π‘ Cybersecurity & Privacy π‘ - News
Open in Telegram
π The finest daily news on cybersecurity and privacy. π Daily releases. π» Is your online life secure? π© lalilolalo.dev@gmail.com
Show moreπ Analytical overview of Telegram channel π‘ Cybersecurity & Privacy π‘ - News
Channel π‘ Cybersecurity & Privacy π‘ - News (@cibsecurity) in the English language segment is an active participant. Currently, the community unites 28 895 subscribers, ranking 4 592 in the Technologies & Applications category and 1 393 in the USA region.
π Audience metrics and dynamics
Since its creation on Π½Π΅Π²ΡΠ΄ΠΎΠΌΠΎ, the project has demonstrated rapid growth, gathering an audience of 28 895 subscribers.
According to the latest data from 26 October, 2026, the channel demonstrates stable activity. Although there has been a change in the number of participants by 605 over the last 30 days and by 30 over the last 24 hours, overall reach remains high.
- Verification status: Not verified
- Engagement rate (ER): The average audience engagement rate is 0.64%. Within the first 24 hours after publication, content typically collects 0.83% reactions from the total number of subscribers.
- Post reach: On average, each post receives 186 views. Within the first day, a publication typically gains 239 views.
- Reactions and interaction: The audience actively supports content: the average number of reactions per post is 1.
- Thematic interests: Content is focused on key topics such as infosecurity, hacker, attack, cybersecurity, threat.
π Description and content policy
The author describes the resource as a platform for expressing subjective opinions:
βπ The finest daily news on cybersecurity and privacy.
π Daily releases.
π» Is your online life secure?
π© lalilolalo.dev@gmail.comβ
Thanks to the high frequency of updates (latest data received on 27 October, 2026), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.
28 895
Subscribers
+3024 hours
+1887 days
+60530 days
Posts Archive
π΅οΈββοΈ So Many AI Security Benchmarks, But None Tell the Whole Story π΅οΈββοΈ
Measuring AI model security gets complex fast a growing patchwork of benchmarks targets different variables in the equation, but none replace testing against your own code and workflows.
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurityπ΅οΈββοΈ In-the-Wild Attack Abuses AI Agents' Trust in Markdown π΅οΈββοΈ
A new AI agent prompt injection technique exploits how coding assistants consume local instruction files, blurring the line between text documents and executable actions.
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurityπ΅οΈββοΈ Risks & Rewards: How AI Is Redefining the CISO's Role π΅οΈββοΈ
Nvidia security executive Mark Weatherford says CISOs must help business leaders weigh AI's pros and cons, and ensure those deploying it own the risks.
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurityπ΅οΈββοΈ Risks & Rewards: How AI Is Redefining the CISO's Role π΅οΈββοΈ
Nvidia security executive Mark Weatherford says CISOs must help business leaders weigh AI's pros and cons, and ensure those deploying it own the risks.
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurityποΈ Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento ποΈ
An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a longrunning campaign active since July 2025. According to Dutch ecommerce security company Sansec, the activity is designed to add a small piece of code to the store's pages that, when visited by unsuspecting users, serves malicious JavaScript loader code through Magento CMS blocks. "When you.
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurityπ΅οΈββοΈ 'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets π΅οΈββοΈ
An ongoing supply chain attack is harvesting credentials and sensitive data from thousands of developer repositories.
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurityποΈ Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware ποΈ
Cybersecurity researchers are calling attention to what they say is a "recurring social engineering pattern" across hundreds of cases in which threat actors use Microsoft Teams' external chat creation feature to conduct impersonation scams or to deliver malware. "A consistent pattern of attacker behavior has emerged across these incidents the use of the same throwaway tenants, the same 'IT.
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurityποΈ PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw ποΈ
PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE2026111497, a flaw in the Brotli compression library that the packages include. The flaw can let an attacker corrupt memory and potentially run code. PHP says the flaw can be reached through the cURL extension when the extension decompresses HTTP responses automatically. cURL leaves that off by default, but.
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurityπ’ Inside ISACAβs race to help its members stay current π’
At the associations recent European conference, it was clear that security and governance professionals are having to move faster than ever just to keep up.
π Read more.
π Via "ITPro"
----------
ποΈ Seen on @cibsecurityπ CISA 2030 Sets Out βAggressive, Anticipatoryβ Cyber Defense Strategy for Critical Infrastructure π
CISAs new strategy, CISA 2030, will focus on rapid detection and response and resiliency of critical services ahead of passive defense.
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurityπ¦
Know How Cyble Brand Intelligence Can Help Stop ClickFix Campaigns in its Tracks π¦
Booking.com's systems were never breached. Its name was. Storm1865 spent months borrowing Booking.com's identity to get into hotel computers, and every step of that borrowing left traces on the open internet. The open internet is exactly where Cyble Brand Intelligence Protection works. Walk through the campaign one step at a time, and at each step there is a point where it could have spotted the attacker, cut the attack short or limited the damage. What happened From December 2024, a group Microsoft tracks as Storm1865 posed as Booking.com to target hotel and hospitality staff across North America, Europe, Oceania and South and Southeast Asia. Microsoft Threat Intelligence published its findings on March 13, 2025, and said the campaign was still running as of February 2025. ...
π Read more.
π Via "CYBLE"
----------
ποΈ Seen on @cibsecurityπ PHP Publishes Mitigation Advice for New RCE Flaw π
PHP warns of critical RCE vulnerability CVE2026115560, but says limited exploit conditions mean most deployments are unlikely to be affected.
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurityπ Blue Initiative Offers Maritime Sector Dedicated Vulnerability Database π
Blue Initiative launches a new vulnerability database for IT and OT CVEs relevant to the maritime industry.
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurityπ Microsoft Issues Emergency Patch Update for Critical .NET Buffer Overflow Flaw π
Microsofts updates address two newly disclosed vulnerabilities in the .NET developer platform, as well as flaws not fully addressed in an earlier release.
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurityπ Linux Flaws Exposed Before Fixes as Root Exploit Goes Public π
Six Linux flaws were made public, including one with a working root exploit and no merged fix.
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurityπ Gheist Attackers Stumble in Attempt to Abuse GitHub Tokens π
A largescale GitHub campaign abused stolen access tokens to target 13,500 branches and repositories with secretstealing workflows.
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurityποΈ Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware ποΈ
A malicious instruction file sitting in a developer's Downloads folder tried to make their AI coding agent install a knownmalicious npm package, security firm Forever Security said in a report published last week. The company caught the attempt on a real customer's machine and stopped the agent before any code ran. It could not determine how the file got into the folder. The file.
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurityποΈ Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs ποΈ
An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's secrets into its GitHub Actions logs, which the attackers then download before deleting the runs. The attacks have succeeded in private repositories and GitHub Enterprise environments, according to an analysis by cloud security company Wiz. A GitHub safeguard that pauses.
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurityποΈ Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations ποΈ
Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversaryinthemiddle AitM relay to capture signin sessions and then replay the stolen tokens to break into email accounts at 79 organizations. Huntress, which observed the activity between July 14 and September 22, 2026, said it detected 497 successful Microsoft 365 signin events across.
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurityποΈ uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts ποΈ
A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working copies of the two apps, researcher Ovi found. It only reaches people who install one of these tampered copies, spread outside the official app stores, or who run WeChat inside the kit makers' own container app. The kit's Telegram part matches Baohuo, a backdoor that Doctor.
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity