π Phishing Rises Three Times Faster in Europe Than Globally, Proofpoint Finds π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
New Proofpoint research reveals phishing detections surged 4.5x across Europe year over year, compared with 1.5x globally.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Phishing Rises Three Times Faster in Europe Than Globally
New Proofpoint research reveals phishing detections surged 4.5x across Europe year over year, compared with 1.5x globally
π’ Five ways CISOs can use βdark AIβ to their own advantage π’
π Read more.
π Via "ITPro"
----------
ποΈ Seen on @cibsecurity
Vulnerability discovery will explode over the next few years, but CIOs can use AI to beat hackers at their own game.π Read more.
π Via "ITPro"
----------
ποΈ Seen on @cibsecurity
IT Pro
βIt's the AI cybersecurity apocalypse for threat actorsβ: Five ways CISOs can use βdark AIβ to their own advantage
Vulnerability discovery will explode over the next few years, but CIOs can use AI to beat hackers at their own game
π’ NCSC puts critical infrastructure to the test with new assessment scheme π’
π Read more.
π Via "ITPro"
----------
ποΈ Seen on @cibsecurity
The program will match public sector bodies and critical infrastructure providers with accredited partners.π Read more.
π Via "ITPro"
----------
ποΈ Seen on @cibsecurity
IT Pro
NCSC puts critical infrastructure to the test with new assessment scheme
The program will match public sector bodies and critical infrastructure providers with accredited partners
π΅οΈββοΈ Attackers in Binance Breach Targeted Known Weakness, Missing Controls π΅οΈββοΈ
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Blockchain complexities, such as attackerdeployed sweepers, hobble security controls designed to limit the damage of an exchange compromise.π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Dark Reading
Binance Breach Highlights Control Weaknesses at Crypto Orgs
Blockchain complexities, such as attacker-deployed sweepers, hobble security controls designed to limit the damage of an exchange compromise.
ποΈ PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
A type confusion flaw in PostgreSQL lets a database user who can create objects run code on the server. Updates released yesterday fix it, along with 51 other security flaws. Full protection from this flaw also requires rebuilding any Clanguage extensions installed on the server. The flaw, tracked as CVE20266460, has a CVSS score of 8.8. Any code run this way has the rights of the operating.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
ποΈ New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
Two attacks made public this week allow a malicious host to read data inside AMD SEVSNPprotected virtual machines VMs, which are built to keep the server's operator out. One of them, Mior, can also modify a VM's memory and fake the signed report confirming which software it runs. Both need control of the server's hypervisor, and Mior also needs control of the server's BIOS. Researchers.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
ποΈ FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
The U.S. Federal Bureau of Investigation FBI has established that threat actors tied to the Democratic People's Republic of Korea DPRK aka North Korea have stolen more than 400 million worth of cryptocurrency as part of a social engineering scheme codenamed FaceStealer in the last 18 months. As part of a coordinated set of actions announced by the U.S. government, the cloudbased.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
ποΈ Trezor Confirms Hidden Implants in CryptoBilis-Sold Wallets That Can Steal Recovery Phrases ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
Three Trezor Safe 5 wallets bought from the reseller CryptoBilis contain an implant, an extra circuit board that can copy their recovery phrases, hardware wallet maker Trezor said yesterday. The implant reads the phrase from the wallet's screen and sends it over the mobile network to a server controlled by the attackers. The company examined one of the wallets in its lab, identified the other.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
ποΈ When an AI Agent Goes Wrong, Can You Stop It? ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
Suppose an AI agent is asked to sort support tickets and look up account details. A ticket contains instructions that lead the agent to export records to an unfamiliar destination. The agent can make the request because its identity has access to the records and its connected tools allow the action. That kind of scenario raises a response question what does stop the agent actually mean? A.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
β€1
ποΈ SilentAir Hijacks Asian Telecom Networks to Intercept SMS 2FA Codes and Spy on Taiwanese Users ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
A newly identified spying group used hacked equipment inside Asian mobile operators to intercept the calls and texts of selected people, mostly in Taiwan. Enea, a telecom and cybersecurity software company based in Stockholm, found the group's attack sources in at least six Asian countries and named it SilentAir this week. It assessed with high confidence that SilentAir is a statelevel actor,.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
ποΈ Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
An international police operation took down servers behind Gootloader, CastleRAT and StealC this week. Criminals used the three malware tools to gain access to computers, steal passwords, and launch ransomware attacks. Police also seized about 6.4 million stolen logins belonging to more than 40,000 victims, according to Germany's Federal Criminal Police Office BKA. Gootloader is a loader.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
ποΈ Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
An unknown threat actor has been observed targeting unpatched Check Point Security Gateways to obtain initial access via the PHP2Shell vulnerabilities and then a previously unreported local privilege escalation flaw in Gaia OS to deploy a backdoor called TSGA. The activity, detailed by Check Point, began on October 30, 2026, and targeted Israeli organizations, with a broader followup.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
ποΈ Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2 ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
Nable on Thursday said it's taking additional precautions in the wake of public disclosure of a new set of flaws tracked as 4EverAble2Shell and Agent2Shell. "We are restricting certain Ncentral features and integrations," the company said in a Thursday update. "These measures may affect some functionality, but we believe taking additional precautions while remediation is completed is the.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
π Hackers' Overreliance on AI Can Result in Weaker Cyber-Attacks, Proofpoint Researcher Says π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Proofpoints Selena Larson notes that threat actors reliance on AI has led to lots of mistakes being made, with little evidence of increased sophistication.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Hackers' Overreliance on AI Can Result in Weaker Cyber-Attacks, Proofp
Proofpointβs Selena Larson notes that threat actorsβ reliance on AI has led to lots of mistakes being made, with little evidence of increased sophistication
π Microsoft 365 Outage Set to Ramp up Security Risks to Organizations π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
While Microsoft resolves the global M365 and Outlook outage, cybersecurity teams remain on high alert as cybercriminals prepare to exploit the chaos.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Microsoft 365 Outage Set to Ramp up Security Risks to Organizations
While Microsoft resolves the global M365 and Outlook outage, cybersecurity teams remain on high alert as cybercriminals prepare to exploit the chaos
π Phishing Rises Three Times Faster in Europe Than Globally, Proofpoint Finds π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
New Proofpoint research reveals phishing detections surged 4.5x across Europe year over year, compared with 1.5x globally.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Phishing Rises Three Times Faster in Europe Than Globally
New Proofpoint research reveals phishing detections surged 4.5x across Europe year over year, compared with 1.5x globally
π Lawyer π
π Read more.
π Via "UnderDefense"
----------
ποΈ Seen on @cibsecurity
The post Lawyer appeared first on UnderDefense.π Read more.
π Via "UnderDefense"
----------
ποΈ Seen on @cibsecurity
UnderDefense
Lawyer - UnderDefense
π¦
CERT-Inβs AI Security Auditing Guidelines: Will Your AI System Need an Independent Audit? π¦
π Read more.
π Via "CYBLE"
----------
ποΈ Seen on @cibsecurity
Picture a customersupport chatbot at a midsized Indian ecommerce company. It answers questions about orders and returns. It runs on a thirdparty large language model. Nobody thinks of it as highrisk. Now the product team gives it one new permission it can issue refunds up to 5,000 without human signoff. It's a small feature that saves agents hours a week. Under the Artificial Intelligence AI Security Auditing Guidelines that CERTIn issued on 4 November 2026, that one change can be enough to move the chatbot into a higher risk tier. And the tier decides how the system gets audited, how often, and by whom. The 107page framework scores every AI system on eight risk factors. Most coverage so far has stopped at "four risk tiers, from low to critical." This post goes further it exp...π Read more.
π Via "CYBLE"
----------
ποΈ Seen on @cibsecurity
π¦Ώ FAA Grounds US Flights Nationwide, Citing βExtraordinaryβ Safety Concerns π¦Ώ
π Read more.
π Via "Tech Republic"
----------
ποΈ Seen on @cibsecurity
FAA grounds flights nationwide, citing extraordinary safety concerns amid air traffic control communications problems. Here's what travelers need to know. The post FAA Grounds US Flights Nationwide, Citing Extraordinary Safety Concerns appeared first on TechRepublic.π Read more.
π Via "Tech Republic"
----------
ποΈ Seen on @cibsecurity
TechRepublic
FAA Grounds US Flights Nationwide, Citing βExtraordinaryβ Safety Concerns
FAA grounds flights nationwide, citing extraordinary safety concerns amid air traffic control communications problems. Here's what travelers need to know.
π΅οΈββοΈ ArcticRAT Cybercrime Gang Profiles Victim Finances With AI π΅οΈββοΈ
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
The Android malware has expanded from focusing on crypto theft to full device control, and the attackers have added advanced analysis of stolen information.π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Dark Reading
ArcticRAT Cybercrime Gang Profiles Victim Finances With AI
The Android malware has expanded from crypto theft to full device control, and the attackers have added advanced analysis of stolen information.
β€2