23174
🗞 The finest daily news on cybersecurity and privacy. 🔔 Daily releases. 💻 Is your online life secure? 📩 lalilolalo.dev@gmail.com
🖋️ WhatsApp Adds Advanced Chat Privacy to Blocks Chat Exports and Auto-Downloads 🖋️WhatsApp has introduced an extra layer of privacy called Advanced Chat Privacy that allows users to block participants from sharing the contents of a conversation in traditional chats and groups. "This new setting available in both chats and groups helps prevent others from taking content outside of WhatsApp for when you may want extra privacy," WhatsApp said in a statement. The optional feature.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 UK Romance Scams Spike 20% as Online Dating Grows 📔Barclays found that romance scam victims lost 8000 on average in 2024, a significant increase from the previous year.
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
📔 M&S Grapples with Cyber Incident Affecting In-Store Services 📔Marks and Spencer has confirmed that it has been managing a cyber incident for the past few days which affected its contactless payments and click and collect services.
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
📔 Vulnerability Exploitation and Credential Theft Now Top Initial Access Vectors 📔Mandiants MTrends report found that credential theft rose significantly in 2024, driven by the growing use of infostealers.
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
📔 Verizon's DBIR Reveals 34% Jump in Vulnerability Exploitation 📔After a 180 rise in last years report, the exploitation of vulnerabilities continues to grow, now accounting for 20 of all breaches.
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
🖋️ Ripple's xrpl.js npm Package Backdoored to Steal Private Keys in Major Supply Chain Attack 🖋️The Ripple cryptocurrency npm JavaScript library named xrpl.js has been compromised by unknown threat actors as part of a software supply chain attack designed to harvest and exfiltrate users' private keys. The malicious activity has been found to affect five different versions of the package 4.2.1, 4.2.2, 4.2.3, 4.2.4, and 2.14.2. The issue has been addressed in versions 4.2.5 and 2.14.3.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Three Reasons Why the Browser is Best for Stopping Phishing Attacks 🖋️Phishing attacks remain a huge challenge for organizations in 2025. In fact, with attackers increasingly leveraging identitybased techniques over software exploits, phishing arguably poses a bigger threat than ever before. Attackers are increasingly leveraging identitybased techniques over software exploits, with phishing and stolen credentials a byproduct of phishing now the primary.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Iran-Linked Hackers Target Israel with MURKYTOUR Malware via Fake Job Campaign 🖋️The Irannexus threat actor known as UNC2428 has been observed delivering a backdoor known as MURKYTOUR as part of a jobthemed social engineering campaign aimed at Israel in October 2024. Googleowned Mandiant described UNC2428 as a threat actor aligned with Iran that engages in cyber espionagerelated operations. The intrusion set is said to have distributed the malware through a "complex.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
♟️ DOGE Worker’s Code Supports NLRB Whistleblower ♟️A whistleblower at the National Labor Relations Board NLRB alleged last week that denizens of Elon Musk's Department of Government Efficiency DOGE siphoned gigabytes of data from the agency's sensitive case files in early March. The whistleblower said accounts created for DOGE at the NLRB downloaded three code repositories from GitHub. Further investigation into one of those code bundles shows it is remarkably similar to a program published in January 2025 by Marko Elez, a 25yearold DOGE employee who has worked at a number of Musk's companies.
📖 Read more.
🔗 Via "Krebs on Security"
----------
👁️ Seen on @cibsecurity
🕵️♂️ Zambia's Updated Cyber Laws Prompt Surveillance Warnings 🕵️♂️Critics which include the US embassy in Zambia contend the justsigned Cyber Security Act and the Cyber Crime Act allow suppression of dissent and too much concentration of power.
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
🕵️♂️ Kubernetes Pods Are Inheriting Too Many Permissions 🕵️♂️Scalable, effective and best of all, free securing Kubernetes workload identity cuts cyberrisk without adding infrastructure, according to new research from SANS.
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
🕵️♂️ North Korean Operatives Use Deepfakes in IT Job Interviews 🕵️♂️Use of synthetic identities by malicious employment candidates is yet another way statesponsored actors are trying to game the hiring process and infiltrate Western organizations.
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
🕵️♂️ Ransomware Gangs Innovate With New Affiliate Models 🕵️♂️Secureworks research shows two ransomware operators offering multiple business models with ransomwareasaservice, mimicking the structures and processes of legitimate businesses.
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
📢 State-sponsored cyber groups are flocking to the 'ClickFix' social engineering technique 📢Statesponsored hackers from North Korea, Iran, and Russia are exploiting the ClickFix social engineering technique for the first time and to great success.
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
📔 FBI Reveals “Staggering” $16.6bn Lost to Cybercrime in 2024 📔The FBI found that cybercrime losses climbed by 33 compared to 2023, driven by tactics like investment fraud and BEC.
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
🕵️♂️ 'Industrial-Scale' Asian Scam Centers Expand Globally 🕵️♂️The convergence of cybercrime, financial fraud, and organized crime poses a significant threat, especially where these syndicates excel at operating under the radar.
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
📔 Dutch Warn of “Whole of Society” Russian Cyber-Threat 📔Dutch intelligence report warns of growing Russian aggression with hybrid warfare.
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
📔 US Data Breach Victim Count Surges 26% Annually 📔The latest ITRC data finds breach volumes remained flat in Q1 but victim numbers increased 26 annually.
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
📔 FBI Reveals “Staggering” $16.6bn Lost to Cybercrime in 2024 📔The FBI found that cybercrime losses climbed by 33 compared to 2023, driven by tactics like investment fraud and BEC.
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
🖋️ Google Drops Cookie Prompt in Chrome, Adds IP Protection to Incognito 🖋️Google on Tuesday revealed that it will no longer offer a standalone prompt for thirdparty cookies in its Chrome browser as part of its Privacy Sandbox initiative. "We've made the decision to maintain our current approach to offering users thirdparty cookie choice in Chrome, and will not be rolling out a new standalone prompt for thirdparty cookies," Anthony Chavez, vice president of Privacy.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Russian Hackers Exploit Microsoft OAuth to Target Ukraine Allies via Signal and WhatsApp 🖋️Multiple suspected Russialinked threat actors are "aggressively" targeting individuals and organizations with ties to Ukraine and human rights with an aim to gain unauthorized access to Microsoft 365 accounts since early March 2025. The highly targeted social engineering operations, per Volexity, are a shift from previously documented attacks that leveraged a technique known as device code.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Android Spyware Disguised as Alpine Quest App Targets Russian Military Devices 🖋️Cybersecurity researchers have revealed that Russian military personnel are the target of a new malicious campaign that distributes Android spyware under the guise of the Alpine Quest mapping software. "The attackers hide this trojan inside modified Alpine Quest mapping software and distribute it in various ways, including through one of the Russian Android app catalogs," Doctor Web said in an.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ DPRK Hackers Steal $137M from TRON Users in Single-Day Phishing Attack 🖋️Multiple threat activity clusters with ties to North Korea aka Democratic People's Republic of Korea or DPRK have been linked to attacks targeting organizations and individuals in the Web3 and cryptocurrency space. "The focus on Web3 and cryptocurrency appears to be primarily financially motivated due to the heavy sanctions that have been placed on North Korea," Googleowned Mandiant said in.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🕵️♂️ Verizon: Edge Bugs Soar, Ransoms Lag, SMBs Bedeviled 🕵️♂️The cybersecurity landscape confounded expectations in 2024, as anticipated threats and risk didn't materialize and less widely touted attack scenarios shot up.
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
🕵️♂️ The Foundations of a Resilient Cyber Workforce 🕵️♂️In a world where insider threats, nationstate adversaries, and technological evolution create new challenges, companies must prioritize transparency, ethical leadership, and a culture rooted in trust.
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
🕵️♂️ Japan Warns on Unauthorized Stock Trading via Stolen Credentials 🕵️♂️Attackers are using credentials stolen via phishing websites that purport to be legitimate securities company homepages, duping victims and selling their stocks before they realize they've been hacked.
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
🕵️♂️ Popular British Retailer Marks & Spencer Addresses 'Cyber Incident' 🕵️♂️MS has launched an investigation and said some customer operations are impacted.
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
🕵️♂️ Microsoft Claims Steady Progress Revamping Security Culture 🕵️♂️In the latest Secure Future Initiative Progress Report, Microsoft described efforts to rebuild its security culture, including making security a core priority for employees during performance reviews and launching a new "Secure by Design UX Toolkit.".
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
📢 Malware-free attacks: The threat to businesses 📢Malwarefree attacks are a growing risk what can businesses do to mitigate them?.
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
🕵️♂️ Microsoft Claims Steady Progress Revamping Security Culture 🕵️♂️In the latest Secure Future Initiative Progress Report, Microsoft described efforts to rebuild its security culture, including making security a core priority for employees during performance reviews and launching a new "Secure by Design UX Toolkit.".
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity