23174
๐ The finest daily news on cybersecurity and privacy. ๐ Daily releases. ๐ป Is your online life secure? ๐ฉ lalilolalo.dev@gmail.com
๐ต๏ธโโ๏ธ Malaysian Airport's Cyber Disruption a Warning for Asia ๐ต๏ธโโ๏ธTransportation facilities and networks slowly adapt to changes and threats, leaving them vulnerable to agile cyberattackers, as demonstrated by the 10 million ransomware attack.
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity
๐ต๏ธโโ๏ธ Google 'ImageRunner' Bug Enabled Privilege Escalation ๐ต๏ธโโ๏ธTenable released details of a Google Cloud Run flaw that prior to remediation allowed a threat actor to escalate privileges.
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity
๐ New Phishing Attack Combines Vishing and DLL Sideloading Techniques ๐A new attack targeting Microsoft Teams users used vishing, remote access tools and DLL sideloading to deploy a JavaScript backdoor.
๐ Read more.
๐ Via "Infosecurity Magazine"
----------
๐๏ธ Seen on @cibsecurity
๐ฆฟ Happy 21st Birthday, Gmail! Googleโs Present to Enterprise Gmail Users: End-to-End Encryption ๐ฆฟThe new feature is more accessible than SMIME because it eliminates the need for certificate management.
๐ Read more.
๐ Via "Tech Republic"
----------
๐๏ธ Seen on @cibsecurity
๐๏ธ New Case Study: Global Retailer Overshares CSRF Tokens with Facebook ๐๏ธAre your security tokens truly secure? Explore how Reflectiz helped a giant retailer to expose a Facebook pixel that was covertly tracking sensitive CSRF tokens due to human error misconfigurations. Learn about the detection process, response strategies, and steps taken to mitigate this critical issue. Download the full case study here.ย By implementing Reflectiz's recommendations, the.
๐ Read more.
๐ Via "The Hacker News"
----------
๐๏ธ Seen on @cibsecurity
๐๏ธ Nearly 24,000 IPs Target PAN-OS GlobalProtect in Coordinated Login Scan Campaign ๐๏ธCybersecurity researchers are warning of a spike in suspicious login scanning activity targeting Palo Alto Networks PANOS GlobalProtect gateways, with nearly 24,000 unique IP addresses attempting to access these portals. "This pattern suggests a coordinated effort to probe network defenses and identify exposed or vulnerable systems, potentially as a precursor to targeted exploitation," threat.
๐ Read more.
๐ Via "The Hacker News"
----------
๐๏ธ Seen on @cibsecurity
๐ Cybercriminals Expand Use of Lookalike Domains in Email Attacks ๐BlueVoyant found that the use of lookalike domains in emailbased attacks is allowing actors to extend the types of individuals and organizations being targeted.
๐ Read more.
๐ Via "Infosecurity Magazine"
----------
๐๏ธ Seen on @cibsecurity
๐ฆฟ TechRepublic Premium Editorial Calendar: Policies, Hiring Kits, and Glossaries for Download ๐ฆฟTechRepublic Premium content helps you solve your toughest IT issues and jumpstart your career or next project.
๐ Read more.
๐ Via "Tech Republic"
----------
๐๏ธ Seen on @cibsecurity
๐ข Former GCHQ intern risked national security after taking home top secret data ๐ขA former GCHQ intern has pleaded guilty to transferring data from a topsecret computer onto his work phone.
๐ Read more.
๐ Via "ITPro"
----------
๐๏ธ Seen on @cibsecurity
๐ข ReliaQuest targets international growth, agentic AI gains with $500 million investment ๐ขCybersecurity firm ReliaQuest has raised 500 million as part of a funding round aimed at accelerating international growth and product development.
๐ Read more.
๐ Via "ITPro"
----------
๐๏ธ Seen on @cibsecurity
๐ New Malware Variant RESURGE Exploits Ivanti Vulnerability ๐CISA recommends immediate action to address malware variant RESURGE exploiting Ivanti vulnerability CVE20250282.
๐ Read more.
๐ Via "Infosecurity Magazine"
----------
๐๏ธ Seen on @cibsecurity
๐ฆฟ Top Tech Conferences & Events to Add to Your Calendar in 2025 ๐ฆฟA great way to stay current with the latest technology trends and innovations is by attending conferences. Read and bookmark our tech events guide.
๐ Read more.
๐ Via "Tech Republic"
----------
๐๏ธ Seen on @cibsecurity
๐ต๏ธโโ๏ธ DoJ Seizes Over $8M From Sprawling Pig Butchering Scheme ๐ต๏ธโโ๏ธThe department was able to trace the stolen funds to three main cryptocurrency accounts after being routed through a series of other platforms.
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity
๐ต๏ธโโ๏ธ Oracle Cloud Users Urged to Take Action ๐ต๏ธโโ๏ธAlthough Oracle has denied its cloud infrastructure services were breached, security experts recommend Oracle customers independently verify if they were affected and take measures to reduce exposure to potential fallout.
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity
๐ข What are business logic vulnerabilities? ๐ขBusiness logic vulnerabilities let attackers exploit design flaws in software, bypassing security controls to manipulate pricing, authentication, and more.
๐ Read more.
๐ Via "ITPro"
----------
๐๏ธ Seen on @cibsecurity
๐๏ธ Lucid PhaaS Hits 169 Targets in 88 Countries Using iMessage and RCS Smishing ๐๏ธA new sophisticated phishingasaservice PhaaS platform called Lucid has targeted 169 entities in 88 countries using smishing messages propagated via Apple iMessage and Rich Communication Services RCS for Android. Lucid's unique selling point lies in its weaponizing of legitimate communication platforms to sidestep traditional SMSbased detection mechanisms. "Its scalable,.
๐ Read more.
๐ Via "The Hacker News"
----------
๐๏ธ Seen on @cibsecurity
๐ต๏ธโโ๏ธ FDA's Critical Role in Keeping Medical Devices Secure ๐ต๏ธโโ๏ธThe FDA's regulations and guidance aim to strike a balance between ensuring rigorous oversight and enabling manufacturers to act swiftly when vulnerabilities are discovered.
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity
๐ต๏ธโโ๏ธ Lazarus APT Jumps on ClickFix Bandwagon in Recent Attacks ๐ต๏ธโโ๏ธA continuation of the North Korean nationstate threat's campaign against employment seekers uses the social engineering attack to target CeFi organizations with the GolangGhost backdoor.
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity
๐ Google to Switch on E2EE for All Gmail Users ๐Google is set to roll out endtoend encryption for all Gmail users, boosting security, compliance and data sovereignty efforts.
๐ Read more.
๐ Via "Infosecurity Magazine"
----------
๐๏ธ Seen on @cibsecurity
๐๏ธ China-Linked Earth Alux Uses VARGEIT and COBEACON in Multi-Stage Cyber Intrusions ๐๏ธCybersecurity researchers have shed light on a new Chinalinked threat actor called Earth Alux that has targeted various key sectors such as government, technology, logistics, manufacturing, telecommunications, IT services, and retail in the AsiaPacific APAC and Latin American LATAM regions. "The first sighting of its activity was in the second quarter of 2023 back then, it was.
๐ Read more.
๐ Via "The Hacker News"
----------
๐๏ธ Seen on @cibsecurity
๐๏ธ Apple Backports Critical Fixes for 3 Live Exploits Impacting iOS and macOS Legacy Devices ๐๏ธApple on Monday backported fixes for three vulnerabilities that have come under active exploitation in the wild to older models and previous versions of the operating systems. The vulnerabilities in question are listed below CVE202524085 CVSS score 7.3 A useafterfree bug in the Core Media component that could permit a malicious application already installed on a device to elevate.
๐ Read more.
๐ Via "The Hacker News"
----------
๐๏ธ Seen on @cibsecurity
๐ Cyber Security and Resilience Bill Will Apply to 1000 UK Firms ๐A thousand UK service providers will be expected to comply with the forthcoming Cyber Security and Resilience Bill.
๐ Read more.
๐ Via "Infosecurity Magazine"
----------
๐๏ธ Seen on @cibsecurity
๐ข Former GCHQ intern risked national security after taking home top secret data ๐ขA former GCHQ intern has pleaded guilty to transferring data from a topsecret computer onto his work phone.
๐ Read more.
๐ Via "ITPro"
----------
๐๏ธ Seen on @cibsecurity
๐ข ReliaQuest targets international growth, agentic AI gains with $500 million investment ๐ขCybersecurity firm ReliaQuest has raised 500 million as part of a funding round aimed at accelerating international growth and product development.
๐ Read more.
๐ Via "ITPro"
----------
๐๏ธ Seen on @cibsecurity
๐๏ธ Apple Fined โฌ150 Million by French Regulator Over Discriminatory ATT Consent Practices ๐๏ธApple has been hit with a fine of 150 million 162 million by France's competition watchdog over the implementation of its App Tracking Transparency ATT privacy framework. The Autorit de la concurrence said it's imposing a financial penalty against Apple for abusing its dominant position as a distributor of mobile applications for iOS and iPadOS devices between April 26, 2021 and July 25,.
๐ Read more.
๐ Via "The Hacker News"
----------
๐๏ธ Seen on @cibsecurity
๐๏ธ Russian Hackers Exploit CVE-2025-26633 via MSC EvilTwin to Deploy SilentPrism and DarkWisp ๐๏ธThe threat actors behind the zeroday exploitation of a recentlypatched security vulnerability in Microsoft Windows have been found to deliver two new backdoors called SilentPrism and DarkWisp. The activity has been attributed to a suspected Russian hacking group called Water Gamayun, which is also known as EncryptHub and LARVA208. "The threat actor deploys payloads primarily by means of.
๐ Read more.
๐ Via "The Hacker News"
----------
๐๏ธ Seen on @cibsecurity
๐ต๏ธโโ๏ธ CISA Warns of Resurge Malware Connected to Ivanti Vuln ๐ต๏ธโโ๏ธThreat actors are exploiting a vulnerability in Ivanti Connect Secure first disclosed by the vendor in January.
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity
๐ต๏ธโโ๏ธ CoffeeLoader Malware Is Stacked With Vicious Evasion Tricks ๐ต๏ธโโ๏ธNextlevel malware represents a new era of malicious code developed specifically to get around modern security software like digital forensics tools and EDR, new research warns.
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity
๐ข ITPro launches Picks 2025 Awards ๐ขWe will be celebrating the best of the best in cybersecurity in June...
๐ Read more.
๐ Via "ITPro"
----------
๐๏ธ Seen on @cibsecurity
๐ US Seizes $8.2m from Romance Baiting Scammers ๐The DoJ has managed to recoup over 8m from scammers, stolen in romance baiting schemes.
๐ Read more.
๐ Via "Infosecurity Magazine"
----------
๐๏ธ Seen on @cibsecurity