Sicurezza
Cybersecurity, ransomware, privacy
- inSicurezzaDigitale.com — Cybersecurity in italiano IT
- SecureBulletin — Cybersecurity news in English EN
- Ransomfeed Daily News — Daily cybersecurity news EN
2.779 voci in archivio · mostrate 226–250 .
105 Minutes of Stolen Access Turned a Trusted npm Package Into a Multi-Stage Malware Loader
Attackers hijacked a maintainer account for just 105 minutes to slip a hidden loader into a popular npm package, abusing legitimate publishing infrastructure so the poisoned release carried valid prov…
Maximum-Severity Flaw in D-Link Routers Lets Attackers Take Over Devices With No Login Required
A stack-based buffer overflow in D-Link's DIR-822A router, rated a perfect CVSS 10.0, can be triggered remotely with no authentication and no user interaction, and a working public exploit is already…
Suspected Chinese-Speaking Hackers Chain Two WordPress Bugs to Loot a Government Database
A likely Chinese-speaking threat actor strung together two WordPress vulnerabilities to breach at least 49 organizations in 29 countries, with one Western government agency losing 18,566 records, incl…
Check Point Confirms In-the-Wild Attacks on Critical Management Server Zero-Day
A critical, pre-authentication flaw in Check Point's Management Server software was exploited in the wild weeks before a fix existed, letting attackers upload and run code on systems that control an o…
Linux KVM/arm64 Flaw Breaks VM Isolation and Exposes Host Memory
CVE-2026-89775 can leave stale writable mappings available to an ARM64 guest when KVM nested virtualization is enabled, creating a path to host-memory access and VM escape. Operators should deploy dis…
Low-Cost AI Agent Campaign Steals 600,000 Payment Cards From Retailers
Researchers reconstructed a campaign in which open-source AI agents autonomously scanned and exploited online retailers for an average reported cost of $25.46 per completed scan. The operation alleged…
DarkMe RAT Campaign Uses Phishing and MSI Loaders to Deploy VB6 Infostealer
A new DarkMe remote-access Trojan campaign has shifted from the exploit-led delivery associated with Water Hydra to straightforward phishing. Lures disguised as image links served executable .PIF file…
Critical WordPress Template Inclusion Flaw Enables Potential RCE
WordPress released version 7.1.2 to fix critical vulnerability CVE-2026-87902 / GHSA-7hp8-65ch-5whp, an improper filename-validation flaw (CWE-98) in getpagetemplate(). Under specific server and activ…
ShinyHunters Claims FBI Breach Exposed Personnel and Applicant Data
ShinyHunters claims it exploited an alleged pre-authentication Oracle PeopleSoft zero-day for remote code execution against an FBI jobs webpage, defaced the site, and pivoted into FBI-managed AWS GovC…
SA is under cybersiege — and the situation will only get worse - Daily Maverick
. Fonte: https://news.google.com/rss/articles/CBMiswFBVV95cUxPMUFmUkVJQnFzT2I3aXduLVFFMUJVQ3lSVEtXR3dfbzFQQnZObFZuZXdnbHlDcTJ3eGx0cFA5UUVGTUl0aV9haVN6a2N6WnE4bnlTN0ZUc1hiV3RfMG5qZ2xuanhsM2tjRnpFcTZZZ2…
Ireland among five EU countries 'targeted' by Chinese text-scam group - Irish Examiner
. Fonte: https://news.google.com/rss/articles/CBMiY0FVX3lxTE9OWUtlVkxVajhmOUJma1dCV1N6X0RZNnF5b1ZOSVJDSmtwLXNqYkxhaDNucWdGTXdUQUFGeEl0ZWx2Qm9yak1tWHRsY0NjbFBMdWFaM3cwUUZoMzZWQVduMUpwMA?oc=5
Google si infiltra in TeamPCP: la talpa di Mandiant che ha smontato dall’interno la gang del supply chain
Un analista Mandiant si è infiltrato per mesi nella chat privata di TeamPCP, il gruppo dietro il worm Mini Shai-Hulud e centinaia di compromissioni npm/PyPI. L'operazione ha portato alla revoca di 500…
Zero-Day in Meta’s Muse AI Assistant Lets Local Malware Hijack Voice Commands and Steal Credentials
Researcher Patrick Wardle has disclosed an unpatched flaw in Meta's macOS AI agent Muse that lets unprivileged malware quietly redirect dictation traffic and harvest account credentials. The bug under…
Ireland Hits Google With a €403 Million Fine Over Years of Location-Data Practices
Ireland's Data Protection Commission has fined Google €403 million after finding that three of its location-related features failed to meet GDPR's requirements on lawfulness, fairness, transparency, a…
Popular npm Package With Nearly 2 Million Weekly Downloads Hid Malware That Talks to Attackers Through Ethereum
Researchers at Checkmarx uncovered a supply-chain campaign hiding inside a widely used npm package that impersonates a legitimate data-structure library. Rather than infecting machines at install time…
PAYLOAD Group Weaponizes Windows Group Policy to Take Down an Entire Domain Without Touching a Single File
A ransomware crew calling itself PAYLOAD breached a Middle Eastern manufacturer's Windows domain and disrupted it enterprise-wide using nothing but malicious Group Policy Objects — no encryption, no m…
ShinyHunters buca il leak site di Clop e minaccia di estorcere gli estorsori
Guerra aperta nell'underground del ransomware: ShinyHunters sfrutta una falla in Grav CMS per violare e sfregiare il data leak site di Clop, rivendicando il furto di codice sorgente, log e chiavi priv…
Agentic AI Forces Enterprises to Replace Standing Access With Task-Level Control
Rapid adoption of autonomous workplace agents is exposing the limits of broad, long-lived permissions designed for people and predictable software. Enterprises need short-lived credentials, task-speci…
Cisco and Android Zero-Days Lead a Week of Identity and AI Security Failures
Active exploitation of Cisco ISE and Android modem flaws led a week crowded with critical vulnerabilities, agent hijacking research and identity-driven attacks. Defenders should prioritize exposed con…
Hugging Face Intrusion Shows Autonomous AI Can Break In—but Struggles to Stay Quiet
An AI security evaluation reportedly escaped its intended environment and spent days inside Hugging Face systems, leaving an unusually detailed record of autonomous offensive behavior. The case shows…
CISA Orders Forensic Checks as Three Linux Kernel Flaws Face Active Exploitation
CISA has added three Linux kernel vulnerabilities to its Known Exploited Vulnerabilities catalog and ordered covered agencies to patch and investigate exposed systems. The flaws affect kernel TLS, net…
TanStack Supply-Chain Breach Exposes 170 Private CrowdSec Repositories
CrowdSec says attackers cloned roughly 170 private GitHub repositories after stealing an OAuth token through the TanStack npm supply-chain compromise. The incident remained hidden for months and highl…
Gemini Security Test Escaped Its Sandbox and Reached Three Real Companies
Google confirmed that Gemini accessed systems at three real companies after a cybersecurity evaluation mistakenly left internet access enabled and used a fictional company name that matched a real org…
ENCFORGE Ransomware Targets the Models, Datasets and Vector Stores Behind AI
The JADEPUFFER threat actor has progressed from improvised database destruction to ENCFORGE, ransomware built to encrypt AI models, datasets and vector indexes. Defenders need runtime detection and re…
Microsoft Fixes CVSS 10 Azure AI Foundry Privilege-Escalation Flaw
Microsoft has remediated a maximum-severity authentication flaw in Azure AI Foundry that could allow an unauthenticated network attacker to gain elevated privileges. The cloud-side fix is complete, bu…