#cybersecurity
#cybersecurity
[ follow ]
#malware
Marketing tech
fromThe Hacker News
21 hours agoNew Atomic macOS Stealer Campaign Exploits ClickFix to Target Apple Users
A new malware campaign uses social engineering to install Atomic macOS Stealer on macOS systems.
Cybercriminals impersonate a telecom provider to trick users into executing malicious scripts.
#voice-phishing
Growth hacking
fromThe Hacker News
2 days agoGoogle Exposes Vishing Group UNC6040 Targeting Salesforce with Fake Data Loader App
UNC6040 specializes in vishing campaigns targeting Salesforce for data theft.
The group uses social engineering tactics to impersonate IT support.
Attackers deploy a modified Salesforce Data Loader for unauthorized access.
The threats allow lateral movement within victims' networks to gather more data.
Growth hacking
fromThe Hacker News
2 days agoGoogle Exposes Vishing Group UNC6040 Targeting Salesforce with Fake Data Loader App
UNC6040 specializes in vishing campaigns targeting Salesforce for data theft.
The group uses social engineering tactics to impersonate IT support.
Attackers deploy a modified Salesforce Data Loader for unauthorized access.
The threats allow lateral movement within victims' networks to gather more data.
#cisco
Information security
fromTechzine Global
1 day agoCisco warns of vulnerability in cloud passwords
A critical flaw in Cisco ISE allows attackers to access sensitive data and modify system settings across cloud platforms.
Remote access to sensitive data is possible due to shared credentials in cloud installations. It scores a CVSS of 9.9.
Information security
fromThe Hacker News
2 days agoCritical Cisco ISE Auth Bypass Flaw Impacts Cloud Deployments on AWS, Azure, and OCI
Cisco patched a critical vulnerability in Identity Services Engine (ISE) that allows unauthenticated attackers to exploit shared static credentials.
The flaw, CVE-2025-20286, poses significant risk to cloud installations of Cisco ISE.
Information security
fromTechzine Global
1 day agoCisco warns of vulnerability in cloud passwords
A critical flaw in Cisco ISE allows attackers to access sensitive data and modify system settings across cloud platforms.
Remote access to sensitive data is possible due to shared credentials in cloud installations. It scores a CVSS of 9.9.
Information security
fromThe Hacker News
2 days agoCritical Cisco ISE Auth Bypass Flaw Impacts Cloud Deployments on AWS, Azure, and OCI
Cisco patched a critical vulnerability in Identity Services Engine (ISE) that allows unauthenticated attackers to exploit shared static credentials.
The flaw, CVE-2025-20286, poses significant risk to cloud installations of Cisco ISE.
fromHackernoon
3 weeks agoLLM Security: A Practical Overview of the Protective Measures Needed | HackerNoon
Since the emergence of Large Language Models, we've seen particular risks with machine learning models as they've become more accessible through interfaces and APIs. That led to discovering new ways to exploit the intended functioning of those models, hence new problems such as prompt injection.
Artificial intelligence
#privacy-rights
fromwww.theguardian.com
3 days agoFrance politics
Pornhub owner to suspend site in France in protest at new verification law
Aylo's adult sites will suspend operations in France to protest age verification laws that threaten privacy.
Age verification should be handled by operating systems instead of individual platforms.
fromNextgov.com
1 day agoSenate Homeland panel likely to approve Cairncross, Plankey for key cyber positions
His impressive combination of experience in both the public and private sectors, as well as his ability to navigate government, build coalitions, and implement strategic approaches to the challenges facing the United States make Sean situated particularly well to this role.
SF politics
#data-privacy
Privacy technologies
fromThe Hacker News
1 day agoPopular Chrome Extensions Leak API Keys, User Data via HTTP and Hardcoded Credentials
Popular Google Chrome extensions are exposing user data by transmitting it over unencrypted HTTP.
Certain Chrome extensions may be vulnerable to privacy and security threats.
Privacy technologies
fromThe Hacker News
1 day agoPopular Chrome Extensions Leak API Keys, User Data via HTTP and Hardcoded Credentials
Popular Google Chrome extensions are exposing user data by transmitting it over unencrypted HTTP.
Certain Chrome extensions may be vulnerable to privacy and security threats.
[ Load more ]