23174
🗞 The finest daily news on cybersecurity and privacy. 🔔 Daily releases. 💻 Is your online life secure? 📩 lalilolalo.dev@gmail.com
📢 UK convenes international talks on cyber security 📢Discussions will focus on the cyber security skills gap and international professional standards within the industry.
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
📔 Meta Goes Ahead With Controversial AI Training in UK 📔Meta has unpaused a project to train AI on Facebook and Instagram posts, despite privacy concerns.
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
🖋️ Apple Drops Spyware Case Against NSO Group, Citing Risk of Threat Intelligence Exposure 🖋️Apple has filed a motion to "voluntarily" dismiss its lawsuit against commercial spyware vendor NSO Group, citing a shifting risk landscape that could lead to exposure of critical "threat intelligence" information. The development was first reported by The Washington Post on Friday. The iPhone maker said its efforts, coupled with those of others in the industry and national governments to tackle.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 UK Hosts International Cyber Skills Conference 📔Nations participating in the event include the US, Canada, EU countries, India, Japan, Singapore, Ghana and Oman.
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
🚀 CosmicBeetle joins the ranks of RansomHub affiliates – Week in security with Tony Anscombe 🚀ESET research also finds that CosmicBeetle attempts to exploit the notoriety of the LockBit ransomware gang to advance its own ends.
📖 Read more.
🔗 Via "ESET - WeLiveSecurity"
----------
👁️ Seen on @cibsecurity
🛠 Mandos Encrypted File System Unattended Reboot Utility 1.8.17 🛠The Mandos system allows computers to have encrypted root file systems and at the same time be capable of remote or unattended reboots. The computers run a small client program in the initial RAM disk environment which will communicate with a server over a network. All network communication is encrypted using TLS. The clients are identified by the server using an OpenPGP key that is unique to each client. The server sends the clients an encrypted password. The encrypted password is decrypted by the clients using the same OpenPGP key, and the password is then used to unlock the root file system.
📖 Read more.
🔗 Via "Packet Storm - Tools"
----------
👁️ Seen on @cibsecurity
🕵️♂️ Malicious Actors Sow Discord With False Election Compromise Claims 🕵️♂️The FBI and CISA are warning citizens of attempts to convince voters that US election infrastructure has been compromised. It hasn't been.
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
🕵️♂️ Fortinet Confirms Customer Data Breach via Third Party 🕵️♂️The incident is a reminder why organizations need to pay attention to how they store and secure data in SaaS and cloud environments.
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
📔 Malicious Actors Spreading False US Voter Registration Breach Claims 📔An FBI and CISA alert highlighted false claims of breaches of voter registration databases, designed to undermine confidence in US elections.
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
🖋️ TrickMo Android Trojan Exploits Accessibility Services for On-Device Banking Fraud 🖋️Cybersecurity researchers have uncovered a new variant of an Android banking trojan called TrickMo that comes packed with new capabilities to evade analysis and display fake login screens to capture victims' banking credentials. "The mechanisms include using malformed ZIP files in combination with JSONPacker," Cleafy security researchers Michele Roviello and Alessandro Strino said. "In addition,.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ 17-Year-Old Arrested in Connection with Cyber Attack Affecting Transport for London 🖋️British authorities on Thursday announced the arrest of a 17yearold male in connection with a cyber attack affecting Transport for London TfL. "The 17yearold male was detained on suspicion of Computer Misuse Act offenses in relation to the attack, which was launched on TfL on 1 September," the U.K. National Crime Agency NCA said. The teenager, who's from Walsall, is said to have been.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🧠 What can businesses learn from the rise of cyber espionage? 🧠Its not just government organizations that need to worry about cyber espionage campaigns the entire business world is also a target. Multipolarity has been a defining trend in geopolitics in recent years. Rivalries between the worlds great powers continue to test the limits of globalism, resulting in growing disruption to international supply chains and The post What can businesses learn from the rise of cyber espionage? appeared first on Security Intelligence.
📖 Read more.
🔗 Via "Security Intelligence"
----------
👁️ Seen on @cibsecurity
🕵️♂️ Hardware Supply Chain Threats Can Undermine Endpoint Infrastructure 🕵️♂️To prevent this, organizations should focus on developing secure hardware and firmware foundations, enabling them to manage, monitor, and remediate hardware and firmware security.
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
📢 Cracking open insider threats 📢Leaders need to perform strict identity measures on wouldbe hires and ensure employees who leave have access promptly removed.
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
🦅 Stealthy Fileless Attack Targets Attendees of Upcoming US-Taiwan Defense Industry Event 🦅 Key Takeaways Cyble Research and Intelligence Labs CRIL identified a campaign targeting individuals connected to the upcoming USTaiwan Defense Industry Conference, as indicated by the lure document uncovered during the investigation. The campaign involves a ZIP archive containing an LNK file that mimics a legitimate PDF registration form for deception. When the LNK file is opened, it executes commands to drop a lure PDF and an executable in the startup folder, establishing persistence. Upon system reboot, the executable downloads additional content and executes it directly in memory, effectively evading detection by the security products. The firststage loader triggers a secondstage loader, which downloads, decodes, and compiles C code in memory, avoiding the creation of tr...
📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
🦿 Cloud Access Security Broker Policy 🦿The rise in cloud adoption has made it imperative for more businesses to rely on cloud providers to store, access, and manage their data and applications. While running applications and services in the cloud offers muchneeded flexibility and scalability, it also introduces new security challenges. The purpose of this Cloud Access Security Broker Policy, created ...
📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
📔 23andMe Agrees to $30m Data Breach Settlement 📔Underfire DNA testing firm 23andMe will pay 30m to settle class action lawsuit.
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
🦅 GitLab Community and Enterprise Editions Receive New Updates to Mitigate Severe Security Risks 🦅 GitLab has rolled out essential patch updates for both its Community Edition CE and Enterprise Edition EE, targeting multiple security vulnerabilities and system bugs. These critical updates are crucial for addressing highseverity issues that could jeopardize the security and functionality of GitLab environments. The new releasesversions 17.3.2, 17.2.5, and 17.1.7introduce a range of fixes and improvements designed to counteract various vulnerabilities. Users operating on the affected versions are urged to promptly upgrade their GitLab instances to protect against these vulnerabilities. Cybles latest security advisory provides an indepth examination of recent critical patches released by various vendors, with a particular focus on vulnerabilities addressed in GitLab. As a comp...
📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
🖋️ Cybercriminals Exploit HTTP Headers for Credential Theft via Large-Scale Phishing Attacks 🖋️Cybersecurity researchers have warned of ongoing phishing campaigns that abuse refresh entries in HTTP headers to deliver spoofed email login pages that are designed to harvest users' credentials. "Unlike other phishing webpage distribution behavior through HTML content, these attacks use the response header sent by a server, which occurs before the processing of the HTML content," Palo Alto.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Ivanti Warns of Active Exploitation of Newly Patched Cloud Appliance Vulnerability 🖋️Ivanti has revealed that a newly patched security flaw in its Cloud Service Appliance CSA has come under active exploitation in the wild. The highseverity vulnerability in question is CVE20248190 CVSS score 7.2, which allows remote code execution under certain circumstances. "An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🕵️♂️ NFL Teams Block & Tackle Cyberattacks in a Digital World 🕵️♂️As the 104th season of the National Football League kicks off, expect cyberattacks aimed at its customers, players, and arenas.
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
🕵️♂️ Compliance Automation Pays Off for a Growing Company 🕵️♂️In this case study, a CISO helps a B2B marketing automation company straighten out its manual compliance process by automating it.
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
📔 Record $65m Settlement for Hacked Patient Photos 📔Over 600 patients and employees of Lehigh Valley Health Network in Pennsylvania had their medical record photos hacked and posted on the internet.
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
🖋️ Progress WhatsUp Gold Exploited Just Hours After PoC Release for Critical Flaw 🖋️Malicious actors are likely leveraging publicly available proofofconcept PoC exploits for recently disclosed security flaws in Progress Software WhatsUp Gold to conduct opportunistic attacks. The activity is said to have commenced on August 30, 2024, a mere five hours after a PoC was released for CVE20246670 CVSS score 9.8 by security researcher Sina Kheirkhah of the Summoning Team, who.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Say Goodbye to Phishing: Must-Haves to Eliminate Credential Theft 🖋️Even as cyber threats become increasingly sophisticated, the number one attack vector for unauthorized access remains phished credentials Verizon DBIR, 2024. Solving this problem resolves over 80 of your corporate risk, and a solution is possible. However, most tools available on the market today cannot offer a complete defense against this attack vector because they were architected to.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Apple Vision Pro Vulnerability Exposed Virtual Keyboard Inputs to Attackers 🖋️Details have emerged about a nowpatched security flaw impacting Apple's Vision Pro mixed reality headset that, if successfully exploited, could allow malicious attackers to infer data entered on the device's virtual keyboard. The attack, dubbed GAZEploit, has been assigned the CVE identifier CVE202440865. "A novel attack that can infer eyerelated biometrics from the avatar image to.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
♟️ The Dark Nexus Between Harm Groups and ‘The Com’ ♟️A cyberattack that shut down some of the top casinos in Las Vegas last year quickly became one of the most riveting security stories of 2023 It was the first known case of native Englishspeaking hackers in the United States and Britain teaming up with ransomware gangs based in Russia. But that madeforHollywood narrative has eclipsed a far more hideous trend Many of these young, Western cybercriminals are also members of fastgrowing online groups that exist solely to bully, stalk, harass and extort vulnerable teens into physically harming themselves and others.
📖 Read more.
🔗 Via "Krebs on Security"
----------
👁️ Seen on @cibsecurity
📢 Proofpoint and CyberArk expand strategic partnership 📢The collaboration includes a new ZenWeb browser extension to protect employees from malicious URLs.
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
📢 Ransomware series: Exploring the tools & solutions that comprise a comprehensive ransomware strategy 📢Learn about the latest trends in attack techniques and leadingedge defensive countermeasures.
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
📔 Microsoft Vows to Prevent Future CrowdStrike-Like Outages 📔Microsoft will introduce new security capabilities for solution providers outside of kernel mode, preventing events like the CrowdStrike global outage.
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity