πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
29.3K subscribers
91.5K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ“” Phishing Rises Three Times Faster in Europe Than Globally, Proofpoint Finds πŸ“”

New Proofpoint research reveals phishing detections surged 4.5x across Europe year over year, compared with 1.5x globally.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Five ways CISOs can use β€˜dark AI’ to their own advantage πŸ“’

Vulnerability discovery will explode over the next few years, but CIOs can use AI to beat hackers at their own game.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ NCSC puts critical infrastructure to the test with new assessment scheme πŸ“’

The program will match public sector bodies and critical infrastructure providers with accredited partners.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Attackers in Binance Breach Targeted Known Weakness, Missing Controls πŸ•΅οΈβ€β™‚οΈ

Blockchain complexities, such as attackerdeployed sweepers, hobble security controls designed to limit the damage of an exchange compromise.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE πŸ–‹οΈ

A type confusion flaw in PostgreSQL lets a database user who can create objects run code on the server. Updates released yesterday fix it, along with 51 other security flaws. Full protection from this flaw also requires rebuilding any Clanguage extensions installed on the server. The flaw, tracked as CVE20266460, has a CVSS score of 8.8. Any code run this way has the rights of the operating.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs πŸ–‹οΈ

Two attacks made public this week allow a malicious host to read data inside AMD SEVSNPprotected virtual machines VMs, which are built to keep the server's operator out. One of them, Mior, can also modify a VM's memory and fake the signed report confirming which software it runs. Both need control of the server's hypervisor, and Mior also needs control of the server's BIOS. Researchers.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls πŸ–‹οΈ

The U.S. Federal Bureau of Investigation FBI has established that threat actors tied to the Democratic People's Republic of Korea DPRK aka North Korea have stolen more than 400 million worth of cryptocurrency as part of a social engineering scheme codenamed FaceStealer in the last 18 months. As part of a coordinated set of actions announced by the U.S. government, the cloudbased.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Trezor Confirms Hidden Implants in CryptoBilis-Sold Wallets That Can Steal Recovery Phrases πŸ–‹οΈ

Three Trezor Safe 5 wallets bought from the reseller CryptoBilis contain an implant, an extra circuit board that can copy their recovery phrases, hardware wallet maker Trezor said yesterday. The implant reads the phrase from the wallet's screen and sends it over the mobile network to a server controlled by the attackers. The company examined one of the wallets in its lab, identified the other.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ When an AI Agent Goes Wrong, Can You Stop It? πŸ–‹οΈ

Suppose an AI agent is asked to sort support tickets and look up account details. A ticket contains instructions that lead the agent to export records to an unfamiliar destination. The agent can make the request because its identity has access to the records and its connected tools allow the action. That kind of scenario raises a response question what does stop the agent actually mean? A.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
❀1
πŸ–‹οΈ SilentAir Hijacks Asian Telecom Networks to Intercept SMS 2FA Codes and Spy on Taiwanese Users πŸ–‹οΈ

A newly identified spying group used hacked equipment inside Asian mobile operators to intercept the calls and texts of selected people, mostly in Taiwan. Enea, a telecom and cybersecurity software company based in Stockholm, found the group's attack sources in at least six Asian countries and named it SilentAir this week. It assessed with high confidence that SilentAir is a statelevel actor,.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins πŸ–‹οΈ

An international police operation took down servers behind Gootloader, CastleRAT and StealC this week. Criminals used the three malware tools to gain access to computers, steal passwords, and launch ransomware attacks. Police also seized about 6.4 million stolen logins belonging to more than 40,000 victims, according to Germany's Federal Criminal Police Office BKA. Gootloader is a loader.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files πŸ–‹οΈ

An unknown threat actor has been observed targeting unpatched Check Point Security Gateways to obtain initial access via the PHP2Shell vulnerabilities and then a previously unreported local privilege escalation flaw in Gaia OS  to deploy a backdoor called TSGA. The activity, detailed by Check Point, began on October 30, 2026, and targeted Israeli organizations, with a broader followup.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2 πŸ–‹οΈ

Nable on Thursday said it's taking additional precautions in the wake of public disclosure of a new set of flaws tracked as 4EverAble2Shell and Agent2Shell. "We are restricting certain Ncentral features and integrations," the company said in a Thursday update. "These measures may affect some functionality, but we believe taking additional precautions while remediation is completed is the.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Hackers' Overreliance on AI Can Result in Weaker Cyber-Attacks, Proofpoint Researcher Says πŸ“”

Proofpoints Selena Larson notes that threat actors reliance on AI has led to lots of mistakes being made, with little evidence of increased sophistication.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Microsoft 365 Outage Set to Ramp up Security Risks to Organizations πŸ“”

While Microsoft resolves the global M365 and Outlook outage, cybersecurity teams remain on high alert as cybercriminals prepare to exploit the chaos.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Phishing Rises Three Times Faster in Europe Than Globally, Proofpoint Finds πŸ“”

New Proofpoint research reveals phishing detections surged 4.5x across Europe year over year, compared with 1.5x globally.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
🌊 Lawyer 🌊

The post Lawyer appeared first on UnderDefense.

πŸ“– Read more.

πŸ”— Via "UnderDefense"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ¦… CERT-In’s AI Security Auditing Guidelines: Will Your AI System Need an Independent Audit? πŸ¦…

Picture a customersupport chatbot at a midsized Indian ecommerce company. It answers questions about orders and returns. It runs on a thirdparty large language model. Nobody thinks of it as highrisk.  Now the product team gives it one new permission it can issue refunds up to 5,000 without human signoff. It's a small feature that saves agents hours a week.  Under the Artificial Intelligence AI Security Auditing Guidelines that CERTIn issued on 4 November 2026, that one change can be enough to move the chatbot into a higher risk tier. And the tier decides how the system gets audited, how often, and by whom.  The 107page framework scores every AI system on eight risk factors. Most coverage so far has stopped at "four risk tiers, from low to critical." This post goes further it exp...

πŸ“– Read more.

πŸ”— Via "CYBLE"

----------
πŸ‘οΈ Seen on @cibsecurity
🦿 FAA Grounds US Flights Nationwide, Citing β€˜Extraordinary’ Safety Concerns 🦿

FAA grounds flights nationwide, citing extraordinary safety concerns amid air traffic control communications problems. Here's what travelers need to know. The post FAA Grounds US Flights Nationwide, Citing Extraordinary Safety Concerns appeared first on TechRepublic.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ ArcticRAT Cybercrime Gang Profiles Victim Finances With AI πŸ•΅οΈβ€β™‚οΈ

The Android malware has expanded from focusing on crypto theft to full device control, and the attackers have added advanced analysis of stolen information.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
❀2