Cybersecurity

8775 readers

82 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Be respectful. Everyone should feel welcome here.
No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
No Ads / Spamming.
No pornography.

Community Rules

Idk, keep it semi-professional?
Nothing illegal. We're all ethical here.
Rules will be added/redefined as necessary.

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago

MODERATORS

kid@sh.itjust.works

Lanky_Pomegranate530@midwest.social

Gogs Git service zero-day exploited since Dec. 1 | SC Media (www.scworld.com)

submitted 7 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

1 comments fedilink

Intel, AMD Processors Affected by PCIe Vulnerabilities - SecurityWeek (www.securityweek.com)

submitted 8 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink

Notepad++ fixes flaw that let attackers push malicious update files (www.bleepingcomputer.com)

submitted 9 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

2 comments fedilink

UK fines LastPass over 2022 data breach impacting 1.6 million users (www.bleepingcomputer.com)

submitted 10 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

2 comments fedilink

Global agencies sound alarm as pro-Russia hacktivist groups intensify OT intrusions - Industrial Cyber (industrialcyber.co)

submitted 10 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink

“Cyber Tax” Warning as Two-Fifths of SMBs Raise Prices After Breach - Infosecurity Magazine (www.infosecurity-magazine.com)

submitted 8 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

1 comments fedilink

Hackers exploit Gladinet CentreStack cryptographic flaw in RCE attacks (www.bleepingcomputer.com)

submitted 9 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink

Nvidia Denies ‘Far-Fetched’ Claims as Chip-Smuggling Allegations Target China’s DeepSeek (www.techrepublic.com)

submitted 7 hours ago* (last edited 7 hours ago) by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink

Malicious VSCode Marketplace extensions hid trojan in fake PNG file (www.bleepingcomputer.com)

submitted 8 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink

New ConsentFix attack hijacks Microsoft accounts via Azure CLI (www.bleepingcomputer.com)

submitted 9 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink

Cyber attack on govt networks surged seven times post Operation Sindoor: NICSI MD - The Economic Times (economictimes.indiatimes.com)

submitted 8 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink

Hamas-Affiliated Ashen Lepus Targets Middle Eastern Diplomatic Entities With New AshTag Malware Suite (unit42.paloaltonetworks.com)

submitted 10 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink

GOLD SALEM tradecraft for deploying Warlock ransomware – Sophos News (news.sophos.com)

submitted 9 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink

Google Releases Critical Chrome Security Update to Address Zero-Days - Infosecurity Magazine (www.infosecurity-magazine.com)

submitted 10 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink

Over 10,000 Docker Hub images found leaking credentials, auth keys (www.bleepingcomputer.com)

submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

5 comments fedilink

Invisible IT is becoming the next workplace priority - Help Net Security (www.helpnetsecurity.com)

submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

3 comments fedilink

CISA: Pro-Russia Hacktivists Target US Critical Infrastructure (www.darkreading.com)

submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink

New DroidLock malware locks Android devices and demands a ransom (www.bleepingcomputer.com)

submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

5 comments fedilink

700+ self-hosted Git instances battered in 0-day attacks (RCE in Gogs) (www.theregister.com)

submitted 1 day ago by solrize@lemmy.ml to c/cybersecurity@sh.itjust.works

0 comments fedilink

Symlink bug in Gogs lets attacker commit a repo with a symlink pointing to a system file, and then Gogs will access the file under its own permissions I guess. Not good. Gogs should only run as an untrusted user though anyway.

Article doesn't say whether Gitea or Forgejo (both Gogs descendants) have the same bug.

Gogs, Gitea, and Forgejo are all Git forges (like Gitlab, basically a self-hosted Github-like web app) for those not familiar.

ClickFix Style Attack Uses Grok, ChatGPT for Malware Delivery (www.darkreading.com)

submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink