🛡 Cybersecurity & Privacy 🛡 - News
رفتن به کانال در Telegram
🗞 The finest daily news on cybersecurity and privacy. 🔔 Daily releases. 💻 Is your online life secure? 📩 lalilolalo.dev@gmail.com
نمایش بیشتر📈 تحلیل کانال تلگرام 🛡 Cybersecurity & Privacy 🛡 - News
کانال 🛡 Cybersecurity & Privacy 🛡 - News (@cibsecurity) در بخش زبانی انگلیسی بازیگری فعال است. در حال حاضر جامعه شامل 28 895 مشترک است و جایگاه 4 592 را در دسته فناوری و برنامه‌ها و رتبه 1 393 را در منطقه الولايات المتحدة الأمريكية دارد.
📊 شاخص‌های مخاطب و پویایی
از زمان ایجاد در невідомо، پروژه رشد سریعی داشته و 28 895 مشترک جذب کرده است.
بر اساس آخرین داده‌ها در تاریخ 26 اکتبر, 2026، کانال فعالیت پایداری دارد. در ۳۰ روز گذشته تغییر اعضا برابر 605 و در ۲۴ ساعت گذشته برابر 30 بوده و همچنان دسترسی گسترده‌ای حفظ شده است.
- وضعیت تأیید: تأیید نشده
- نرخ تعامل (ER): میانگین تعامل مخاطب 0.64% است و در ۲۴ ساعت نخست پس از انتشار، محتوا معمولاً 0.83% واکنش نسبت به کل مشترکان کسب می‌کند.
- دسترسی پست‌ها: هر پست به طور میانگین 186 بازدید دریافت می‌کند. در اولین روز معمولاً 239 بازدید جمع‌آوری می‌شود.
- واکنش‌ها و تعامل: مخاطبان به‌طور فعال حمایت می‌کنند؛ میانگین واکنش به هر پست 1 است.
- علایق موضوعی: محتوا بر موضوعات کلیدی مانند infosecurity, hacker, attack, cybersecurity, threat تمرکز دارد.
📝 توضیح و سیاست محتوایی
نویسنده این فضا را محل بیان دیدگاه‌های شخصی توصیف می‌کند:
“🗞 The finest daily news on cybersecurity and privacy.
🔔 Daily releases.
💻 Is your online life secure?
📩 lalilolalo.dev@gmail.com”
به لطف به‌روزرسانی‌های پرتکرار (آخرین داده در تاریخ 27 اکتبر, 2026)، کانال همواره به‌روز و دارای دسترسی بالاست. تحلیل‌ها نشان می‌دهد مخاطبان به‌طور فعال با محتوا تعامل دارند و آن را به نقطه اثرگذاری مهم در دسته فناوری و برنامه‌ها تبدیل کرده‌اند.
28 895
مشترکین
+3024 ساعت
+1887 روز
+60530 روز
آرشیو پست ها
🕵️♂️ So Many AI Security Benchmarks, But None Tell the Whole Story 🕵️♂️
Measuring AI model security gets complex fast a growing patchwork of benchmarks targets different variables in the equation, but none replace testing against your own code and workflows.
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity🕵️♂️ In-the-Wild Attack Abuses AI Agents' Trust in Markdown 🕵️♂️
A new AI agent prompt injection technique exploits how coding assistants consume local instruction files, blurring the line between text documents and executable actions.
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity🕵️♂️ Risks & Rewards: How AI Is Redefining the CISO's Role 🕵️♂️
Nvidia security executive Mark Weatherford says CISOs must help business leaders weigh AI's pros and cons, and ensure those deploying it own the risks.
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity🕵️♂️ Risks & Rewards: How AI Is Redefining the CISO's Role 🕵️♂️
Nvidia security executive Mark Weatherford says CISOs must help business leaders weigh AI's pros and cons, and ensure those deploying it own the risks.
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity🖋️ Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento 🖋️
An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a longrunning campaign active since July 2025. According to Dutch ecommerce security company Sansec, the activity is designed to add a small piece of code to the store's pages that, when visited by unsuspecting users, serves malicious JavaScript loader code through Magento CMS blocks. "When you.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity🕵️♂️ 'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets 🕵️♂️
An ongoing supply chain attack is harvesting credentials and sensitive data from thousands of developer repositories.
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity🖋️ Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware 🖋️
Cybersecurity researchers are calling attention to what they say is a "recurring social engineering pattern" across hundreds of cases in which threat actors use Microsoft Teams' external chat creation feature to conduct impersonation scams or to deliver malware. "A consistent pattern of attacker behavior has emerged across these incidents the use of the same throwaway tenants, the same 'IT.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity🖋️ PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw 🖋️
PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE2026111497, a flaw in the Brotli compression library that the packages include. The flaw can let an attacker corrupt memory and potentially run code. PHP says the flaw can be reached through the cURL extension when the extension decompresses HTTP responses automatically. cURL leaves that off by default, but.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity📢 Inside ISACA’s race to help its members stay current 📢
At the associations recent European conference, it was clear that security and governance professionals are having to move faster than ever just to keep up.
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity📔 CISA 2030 Sets Out ‘Aggressive, Anticipatory’ Cyber Defense Strategy for Critical Infrastructure 📔
CISAs new strategy, CISA 2030, will focus on rapid detection and response and resiliency of critical services ahead of passive defense.
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity🦅 Know How Cyble Brand Intelligence Can Help Stop ClickFix Campaigns in its Tracks 🦅
Booking.com's systems were never breached. Its name was. Storm1865 spent months borrowing Booking.com's identity to get into hotel computers, and every step of that borrowing left traces on the open internet. The open internet is exactly where Cyble Brand Intelligence Protection works. Walk through the campaign one step at a time, and at each step there is a point where it could have spotted the attacker, cut the attack short or limited the damage. What happened From December 2024, a group Microsoft tracks as Storm1865 posed as Booking.com to target hotel and hospitality staff across North America, Europe, Oceania and South and Southeast Asia. Microsoft Threat Intelligence published its findings on March 13, 2025, and said the campaign was still running as of February 2025. ...
📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity📔 PHP Publishes Mitigation Advice for New RCE Flaw 📔
PHP warns of critical RCE vulnerability CVE2026115560, but says limited exploit conditions mean most deployments are unlikely to be affected.
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity📔 Blue Initiative Offers Maritime Sector Dedicated Vulnerability Database 📔
Blue Initiative launches a new vulnerability database for IT and OT CVEs relevant to the maritime industry.
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity📔 Microsoft Issues Emergency Patch Update for Critical .NET Buffer Overflow Flaw 📔
Microsofts updates address two newly disclosed vulnerabilities in the .NET developer platform, as well as flaws not fully addressed in an earlier release.
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity📔 Linux Flaws Exposed Before Fixes as Root Exploit Goes Public 📔
Six Linux flaws were made public, including one with a working root exploit and no merged fix.
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity📔 Gheist Attackers Stumble in Attempt to Abuse GitHub Tokens 📔
A largescale GitHub campaign abused stolen access tokens to target 13,500 branches and repositories with secretstealing workflows.
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity🖋️ Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware 🖋️
A malicious instruction file sitting in a developer's Downloads folder tried to make their AI coding agent install a knownmalicious npm package, security firm Forever Security said in a report published last week. The company caught the attempt on a real customer's machine and stopped the agent before any code ran. It could not determine how the file got into the folder. The file.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity🖋️ Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs 🖋️
An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's secrets into its GitHub Actions logs, which the attackers then download before deleting the runs. The attacks have succeeded in private repositories and GitHub Enterprise environments, according to an analysis by cloud security company Wiz. A GitHub safeguard that pauses.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity🖋️ Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations 🖋️
Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversaryinthemiddle AitM relay to capture signin sessions and then replay the stolen tokens to break into email accounts at 79 organizations. Huntress, which observed the activity between July 14 and September 22, 2026, said it detected 497 successful Microsoft 365 signin events across.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity🖋️ uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts 🖋️
A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working copies of the two apps, researcher Ovi found. It only reaches people who install one of these tampered copies, spread outside the official app stores, or who run WeChat inside the kit makers' own container app. The kit's Telegram part matches Baohuo, a backdoor that Doctor.
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity