📩 CyberWeekly by Hacklido — Issue №11; 9th of November, 2024
It has been a minute, but here is the most recent issue of the long-awaited CyberWeekly Newsletter by Hacklido.
The wide variety of content you can expect to see:
• Germany's protection for researchers
• Interpol's crackdown on cybercrime
• Google Cloud MFA requirement
• Snowflake hacking arrests
• Cisco vulnerability fixes
Make sure to follow this link for to access the entire article.
-----
→ If your Company / Project / Community wants to become a partner of Cyber Security News...
Please, do not hesitate to contact us by sending a direct message to @cybersecadmin
-----
@Cyber_Security_Channel
It has been a minute, but here is the most recent issue of the long-awaited CyberWeekly Newsletter by Hacklido.
The wide variety of content you can expect to see:
• Germany's protection for researchers
• Interpol's crackdown on cybercrime
• Google Cloud MFA requirement
• Snowflake hacking arrests
• Cisco vulnerability fixes
Make sure to follow this link for to access the entire article.
-----
→ If your Company / Project / Community wants to become a partner of Cyber Security News...
Please, do not hesitate to contact us by sending a direct message to @cybersecadmin
-----
@Cyber_Security_Channel
👍11❤2🔥2😁1
A Comprehensive Guide to the Best Options for Secure Browsing
The key players in the privacy market are Tor, VPNs, Brave, and proxies.
But they all have unique features that are better suited for some situations than others.
It is time to understand these technologies and choose the best tools to protect your privacy and improve security.
@Cyber_Security_Channel
The key players in the privacy market are Tor, VPNs, Brave, and proxies.
But they all have unique features that are better suited for some situations than others.
It is time to understand these technologies and choose the best tools to protect your privacy and improve security.
@Cyber_Security_Channel
TechCabal
A Comprehensive Guide to the Best Options for Secure Browsing - TechCabal
With security breaches we hear about online every day and our privacy rights being squeezed, we are forced to look for tools to protect ourselves. Yes, you
🤝6❤5👍4👎1
Sailing Into Danger: DONOT APT’s Attack on Maritime & Defense Manufacturing
CRIL recently came across a campaign seemingly aimed at Pakistan’s manufacturing industry, which supports the country’s maritime and defense sectors.
After analyzing the files involved in the campaign, it was determined that the attack was linked to the known APT group DONOT.
Cyber_Security_Channel
CRIL recently came across a campaign seemingly aimed at Pakistan’s manufacturing industry, which supports the country’s maritime and defense sectors.
After analyzing the files involved in the campaign, it was determined that the attack was linked to the known APT group DONOT.
Cyber_Security_Channel
Cyble
Sailing Into Danger: DONOT APT’s Attack on Maritime & Defense Manufacturing
Cyble analyzes the DONOT APT group's latest campaign targeting Pakistan's Defense and Maritime sectors.
👍5👏3❤1
‘ClickFix’ Cyber-Attacks for Malware Deployment on the Rise
This tactic preys on users’ desire to fix problems themselves rather than alerting their IT team or anyone else.
The dialogue boxes can originate from a range of sources, including compromised websites, documents, HTML attachments and malicious URLs.
Cyber_Security_Channel
This tactic preys on users’ desire to fix problems themselves rather than alerting their IT team or anyone else.
The dialogue boxes can originate from a range of sources, including compromised websites, documents, HTML attachments and malicious URLs.
Cyber_Security_Channel
Infosecurity Magazine
‘ClickFix’ Cyber-Attacks for Malware Deployment on the Rise
Proofpoint researchers have observed the growing use of the ClickFix social engineering tactic, which lures people into running malicious content on their computer
👍11❤1
🚀 Scanning Networks – Pro Guide for Cybersecurity Specialists
→ Our partners at Hacklido are offering you the opportunity to grab a copy of their bestselling digital product!
Become pro in scanning networks by understanding types, mitigations and using various tools involved in network security.
You will learn:
↳ IDS & Firewall evasion
↳ Understanding networks
↳ Scanning, countermeasures and tools
New additions:
✔️Real world examples
✔️Clear commands & terminology
✔️Practice questions with explanations for each unit
Among many other useful topics…
Grab your personal copy here:
→ https://gumroad.com/a/631226579/ubvne
→ Our partners at Hacklido are offering you the opportunity to grab a copy of their bestselling digital product!
Become pro in scanning networks by understanding types, mitigations and using various tools involved in network security.
You will learn:
↳ IDS & Firewall evasion
↳ Understanding networks
↳ Scanning, countermeasures and tools
New additions:
✔️Real world examples
✔️Clear commands & terminology
✔️Practice questions with explanations for each unit
Among many other useful topics…
More than 570+ sales & happy customers served!
Grab your personal copy here:
→ https://gumroad.com/a/631226579/ubvne
❤9👍8🔥1😁1
T-Mobile Breached in Major Chinese Cyber-Attack on Telecoms
While T-Mobile has stated that no significant impacts to its systems or customer data have been identified, federal agencies and security experts remain concerned about the scope of the breach.
Cyber_Security_Channel
While T-Mobile has stated that no significant impacts to its systems or customer data have been identified, federal agencies and security experts remain concerned about the scope of the breach.
Cyber_Security_Channel
Infosecurity Magazine
T-Mobile Breached in Major Chinese Cyber-Attack on Telecoms
T-Mobile was hit by Salt Typhoon, a Chinese cyber-espionage group targeting US and global telecom firms
👍9❤1
Meta Shutters Two Million Scam Accounts in Two-Year Crackdown
Meta warned that most pig butchering scams start on dating apps, text and messaging apps, email or social media, and then move to scammer-controlled accounts on crypto apps or scam websites masquerading as investment platforms.
Cyber_Security_Channel
Meta warned that most pig butchering scams start on dating apps, text and messaging apps, email or social media, and then move to scammer-controlled accounts on crypto apps or scam websites masquerading as investment platforms.
Cyber_Security_Channel
Infosecurity Magazine
Meta Shutters Two Million Scam Accounts in Two-Year Crackdown
Meta has closed down two million accounts it says were used in scams such as pig butchering
👍7
Ransomware Attack on Blue Yonder Disrupts U.S. Supply Chains and Retail Operations
Experts believe the fallout will be felt across the United States, as Blue Yonder’s software supports numerous Fortune 500 companies.
The attack highlights vulnerabilities in private cloud environments and the increasing threat ransomware poses to supply chain infrastructure.
Cyber_Security_Channel
Experts believe the fallout will be felt across the United States, as Blue Yonder’s software supports numerous Fortune 500 companies.
The attack highlights vulnerabilities in private cloud environments and the increasing threat ransomware poses to supply chain infrastructure.
Cyber_Security_Channel
DysruptionHub
Ransomware Attack on Blue Yonder Disrupts U.S. Supply Chains and Retail Operations
Blue Yonder's ransomware attack disrupts U.S. supply chains, affecting retailers like Starbucks and highlighting cloud vulnerabilities.
👍5👏3
📩 CyberWeekly by Hacklido — Issue №12; 23rd of November, 2024
Consistency is key — here is the newest issue of the value-packed CyberWeekly Newsletter from our partners at Hacklido.
Below is everything you should know, at a glance:
• Google’s AI-enhanced OSS-Fuzz found 26 open-source vulnerabilities, improving detection, raising concerns about AI blind spots.
• Change Healthcare restored services nine months after a ransomware attack that disrupted 94% of US hospitals.
• CISA’s red team audit revealed gaps in critical infrastructure defenses.
• D-Link urged users to replace EOL routers vulnerable to remote code execution.
Want more detail? Read the full breakdown here.
-----
→ If your Company / Project / Community wants to become a partner of Cyber Security News...
Please, do not hesitate to contact us by sending a direct message to @cybersecadmin
-----
@Cyber_Security_Channel
Consistency is key — here is the newest issue of the value-packed CyberWeekly Newsletter from our partners at Hacklido.
Below is everything you should know, at a glance:
• Google’s AI-enhanced OSS-Fuzz found 26 open-source vulnerabilities, improving detection, raising concerns about AI blind spots.
• Change Healthcare restored services nine months after a ransomware attack that disrupted 94% of US hospitals.
• CISA’s red team audit revealed gaps in critical infrastructure defenses.
• D-Link urged users to replace EOL routers vulnerable to remote code execution.
Want more detail? Read the full breakdown here.
-----
→ If your Company / Project / Community wants to become a partner of Cyber Security News...
Please, do not hesitate to contact us by sending a direct message to @cybersecadmin
-----
@Cyber_Security_Channel
👍8❤1
GodLoader Malware Infects Thousands via Game Development Tools
The distribution of GodLoader occurred through the Stargazers Ghost Network, a malware-as-a-service platform.
Between September and October 2024, 200 GitHub repositories were used to deliver infected files, targeting gamers, developers and general users.
Cyber_Security_Channel
The distribution of GodLoader occurred through the Stargazers Ghost Network, a malware-as-a-service platform.
Between September and October 2024, 200 GitHub repositories were used to deliver infected files, targeting gamers, developers and general users.
Cyber_Security_Channel
Infosecurity Magazine
GodLoader Malware Infects Thousands via Game Development Tools
A new cyber-attack technique uses Godot Engine to deploy undetectable malware via GodLoader, infecting more than 17,000 devices
👏6❤2
What It Costs to Hire a Hacker on the Dark Web
If you’re wondering how big the Dark Web is, then cybersecurity software company Avast explains:
“It’s difficult to measure dark web statistics, but it’s estimated that there are tens of millions of URLs on the dark web and tens of thousands of active dark web websites, including thousands of forums and marketplaces.”
Cyber_Security_Channel
If you’re wondering how big the Dark Web is, then cybersecurity software company Avast explains:
“It’s difficult to measure dark web statistics, but it’s estimated that there are tens of millions of URLs on the dark web and tens of thousands of active dark web websites, including thousands of forums and marketplaces.”
Cyber_Security_Channel
TechRepublic
What It Costs to Hire a Hacker on the Dark Web
The cost to hire a hacker can be incredibly cheap. Use this cybersecurity guide to learn about the major activities of hackers.
👍15🔥4❤2😁1
📩 CyberWeekly by Hacklido — Issue №13; 1st of December, 2024
Please welcome the most recent issue of the informative CyberWeekly Newsletter from Hacklido.
What can be found inside?
• Russian hackers leveraged unsecured nearby Wi-Fi to breach networks, bypassing MFA protections.
• Another campaign exploited an old Avast driver to disable endpoint security tools through a BYOVD attack.
• DEF CON volunteers teamed up with U.S. water utilities to strengthen cybersecurity for under-resourced critical infrastructure.
• Meanwhile, SCOTUS allowed a class-action lawsuit against Meta to proceed, stemming from the Cambridge Analytica data scandal.
• Lastly, a Microsoft 365 outage disrupted services like Teams, Exchange, and SharePoint.
Visit this webpage for the full piece.
-----
→ If your Company / Project / Community wants to become a partner of Cyber Security News...
Please, do not hesitate to contact us by sending a direct message to @cybersecadmin
-----
@Cyber_Security_Channel
Please welcome the most recent issue of the informative CyberWeekly Newsletter from Hacklido.
What can be found inside?
• Russian hackers leveraged unsecured nearby Wi-Fi to breach networks, bypassing MFA protections.
• Another campaign exploited an old Avast driver to disable endpoint security tools through a BYOVD attack.
• DEF CON volunteers teamed up with U.S. water utilities to strengthen cybersecurity for under-resourced critical infrastructure.
• Meanwhile, SCOTUS allowed a class-action lawsuit against Meta to proceed, stemming from the Cambridge Analytica data scandal.
• Lastly, a Microsoft 365 outage disrupted services like Teams, Exchange, and SharePoint.
Visit this webpage for the full piece.
-----
→ If your Company / Project / Community wants to become a partner of Cyber Security News...
Please, do not hesitate to contact us by sending a direct message to @cybersecadmin
-----
@Cyber_Security_Channel
👍6❤1
UK Underestimates Threat From Hostile States, Says New NCSC Head
The Annual Review highlights the way conflicts are fuelling a volatile threat landscape.
Examples include Russia's use of destructive malware against Ukrainian targets and routine attempts to interfere with the systems of NATO countries in support of its war effort.
Cyber_Security_Channel
The Annual Review highlights the way conflicts are fuelling a volatile threat landscape.
Examples include Russia's use of destructive malware against Ukrainian targets and routine attempts to interfere with the systems of NATO countries in support of its war effort.
Cyber_Security_Channel
IT Pro
UK underestimates threat from hostile states, says new NCSC head
Richard Horne highlights the risks posed by foreign states and urges organizations to implement NCSC advice
👍14❤8😁3🤬3
South Bend Dentist Office Notifies Patients of Data Breach
The company suggests that you take the proper steps to protect yourself if your information was exposed, including placing an initial or extended fraud alert and monitoring your bank account statements.
Cyber_Security_Channel
The company suggests that you take the proper steps to protect yourself if your information was exposed, including placing an initial or extended fraud alert and monitoring your bank account statements.
Cyber_Security_Channel
https://www.wndu.com
South Bend dentist office notifies patients of data breach
The company advises you to take the proper steps to protect yourself if your information was exposed.
👍7❤1
Snowflake Pledges to Make MFA Mandatory
The commitment to making MFA mandatory aims to prevent similar incidents occurring in the future by ensuring a separate line of defense when an account password is compromised.
Cyber_Security_Channel
The commitment to making MFA mandatory aims to prevent similar incidents occurring in the future by ensuring a separate line of defense when an account password is compromised.
Cyber_Security_Channel
Infosecurity Magazine
Snowflake Pledges to Make MFA Mandatory
The multi-cloud data warehousing platform said it will completely phase out single factor authentication with passwords by November 2025
👍11❤3
US Charges 14 Members of North Korean IT Worker Scam That Bagged $88 Million in Six Years
The DoJ said the campaign had generated in excess of $88 million throughout the approximately six-years it had been in operation, with the proceeds being sent back to DPRK-controlled accounts based in China.
Cyber_Security_Channel
The DoJ said the campaign had generated in excess of $88 million throughout the approximately six-years it had been in operation, with the proceeds being sent back to DPRK-controlled accounts based in China.
Cyber_Security_Channel
IT Pro
US charges 14 members of North Korean IT worker scam that bagged $88 million in six years
The group is accused of infiltrating US organizations posing as remote workers
👍8
📩 CyberWeekly by Hacklido — Issue №14; 7th of December, 2024
With a little delay, please find attached the newest issue of the CyberWeekly Newsletter from our long-lasting partners at Hacklido.
A list of topics from the other side:
• OT IoT risks
• Veeam flaws
• Deloitte hack
• Cisco vulnerability
• Cybersecurity news
• Encrypted messaging
• Legacy systems security
• Brain Cipher ransomware
• Ransomware threats, data breach
Read the full publication via the following link.
-----
→ If your Company / Project / Community wants to become a partner of Cyber Security News...
Please, do not hesitate to contact us by sending a direct message to @cybersecadmin
-----
@Cyber_Security_Channel
With a little delay, please find attached the newest issue of the CyberWeekly Newsletter from our long-lasting partners at Hacklido.
A list of topics from the other side:
• OT IoT risks
• Veeam flaws
• Deloitte hack
• Cisco vulnerability
• Cybersecurity news
• Encrypted messaging
• Legacy systems security
• Brain Cipher ransomware
• Ransomware threats, data breach
Read the full publication via the following link.
-----
→ If your Company / Project / Community wants to become a partner of Cyber Security News...
Please, do not hesitate to contact us by sending a direct message to @cybersecadmin
-----
@Cyber_Security_Channel
👍11❤3🔥1
New APIs Discovered by Attackers in Just 29 Seconds
The most common attack types were CVE exploitation (40%), discovery (34%) and authentication checks (26%).
The most frequently probed API endpoint was named “/status,” according to the report.
Cyber_Security_Channel
The most common attack types were CVE exploitation (40%), discovery (34%) and authentication checks (26%).
The most frequently probed API endpoint was named “/status,” according to the report.
Cyber_Security_Channel
Infosecurity Magazine
New APIs Discovered by Attackers in Just 29 Seconds
Wallarm honeypot research finds potentially exposed APIs are being discovered within half a minute
👍7
What Skills Will the Tech Workforce Need in 2025?
The conversation explored many tech trends expected to change the future of work as we look at the year ahead, from ongoing challenges around managing a hybrid and remote workforce to the increasing need to attract talent with the right skills.
Cyber_Security_Channel
The conversation explored many tech trends expected to change the future of work as we look at the year ahead, from ongoing challenges around managing a hybrid and remote workforce to the increasing need to attract talent with the right skills.
Cyber_Security_Channel
Silicon Republic
What skills will the tech workforce need in 2025?
SiliconRepublic.com editor Jenny Darmody spoke to Mastercard’s Olivia Leonard about what 2025 will mean for the workforce.
👍8❤2
Fraud or Fallacy? Is Meezan Bank Covering Up a Data Breach?
In a customer advisory, Meezan Bank labeled the rumors of a data breach as “entirely false.”
The bank guaranteed customers that all disputed transactions were unsecured e-commerce transactions.
They were fully covered under international chargeback mechanisms.
Furthermore, the bank also promised quick compensation for affected users.
However, the bank’s reassurances have done little to repress customer anxieties.
The question arises of how cards never used for Internet banking—or even ATMs—could be exploited for unauthorized transactions.
Cyber_Security_Channel
In a customer advisory, Meezan Bank labeled the rumors of a data breach as “entirely false.”
The bank guaranteed customers that all disputed transactions were unsecured e-commerce transactions.
They were fully covered under international chargeback mechanisms.
Furthermore, the bank also promised quick compensation for affected users.
However, the bank’s reassurances have done little to repress customer anxieties.
The question arises of how cards never used for Internet banking—or even ATMs—could be exploited for unauthorized transactions.
Cyber_Security_Channel
PhoneWorld
Fraud or Fallacy? Is Meezan Bank Covering Up a Data Breach? - PhoneWorld
Several complaints have been circulating about the potential Meezan Bank data breach however, the bank has
👍7