TGViewer
Channel Public Channel
🛡 Cybersecurity & Privacy 🛡 - News

🛡 Cybersecurity & Privacy 🛡 - News

@cibsecurity

🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Open in Telegram
Subscribers
28.4K
Photos
0
Videos
0
Links
90.9K

Showing posts older than #91053 · Back to latest

Older Posts 20 shown
Post #91052 150
🖋️ Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks 🖋️

Hackers have used a malware family called NeedyMantis to maintain longterm access to networks they had already breached, Microsoft said in a technical analysis. The malware has been seen in a small number of targeted intrusions at telecommunications organizations, universities, medical nonprofits, intergovernmental organizations, and government contractors. Its use goes back to at least.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
  • ❤ 1
Post #91051 153
🖋️ Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks 🖋️

Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have been exploited in targeted attacks. The vulnerability, tracked as CVE202686950, refers to an outofbounds write impacting the CoreGraphics component that could lead to arbitrary code execution when processing a maliciously crafted file. The iPhone maker said the.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #91050 178
♟️ Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation ♟️

Authorities in the Netherlands have arrested a 23yearold convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters. In the days immediately following the suspect's arrest, remaining ShinyHunters members dramatically escalated their attacks, stealing highly sensitive data from the FBI and extorting the Russian ransomware group Cl0p.

📖 Read more.

🔗 Via "Krebs on Security"

----------
👁️ Seen on @cibsecurity
Krebs on Security Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation – Krebs on Security Authorities in the Netherlands have arrested a 24-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters. In the days immediately following the suspect’s arrest, remaining ShinyHunters…
Post #91049 180
🦿 Anthropic Declines Australian AI Hearing as OpenAI Agent Breach Faces Scrutiny 🦿

Anthropic declined an Australian Senate AI hearing as officials investigate an OpenAI agent breach and consider mandatory AI incident reporting. The post Anthropic Declines Australian AI Hearing as OpenAI Agent Breach Faces Scrutiny appeared first on TechRepublic.

📖 Read more.

🔗 Via "Tech Republic"

----------
👁️ Seen on @cibsecurity
TechRepublic Anthropic Declines Australia AI Hearing Amid OpenAI Probe Anthropic declined an Australian Senate AI hearing as officials investigate an OpenAI agent breach and consider mandatory AI incident reporting.
Post #91048 192
🕵️‍♂️ JadePuffer AI Actor Compromises Azure Tenant in Destructive Cloud Attack 🕵️‍♂️

The "agentic threat actor" may have used exposed credentials to access resources and delete cloudbased storage, applications, and databases.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
Dark Reading JadePuffer AI Actor Compromises Azure in Destructive Cloud Attack The "agentic threat actor" may have used exposed credentials to access resources and delete cloud-based storage, applications, and databases.
Post #91047 315
🕵️‍♂️ Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions 🕵️‍♂️

A purported adblocker exfiltrates reams of sensitive information and benefits from having Google's stamp of approval despite researcher warnings.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
Dark Reading Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions A purported ad-blocker exfiltrates reams of sensitive information, and benefits from having Google's stamp of approval despite researcher warnings.
Post #91046 388
🕵️‍♂️ AI Agents Are Privileged Users; Who Is Auditing Their Access? 🕵️‍♂️

Enterprises regularly rigorously monitor human employees, while autonomous AI agents quietly operate with broad privileges that could turn them into the next generation of insider threats.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
Dark Reading AI Agents Are Privileged Users; Who Is Auditing Their Access? Enterprises regularly rigorously monitor human employees, while autonomous AI agents quietly operate with broad privileges.
  • ❤ 1
Post #91044 819
🖋️ Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation 🖋️

Two new unpatched zeroday vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances that allow remote code execution are being actively exploited in the wild, security firm watchTowr said on September 26. Citrix has not confirmed the flaws or published a fix. Some administrators say they have taken appliances offline rather than wait for one to be available. NetScaler ADC and.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #91043 728
🖋️ Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack 🖋️

Kiteworks formerly Accellion is urging customers to shut down their systems as a precautionary measure for nine hours over the weekend after it received threat intelligence about an imminent cyber attack. "Kiteworks received credible threat intelligence from federal intelligence authorities indicating that a threat actor may attempt to target some Kiteworks systems," said Frank Balonis, Chief.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
  • ❤ 1
  • 🔥 1
Post #91042 594
🖋️ SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild 🖋️

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Friday added two security flaws impacting Microsoft SharePoint and Mikrotik RouterOS to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerabilities in question are as follows CVE202665660 CVSS score 8.8 A code injection vulnerability in Microsoft Office SharePoint.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
  • 🔥 1
Post #91041 487
🖋️ Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link 🖋️

Details have emerged about a highseverity security flaw in the Elementor Website Builder WordPress plugin that could be exploited by an unauthenticated attacker to create rogue administrator accounts and take control of a site. The crosssite request forgery CSRF vulnerability, which has yet to be assigned a CVE identifier, carries a CVSS score of 8.8 out of 10.0. It only affects versions.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
  • ❤ 1
  • 🔥 1
Post #91040 453
🖋️ Zero Trust for AI Agents Starts With Fixing Zero Visibility 🖋️

The way we talk about AI agents is shifting, and the way we implement them requires an even more fundamental shift. While earlier discourse focused on how quickly organizations could stand up agents and how much productivity they could promise, a string of recent incidents, including a widely discussed intrusion at Hugging Face during an evaluation of OpenAI agents, has spurred organizations to.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #91039 634
🖋️ Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells 🖋️

Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally. The ShinyHunterslinked activity involves the weaponization of CVE202635273 CVSS score 9.8, a critical security flaw that could result in unauthenticated remote code execution. The vulnerability was first exploited as a zeroday.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
  • 👍 1
Post #91038 756
🖋️ Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials 🖋️

The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFixstyle Cloudflare verification checks is part of a wider malwareasaservice MaaS platform called Lunex. The new findings come from Ontinue, which described the activity as a fourstage attack chain aimed at targeting Ukrainianspeaking users. "The attack chain begins with a fake CAPTCHA page and.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
  • 👍 1
Post #91037 1.52K
📢 NCSC talks up agents for cyber defense – but there's an 'inconvenient truth' businesses need to accept 📢

Cyber defenders need to identify the lowestrisk actions that can be automated before making decisions about adoption.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
IT Pro NCSC talks up agents for cyber defense – but there's an 'inconvenient truth' businesses need to accept Cyber defenders need to identify the lowest-risk actions that can be automated before making decisions about adoption
Post #91035 885
🖋️ New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups 🖋️

Attackers are exploiting a new flaw in onpremises VeloCloud Orchestrator VCO, the server that manages the Edge devices in a VeloCloud SDWAN, Arista said on September 22. The flaw, tracked as CVE202693952, may allow a remote attacker with no login access to privilege internal functions and affect the VCO host. Only orchestrators set up to authenticate their Edges with certificates are.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
Post #91034 735
🖋️ AI Agents Are Rewriting the Rules of Lateral Movement 🖋️

Security teams have spent decades asking whether an identity has too much access. AI agents raise a harder question how can we determine which paths an autonomous system can discover, given the access it already has? A person may try several ways to complete a task. A deterministic application follows the flow its developer wrote. But an AI agent is relentless in its pursuit of done. In May.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
  • 👍 1
Post #91033 633
📔 AI Incident Response Readiness Lags Behind AI Adoption, ISACA Finds 📔

A new report by ISACA found that 71 of orgs have not run AI incident response exercises as teams face rising pressure.

📖 Read more.

🔗 Via "Infosecurity Magazine"

----------
👁️ Seen on @cibsecurity
Infosecurity Magazine AI Incident Response Readiness Lags Behind AI Adoption, ISACA Finds ISACA found 71% of orgs have not run AI incident response exercises as teams face rising pressure
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →