23174
๐ The finest daily news on cybersecurity and privacy. ๐ Daily releases. ๐ป Is your online life secure? ๐ฉ lalilolalo.dev@gmail.com
๐๏ธ WhatsApp Adds Advanced Chat Privacy to Blocks Chat Exports and Auto-Downloads ๐๏ธWhatsApp has introduced an extra layer of privacy called Advanced Chat Privacy that allows users to block participants from sharing the contents of a conversation in traditional chats and groups. "This new setting available in both chats and groups helps prevent others from taking content outside of WhatsApp for when you may want extra privacy," WhatsApp said in a statement. The optional feature.
๐ Read more.
๐ Via "The Hacker News"
----------
๐๏ธ Seen on @cibsecurity
๐ UK Romance Scams Spike 20% as Online Dating Grows ๐Barclays found that romance scam victims lost 8000 on average in 2024, a significant increase from the previous year.
๐ Read more.
๐ Via "Infosecurity Magazine"
----------
๐๏ธ Seen on @cibsecurity
๐ M&S Grapples with Cyber Incident Affecting In-Store Services ๐Marks and Spencer has confirmed that it has been managing a cyber incident for the past few days which affected its contactless payments and click and collect services.
๐ Read more.
๐ Via "Infosecurity Magazine"
----------
๐๏ธ Seen on @cibsecurity
๐ Vulnerability Exploitation and Credential Theft Now Top Initial Access Vectors ๐Mandiants MTrends report found that credential theft rose significantly in 2024, driven by the growing use of infostealers.
๐ Read more.
๐ Via "Infosecurity Magazine"
----------
๐๏ธ Seen on @cibsecurity
๐ Verizon's DBIR Reveals 34% Jump in Vulnerability Exploitation ๐After a 180 rise in last years report, the exploitation of vulnerabilities continues to grow, now accounting for 20 of all breaches.
๐ Read more.
๐ Via "Infosecurity Magazine"
----------
๐๏ธ Seen on @cibsecurity
๐๏ธ Ripple's xrpl.js npm Package Backdoored to Steal Private Keys in Major Supply Chain Attack ๐๏ธThe Ripple cryptocurrency npm JavaScript library named xrpl.js has been compromised by unknown threat actors as part of a software supply chain attack designed to harvest and exfiltrate users' private keys. The malicious activity has been found to affect five different versions of the package 4.2.1, 4.2.2, 4.2.3, 4.2.4, and 2.14.2. The issue has been addressed in versions 4.2.5 and 2.14.3.
๐ Read more.
๐ Via "The Hacker News"
----------
๐๏ธ Seen on @cibsecurity
๐๏ธ Three Reasons Why the Browser is Best for Stopping Phishing Attacks ๐๏ธPhishing attacks remain a huge challenge for organizations in 2025. In fact, with attackers increasingly leveraging identitybased techniques over software exploits, phishing arguably poses a bigger threat than ever before.ย Attackers are increasingly leveraging identitybased techniques over software exploits, with phishing and stolen credentials a byproduct of phishing now the primary.
๐ Read more.
๐ Via "The Hacker News"
----------
๐๏ธ Seen on @cibsecurity
๐๏ธ Iran-Linked Hackers Target Israel with MURKYTOUR Malware via Fake Job Campaign ๐๏ธThe Irannexus threat actor known as UNC2428 has been observed delivering a backdoor known as MURKYTOUR as part of a jobthemed social engineering campaign aimed at Israel in October 2024. Googleowned Mandiant described UNC2428 as a threat actor aligned with Iran that engages in cyber espionagerelated operations. The intrusion set is said to have distributed the malware through a "complex.
๐ Read more.
๐ Via "The Hacker News"
----------
๐๏ธ Seen on @cibsecurity
โ๏ธ DOGE Workerโs Code Supports NLRB Whistleblower โ๏ธA whistleblower at the National Labor Relations Board NLRB alleged last week that denizens of Elon Musk's Department of Government Efficiency DOGE siphoned gigabytes of data from the agency's sensitive case files in early March. The whistleblower said accounts created for DOGE at the NLRB downloaded three code repositories from GitHub. Further investigation into one of those code bundles shows it is remarkably similar to a program published in January 2025 by Marko Elez, a 25yearold DOGE employee who has worked at a number of Musk's companies.
๐ Read more.
๐ Via "Krebs on Security"
----------
๐๏ธ Seen on @cibsecurity
๐ต๏ธโโ๏ธ Zambia's Updated Cyber Laws Prompt Surveillance Warnings ๐ต๏ธโโ๏ธCritics which include the US embassy in Zambia contend the justsigned Cyber Security Act and the Cyber Crime Act allow suppression of dissent and too much concentration of power.
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity
๐ต๏ธโโ๏ธ Kubernetes Pods Are Inheriting Too Many Permissions ๐ต๏ธโโ๏ธScalable, effective and best of all, free securing Kubernetes workload identity cuts cyberrisk without adding infrastructure, according to new research from SANS.
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity
๐ต๏ธโโ๏ธ North Korean Operatives Use Deepfakes in IT Job Interviews ๐ต๏ธโโ๏ธUse of synthetic identities by malicious employment candidates is yet another way statesponsored actors are trying to game the hiring process and infiltrate Western organizations.
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity
๐ต๏ธโโ๏ธ Ransomware Gangs Innovate With New Affiliate Models ๐ต๏ธโโ๏ธSecureworks research shows two ransomware operators offering multiple business models with ransomwareasaservice, mimicking the structures and processes of legitimate businesses.
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity
๐ข State-sponsored cyber groups are flocking to the 'ClickFix' social engineering technique ๐ขStatesponsored hackers from North Korea, Iran, and Russia are exploiting the ClickFix social engineering technique for the first time and to great success.
๐ Read more.
๐ Via "ITPro"
----------
๐๏ธ Seen on @cibsecurity
๐ FBI Reveals โStaggeringโ $16.6bn Lost to Cybercrime in 2024 ๐The FBI found that cybercrime losses climbed by 33 compared to 2023, driven by tactics like investment fraud and BEC.
๐ Read more.
๐ Via "Infosecurity Magazine"
----------
๐๏ธ Seen on @cibsecurity
๐ต๏ธโโ๏ธ 'Industrial-Scale' Asian Scam Centers Expand Globally ๐ต๏ธโโ๏ธThe convergence of cybercrime, financial fraud, and organized crime poses a significant threat, especially where these syndicates excel at operating under the radar.
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity
๐ Dutch Warn of โWhole of Societyโ Russian Cyber-Threat ๐Dutch intelligence report warns of growing Russian aggression with hybrid warfare.
๐ Read more.
๐ Via "Infosecurity Magazine"
----------
๐๏ธ Seen on @cibsecurity
๐ US Data Breach Victim Count Surges 26% Annually ๐The latest ITRC data finds breach volumes remained flat in Q1 but victim numbers increased 26 annually.
๐ Read more.
๐ Via "Infosecurity Magazine"
----------
๐๏ธ Seen on @cibsecurity
๐ FBI Reveals โStaggeringโ $16.6bn Lost to Cybercrime in 2024 ๐The FBI found that cybercrime losses climbed by 33 compared to 2023, driven by tactics like investment fraud and BEC.
๐ Read more.
๐ Via "Infosecurity Magazine"
----------
๐๏ธ Seen on @cibsecurity
๐๏ธ Google Drops Cookie Prompt in Chrome, Adds IP Protection to Incognito ๐๏ธGoogle on Tuesday revealed that it will no longer offer a standalone prompt for thirdparty cookies in its Chrome browser as part of its Privacy Sandbox initiative. "We've made the decision to maintain our current approach to offering users thirdparty cookie choice in Chrome, and will not be rolling out a new standalone prompt for thirdparty cookies," Anthony Chavez, vice president of Privacy.
๐ Read more.
๐ Via "The Hacker News"
----------
๐๏ธ Seen on @cibsecurity
๐๏ธ Russian Hackers Exploit Microsoft OAuth to Target Ukraine Allies via Signal and WhatsApp ๐๏ธMultiple suspected Russialinked threat actors are "aggressively" targeting individuals and organizations with ties to Ukraine and human rights with an aim to gain unauthorized access to Microsoft 365 accounts since early March 2025. The highly targeted social engineering operations, per Volexity, are a shift from previously documented attacks that leveraged a technique known as device code.
๐ Read more.
๐ Via "The Hacker News"
----------
๐๏ธ Seen on @cibsecurity
๐๏ธ Android Spyware Disguised as Alpine Quest App Targets Russian Military Devices ๐๏ธCybersecurity researchers have revealed that Russian military personnel are the target of a new malicious campaign that distributes Android spyware under the guise of the Alpine Quest mapping software. "The attackers hide this trojan inside modified Alpine Quest mapping software and distribute it in various ways, including through one of the Russian Android app catalogs," Doctor Web said in an.
๐ Read more.
๐ Via "The Hacker News"
----------
๐๏ธ Seen on @cibsecurity
๐๏ธ DPRK Hackers Steal $137M from TRON Users in Single-Day Phishing Attack ๐๏ธMultiple threat activity clusters with ties to North Korea aka Democratic People's Republic of Korea or DPRK have been linked to attacks targeting organizations and individuals in the Web3 and cryptocurrency space. "The focus on Web3 and cryptocurrency appears to be primarily financially motivated due to the heavy sanctions that have been placed on North Korea," Googleowned Mandiant said in.
๐ Read more.
๐ Via "The Hacker News"
----------
๐๏ธ Seen on @cibsecurity
๐ต๏ธโโ๏ธ Verizon: Edge Bugs Soar, Ransoms Lag, SMBs Bedeviled ๐ต๏ธโโ๏ธThe cybersecurity landscape confounded expectations in 2024, as anticipated threats and risk didn't materialize and less widely touted attack scenarios shot up.
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity
๐ต๏ธโโ๏ธ The Foundations of a Resilient Cyber Workforce ๐ต๏ธโโ๏ธIn a world where insider threats, nationstate adversaries, and technological evolution create new challenges, companies must prioritize transparency, ethical leadership, and a culture rooted in trust.
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity
๐ต๏ธโโ๏ธ Japan Warns on Unauthorized Stock Trading via Stolen Credentials ๐ต๏ธโโ๏ธAttackers are using credentials stolen via phishing websites that purport to be legitimate securities company homepages, duping victims and selling their stocks before they realize they've been hacked.
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity
๐ต๏ธโโ๏ธ Popular British Retailer Marks & Spencer Addresses 'Cyber Incident' ๐ต๏ธโโ๏ธMS has launched an investigation and said some customer operations are impacted.
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity
๐ต๏ธโโ๏ธ Microsoft Claims Steady Progress Revamping Security Culture ๐ต๏ธโโ๏ธIn the latest Secure Future Initiative Progress Report, Microsoft described efforts to rebuild its security culture, including making security a core priority for employees during performance reviews and launching a new "Secure by Design UX Toolkit.".
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity
๐ข Malware-free attacks: The threat to businesses ๐ขMalwarefree attacks are a growing risk what can businesses do to mitigate them?.
๐ Read more.
๐ Via "ITPro"
----------
๐๏ธ Seen on @cibsecurity
๐ต๏ธโโ๏ธ Microsoft Claims Steady Progress Revamping Security Culture ๐ต๏ธโโ๏ธIn the latest Secure Future Initiative Progress Report, Microsoft described efforts to rebuild its security culture, including making security a core priority for employees during performance reviews and launching a new "Secure by Design UX Toolkit.".
๐ Read more.
๐ Via "Dark Reading"
----------
๐๏ธ Seen on @cibsecurity