Apple's AI Photo Analyzer Faces Privacy Backlash

Apple said in November that the privacy-preserving techniques it uses, including differential privacy and the use of OHTTP relays, mean that user data is anonymous.

So neither Apple nor its cloud partner Cloudflare can see the actual image data or any associated metadata when processing.

Cyber_Security_Channel

AI Fuels Reported Rise in ‘Polished’ Phishing Scams

AI helped add to a larger cyberattack landscape in 2024, PYMNTS wrote recently, part of a catalogue of threats that include ransomware, zero-day exploits and supply chain attacks.

According to the report, cyber security experts say these attacks are increasing as AI grows in sophistication.

AI bots can quickly consume mass quantities of information about a company’s or person’s style and tone and recreate them to plot an effective scam.

Cyber_Security_Channel

⚡️Unconventional Cyberattacks Aim to Take Over PayPal Accounts

The campaign works because the scammer appears to have registered a Microsoft 365 test domain — which is free for three months — and then created a distribution list containing target emails.

This allows any messages sent from the domain to bypass standard email security checks, Windsor explained in the post.

Cyber_Security_Channel

What Security Lessons Did We Learn in 2024?

— Telecom Can't Be Trusted
— Surging Zero-Day Exploits
— Nation-State Collaboration
— Resiliency Planning Needs More Focus
— Critical Infrastructure Is a Growing Target

Read more about this topic via the previous link.

Cyber_Security_Channel

Slovakia Hit by Historic Cyber-Attack on Land Registry

Speaking to Infosecurity, cyber policy expert from Slovakia and New America Fellow, Pavlina Pavlova, said that while the Slovakian government is politicizing the attack, swift system recovery is the key concern for citizens right now.

Cyber_Security_Channel

Top 12 Ways Hackers Broke Into Your Systems in 2024

— Check Point bug enabled Iranian hacks
— Ivanti Connect flaws found Chinese abuse
— Fortinet flaw Zero-day’ed by nation state actors
— Alibaba and Adobe users tricked into giving up credentials

Cyber_Security_Channel

The Biggest Cybersecurity and Cyberattack Stories of 2024

Including, but not limited to:

• Internet Archive hacked;

• Bad CrowdStrike updates crashed 8.5 million Windows devices;

• Russian state-sponsored hackers breached Microsoft's corporate email;

• National Public data breach exposed your Social Security Number;

• Attacks on edge networking devices run rampant.

Cyber_Security_Channel

33 Open-Source Cybersecurity Solutions You Didn’t Know You Needed

• Authentik: Open-source identity provider
• Cryptomator: Open-source cloud storage encryption
• Cirrus: Open-source Google Cloud forensic collection
• IntelOwl: Open-source threat intelligence management
• BunkerWeb: Open-source Web Application Firewall (WAF)
• Ghidra: Open-source software reverse engineering framework
• Cilium: Open-source eBPF-based networking, security, observability

Read more here — find out the remainder.

-----

🚀 Want to see your company featured in our content?

→ Ping us a message at @cybersecadmin

Free promos available — let's chat!

Cyber_Security_Channel

ℹ️ The Worst Hacks of 2024

1. China's Salt Typhoon Telecom Breaches
2. Snowflake Customer Breaches
3. Change Healthcare Ransomware Attack.

Did we miss anything in the list?

Cyber_Security_Channel

New PhishWP Plugin Enables Sophisticated Payment Page Scams

Cybercriminals deploy PhishWP either by compromising existing WordPress sites or creating fraudulent ones.

The plugin’s design closely replicates trusted payment gateways, making it difficult for users to detect the deception.

Cyber_Security_Channel

Telefonica Breach Hits 20,000 Employees and Exposes Jira Details

Cybersecurity vendor, Hudson Rock, claimed to have spoken to the perpetrators and found that they used infostealer malware to compromise over 15 Telefonica employees, gaining credentials from them for initial access.

Cyber_Security_Channel

EU To Launch New Support Centre by 2026 to Boost Healthcare Cybersecurity

Henna Virkkunen, Executive Vice-President for Tech Sovereignty, Security and Democracy at the EU Commission, commented:

“Modern healthcare has made incredible advances through digital transformation, which has meant citizens have benefited from better healthcare.

Unfortunately, health systems are also subject to cybersecurity incidents and threats.”

Cyber_Security_Channel

15K Fortinet Device Configs Leaked to the Dark Web

On the same day CVE[2024.55591] was disclosed this week, a threat actor with the nom de guerre "Belsen Group" released data belonging to more than 15,000 Fortinet devices.

In a blog post, the CloudSEK researchers who spotted it assessed that the data had been stolen thanks to CVE-2022-40684, likely when that bug was still a zero-day.

Cyber_Security_Channel

Phishing Risks Rise as Zendesk Subdomains Facilitate Attacks

The report highlights that while many instances serve legitimate purposes, some are being registered for malicious activities, including impersonation and scams.

Common tactics include using keywords tied to the target brand along with numeric strings to appear authentic.

Cyber_Security_Channel

Account Credentials for Security Vendors Found on Dark Web

The credentials could be bought for as little as $10 in cybercrime marketplaces, Cyble said, noting that they were likely harvested from infostealer logs and then sold in bulk on dark web marketplaces.

Cyble looked only at credentials leaked since the start of the year, as older passwords are more likely to have changed.

Of the 14 cybersecurity vendors Cyble examined, each had both customer and internal credentials leaked on the dark web thus far in 2025.

Cyber_Security_Channel

Hidden Text Salting Disrupts Brand Name Detection Systems

The study also highlights the use of hidden text salting in HTML smuggling.

In these cases, attackers concealed malware in email attachments by embedding irrelevant comments within base64-encoded strings.

This approach disrupted detection engines that typically scan attachments for threats.

Cyber_Security_Channel

NAO Warns that UK Government Doesn't Know How Vulnerable its IT Systems Are

"The risk of cyber attack is severe, and attacks on key public services are likely to happen regularly, yet the government's work to address this has been slow," said Gareth Davies, head of the NAO.

Cyber_Security_Channel

🔒 Expertised Malware Analysis & Threat Intelligence
 
We are happy to announce a brand new partnership with ANY.RUN.
 
ANY.RUN provides malware analysis and threat intelligence solutions to over 500,000 security professionals
 
Join ANY.RUN's Telegram Channel for:
 
• Fresh threat research
• Malware analysis
• Insightful tips
 
To help your team stay updated on the latest industry trends!
 
Access the resource via the link below:
 
👉 https://t.me/anyrun_app
 
-----
 
#ad #paidpromotion #sponsored
 
@Cyber_Security_Channel

ChatGPT, DeepSeek Vulnerable to AI Jailbreaks

Threat intelligence firm Kela discovered that DeepSeek is impacted by Evil Jailbreak, a method in which the chatbot is told to adopt the persona of an evil confidant, and Leo, in which the chatbot is told to adopt a persona that has no restrictions.

These jailbreaks have been patched in ChatGPT.

Cyber_Security_Channel

Cyble Sensors Detect Attacks on Apache OFBiz, Palo Alto Networks

CVE-[2024]-[0012] is an authentication bypass vulnerability in PAN-OS that enables an unauthenticated attacker with network access to the management interface to gain PAN-OS administrator privileges.

The Palo Alto alert said hackers could use CVE-[2024]-[0012] to perform administrative actions, tamper with configurations, or exploit other authenticated privilege escalation vulnerabilities such as CVE-[2024]-[9474].

Cyber_Security_Channel