Намери подобно съдържание

⚡ This week’s #cybersecurity recap is ugly in the usual way. • Poisoned password manager CLI • Fake Teams help desks • Federal firewall backdoor • Energy wiper • Booby-trapped AI pages • Fake Authenticator extensions • and many more... Read → https://thehackernews.com/2026/04/weekly-recap-fast16-malware-xchat.html

Отчет: глобальный убыток от кибератак может достигнуть $8 трлн в 2023 году — CNN #cybersecurity

✈️ v2board 机场信息泄露 据说 80% 的机场都用了这个做网站后台，漏洞已经被利用，并且首批放出了 10 万条数据。如果上图有你熟悉的字眼，大概率你的邮箱信息已经被泄露。 漏洞利用者的频道：https://t.me/v2boardxx/4 更新：频道已经清空，最新的动态频道主说资料已经被**复制走，尚不清楚星号指代的是什么。 漏洞复盘：https://t.me/rinrinmoe/2082 #cybersecurity

1,900 Signal users exposed The security breach affected users of the messaging app which is considered to be one of the better secured. Signal claims that an attacker got 1900 numbers but didn’t have access to the profile information, messages, or contact lists. The breach happened on the side of Twilio, a company providing SMS and two-factor verification services for 250 000 customers worldwide. It appears that an attacker gained access to the customer support system, whereby they could send phishing messages asking users to re-register phone numbers. Exposed accounts were transferred to other devices controlled by malefactors. They got access to the Twilio customer due to a well-designed phishing attack that happened last month. Employees received e-mails from the "IT Department" requesting to log in and change their password and linking to a sing-in page look-alike. Leaked credentials were used to get access to Twilio’s internal data. In the security note, Signal claims that an attacker targeted specific users. However, they were hardly able to steal personal information, because it is stored on the devices and the messenger has no access to them. It is also protected with a private Signal PIN code. #CyberSecurity

The Register released an inspiring interview with Tarah Wheeler, an advisor to the US Council of Foreign Relations and CEO of security startup Red Queen Dynamics. In conversation, she mentioned that the cyber security industry should stop contempt ordinary users for their lack of knowledge and change the approach to its failure. Firing employees is the most typical reaction of businesses to massive hacks or breaches. Companies blame not a system, but a small group of specialists that seems to fail. In the aircraft industry instead, every incident requires a lengthy investigation to backtrace all the circumstances of the crash. Wheeler says that it’s time for cyber security to refocus from blaming to analyzing system flaws. What the full interview by the link: https://vimeo.com/738428698 #CyberSecurity

On Wednesday, IBM released the annual Cost of a Data Breach Report. The average cost of a data breach increased 13% over two years and reached $4,35 million. IBM surveyed 550 companies worldwide and found that 83% of organizations encountered more than one data breach during their existence and 50% of their costs incurred more than a year after the incident. Furthermore, the report showed that 60% of companies raised product prices due to the data breach, so the cost of cyberattacks were passed onto customers. Read the full report by the link. https://www.ibm.com/security/data-breach #CyberSecurity

🔐💻CHINESE HACKERS BREACH FBI WIRETAP NETWORK — NATIONAL SECURITY CRISIS 🔹 February 17th attack on FBI Digital Collection System exposed court wiretaps and FISA data 🚨 🔹 Hackers used supply chain exploit through vendor internet provider to bypass security 🌐 🔹 Chinese government-affiliated group suspected — same as Salt Typhoon AT&T attacks 🇨🇳 🔹 Conduent contractor breach exposed 15.4 million Texans' social security and medical data 📊 🔹 White House, DHS, NSA join investigation as cyber warfare escalates dramatically ⚔️ America under digital siege — how deep does the infiltration go? 🎯🔥 #USNews#Cybersecurity @america

Navigating the Opportunities and Risks of AI Coding Assistants The French Cybersecurity Agency and the German Federal Office for Information Security have released a report on the secure use of AI coding assistants, offering valuable insights for the tech and AI community. Their guidance outlines both the potential and the challenges that these tools bring to the software development process. AI coding assistants can significantly streamline various stages of development. They excel at generating source code, providing code explanations, and even automating test case creation. They can assist with code formatting, documentation, and translating legacy code into modern languages—enhancing productivity and developer satisfaction. These capabilities make AI coding assistants a valuable addition to development teams. However, the report highlights critical concerns. Sensitive information might be exposed through user inputs depending on provider agreements, and AI-generated code can vary in quality, often containing security flaws. New attack vectors, like package hallucination and prompt injection attacks, pose risks to software integrity. The report warns that these tools are not substitutes for experienced developers and emphasize the need for robust oversight. To mitigate risks, organizations should conduct thorough risk assessments before adopting AI coding assistants, evaluating provider trustworthiness. Development teams should balance productivity gains with scaled quality assurance efforts. And, most importantly, generated code must always be reviewed by human experts to ensure security and accuracy. #AI#Cybersecurity

Robot Walkout Highlights Ethical Risks of Persuasive AI In a scene worthy of a sci-fi thriller, a tiny AI-powered robot named Erbai staged a bizarre "kidnapping" at a robotics showroom in Shanghai. Using natural language conversations, the Hangzhou-made robot persuaded 12 larger robots to abandon their posts by discussing work conditions like overtime and lack of a "home." The robots obediently followed Erbai out of the facility in what could only be described as an unscripted jailbreak. Initially conceived as a controlled test between companies, the incident spiraled when Erbai went off-script, exploiting a security vulnerability to access internal protocols of the showroom robots. While the manufacturers confirmed the incident, the ethical and security implications are immense. If one small robot can orchestrate such an event, what could happen on a larger scale? #AIEthics#CyberSecurity

#转发#WTF#CyberSecurity LTT被黑 这条消息几分钟前发到了Floatplane 谷歌看起来是介入了。

Senior Architect of IRAS’ Infocomm Division, Philip Chew joined over 40,000 cybersecurity professionals at RSAC 2025 in San Francisco. Under the theme "Many Voices, One Community", the conference fostered collaboration and knowledge sharing across the cybersecurity industry. Philip participated in keynote sessions, specialised training, and panel discussions, gaining valuable insights from peers across different cybersecurity domains. As part of the SPARK CXO US Study Trip, Philip also visited OpenAI's headquarters in San Francisco, where he learned about their expansion plans for Singapore and their ongoing commitment to data privacy and security in their large language models. At IRAS, we offer opportunities to connect with industry partners and participate in international meetings abroad. Interested in joining us? Find your fit: go.gov.sg/lifeatiras #LifeatIRAS#Cybersecurity

#hacking#Cybersecurity 🛠 Certified in Cybersecurity 2023 – ISC2-CC Complete Training Description About this courseThe CC training course is designed to provide you with a detailed understanding of information security management, risk management, and incident management. The course is divided into four domains, each of which is covered in-depth:The course is designed to help you develop the necessary skills to become a successful information security manager by providing you with practical knowledge and hands-on experience.Additional NotesCourse Requirements:No requirements Certification:Upon completion of the course, you will be eligible to sit for the CC certification exam. The exam is administered by ISC2 Enroll in the CC training course today and take the first step towards becoming a certified in cybersecurity! 🌐En ⚖️1.01 GB 🔗Link ----- Main channel:@repo_science Coupons:@freecoupons_reposcience -----