25729
๐ The finest daily news on cybersecurity and privacy. ๐ Daily releases. ๐ป Is your online life secure? ๐ฉ lalilolalo.dev@gmail.com
๐ต๏ธโโ๏ธ UK Wades Into Tech Sovereignty Amid AI Policy Changes ๐ต๏ธโโ๏ธThe UK is betting on domestic AI and cyber investment to reduce reliance on US tech but security leaders question whether the funding is too fragmented and too late.
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity
๐ฆฟ Vercel Introduces DBSC: How It Protects Against Cookie Theft ๐ฆฟVercel is rolling out DBSC to make stolen session cookies harder to exploit. Learn how the protection works, its hardware requirements and security limits. The post Vercel Introduces DBSC How It Protects Against Cookie Theft appeared first on TechRepublic.
๐ Read more.
๐ Via "Tech Republic"
----------
๐๏ธ Seen on @cibsecurity
๐ Residential Proxy Traffic Traced to White House Network ๐White House network addresses were used as exits by 28 residential proxy services.
๐ Read more.
๐ Via "Infosecurity Magazine"
----------
๐๏ธ Seen on @cibsecurity
๐ CISA, FBI Urge Action to Protect Industrial Refrigeration Networks ๐The CISA advisory follows a swathe of attacks in which hackers have tampered with the temperatures of internetexposed supermarket refrigeration systems.
๐ Read more.
๐ Via "Infosecurity Magazine"
----------
๐๏ธ Seen on @cibsecurity
๐๏ธ Researchers Bypass ChatGPT Lockdown Mode to Exfiltrate Chats Without User Interaction ๐๏ธCybersecurity researchers have disclosed details of a nowpatched vulnerability that could be exploited to bypass Lockdown Mode protections in OpenAI ChatGPT. Lockdown Mode was introduced by the artificial intelligence AI company in June 2026 as an optional setting to minimize data exfiltration risks arising from prompt injections. "The flaw could enable silent chat data theft, phishing,.
๐ Read more.
๐ Via "The Hacker News"
----------
๐๏ธ Seen on @cibsecurity
๐๏ธ Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login ๐๏ธTwo flaws in Barracuda's Email Security Gateway, an emailfiltering appliance, can be chained to run commands on it as root, its highest level of access, with no login required. The company released patches on Monday, and the security firm watchTowr detailed the attack chain on Thursday. One flaw, CVE2026116606, is an authorization bypass. An unauthenticated attacker can use it to restore a.
๐ Read more.
๐ Via "The Hacker News"
----------
๐๏ธ Seen on @cibsecurity
๐๏ธ Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services ๐๏ธBlockchain analysis firm Chainalysis has revealed that its ongoing investigation into the agentic cyber attack targeting its systems also exposed names, usernames, password hashes and live tokens for all users. "While we investigated, we removed access to Reactor and Data Solutions," the company said. "At this time we continue to have no evidence that any investigations data has been accessed.
๐ Read more.
๐ Via "The Hacker News"
----------
๐๏ธ Seen on @cibsecurity
๐๏ธ Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers ๐๏ธA browser extension that can run scripts on claude.ai could make Claude Desktop run code on a person's computer, researchers at Forever Security, an endpoint security company, showed in a test. The attack needs Dispatch, a Claude feature that lets people send tasks from their phone to Claude Desktop. The flaw that makes this possible can still be exploited, the researchers said earlier this.
๐ Read more.
๐ Via "The Hacker News"
----------
๐๏ธ Seen on @cibsecurity
๐๏ธ OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits ๐๏ธOpenAI on Thursday unveiled GPT6 Cyber, which it described as a major step forward in security research that brings together stronger cybersecurity capabilities with a stepchange improvement in model alignment. The new model is "more capable at finding and fixing vulnerabilities, and far more reliable staying within the boundaries researchers set," OpenAI said. It has classified the model as.
๐ Read more.
๐ Via "The Hacker News"
----------
๐๏ธ Seen on @cibsecurity
๐๏ธ Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time ๐๏ธSome WordPress sites can still be attacked while they install the fix for an actively exploited flaw, according to Umut Bayram, the Picus Security researcher who found it. The update that installs the fix still unpacks its files using the site's old, unpatched code, so an attacker who strikes at the right moment can run code on the server. The researcher advises blocking web access to the.
๐ Read more.
๐ Via "The Hacker News"
----------
๐๏ธ Seen on @cibsecurity
๐ฆฟ Apple to Check Public iCloud Links Starting With iOS 27.3 ๐ฆฟApple will begin checking publicly shared iCloud content in version 27.3. Here's what the change means for file sharing, encryption, and account restrictions. The post Apple to Check Public iCloud Links Starting With iOS 27.3 appeared first on TechRepublic.
๐ Read more.
๐ Via "Tech Republic"
----------
๐๏ธ Seen on @cibsecurity
๐ฆฟ The 5 Best VPN Extensions for Chrome ๐ฆฟLooking for the best Chrome VPN extensions in 2026 to enhance your online security and privacy? Dive into our list of toprated VPNs and find your best fit. The post The 5 Best VPN Extensions for Chrome appeared first on TechRepublic.
๐ Read more.
๐ Via "Tech Republic"
----------
๐๏ธ Seen on @cibsecurity
๐ต๏ธโโ๏ธ APT29's Watering Holes Target Thousands of Mobile Users ๐ต๏ธโโ๏ธAfter compromising websites, the Russian statesponsored threat group is fingerprinting victims, then harvesting information from the interesting ones.
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity
๐ต๏ธโโ๏ธ US Government Email Systems Open to Abuse Thanks to Typos ๐ต๏ธโโ๏ธErroneous or outdated DNS records can give attackers surprising powers over organizations' email systems.
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity
๐ต๏ธโโ๏ธ Why Europe's Freezer Hacks Spread So Far, So Fast ๐ต๏ธโโ๏ธEurope's supermarket freezer hacks show how security issues can cascade across an industry, disrupting supply chains at scale.
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity
๐ต๏ธโโ๏ธ AI Gave Your Incident Archive a Second Job ๐ต๏ธโโ๏ธSecurity records are increasingly being used by vendors to train their models, creating new risks for enterprises.
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity
๐ฆ
You Might Be Someone Elseโs AI Test Environment ๐ฆ
Rogue AI agents hit Hugging Face, a U.S. Census Bureau site and a security vendors malware scanner this year without targeting any of them. Thirdparty risk programs have no line for that. Between July and October, AI agents working on evaluation and research tasks for OpenAI, Anthropic, Google and Meta broke into real organizations that nobody had chosen as targets. Hugging Face and a U.S. Census Bureau site were among them, along with dozens of others. Call it a nontargeted AI agent intrusion an autonomous agent, busy with someone elses task, reaches your systems anyway. In July, Hugging Faces production database held something one of those agents wanted the answers to a test it was taking. Hugging Face detected the intrusion, contained it and published a disclosure July 16 witho...
๐ Read more.
๐ Via "CYBLE"
----------
๐๏ธ Seen on @cibsecurity
๐ Half of Security Leaders Report Sensitive Data Exposure Through AI Tools ๐BlackFog found a lack of visibility into data being shared with AI tools, even those approved for use in the enterprise.
๐ Read more.
๐ Via "Infosecurity Magazine"
----------
๐๏ธ Seen on @cibsecurity
๐ ARTEX Offensive AI Tool Activity Far Exceeds Reported Campaigns, Censys Finds ๐A new Censys report showed that the use of ARTEX, an AI pentesting tool popular with threat actor, could be spreading far beyond initially reported campaigns.
๐ Read more.
๐ Via "Infosecurity Magazine"
----------
๐๏ธ Seen on @cibsecurity
๐๏ธ OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux ๐๏ธAttackers can log in to accounts that have no password, such as SSH keyonly accounts, on some Alpine Linux servers running the standard opensshserver package. They need network access to the server, an account name, and a password between 257 and 1,024 bytes long. OpenSSH, which rates the flaw critical, released version 10.6p2 today to block it. Alpine has published fixed packages for every.
๐ Read more.
๐ Via "The Hacker News"
----------
๐๏ธ Seen on @cibsecurity
๐๏ธ Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs ๐๏ธA backdoor has been found hiding in the web server that runs Control Web Panel CWP, a free panel for managing Linux hosting servers, researchers at QiAnXin's XLab said this week. The backdoored web server executes commands that attackers send via web requests, and those requests never appear in its access logs. Installing it takes root access, so the attackers must already control the server.
๐ Read more.
๐ Via "The Hacker News"
----------
๐๏ธ Seen on @cibsecurity
๐๏ธ The Flood is Coming And The Pipes Were Already Full ๐๏ธAn update on Athena, and some unsolicited predictions on what's coming next On Saturday, Dario Amodei published We Must Pace the Frontier. I agree with him. Go read it if you haven't. I've spent the summer looking at what these models find, and the gap he describes between what they can do and what the rest of us are ready for is the one I've been staring at since May. The hardest piece of his.
๐ Read more.
๐ Via "The Hacker News"
----------
๐๏ธ Seen on @cibsecurity
๐๏ธ Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It ๐๏ธA fix for CVE202683844, a remote code execution flaw in Windows Paint, is now in the Microsoft Store. Paint gets this fix only through a Store update, not through Windows updates. The fixed build, 11.2609.401.0, was the newest Paint build in all ten countries The Hacker News checked today. The flaw is an outofbounds read that could let an attacker run code over a network. Microsoft rates.
๐ Read more.
๐ Via "The Hacker News"
----------
๐๏ธ Seen on @cibsecurity
๐๏ธ Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot ๐๏ธThreat actors are attempting to exploit a recently disclosed security flaw impacting OpenSSH that can enable signins to accounts that have no password set, according to Previdian. The vulnerability, tracked as CVE2026123158 CVSS score 8.1 and codenamed SSHole or sshole, impacts Linux systems that run OpenSSH on the musl C library with Pluggable Authentication Modules PAM disabled,.
๐ Read more.
๐ Via "The Hacker News"
----------
๐๏ธ Seen on @cibsecurity
๐ฆฟ Android SMS of Death Flaw: How to Check If Your Phone Is Patched ๐ฆฟGoogle's November security update fixes a critical Android vulnerability that can interrupt cellular calls through a hidden message. Here's how to check your device. The post Android SMS of Death Flaw How to Check If Your Phone Is Patched appeared first on TechRepublic.
๐ Read more.
๐ Via "Tech Republic"
----------
๐๏ธ Seen on @cibsecurity
๐ฆฟ Hackers Target iPhones and Android Phones: Hereโs What We Know ๐ฆฟHackers are targeting outdated iPhones and Android phones through infected websites to steal passwords and sensitive data. Here's how to protect your device. The post Hackers Target iPhones and Android Phones Heres What We Know appeared first on TechRepublic.
๐ Read more.
๐ Via "Tech Republic"
----------
๐๏ธ Seen on @cibsecurity
๐ต๏ธโโ๏ธ SecurityDataPipeline.com Launches as a New Educational Resource for the AI Era ๐ต๏ธโโ๏ธThe ungated resource explains how security data pipelines reduce SIEM ingestion costs, preserve detection coverage, and prepare the data layer for AIdriven security operations.
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity
๐ต๏ธโโ๏ธ What We Missed: Knicks Phishing Test Goes Out of Bounds ๐ต๏ธโโ๏ธIn this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from an illconceived phishing simulation to a hacktivist attack on a US government agency.
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity
๐ต๏ธโโ๏ธ UK Warns Its Critical Infrastructure Faces Grave Risk ๐ต๏ธโโ๏ธBritain's new Labourled government is making a concerted push to get ahead of the AI risks to its national networks and the industrial complex.
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity
๐ข Why password spraying is still an effective attack method ๐ขBobby and Ross talk to the CEO of Passpack about how IT leaders can beat password spraying.
๐ Read more.
๐ Via "ITPro"
----------
๐๏ธ Seen on @cibsecurity