🛡 Cybersecurity & Privacy 🛡 - News
29.3K subscribers
91.5K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
🖋️ Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access 🖋️

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Friday added two security flaws impacting Ivanti Connect Secure ICS to its Known Exploited Vulnerabilities KEV catalog, following active exploitation in the wild. The vulnerabilities are listed below CVE2026111357 CVSS score 8.8 A missing authentication for a critical function vulnerability that could allow a.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data 🖋️

American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed nonsensitive customer data. However, the company noted that the breach did not result in unauthorized access to its investigation content, authentication credentials, or session tokens. "This month, Chainalysis detected an external actor using offensive agentic.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
❤1
🖋️ Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access 🖋️

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Friday added two security flaws impacting Ivanti Connect Secure ICS to its Known Exploited Vulnerabilities KEV catalog, following active exploitation in the wild. The vulnerabilities are listed below CVE2026111357 CVSS score 8.8 A missing authentication for a critical function vulnerability that could allow a.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data 🖋️

American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed nonsensitive customer data. However, the company noted that the breach did not result in unauthorized access to its investigation content, authentication credentials, or session tokens. "This month, Chainalysis detected an external actor using offensive agentic.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data 🖋️

American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed nonsensitive customer data. However, the company noted that the breach did not result in unauthorized access to its investigation content, authentication credentials, or session tokens. "This month, Chainalysis detected an external actor using offensive agentic.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data 🖋️

American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed nonsensitive customer data. However, the company noted that the breach did not result in unauthorized access to its investigation content, authentication credentials, or session tokens. "This month, Chainalysis detected an external actor using offensive agentic.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Devs Hit by Trojanized Claude Code Extension for Cursor 🕵️‍♂️

Two serious security issues hit Cursor on the same day, highlighting the risks for AIpowered integrated development environments IDEs.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
😱1
🖋️ Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data 🖋️

American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed nonsensitive customer data. However, the company noted that the breach did not result in unauthorized access to its investigation content, authentication credentials, or session tokens. "This month, Chainalysis detected an external actor using offensive agentic.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
👎1🤔1
🖋️ Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access 🖋️

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Friday added two security flaws impacting Ivanti Connect Secure ICS to its Known Exploited Vulnerabilities KEV catalog, following active exploitation in the wild. The vulnerabilities are listed below CVE2026111357 CVSS score 8.8 A missing authentication for a critical function vulnerability that could allow a.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
🖋️ A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats 🖋️

A malicious ChatGPT share link could run an attacker's code in the loggedin session of anyone who opened it, allowing them to read their private conversations, researchers at the security firm Parameter showed. The researchers reported the flaw through OpenAI's bug bounty program on October 18, and OpenAI fixed it eight days later and rated it P1, its most serious category.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
😱2
🖋️ Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38% 🖋️

Threat actors are launching about 8,226 networklayer distributed denialofservice DDoS attacks per hour, Cloudflare revealed Thursday. The web infrastructure and security company said it autonomously mitigated 18.2 million networklayer L3 DDoS attacks and 14.4 trillion HTTP DDoS requests in the third quarter of 2026. That amounts to 197,400 attacks per day, or one attack every 0.44.

📖 Read more.

🔗 Via "The Hacker News"

----------
👁️ Seen on @cibsecurity
❤2🤯2
📢 Three charged after impersonating CEOs and attorneys in $129 million deepfake fraud scheme 📢

The deepfake voice and video scheme saw fraudsters steal nearly 130 million.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
📢 Why password spraying is still an effective attack method 📢

Bobby and Ross talk to the CEO of Passpack about how IT leaders can beat password spraying.

📖 Read more.

🔗 Via "ITPro"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ Why Europe's Freezer Hacks Spread So Far, So Fast 🕵️‍♂️

Europe's supermarket freezer hacks show how security issues can cascade across an industry, disrupting supply chains at scale.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ UK Warns Its Critical Infrastructure Faces Grave Risk 🕵️‍♂️

Britain's new Labourled government is making a concerted push to get ahead of the AI risks to its national networks and the industrial complex.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ US Government Email Systems Open to Abuse Thanks to Typos 🕵️‍♂️

Erroneous or outdated DNS records can give attackers surprising powers over organizations' email systems.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ What We Missed: Knicks Phishing Test Goes Out of Bounds 🕵️‍♂️

In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from an illconceived phishing simulation to a hacktivist attack on a US government agency.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ APT29's Watering Holes Target Thousands of Mobile Users 🕵️‍♂️

After compromising websites, the Russian statesponsored threat group is fingerprinting victims, then harvesting information from the interesting ones.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🕵️‍♂️ SecurityDataPipeline.com Launches as a New Educational Resource for the AI Era 🕵️‍♂️

The ungated resource explains how security data pipelines reduce SIEM ingestion costs, preserve detection coverage, and prepare the data layer for AIdriven security operations.

📖 Read more.

🔗 Via "Dark Reading"

----------
👁️ Seen on @cibsecurity
🦿 The 5 Best VPN Extensions for Chrome 🦿

Looking for the best Chrome VPN extensions in 2026 to enhance your online security and privacy? Dive into our list of toprated VPNs and find your best fit. The post The 5 Best VPN Extensions for Chrome appeared first on TechRepublic.

📖 Read more.

🔗 Via "Tech Republic"

----------
👁️ Seen on @cibsecurity