Cybersecurity

6032 readers

269 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Be respectful. Everyone should feel welcome here.
No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
No Ads / Spamming.
No pornography.

Community Rules

Idk, keep it semi-professional?
Nothing illegal. We're all ethical here.
Rules will be added/redefined as necessary.

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago

MODERATORS

kid@sh.itjust.works

Lanky_Pomegranate530@midwest.social

Only 7 percent of organizations recover data after paying a ransom in malware attacks (www.cybersecurity-insiders.com)

submitted 8 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

12 comments fedilink

Hackers get $886,250 for 49 zero-days at Pwn2Own Automotive 2025 (www.bleepingcomputer.com)

submitted 5 hours ago* (last edited 5 hours ago) by BrikoX@lemmy.zip to c/cybersecurity@sh.itjust.works

0 comments fedilink

The Pwn2Own Automotive 2025 hacking contest has ended with security researchers collecting $886,250 after exploiting 49 zero-days.

AIDS vaccine non-profit suffers hacker attack (cybernews.com)

submitted 8 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

2 comments fedilink

PayPal Fined $2 Million Fine For Violating Cybersecurity Regulations (gbhackers.com)

submitted 8 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

1 comments fedilink

Hundreds of fake Reddit sites push Lumma Stealer malware (www.bleepingcomputer.com)

submitted 8 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink

FBI: North Korean IT workers steal source code to extort employers (www.bleepingcomputer.com)

submitted 8 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink

U.S. CISA adds JQuery flaw to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

submitted 8 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

1 comments fedilink

ESXi Ransomware Attacks: Stealthy Persistence through SSH Tunneling (www.sygnia.co)

submitted 8 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink

84% of Healthcare Organizations Spotted a Cyberattack in the Late Year (www.darkreading.com)

submitted 8 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

1 comments fedilink

Entire Georgian country population exposed in a massive data leak (cybernews.com)

submitted 8 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink

Turkey | New Law Could Mean Prison for Reporting Data Leaks (www.tripwire.com)

submitted 8 hours ago by BrikoX@lemmy.zip to c/cybersecurity@sh.itjust.works

0 comments fedilink

Discover how Turkey's proposed cybersecurity law could stifle journalism, penalize reporting on data breaches, and impact cybersecurity.

DoD defense contractor Stark AeroSpace potentially breached by INC ransomware (cybernews.com)

submitted 8 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

1 comments fedilink

Akira Ransomware: A Shifting Force in the RaaS Domain (www.bitdefender.com)

submitted 8 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

1 comments fedilink

Under Trump, US Cyberdefense Loses Its Head (www.wired.com)

submitted 23 hours ago* (last edited 3 hours ago) by lindicks@lemmy.dbzer0.com to c/cybersecurity@sh.itjust.works

7 comments fedilink

Chinese hacks, rampant ransomware, and Donald Trump’s budget cuts all threaten US security. In an exit interview with WIRED, former CISA head Jen Easterly argues for her agency’s survival.

https://web.archive.org/web/20250124034155/https://www.wired.com/story/big-interview-jen-easterly-cisa-cybersecurity/

Tesla EV charger hacked twice on second day of Pwn2Own Tokyo (www.bleepingcomputer.com)

submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink

Researchers say new attack could take down the European power grid (arstechnica.com)

submitted 1 day ago by hellfire103@lemmy.ca to c/cybersecurity@sh.itjust.works

7 comments fedilink

MasterCard DNS Error Went Unnoticed for Years (krebsonsecurity.com)

submitted 1 day ago* (last edited 1 day ago) by BrikoX@lemmy.zip to c/cybersecurity@sh.itjust.works

0 comments fedilink

The payment card giant MasterCard just fixed a glaring error in its domain name server settings that could have allowed anyone to intercept or divert Internet traffic for the company by registering an unused domain name. The misconfiguration persisted for nearly five years until a security researcher spent $300 to register the domain and prevent it from being grabbed by cybercriminals.

Telegram captcha tricks you into running malicious PowerShell scripts (www.bleepingcomputer.com)

submitted 1 day ago* (last edited 1 day ago) by BrikoX@lemmy.zip to c/cybersecurity@sh.itjust.works

3 comments fedilink

Threat actors on X are exploiting the news around Ross Ulbricht to direct unsuspecting users to a Telegram channel that tricks them into run PowerShell code that infects them with malware.

New GhostGPT AI Chatbot Facilitates Malware Creation and Phishing (www.infosecurity-magazine.com)

submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink

Open-Source ClamAV Releases Security Update for Buffer Overflow Vulnerability - Patch Now (gbhackers.com)

submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink

SonicWall releases patches for suspected zero-day bug (www.theregister.com)

submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink

Cloudflare CDN flaw leaks user location data, even through secure chat apps (www.bleepingcomputer.com)

submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

1 comments fedilink

PowerSchool hacker claims they stole data of 62 million students (www.bleepingcomputer.com)

submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

2 comments fedilink

New backdoor discovered that specifically targets Juniper routers (cyberscoop.com)

submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

1 comments fedilink

Delhi Cyber Frauds Exposed: ₹49 Billion Siphoned Abroad (www.indiaweekly.biz)

submitted 1 day ago by IndiaWeekly@lemm.ee to c/cybersecurity@sh.itjust.works

0 comments fedilink

THE ENFORCEMENT DIRECTORATE Thursday said two Delhi-based “cyber criminals” siphoned off more than ₹49 billion (£460.28m) abroad by “misusing” special economic zone (SEZ) facilities......