๐Ÿ›ก Cybersecurity & Privacy ๐Ÿ›ก - News
29.3K subscribers
91.5K links
๐Ÿ—ž The finest daily news on cybersecurity and privacy.

๐Ÿ”” Daily releases.

๐Ÿ’ป Is your online life secure?

๐Ÿ“ฉ lalilolalo.dev@gmail.com
Download Telegram
๐Ÿ•ต๏ธโ€โ™‚๏ธ AI Gave Your Incident Archive a Second Job ๐Ÿ•ต๏ธโ€โ™‚๏ธ

Security records are increasingly being used by vendors to train their models, creating new risks for enterprises.

๐Ÿ“– Read more.

๐Ÿ”— Via "Dark Reading"

----------
๐Ÿ‘๏ธ Seen on @cibsecurity
โค1๐Ÿ”ฅ1
๐Ÿ•ต๏ธโ€โ™‚๏ธ UK Wades Into Tech Sovereignty Amid AI Policy Changes ๐Ÿ•ต๏ธโ€โ™‚๏ธ

The UK is betting on domestic AI and cyber investment to reduce reliance on US tech but security leaders question whether the funding is too fragmented and too late.

๐Ÿ“– Read more.

๐Ÿ”— Via "Dark Reading"

----------
๐Ÿ‘๏ธ Seen on @cibsecurity
๐Ÿค”1
๐Ÿ–‹๏ธ Claude Code's โ€œDon't Ask Againโ€ File Exposes Passwords and Keys in 1,122 Public Copies on GitHub ๐Ÿ–‹๏ธ

Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can read them. When a user selects "Yes, and don't ask again," Anthropic's AI coding assistant can save the command, wordforword, including the secret, in a project settings file. Software security company Apiiro said yesterday that 1,122 public.

๐Ÿ“– Read more.

๐Ÿ”— Via "The Hacker News"

----------
๐Ÿ‘๏ธ Seen on @cibsecurity
๐Ÿ”ฅ3๐Ÿค”1
๐Ÿ“ข AI risk decoded: What are the real threats posed by AI? ๐Ÿ“ข

Amid predictions AI will cause human extinction, what are the real risks businesses should be aware of?.

๐Ÿ“– Read more.

๐Ÿ”— Via "ITPro"

----------
๐Ÿ‘๏ธ Seen on @cibsecurity
๐Ÿ•ต๏ธโ€โ™‚๏ธ Cyber Experts Weigh In: How to Fight Artex & AntiFox ๐Ÿ•ต๏ธโ€โ™‚๏ธ

Cybercriminals using agentic pentesting tools is a proverbial genie out of the bottle at this point, so enterprises need to get a defense plan in place right away.

๐Ÿ“– Read more.

๐Ÿ”— Via "Dark Reading"

----------
๐Ÿ‘๏ธ Seen on @cibsecurity
๐Ÿ•ต๏ธโ€โ™‚๏ธ Extortion Group Luna Moth Flits Into Law Firms a Second Time ๐Ÿ•ต๏ธโ€โ™‚๏ธ

The cybercriminals are retargeting law firms that refused to pay its first ransom, with a social engineering con aimed at stealing Microsoft access tokens.

๐Ÿ“– Read more.

๐Ÿ”— Via "Dark Reading"

----------
๐Ÿ‘๏ธ Seen on @cibsecurity
๐Ÿ•ต๏ธโ€โ™‚๏ธ Inside an AI Attack Against a US Retailer ๐Ÿ•ต๏ธโ€โ™‚๏ธ

When handtyped commands failed to breach a US retailer, the attacker turned to AIgenerated scripts, achieving lateral movement in minutes.

๐Ÿ“– Read more.

๐Ÿ”— Via "Dark Reading"

----------
๐Ÿ‘๏ธ Seen on @cibsecurity
๐Ÿ•ต๏ธโ€โ™‚๏ธ Chinese AI Project Scouts Spies in Taiwan Chip Industry ๐Ÿ•ต๏ธโ€โ™‚๏ธ

The CCP built a Big Data system to scrape reams of information and learn about individuals abroad, to potentially target and exploit them. Think Alice Huang Lite.

๐Ÿ“– Read more.

๐Ÿ”— Via "Dark Reading"

----------
๐Ÿ‘๏ธ Seen on @cibsecurity
๐Ÿ•ต๏ธโ€โ™‚๏ธ Japan Pushes Emergency Funding for Cybersecurity as AI-Assisted Breaches Rise ๐Ÿ•ต๏ธโ€โ™‚๏ธ

The package adds publicprivate cyber responders, an AIfocused team run by the economic ministry, and more leeway to use the government's new active cyberdefense powers.

๐Ÿ“– Read more.

๐Ÿ”— Via "Dark Reading"

----------
๐Ÿ‘๏ธ Seen on @cibsecurity
๐Ÿ•ต๏ธโ€โ™‚๏ธ AIใ‚’ๆดป็”จใ—ใŸใ‚ตใ‚คใƒใƒผๆ”ปๆ’ƒใฎๅข—ๅŠ ใ‚’ๅ—ใ‘ใ€ๆ—ฅๆœฌใŒใ‚ตใ‚คใƒใƒผใ‚ปใ‚ญใƒฅใƒชใƒ†ใ‚ฃใธใฎ็ทŠๆ€ฅ่ณ‡้‡‘ๆ‹ ๅ‡บใ‚’ๆŽจ้€ฒ ๐Ÿ•ต๏ธโ€โ™‚๏ธ

AI.

๐Ÿ“– Read more.

๐Ÿ”— Via "Dark Reading"

----------
๐Ÿ‘๏ธ Seen on @cibsecurity
๐Ÿฆฟ New ASEAN Scam Hub Offers Free Training as Singapore Proposes Anti-Scam Code ๐Ÿฆฟ

A new ASEAN scam hub offers free fraud training and local reporting contacts across 11 countries, alongside Singapore's proposed antiscam safeguards. The post New ASEAN Scam Hub Offers Free Training as Singapore Proposes AntiScam Code appeared first on TechRepublic.

๐Ÿ“– Read more.

๐Ÿ”— Via "Tech Republic"

----------
๐Ÿ‘๏ธ Seen on @cibsecurity
๐Ÿ–‹๏ธ Webinar: See How Identity Blind Spots Put Your SOC at Risk and How to Close Them ๐Ÿ–‹๏ธ

Security teams have more alerts, logs, and monitoring tools than ever. Yet when an attack happens, one simple question can still take too long to answer Who or what is behind this activity, and what can they access? A suspicious login might belong to an employee. An unusual API call could come from a machine account. Or an AI agent might be accessing sensitive systems using permissions nobody.

๐Ÿ“– Read more.

๐Ÿ”— Via "The Hacker News"

----------
๐Ÿ‘๏ธ Seen on @cibsecurity
๐Ÿ–‹๏ธ ThreatsDay: 59 Linux Kernel Bugs, Falcon Spyware, GSocket Backdoors + 17 More Stories ๐Ÿ–‹๏ธ

A search result isn't always safe. An access request isn't always harmless. And a familiar account doesn't always mean a familiar person is using it. Simple things to remember. Yet a surprising amount of this week's trouble starts right there. Attackers are using fake websites, stolen access, and trusted tools to get into places they shouldn't be. AI is helping them build attacks faster, while.

๐Ÿ“– Read more.

๐Ÿ”— Via "The Hacker News"

----------
๐Ÿ‘๏ธ Seen on @cibsecurity
๐Ÿ–‹๏ธ New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access ๐Ÿ–‹๏ธ

Public exploit code released earlier this week claims that a local Windows user can gain SYSTEM privileges through the Common Log File System driver. The proof of concept, called SignDrop, targets a logauthentication feature added to the driver last year. It abuses how clfs.sys creates companion files when a privileged process opens a prepared log, using path redirection to take control of.

๐Ÿ“– Read more.

๐Ÿ”— Via "The Hacker News"

----------
๐Ÿ‘๏ธ Seen on @cibsecurity
๐Ÿ–‹๏ธ Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry ๐Ÿ–‹๏ธ

A critical flaw in Red Hat Quay allows an attacker who can access a Quay registry to read and overwrite private container images in every repository. Quay enables anonymous access by default, and while it is enabled, the attacker needs no account. When it is off, anyone with a valid account can still exploit the flaw, Red Hat said yesterday. The company has released fixed builds for eight Quay.

๐Ÿ“– Read more.

๐Ÿ”— Via "The Hacker News"

----------
๐Ÿ‘๏ธ Seen on @cibsecurity
๐Ÿ–‹๏ธ Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass ๐Ÿ–‹๏ธ

Citrix has released patches for multiple critical security flaws impacting NetScaler ADC, Citrix NetScaler Gateway, and NetScaler Console that could lead to denialofservice DoS or an authentication bypass. The critical vulnerabilities that impact NetScaler ADC and NetScaler Gateway are listed below CVE2026120868 CVSS score 9.3 A memory overflow vulnerability in Packet.

๐Ÿ“– Read more.

๐Ÿ”— Via "The Hacker News"

----------
๐Ÿ‘๏ธ Seen on @cibsecurity
๐Ÿ–‹๏ธ 186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search Hijackers ๐Ÿ–‹๏ธ

Cybersecurity researchers have found that lookalike domains masquerading as artificial intelligence AI tools are being used to serve ClickFixstyle lures, browserhijacking malware, and a set of extensions that hijack user searches. This delivery pattern has been codenamed TypoPrompting by Island. "AIapp lookalikes that turn an attempt to reach a familiar tool into a prompt to verify,.

๐Ÿ“– Read more.

๐Ÿ”— Via "The Hacker News"

----------
๐Ÿ‘๏ธ Seen on @cibsecurity
๐Ÿ–‹๏ธ SCKit Malware Turns ScreenConnect Support Sessions Into Potential MSP Attack Paths ๐Ÿ–‹๏ธ

The ongoing campaign targeting ConnectWise ScreenConnect deployments involves the exploitation of a nowpatched critical security flaw in the remote access software, and not a new vulnerability, it has emerged. Blackpoint Cyber's Adversary Pursuit Group APG, which shared the details with The Hacker News, said the recovered attacker toolkit exploits CVE202684869 CVSS score 9.9, an.

๐Ÿ“– Read more.

๐Ÿ”— Via "The Hacker News"

----------
๐Ÿ‘๏ธ Seen on @cibsecurity
๐Ÿ–‹๏ธ Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs ๐Ÿ–‹๏ธ

Google Cloud VMs on AMD Turin chips need a guest OS patch and a stopandstart to protect against three CPU sidechannel flaws, Google said this week. The company has already applied mitigations against attacks between VMs, and between VMs and the host. Inside a VM, the flaws may let an attacker with code on the same processor core infer data from other processes or the kernel. The affected.

๐Ÿ“– Read more.

๐Ÿ”— Via "The Hacker News"

----------
๐Ÿ‘๏ธ Seen on @cibsecurity
๐Ÿ–‹๏ธ New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access ๐Ÿ–‹๏ธ

Nable on Thursday said it's investigating a new public disclosure containing claims of additional vulnerabilities in onpremise versions of Ncentral running version 2026.4.1 HF2. "Based on our initial review, the server issue described depends on a nondefault configuration in which the Legacy API is turned on and exposed to the public internet," Nable said in a new advisory. "Legacy API is.

๐Ÿ“– Read more.

๐Ÿ”— Via "The Hacker News"

----------
๐Ÿ‘๏ธ Seen on @cibsecurity