πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
29.3K subscribers
91.5K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
🚨 Critical security issue affecting PHP 🚨

Updated The NCSC is encouraging UK organisations to take immediate action to mitigate a security issue affecting PHP CVE2026109618 and CVE2026109619.

πŸ“– Read more.

πŸ”— Via "UK NCSC"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” New PhaaS Platform Uses AI to Craft Phishing Lures and Mask Malicious Activity πŸ“”

Researchers have uncovered Athena StealthRoute, a phishingasaservice platform featuring an AI Studio that generates phishing lures and decoy content designed to conceal attacks.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Symantec Uncovers AI Agent Hijacking Models for Autonomous Cyber-Attacks πŸ“”

Researchers at Symantec have uncovered an AI agent designed to operate a full cyberattack without human intervention.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Ransomware Attacks Rise as Rival Gangs Vie For Market Supremacy πŸ“”

Cybercriminal groups The Gentlemen and Qilin dominate ransomware attacks and both are evolving their tactics in an attempt to outdo one another.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” SafePay Has Compromised 600 Critical Infrastructure Victims Worldwide, CISA Warns πŸ“”

A new CISA advisory warns of the threat posed by SafePay to businesses and critical infrastructure, and urges defenders to take action to mitigate the groups tactics.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“” Critical PHP Vulnerabilities Leaked Ahead of Scheduled Security Patches πŸ“”

Two critical vulnerabilities in PHP were leaked one day before their scheduled disclosure and security patches.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
❀1πŸ‘1
πŸ“” Children’s Data Stolen After Ransomware Attack Compromises β€˜Password1’ Account πŸ“”

The ICO has slammed security failings by the Welsh local government data unit and IT service provider following the 2024 incident.

πŸ“– Read more.

πŸ”— Via "Infosecurity Magazine"

----------
πŸ‘οΈ Seen on @cibsecurity
❀1
πŸ“’ A spate of cyber attacks has rocked Japan πŸ“’

With over 100 cyber attacks impacting major sectors this year, Japans ruling party is calling for an emergency taskforce to strengthen AI defenses.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers πŸ–‹οΈ

A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the findings this week. The attack requires two things Tailscale SSH set up to allow port forwarding, and an attacker who already controls one device that the network's access rules permit to connect to the target. The findings were.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
❀1πŸ‘1
πŸ–‹οΈ PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking πŸ–‹οΈ

Threat actors have been observed using agentic artificial intelligence AI platforms for postexploitation activity following the abuse of the PHP2Shell vulnerabilities tracked as CVE2026109618 and CVE2026109619. "In one case, the attackers targeted a government entity in Europe and within two hours of the initial exploitation they had successfully accessed password hashes and multifactor.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication πŸ–‹οΈ

OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning RL training and internal inference of its most advanced AI models. "Based on the current state of alignment research, monitoring systems, and the security of internet infrastructure, we believe the responsible approach is to conduct frontier model training with no.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ“’ Thales Imperva Cloud WAF πŸ“’

Sophisticated web application firewall that's a breeze to deploy, packed with sophisticated security features, and ideally suited to enterprises.

πŸ“– Read more.

πŸ”— Via "ITPro"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ•΅οΈβ€β™‚οΈ 10 Software Security Practices Built for the Next 250 Years πŸ•΅οΈβ€β™‚οΈ

This Cybersecurity Awareness Month's theme, "Securing the Next 250," asks us to look beyond vulnerabilities and consider what will make our digital systems resilient for generations.

πŸ“– Read more.

πŸ”— Via "Dark Reading"

----------
πŸ‘οΈ Seen on @cibsecurity
❀1
🦿 Your Older Android Phone Is Getting a New Scam Defense β€” Here’s What Google Changed 🦿

Google is extending scamcall protection to Android 15 and earlier, adding safeguards against malicious apps that abuse accessibility permissions. The post Your Older Android Phone Is Getting a New Scam Defense Heres What Google Changed appeared first on TechRepublic.

πŸ“– Read more.

πŸ”— Via "Tech Republic"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ ⚑ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More πŸ–‹οΈ

This2Shell, That2Shell, Everything2Shell. That's pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere. Hackers are scanning for targets, some flaws are already being used in attacks, and security teams have more urgent patches than they can keep up with. And that's not even the full story. A leaked key led to a software supplychain.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes πŸ–‹οΈ

Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox intended to contain it, the project's maintainers say. An attacker would first need a vulnerable Wasmtime build to compile a module they control, and one of the flaws affects only ARM64 systems. Fixed versions were released on.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses πŸ–‹οΈ

Every SOC struggles with a pile of alerts. Very few of those alerts explain how an attack started or how it progressed. Network data, like that from a network detection and response NDR platform, connects individual alerts into one timeline, and it feeds the defensive systems that can tie all events together into one coordinated view. SOC teams often first see the shape of an intrusion.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts πŸ–‹οΈ

A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working copies of the two apps, researcher Ovi found. It only reaches people who install one of these tampered copies, spread outside the official app stores, or who run WeChat inside the kit makers' own container app. The kit's Telegram part matches Baohuo, a backdoor that Doctor.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations πŸ–‹οΈ

Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversaryinthemiddle AitM relay to capture signin sessions and then replay the stolen tokens to break into email accounts at 79 organizations. Huntress, which observed the activity between July 14 and September 22, 2026, said it detected 497 successful Microsoft 365 signin events across.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity
πŸ–‹οΈ Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs πŸ–‹οΈ

An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's secrets into its GitHub Actions logs, which the attackers then download before deleting the runs. The attacks have succeeded in private repositories and GitHub Enterprise environments, according to an analysis by cloud security company Wiz. A GitHub safeguard that pauses.

πŸ“– Read more.

πŸ”— Via "The Hacker News"

----------
πŸ‘οΈ Seen on @cibsecurity