πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
29.3K subscribers
91.5K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ–‹οΈ GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories πŸ–‹οΈ

The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects to phish opensource developers and deliver a stealer malware disguised within a fake font file. The latest evolution, detailed by OpenSourceMalware, signals that the attackers are actively refining their modus operandi in response to steps.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software πŸ–‹οΈ

In Salesforce Agentforce, the recommended way to make an agent respond to events is a Flow a record is created or a case is updated, and the Flow passes data into the agent's prompt. Separately, EmailtoCase and WebtoCase turn inbound customer messages into case records it is how airlines and hotels run support intake. Both are standard, documented, asdesigned features. Chained together,.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
❀1
πŸ•΅οΈβ€β™‚οΈ The Evolving Cybersecurity Lexicon: Vulnerability Discovery to Resilience πŸ•΅οΈβ€β™‚οΈ

An industrywide laser focus on vulnerabilities has left cybersecurity teams without enough room to strategize for resilience.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ‘1
β™ŸοΈ Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site β™ŸοΈ

U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources close to the investigation say one of the executives in the United States even helped ShinyHunters operate a website that pressured victims into paying a ransom.

πŸ“– Read more.

πŸ”— Via "Krebs on Security"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Conduent Agrees to Pay $80m to Settle Data Breach Class Action πŸ“”

The 2024 cyber incident affected the healthcare data of 62 million people, who launched a class action lawsuit against the business services firm.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ ⚑ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More πŸ–‹οΈ

The worst problems don't always come with a warning. Sometimes they arrive through a service everyone trusts, a device someone bought, or a system nobody thought to check. By the time something looks wrong, the damage may already be done. This week had plenty of that. Trusted connections became a problem. Hardware wasn't as safe as it looked. Old bugs found new victims, and some systems were.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ OnlyFans Copyright Takedowns Expose Compromised Websites πŸ•΅οΈβ€β™‚οΈ

Copyright takedown requests tied to OnlyFans and other adult content creators are revealing how attackers exploit vulnerable university and government websites to manipulate search results. UpGuard's Greg Pollock explains what universities, government websites, and security teams need to think about next.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Exploited Vulnerabilities Typically Take Three Months to Patch, Moody’s Finds πŸ“”

Known exploited vulnerabilities take a median time of 87 days to be patched, according to a new Moodys report.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ”₯1
πŸ•΅οΈβ€β™‚οΈ Researchers Infiltrate Microsoft Tech Support Scam Operation πŸ•΅οΈβ€β™‚οΈ

A largescale scam operation impersonating Microsoft uses a malicious traffic distribution system TDS run by a Russian organization and abuses thousands of Cloudflare links.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Researchers Infiltrate Microsoft Tech Support Scam Operation πŸ•΅οΈβ€β™‚οΈ

A largescale scam operation impersonating Microsoft uses a malicious traffic distribution system TDS run by a Russian organization and abuses thousands of Cloudflare links.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Researchers Infiltrate Microsoft Tech Support Scam Operation πŸ•΅οΈβ€β™‚οΈ

A largescale scam operation impersonating Microsoft uses a malicious traffic distribution system TDS run by a Russian organization and abuses thousands of Cloudflare links.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Researchers Infiltrate Microsoft Tech Support Scam Operation πŸ•΅οΈβ€β™‚οΈ

A largescale scam operation impersonating Microsoft uses a malicious traffic distribution system TDS run by a Russian organization and abuses thousands of Cloudflare links.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Researchers Infiltrate Microsoft Tech Support Scam Operation πŸ•΅οΈβ€β™‚οΈ

A largescale scam operation impersonating Microsoft uses a malicious traffic distribution system TDS run by a Russian organization and abuses thousands of Cloudflare links.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Researchers Infiltrate Microsoft Tech Support Scam Operation πŸ•΅οΈβ€β™‚οΈ

A largescale scam operation impersonating Microsoft uses a malicious traffic distribution system TDS run by a Russian organization and abuses thousands of Cloudflare links.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ 'AdFection' Turns Ad Impressions Into Zero-Click Spyware Delivery πŸ•΅οΈβ€β™‚οΈ

Spyware vendors are exploiting targeted ad bidding in the digital ecosystem to identify and track individuals and organizations of interest.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPs πŸ•΅οΈβ€β™‚οΈ

Researchers say attackers authenticated into Microsoft 365 tenants using ConnectWise credentials ConnectWise says customer impact remains unconfirmed.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Researchers Infiltrate Microsoft Tech Support Scam Operation πŸ•΅οΈβ€β™‚οΈ

A largescale scam operation impersonating Microsoft uses a malicious traffic distribution system TDS run by a Russian organization and abuses thousands of Cloudflare links.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ Researchers Infiltrate Microsoft Tech Support Scam Operation πŸ•΅οΈβ€β™‚οΈ

A largescale scam operation impersonating Microsoft uses a malicious traffic distribution system TDS run by a Russian organization and abuses thousands of Cloudflare links.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Head of AI Security Roles Surge in Large Organizations πŸ“”

A new IANS report has found that despite the growth of the head of AI security role, accountability for AI governance in firms remains unsettled.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Researchers Warn OpenCode Quietly Patched Critical RCE Flaw, Leaving Users At Risk πŸ“”

OpenCode silently patched a critical RCE flaw, leaving vulnerable users unaware of the security risk, researchers at Pillar Security warned.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity