Seen on @cibsecurity
National Cyber Security Centre Iranian cyber targeting of dissidents, activists and journalists Advisory on CHOSEN BRICK malware, including technical analysis and advice to help individuals and organisations protect themselves.
Post #90867 130
🚨 Iranian cyber targeting of dissidents, activists and journalists 🚨

Advisory on CHOSEN BRICK malware, including technical analysis and advice to help individuals and organisations protect themselves.

📖 Read more.

🔗 Via "UK NCSC"

----------
👁️ Seen on @cibsecurity
National Cyber Security Centre Iranian cyber targeting of dissidents, activists and journalists Advisory on CHOSEN BRICK malware, including technical analysis and advice to help individuals and organisations protect themselves.
Post #90866 129
🖋️ LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server 🖋️

A critical vulnerability in LiteSpeed Web Server Enterprise could let a lowprivilege website user gain root access on a sharedhosting server, cPanel warned in an advisory published on September 14. On such servers, many customers' sites run on a single machine, and an attacker with one of those hosting accounts could exploit the flaw to access or alter other sites and the server itself,.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90865 131
🖋️ Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers 🖋️

Cybersecurity researchers have disclosed details of a massscanning campaign that has targeted Vite deployments siphon sensitive data. The first is an automated effort aimed at internetexposed Vite development servers that's designed to steal cloud credentials, configurations from Amazon Web Services AWS and Microsoft Azure instances, and infrastructure state files, per F5 Labs. The.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90864 134
🖋️ Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point 🖋️

Introduction Security teams have gotten pretty good at testing against what can hurt them. Can this EDR agent catch this payload? Will my organization fail the phishing simulation? Does this SIEM rule fire on this particular technique? And, in more mature organizations, this testing happens continuously rather than as a oneoff exercise. But no matter how much you validate against these.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90863 200
🖋️ Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds 🖋️

With artificial intelligence AI shrinking the window between vulnerability discovery and exploitation and lowering the barrier to entry for bad actors, new findings from Sysdig show that skilled human operators can move just as swiftly after gaining initial access. In one instance highlighted by the cloud security company, the threat actor pivoted from a vulnerable Marimo notebook to an SSH.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90862 189
📢 Two-thirds of cyber threats still require manual resolution 📢

Security teams are spending most of their time on reactive alert triage and manual data gathering, with little left over for proactive threat hunting.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
IT Pro Two-thirds of cyber threats still require manual resolution Security teams are spending most of their time on reactive alert triage and manual data gathering, with little left over for proactive threat hunting
Post #90857 505
🖋️ China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE 🖋️

A Chinese threat actor has been attributed to a spearphishing campaign that exploits recently patched security flaws in Google Chrome and Microsoft Windows to deliver a malicious JavaScript backdoor called GRIMWEDGE. Volexity, which is tracking the threat cluster under the moniker UTA0560, said the activity targeted multiple nongovernmental organizations NGOs on September 1, 2026. "The.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90856 418
🖋️ China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE 🖋️

A Chinese threat actor has been attributed to a spearphishing campaign that exploits recently patched security flaws in Google Chrome and Microsoft Windows to deliver a malicious JavaScript backdoor called GRIMWEDGE. Volexity, which is tracking the threat cluster under the moniker UTA0560, said the activity targeted multiple nongovernmental organizations NGOs on September 1, 2026. "The.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90855 334
🖋️ Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution 🖋️

Cisco has warned that a new critical vulnerability impacting AsyncOS Software for Cisco Secure Email Gateway has come under active exploitation in the wild. The vulnerability, tracked as CVE202676461, carries a CVSS score of 9.8 out of a maximum of 10.0. It has been described as a case of insufficient validation in the email parsing logic that could allow an unauthenticated, remote attacker.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90854 326
🖋️ Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution 🖋️

Cisco has warned that a new critical vulnerability impacting AsyncOS Software for Cisco Secure Email Gateway has come under active exploitation in the wild. The vulnerability, tracked as CVE202676461, carries a CVSS score of 9.8 out of a maximum of 10.0. It has been described as a case of insufficient validation in the email parsing logic that could allow an unauthenticated, remote attacker.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →