Cybersecurity

6869 readers
53 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago
MODERATORS
kid@sh.itjust.works
Lanky_Pomegranate530@midwest.social
listing: all - local
1
10
Massive data leak: Ukrainian IDs, other documents exposed by years of cyber negligence (kyivindependent.com)
submitted 1 hour ago by PhilipTheBucket@ponder.cat to c/cybersecurity@sh.itjust.works
0 comments fedilink
2
14
Canada launches breach risk self-assessment online tool - Help Net Security (www.helpnetsecurity.com)
submitted 9 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
3
7
Hackers abuse WordPress MU-Plugins to hide malicious code (www.bleepingcomputer.com)
submitted 9 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
4
6
Sam’s Club Investigates Alleged Cl0p Ransomware Breach (securityaffairs.com)
submitted 9 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
5
6
Hacker Leaks Samsung Customer Data (www.securityweek.com)
submitted 9 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
6
4
Phishing platform 'Lucid' behind wave of iOS, Android SMS attacks (www.bleepingcomputer.com)
submitted 9 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
7
4
CVE-2025-22398: Dell Unity Hit by 9.8 CVSS Root-Level Command Injection Flaw (securityonline.info)
submitted 9 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
8
4
Fresh Grandoreiro Banking Trojan Campaigns Target Latin America, Europe (www.securityweek.com)
submitted 9 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
9
3
China-Linked Earth Alux Uses VARGEIT and COBEACON in Multi-Stage Cyber Intrusions (thehackernews.com)
submitted 9 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
10
3
Check Point Acknowledges Data Breach, Claims Information is 'Old (cybersecuritynews.com)
submitted 9 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
11
3
CISA reveals new malware variant used on compromised Ivanti Connect Secure devices - Help Net Security (www.helpnetsecurity.com)
submitted 9 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
12
30
Oracle attempt to hide serious cybersecurity incident from customers in Oracle SaaS service (doublepulsar.com)
submitted 1 day ago* (last edited 1 day ago) by BrikoX@lemmy.zip to c/cybersecurity@sh.itjust.works
1 comments fedilink
 
 

Being a provider of cloud SaaS (Software-as-a-service) solutions requires certain cybersecurity responsibilities — including being transparent and open. The moment where this is tested at Oracle has arrived, as they have a serious cybersecurity incident playing out in a service they manage for customers.

13
20
Oracle Still Denies Breach as Researchers Persist (www.darkreading.com)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
14
9
Fake Zoom, Real Ransom: Nine-Day Malware Intrusion Ends with BlackSuit Ransomware Blast (securityonline.info)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
15
7
GPU-Powered Evasion: Unpacking the Sophisticated CoffeeLoader Malware (securityonline.info)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
1 comments fedilink
16
7
Was Check Point hacked? Security firm calls ransom demands old news (cybernews.com)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
17
4
PhaaS actor uses DoH and DNS MX to dynamically distribute phishing (blogs.infoblox.com)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
18
3
Analysis of Konni RAT: Stealth, Persistence, and Anti-Analysis Techniques - CYFIRMA (www.cyfirma.com)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
19
56
Privacy disaster as LGBTQ+ and BDSM dating apps leak private photos. (cybernews.com)
submitted 2 days ago by cyrano@lemmy.dbzer0.com to c/cybersecurity@sh.itjust.works
0 comments fedilink
 
 

cross-posted from: https://programming.dev/post/27765876

BDSM, LGBTQ+, and sugar dating apps have been found exposing users' private images, with some of them even leaking photos shared in private messages.

20
210
Twitter (X) Hit by Data Leak of 2.8 Billion Users; Allegedly an Insider Job (hackread.com)
submitted 3 days ago by cyrano@lemmy.dbzer0.com to c/cybersecurity@sh.itjust.works
5 comments fedilink
 
 

cross-posted from: https://lemmy.dbzer0.com/post/41036290

21
7
New Android Trojan Crocodilus Abuses Accessibility to Steal Banking and Crypto Credentials (thehackernews.com)
submitted 2 days ago by AmbiguousProps@lemmy.today to c/cybersecurity@sh.itjust.works
0 comments fedilink
 
 

Once installed and launched, the app requests permission to Android's accessibility services, after which contact is established with a remote server to receive further instructions, the list of financial applications to be targeted, and the HTML overlays to be used to steal credentials. Crocodilus is also capable of targeting cryptocurrency wallets with an overlay that, instead of serving a fake login page to capture login information, shows an alert message urging victims to backup their seed phrases within 12, or else risk losing access to their wallets.

Archive link: https://archive.is/idZEc

22
12
MAC Address Randomization in Mobile Devices and When it Fails (arxiv.org)
submitted 2 days ago* (last edited 2 days ago) by higgsboson@dubvee.org to c/cybersecurity@sh.itjust.works
0 comments fedilink
 
 

I was annoyed by MAC Randomization on my own network and wondered whether there are any effective attacks to re-id devices.

Sure enough.

See also (van Hoef is also the brains behind several of the WPA attacks.)

https://papers.mathyvanhoef.com/wisec2016.pdf [PDF]

23
13
Blasting Past WebP - An analysis of the NSO BLASTPASS iMessage exploit (googleprojectzero.blogspot.com)
submitted 4 days ago by cantankerous_cashew@lemmy.world to c/cybersecurity@sh.itjust.works
1 comments fedilink
24
14
Malicious npm Package Modifies Local 'ethers' Library to Launch Reverse Shell Attacks (thehackernews.com)
submitted 5 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
25
9
Oracle customers confirm data stolen in alleged cloud breach is valid (www.bleepingcomputer.com)
submitted 5 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
view more: next ›