TGViewer
Channel Public Channel
🛡 Cybersecurity & Privacy 🛡 - News

🛡 Cybersecurity & Privacy 🛡 - News

@cibsecurity

🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Open in Telegram
Subscribers
28.4K
Photos
0
Videos
0
Links
90.9K

Showing posts older than #90953 · Back to latest

Older Posts 20 shown
Post #90952 225
🖋️ BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS 🖋️

The Internet Systems Consortium ISC has released BIND 9.20.29 and 9.21.26 to fix fourteen security flaws it disclosed on 16 September in BIND 9, its opensource DNS server software. One of them affects any BIND server that answers DNSoverHTTPS DoH. A sender with no credentials can crash the server process, named, with a single request that carries an invalid SIG.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90951 155
🖋️ OpenAI Reveals Six Model Incidents Involving Hidden Failures and Unauthorized Uploads 🖋️

OpenAI on Wednesday disclosed six new instances of "unexpected or concerning model behavior" that took place over the past six months, while sharing a new framework for reporting, tracking, investigating, and disclosing model misalignment in a bid to improve transparency. "As AI systems grow more advanced and more widely deployed, we need to build a broader and betterinformed consensus on the.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90950 148
🖋️ China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America 🖋️

The Chinaaligned statesponsored threat actor known as FamousSparrow has been observed deploying a previously unreported backdoor called SparroWocky in attacks targeting multiple countries in Latin America since at least August 2025. "SparroWocky is a modular, C backdoor," ESET security researchers Alexandre Ct Cyr and Romain Dumont said in a technical report shared with The Hacker News.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90949 161
🖋️ CISO's Expert Guide to Agentic Pentesting for Websites 🖋️

Attackers now weaponize new vulnerabilities in about five days Mandiant, part of Google Cloud. The median organization takes 43 days to patch one Verizon DBIR 2026. A new free guide explains how autonomous AI agents are closing that gap, and what security leaders must demand before pointing one at production. TLDR Exploitation is now the front door. It starts 31 of breaches Verizon DBIR.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90948 153
🖋️ Can You Prove a New CVE Is Exploitable Before Attackers Do? Learn How in This Webinar 🖋️

A new CVE drops. Your scanner finds it. The severity score looks ugly. But that still does not answer the question that matters Can it actually be exploited in your environment? Mythosclass AI is compressing the time between disclosure and working exploitation, while many security programs still validate risk on weekly or quarterly cycles. The dangerous gap is no longer just technical. It is.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90947 154
🖋️ Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone 🖋️

Every release of the Unbound DNS resolver before 1.26.1 has a critical heap overflow in its DNSSEC validator, maintainer NLnet Labs said in an advisory on Wednesday. An attacker who controls a malicious zone and queries a vulnerable resolver can trigger it, enabling remote code execution. Unbound 1.26.1, released the same day, fixes the bug, tracked as CVE202681642, along with.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #90943 405
📔 Major Cyber Vendors Turn to New UK Testing Program as MITRE Evaluations Face Changes 📔

A group of cyber threat detection providers, including CrowdStrike, Palo Alto Networks and Sophos, have joined SE Labs PIVOT program.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Infosecurity Magazine Major Cyber Threat Detection Vendors Turn to New UK Testing Program A group of cyber threat detection providers, including CrowdStrike, Palo Alto Networks and Sophos, have joined SE Labs’ PIVOT program
Post #90941 182
📔 Cyber-Attacks Cost Organizations $52,000 on Average 📔

Hiscox highlighted the huge financial and operational costs of cyberattacks, with the average cost of an incident at 52,000.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Infosecurity Magazine Cyber-Attacks Cost Organizations $52,000 on Average Hiscox highlighted the huge financial and operational costs of cyber-attacks, with the average cost of an incident at $52,000
Post #90938 217
📔 Major Cyber Vendors Turn to New UK Testing Program as MITRE Evaluations Face Changes 📔

A group of cyber threat detection providers, including CrowdStrike, Palo Alto Networks and Sophos, have joined SE Labs PIVOT program.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Infosecurity Magazine Major Cyber Threat Detection Vendors Turn to New UK Testing Program A group of cyber threat detection providers, including CrowdStrike, Palo Alto Networks and Sophos, have joined SE Labs’ PIVOT program
Post #90937 121
📔 PHP Webshell Campaign Targets WordPress Through Critical WooCommerce Plugin Bug 📔

Attackers are exploiting a critical flaw in a thirdparty WooCommerce plugin to upload PHP webshells.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Infosecurity Magazine PHP Webshell Campaign Targets WordPress Through WooCommerce Bug Attackers are exploiting a critical flaw in a third-party WooCommerce plugin to upload PHP webshells
Post #90935 108
📔 Cyber-Attacks Cost Organizations $52,000 on Average 📔

Hiscox highlighted the huge financial and operational costs of cyberattacks, with the average cost of an incident at 52,000.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Infosecurity Magazine Cyber-Attacks Cost Organizations $52,000 on Average Hiscox highlighted the huge financial and operational costs of cyber-attacks, with the average cost of an incident at $52,000
Post #90934 126
🖋️ Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens 🖋️

A critical security flaw in WSO2 API Manager has come under active exploitation in the wild, according to findings from watchTowr. The vulnerability, tracked as CVE20265430 CVSS score 9.810.0, is a case of improper verification of a cryptographic signature that could result in account takeover. Hacktron Team has been credited with discovering and reporting the flaw. "JWT authentication.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
  • 🔥 1
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →