π‘ Cybersecurity & Privacy π‘ - News
ΠΡΠΊΡΡΡΡ Π² Telegram
π The finest daily news on cybersecurity and privacy. π Daily releases. π» Is your online life secure? π© lalilolalo.dev@gmail.com
ΠΠΎΠ»ΡΡΠ΅π ΠΠ½Π°Π»ΠΈΡΠΈΡΠ΅ΡΠΊΠΈΠΉ ΠΎΠ±Π·ΠΎΡ Telegram-ΠΊΠ°Π½Π°Π»Π° π‘ Cybersecurity & Privacy π‘ - News
ΠΠ°Π½Π°Π» π‘ Cybersecurity & Privacy π‘ - News (@cibsecurity) ΡΠ·ΡΠΊΠΎΠ²ΠΎΠ³ΠΎ ΡΠ΅Π³ΠΌΠ΅Π½ΡΠ° ΠΠ½Π³Π»ΠΈΠΉΡΠΊΠΈΠΉ ΡΠ²Π»ΡΠ΅ΡΡΡ Π°ΠΊΡΠΈΠ²Π½ΡΠΌ ΡΡΠ°ΡΡΠ½ΠΈΠΊΠΎΠΌ. Π‘Π΅ΠΉΡΠ°Ρ ΡΠΎΠΎΠ±ΡΠ΅ΡΡΠ²ΠΎ ΠΎΠ±ΡΠ΅Π΄ΠΈΠ½ΡΠ΅Ρ 27 704 ΠΏΠΎΠ΄ΠΏΠΈΡΡΠΈΠΊΠΎΠ², Π·Π°Π½ΠΈΠΌΠ°Ρ 4 749 ΠΌΠ΅ΡΡΠΎ Π² ΠΊΠ°ΡΠ΅Π³ΠΎΡΠΈΠΈ Π’Π΅Ρ Π½ΠΎΠ»ΠΎΠ³ΠΈΠΈ ΠΈ ΠΏΡΠΈΠ»ΠΎΠΆΠ΅Π½ΠΈΡ ΠΈ 1 374 ΠΌΠ΅ΡΡΠΎ Π² ΡΠ΅Π³ΠΈΠΎΠ½Π΅ Π‘Π¨Π.
π ΠΠΎΠΊΠ°Π·Π°ΡΠ΅Π»ΠΈ Π°ΡΠ΄ΠΈΡΠΎΡΠΈΠΈ ΠΈ Π΄ΠΈΠ½Π°ΠΌΠΈΠΊΠ°
Π‘ ΠΌΠΎΠΌΠ΅Π½ΡΠ° ΡΠΎΠ·Π΄Π°Π½ΠΈΡ Π½Π΅Π²ΡΠ΄ΠΎΠΌΠΎ ΠΏΡΠΎΠ΅ΠΊΡ Π΄Π΅ΠΌΠΎΠ½ΡΡΡΠΈΡΡΠ΅Ρ ΡΡΡΠ΅ΠΌΠΈΡΠ΅Π»ΡΠ½ΡΠΉ ΡΠΎΡΡ, ΡΠΎΠ±ΡΠ°Π² Π°ΡΠ΄ΠΈΡΠΎΡΠΈΡ ΠΈΠ· 27 704 ΠΏΠΎΠ΄ΠΏΠΈΡΡΠΈΠΊΠΎΠ².
Π‘ΠΎΠ³Π»Π°ΡΠ½ΠΎ ΠΏΠΎΡΠ»Π΅Π΄Π½ΠΈΠΌ Π΄Π°Π½Π½ΡΠΌ ΠΎΡ 25 Π°Π²Π³ΡΡΡΠ°, 2026, ΠΊΠ°Π½Π°Π» ΠΏΠΎΠΊΠ°Π·ΡΠ²Π°Π΅Ρ ΡΡΠ°Π±ΠΈΠ»ΡΠ½ΡΡ Π°ΠΊΡΠΈΠ²Π½ΠΎΡΡΡ. ΠΠ° ΠΏΠΎΡΠ»Π΅Π΄Π½ΠΈΠ΅ 30 Π΄Π½Π΅ΠΉ ΠΈΠ·ΠΌΠ΅Π½Π΅Π½ΠΈΠ΅ ΡΠΈΡΠ»Π° ΡΡΠ°ΡΡΠ½ΠΈΠΊΠΎΠ² ΡΠΎΡΡΠ°Π²ΠΈΠ»ΠΎ 491, Π° Π·Π° ΠΏΠΎΡΠ»Π΅Π΄Π½ΠΈΠ΅ 24 ΡΠ°ΡΠ° β 23, ΠΏΡΠΈ ΡΡΠΎΠΌ ΠΎΠ±ΡΠΈΠΉ ΠΎΡ Π²Π°Ρ ΠΎΡΡΠ°ΡΡΡΡ Π²ΡΡΠΎΠΊΠΈΠΌ.
- Π‘ΡΠ°ΡΡΡ Π²Π΅ΡΠΈΡΠΈΠΊΠ°ΡΠΈΠΈ: ΠΠ΅ Π²Π΅ΡΠΈΡΠΈΡΠΈΡΠΎΠ²Π°Π½
- Π£ΡΠΎΠ²Π΅Π½Ρ Π²ΠΎΠ²Π»Π΅ΡΡΠ½Π½ΠΎΡΡΠΈ (ER): Π‘ΡΠ΅Π΄Π½ΠΈΠΉ ΠΏΠΎΠΊΠ°Π·Π°ΡΠ΅Π»Ρ Π²ΠΎΠ²Π»Π΅ΡΡΠ½Π½ΠΎΡΡΠΈ Π°ΡΠ΄ΠΈΡΠΎΡΠΈΠΈ ΡΠΎΡΡΠ°Π²Π»ΡΠ΅Ρ 0.81%. Π ΠΏΠ΅ΡΠ²ΡΠ΅ 24 ΡΠ°ΡΠ° ΠΏΠΎΡΠ»Π΅ ΠΏΡΠ±Π»ΠΈΠΊΠ°ΡΠΈΠΈ ΠΊΠΎΠ½ΡΠ΅Π½Ρ ΠΎΠ±ΡΡΠ½ΠΎ Π½Π°Π±ΠΈΡΠ°Π΅Ρ 0.75% ΡΠ΅Π°ΠΊΡΠΈΠΉ ΠΎΡ ΠΎΠ±ΡΠ΅Π³ΠΎ ΡΠΈΡΠ»Π° ΠΏΠΎΠ΄ΠΏΠΈΡΡΠΈΠΊΠΎΠ².
- ΠΡ Π²Π°Ρ ΠΏΡΠ±Π»ΠΈΠΊΠ°ΡΠΈΠΉ: Π ΡΡΠ΅Π΄Π½Π΅ΠΌ ΠΊΠ°ΠΆΠ΄ΡΠΉ ΠΏΠΎΡΡ ΠΏΠΎΠ»ΡΡΠ°Π΅Ρ 224 ΠΏΡΠΎΡΠΌΠΎΡΡΠΎΠ². Π ΡΠ΅ΡΠ΅Π½ΠΈΠ΅ ΠΏΠ΅ΡΠ²ΡΡ ΡΡΡΠΎΠΊ ΠΏΡΠ±Π»ΠΈΠΊΠ°ΡΠΈΡ Π½Π°Π±ΠΈΡΠ°Π΅Ρ 207 ΠΏΡΠΎΡΠΌΠΎΡΡΠΎΠ².
- Π Π΅Π°ΠΊΡΠΈΠΈ ΠΈ Π²Π·Π°ΠΈΠΌΠΎΠ΄Π΅ΠΉΡΡΠ²ΠΈΡ: ΠΡΠ΄ΠΈΡΠΎΡΠΈΡ Π°ΠΊΡΠΈΠ²Π½ΠΎ ΠΏΠΎΠ΄Π΄Π΅ΡΠΆΠΈΠ²Π°Π΅Ρ ΠΊΠΎΠ½ΡΠ΅Π½Ρ: ΡΡΠ΅Π΄Π½Π΅Π΅ ΠΊΠΎΠ»ΠΈΡΠ΅ΡΡΠ²ΠΎ ΡΠ΅Π°ΠΊΡΠΈΠΉ Π½Π° ΠΎΠ΄ΠΈΠ½ ΠΏΠΎΡΡ β 1.
- Π’Π΅ΠΌΠ°ΡΠΈΡΠ΅ΡΠΊΠΈΠ΅ ΠΈΠ½ΡΠ΅ΡΠ΅ΡΡ: ΠΠΎΠ½ΡΠ΅Π½Ρ ΡΠΎΡΡΠ΅Π΄ΠΎΡΠΎΡΠ΅Π½ Π½Π° ΠΊΠ»ΡΡΠ΅Π²ΡΡ ΡΠ΅ΠΌΠ°Ρ , ΡΠ°ΠΊΠΈΡ ΠΊΠ°ΠΊ infosecurity, hacker, attack, cybersecurity, threat.
π ΠΠΏΠΈΡΠ°Π½ΠΈΠ΅ ΠΈ ΠΊΠΎΠ½ΡΠ΅Π½ΡΠ½Π°Ρ ΠΏΠΎΠ»ΠΈΡΠΈΠΊΠ°
ΠΠ²ΡΠΎΡ ΠΎΠΏΠΈΡΡΠ²Π°Π΅Ρ ΡΠ΅ΡΡΡΡ ΠΊΠ°ΠΊ ΠΏΠ»ΠΎΡΠ°Π΄ΠΊΡ Π΄Π»Ρ Π²ΡΡΠ°ΠΆΠ΅Π½ΠΈΡ ΡΡΠ±ΡΠ΅ΠΊΡΠΈΠ²Π½ΠΎΠ³ΠΎ ΠΌΠ½Π΅Π½ΠΈΡ:
βπ The finest daily news on cybersecurity and privacy.
π Daily releases.
π» Is your online life secure?
π© lalilolalo.dev@gmail.comβ
ΠΠ»Π°Π³ΠΎΠ΄Π°ΡΡ Π²ΡΡΠΎΠΊΠΎΠΉ ΡΠ°ΡΡΠΎΡΠ΅ ΠΎΠ±Π½ΠΎΠ²Π»Π΅Π½ΠΈΠΉ (ΠΏΠΎΡΠ»Π΅Π΄Π½ΠΈΠ΅ Π΄Π°Π½Π½ΡΠ΅ ΠΏΠΎΠ»ΡΡΠ΅Π½Ρ 26 Π°Π²Π³ΡΡΡΠ°, 2026) ΠΊΠ°Π½Π°Π» ΠΏΠΎΠ΄Π΄Π΅ΡΠΆΠΈΠ²Π°Π΅Ρ Π°ΠΊΡΡΠ°Π»ΡΠ½ΠΎΡΡΡ ΠΈ Π²ΡΡΠΎΠΊΠΈΠΉ ΡΡΠΎΠ²Π΅Π½Ρ ΠΎΡ Π²Π°ΡΠ° ΠΏΡΠ±Π»ΠΈΠΊΠ°ΡΠΈΠΉ. ΠΠ½Π°Π»ΠΈΡΠΈΠΊΠ° ΠΏΠΎΠΊΠ°Π·ΡΠ²Π°Π΅Ρ, ΡΡΠΎ Π°ΡΠ΄ΠΈΡΠΎΡΠΈΡ Π°ΠΊΡΠΈΠ²Π½ΠΎ Π²Π·Π°ΠΈΠΌΠΎΠ΄Π΅ΠΉΡΡΠ²ΡΠ΅Ρ Ρ ΠΊΠΎΠ½ΡΠ΅Π½ΡΠΎΠΌ, ΡΡΠΎ Π΄Π΅Π»Π°Π΅Ρ Π΅Π³ΠΎ Π²Π°ΠΆΠ½ΠΎΠΉ ΡΠΎΡΠΊΠΎΠΉ Π²Π»ΠΈΡΠ½ΠΈΡ Π² ΠΊΠ°ΡΠ΅Π³ΠΎΡΠΈΠΈ Π’Π΅Ρ Π½ΠΎΠ»ΠΎΠ³ΠΈΠΈ ΠΈ ΠΏΡΠΈΠ»ΠΎΠΆΠ΅Π½ΠΈΡ.
27 704
ΠΠΎΠ΄ΠΏΠΈΡΡΠΈΠΊΠΈ
+2324 ΡΠ°ΡΠ°
+917 Π΄Π½Π΅ΠΉ
+49130 Π΄Π΅Π½Ρ
ΠΡΡ
ΠΈΠ² ΠΏΠΎΡΡΠΎΠ²
π¦Ώ Google Tightens Android Sideloading: Unverified Apps Now Face a 24-Hour Wait π¦Ώ
Googles new Android verification flow adds a 24hour wait for apps from unverified developers as broader identity checks approach. The post Google Tightens Android Sideloading Unverified Apps Now Face a 24Hour Wait appeared first on TechRepublic.
π Read more.
π Via "Tech Republic"
----------
ποΈ Seen on @cibsecurityπ¦
Endpoint Blind Spots: The 5 Places Ransomware Hides Before It Detonates π¦
Ransomware rarely appears out of nowhere. Before encryption, extortion, or data theft begins, attackers often spend time establishing access, stealing credentials, moving laterally, and identifying valuable systems. These activities occur during the ransomware preexecution phase, when malicious activity may be difficult to distinguish from legitimate administration. For security teams, understanding ransomware attack vectors, ransomware initial access methods, and how ransomware evades detection is critical. Endpoint security blind spots can give attackers the time they need to prepare an attack without triggering an obvious alarm. Here are five areas where ransomware activity can remain hidden before detonation. 1. Remote Access Tools A Favorite Ransomware Attack Vector V...
π Read more.
π Via "CYBLE"
----------
ποΈ Seen on @cibsecurityπ How a Credit Unionβs IT Team Achieved 24Γ7 Security Coverage and Discovered a Hidden Firewall Gap π
The post How a Credit Unions IT Team Achieved 247 Security Coverage and Discovered a Hidden Firewall Gap appeared first on UnderDefense.
π Read more.
π Via "UnderDefense"
----------
ποΈ Seen on @cibsecurityπ AI SOC Scalability and Total Cost of Ownership: The Comparison Framework Buyers Use Before a 3-Year Commitment π
Discover the real 3year cost of an agentic SOC vs an inhouse build. Learn the framework security leaders use before signing a long contract. The post AI SOC Scalability and Total Cost of Ownership The Comparison Framework Buyers Use Before a 3Year Commitment appeared first on UnderDefense.
π Read more.
π Via "UnderDefense"
----------
ποΈ Seen on @cibsecurityπ What an External Penetration Test Found: Unauthenticated Root and a Live Botnet on a UniFi OS Appliance π
Discover how to score 3to5 agentic AI SOC platforms on depth, autonomy, and lockin. A practitioner framework built for security leaders. The post What an External Penetration Test Found Unauthenticated Root and a Live Botnet on a UniFi OS Appliance appeared first on UnderDefense.
π Read more.
π Via "UnderDefense"
----------
ποΈ Seen on @cibsecurityπ 9 Best AI SOC for Healthcare With HIPAA-Compliant Threat Detection Across Cloud and On-Premises π
Compare the 9 best AI SOC platforms for healthcare with HIPAAcompliant threat detection across cloud and onpremises. Evaluate vendors before you buy. The post 9 Best AI SOC for Healthcare With HIPAACompliant Threat Detection Across Cloud and OnPremises appeared first on UnderDefense.
π Read more.
π Via "UnderDefense"
----------
ποΈ Seen on @cibsecurityπ Cybersecurity Job Ads Requiring AI Skills Double π
An analysis by the AI Workforce Consortium found that technical cybersecurity jobs are becoming more strategic due to the influence of AI.
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurityπ New Agent Tesla Malware Variant Boosts Evasion Capabilities π
An Agent Tesla v4 malware campaign used novel emojibased code obfuscation to evade detection, KnowBe4 has revealed.
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurityπ North Korean Hackers Tied to Rust Supply Chain Attack π
Cybersecurity researchers have linked a malicious backdoor in compromised Rust packages to previous North Korean supply chain attacks.
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurityποΈ Microsoft Patches Severe Entra ID Flaw (CVSS 10.0) Allowing Remote Code Execution ποΈ
Update The story was updated after publication to note that the vulnerability has not been exploited. Although the security bulletin originally marked the "Exploited" field under the Exploitability Assessment table as "Yes," on August 21, 2026, Microsoft corrected the "Exploited" status to "No" after The Hacker News contacted the company for comment. It also noted, "this vulnerability was not.
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurityποΈ GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure ποΈ
A newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchTowr. The vulnerability in question is CVE202619478 CVSS score 9.4, a case of code injection that allows an unauthenticated attacker to modify or delete publicly accessible GitLab projects and rewrite their data under certain conditions without requiring.
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurityποΈ Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0 ποΈ
Cisco has published another round of security updates for Crosswork platforms and Secure Workload Software as part of a continued comprehensive internal security review. Four of the security vulnerabilities affect Crosswork Data Gateway, Crosswork Network Controller, and Crosswork Planning, regardless of the device configuration. A brief description of each of the flaws is below .
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurityποΈ Wazuh and AI For Enhanced SOC Workflows ποΈ
Artificial Intelligence AI has become one of this decade's defining technologies. From healthcare and finance to manufacturing and education, organizations increasingly rely on AI to automate repetitive tasks, uncover patterns hidden within large datasets, and support faster decisionmaking. Cybersecurity has experienced a similar transformation. While attackers employ AI to automate.
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurityποΈ Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet ποΈ
Cybersecurity researchers have flagged a new malware family that's specifically designed to infect Androidbased vehicle head unit firmware developed by DoFun. Kaspersky, which discovered the threat in June 2026, said the end goal of the malware is to serve a multistage downloader to enable ad fraud and creation of a proxy botnet. "The malware spread through the builtin updaters of.
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurityποΈ Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot ποΈ
Check Point Research has disclosed a technique that uses Microsoft Defender's own legitimately signed boottime remediation driver to perform arbitrary kernellevel file and registry operations on Windows systems ranging from Windows 7 through Windows 11 25H2, with no software flaw exploited and no driver imported from outside the machine. The driver, BTR.sys Boot Time Removal Tool, is a.
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurityποΈ 14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2 ποΈ
Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as working calendar and streak utilities but are engineered to stealthily deliver an artificial intelligence AIpowered Linux implant dubbed RedC2 4.0. "When the module loads, itβ―locatesβ―the bundled binary, marks it executable, and launches it as a detached background process," TrendAI, Trend Micro's.
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurityπ΅οΈββοΈ OpenAI Adds Controls That Should've Been There Already π΅οΈββοΈ
The new AI security controls follow the Hugging Face incident last month, though many of these additions perhaps should have been in place prior to the frontier models escaping.
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurityπ΅οΈββοΈ Calling on Cyber Pros to Help Defend City Hall π΅οΈββοΈ
Government agencies with smaller budgets need support and here's how you can help.
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurityπ΅οΈββοΈ OWASP Flags Top AI Skill Risks in New Security Blueprint π΅οΈββοΈ
The Open Worldwide Application Security Project has a brandnew top 10 security list tailored for the modern era, and it debuts a Universal Skill Format to add consistency and security to the AI addons.
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurityπ’ Be careful who you talk to at conferences: Security researchers claim they were targeted by cyber criminals after DEF CON event π’
Scammers contacted conference attendees with a boobytrapped Google Doc designed to look like a routine postevent contact.
π Read more.
π Via "ITPro"
----------
ποΈ Seen on @cibsecurity