🛡 Cybersecurity & Privacy 🛡 - News
前往频道在 Telegram
🗞 The finest daily news on cybersecurity and privacy. 🔔 Daily releases. 💻 Is your online life secure? 📩 lalilolalo.dev@gmail.com
显示更多📈 Telegram 频道 🛡 Cybersecurity & Privacy 🛡 - News 的分析概览
频道 🛡 Cybersecurity & Privacy 🛡 - News (@cibsecurity) 英语 语言赛道中的 是活跃参与者。目前社区聚集了 28 895 名订阅者，在 技术与应用 类别中位列第 4 592，并在 美国 地区排名第 1 393 位。
📊 受众指标与增长动态
自 невідомо 创建以来，项目保持高速增长，吸引了 28 895 名订阅者。
根据 26 十月, 2026 的最新数据，频道保持稳定运转。过去 30 天订阅人数变化为 605，过去 24 小时变化为 30，整体触达仍然可观。
- 认证状态： 未认证
- 互动率 (ER)： 平均受众互动率为 0.64%。内容发布后 24 小时内通常能获得 0.83% 的反应，占订阅者总量。
- 帖子覆盖： 每篇帖子平均可获得 186 次浏览，首日通常累积 239 次浏览。
- 互动与反馈： 受众积极参与，单帖平均反应数为 1。
- 主题关注点： 内容集中在 infosecurity, hacker, attack, cybersecurity, threat 等核心主题上。
📝 描述与内容策略
作者将该频道定位为表达主观观点的平台：
“🗞 The finest daily news on cybersecurity and privacy.
🔔 Daily releases.
💻 Is your online life secure?
📩 lalilolalo.dev@gmail.com”
凭借高频更新（最新数据采集于 27 十月, 2026），频道始终保持新鲜度与高覆盖。分析显示受众积极互动，使其成为 技术与应用 类别中的关键影响点。
28 895
订阅者
+3024 小时
+1887 天
+60530 天
帖子存档
🕵️♂️ So Many AI Security Benchmarks, But None Tell the Whole Story 🕵️♂️
Measuring AI model security gets complex fast a growing patchwork of benchmarks targets different variables in the equation, but none replace testing against your own code and workflows.
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity🕵️♂️ In-the-Wild Attack Abuses AI Agents' Trust in Markdown 🕵️♂️
A new AI agent prompt injection technique exploits how coding assistants consume local instruction files, blurring the line between text documents and executable actions.
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity🕵️♂️ Risks & Rewards: How AI Is Redefining the CISO's Role 🕵️♂️
Nvidia security executive Mark Weatherford says CISOs must help business leaders weigh AI's pros and cons, and ensure those deploying it own the risks.
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity🕵️♂️ Risks & Rewards: How AI Is Redefining the CISO's Role 🕵️♂️
Nvidia security executive Mark Weatherford says CISOs must help business leaders weigh AI's pros and cons, and ensure those deploying it own the risks.
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity🖋️ Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento 🖋️
An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a longrunning campaign active since July 2025. According to Dutch ecommerce security company Sansec, the activity is designed to add a small piece of code to the store's pages that, when visited by unsuspecting users, serves malicious JavaScript loader code through Magento CMS blocks. "When you.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity🕵️♂️ 'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets 🕵️♂️
An ongoing supply chain attack is harvesting credentials and sensitive data from thousands of developer repositories.
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity🖋️ Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware 🖋️
Cybersecurity researchers are calling attention to what they say is a "recurring social engineering pattern" across hundreds of cases in which threat actors use Microsoft Teams' external chat creation feature to conduct impersonation scams or to deliver malware. "A consistent pattern of attacker behavior has emerged across these incidents the use of the same throwaway tenants, the same 'IT.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity🖋️ PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw 🖋️
PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE2026111497, a flaw in the Brotli compression library that the packages include. The flaw can let an attacker corrupt memory and potentially run code. PHP says the flaw can be reached through the cURL extension when the extension decompresses HTTP responses automatically. cURL leaves that off by default, but.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity📢 Inside ISACA’s race to help its members stay current 📢
At the associations recent European conference, it was clear that security and governance professionals are having to move faster than ever just to keep up.
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity📔 CISA 2030 Sets Out ‘Aggressive, Anticipatory’ Cyber Defense Strategy for Critical Infrastructure 📔
CISAs new strategy, CISA 2030, will focus on rapid detection and response and resiliency of critical services ahead of passive defense.
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity🦅 Know How Cyble Brand Intelligence Can Help Stop ClickFix Campaigns in its Tracks 🦅
Booking.com's systems were never breached. Its name was. Storm1865 spent months borrowing Booking.com's identity to get into hotel computers, and every step of that borrowing left traces on the open internet. The open internet is exactly where Cyble Brand Intelligence Protection works. Walk through the campaign one step at a time, and at each step there is a point where it could have spotted the attacker, cut the attack short or limited the damage. What happened From December 2024, a group Microsoft tracks as Storm1865 posed as Booking.com to target hotel and hospitality staff across North America, Europe, Oceania and South and Southeast Asia. Microsoft Threat Intelligence published its findings on March 13, 2025, and said the campaign was still running as of February 2025. ...
📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity📔 PHP Publishes Mitigation Advice for New RCE Flaw 📔
PHP warns of critical RCE vulnerability CVE2026115560, but says limited exploit conditions mean most deployments are unlikely to be affected.
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity📔 Blue Initiative Offers Maritime Sector Dedicated Vulnerability Database 📔
Blue Initiative launches a new vulnerability database for IT and OT CVEs relevant to the maritime industry.
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity📔 Microsoft Issues Emergency Patch Update for Critical .NET Buffer Overflow Flaw 📔
Microsofts updates address two newly disclosed vulnerabilities in the .NET developer platform, as well as flaws not fully addressed in an earlier release.
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity📔 Linux Flaws Exposed Before Fixes as Root Exploit Goes Public 📔
Six Linux flaws were made public, including one with a working root exploit and no merged fix.
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity📔 Gheist Attackers Stumble in Attempt to Abuse GitHub Tokens 📔
A largescale GitHub campaign abused stolen access tokens to target 13,500 branches and repositories with secretstealing workflows.
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity🖋️ Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware 🖋️
A malicious instruction file sitting in a developer's Downloads folder tried to make their AI coding agent install a knownmalicious npm package, security firm Forever Security said in a report published last week. The company caught the attempt on a real customer's machine and stopped the agent before any code ran. It could not determine how the file got into the folder. The file.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity🖋️ Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs 🖋️
An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's secrets into its GitHub Actions logs, which the attackers then download before deleting the runs. The attacks have succeeded in private repositories and GitHub Enterprise environments, according to an analysis by cloud security company Wiz. A GitHub safeguard that pauses.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity🖋️ Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations 🖋️
Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversaryinthemiddle AitM relay to capture signin sessions and then replay the stolen tokens to break into email accounts at 79 organizations. Huntress, which observed the activity between July 14 and September 22, 2026, said it detected 497 successful Microsoft 365 signin events across.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity🖋️ uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts 🖋️
A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working copies of the two apps, researcher Ovi found. It only reaches people who install one of these tampered copies, spread outside the official app stores, or who run WeChat inside the kit makers' own container app. The kit's Telegram part matches Baohuo, a backdoor that Doctor.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity