Sicurezza
Cybersecurity, ransomware, privacy
- inSicurezzaDigitale.com — Cybersecurity in italiano IT
- SecureBulletin — Cybersecurity news in English EN
- Ransomfeed Daily News — Daily cybersecurity news EN
2.835 voci in archivio · mostrate 376–400 .
Critical Ivanti Flaws Expose ITSM and Mobile Management Systems to RCE and Admin Takeover
Ivanti has disclosed ten vulnerabilities across EPMM, Neurons for ITSM and Sentry, including unauthenticated remote-code-execution flaws rated 9.8. Cloud instances have been patched, while on-premises…
Ivanti Patches Nine Critical Flaws Across EPMM, Neurons for ITSM, and Sentry
Ivanti has disclosed a cluster of vulnerabilities spanning Endpoint Manager Mobile, Neurons for ITSM, and Sentry, several rated up to 9.9 in severity and capable of unauthenticated remote code executi…
crond, sshd, polkitd: la backdoor nordcoreana Ted infetta i demoni Linux nascosta dentro HAProxy
Rapid7 documenta una campagna APT37 che troianizza HAProxy e i servizi di sistema Linux (crond, sshd, polkitd, agetty, atd) per spiare aziende sudcoreane di media e automotive. La backdoor Ted e il RA…
Adobe Commerce Stores Face Active StyleSmuggler Zero-Day Attacks With No Official Patch
Attackers are exploiting an unauthenticated remote-code-execution flaw across current Magento Open Source and Adobe Commerce releases. Store operators should treat the incident as an active compromise…
Security Teams Face a Week of Zero-Days, Router Intrusions and AI-Accelerated Attacks
A packed week of security disclosures combined active browser and commerce exploitation with router espionage, identity failures and faster AI-assisted intrusions. Defenders should use the converging…
ZTNA in 2026: Ten Platforms Shaping Secure Access Beyond the Traditional VPN
A new 2026 market overview compares ten prominent zero-trust network access platforms for cloud, hybrid and remote environments. Buyers should look beyond feature checklists and test identity, device…
Microsoft Investigates Windows Teams Startup Failures as Users Turn to Web and Mobile
Some Windows users are seeing Microsoft Teams fail to open or take up to two minutes to load. Microsoft is gathering client logs under incident TM1466820, while web and mobile clients remain the recom…
AI-Assisted Intruder Reaches Enterprise Root Access in Less Than 10 Hours
An attacker reportedly used frontier models and agentic frameworks to compress a complex enterprise intrusion into less than ten hours. The incident shows how exposed services, embedded secrets and we…
MikroTik RouterOS Flaw Under Active Attack Grants Unauthenticated Shell Access
Attackers are exploiting a RouterOS weakness that can reportedly provide unauthenticated shell access through exposed services, including SSH. MikroTik users should install the fixed releases now, aud…
Critical ASUS Control Center Chain Opens Managed Fleets to Root Takeover
A CVSS 10.0 flaw chain in ASUS Control Center Enterprise can reportedly give an unauthenticated network attacker a root shell and control of centrally managed devices. Organizations should update imme…
CrowdStrike Unveils SafeMind Agents to Pit Automated Defense Against AI-Driven Attacks
CrowdStrike has introduced SafeMind, a purpose-built family of offensive and defensive AI models designed around Falcon telemetry and incident-response knowledge. The company says the system can impro…
Phishing Campaign Chains Google Services to Conceal Credential Theft
A phishing operation is routing victims through legitimate Google services before sending them to personalized credential traps or unauthorized ScreenConnect installers. The technique weakens domain-r…
Mathspace Breach Exposes Data of More Than One Million Users
Mathspace says attackers exploited a maximum-severity Metabase flaw and downloaded records belonging to 1,079,819 users. A missed vulnerability alert and incomplete post-patch checks allowed the intru…
Prince of Persia: 58 domini pronti a diventare server di comando, la riserva DNS dormiente dell’APT iraniano Infy
Whisper Security mappa il backend self-authoritative del gruppo di cyberspionaggio iraniano Infy: 58 domini già registrati e delegati ma senza record IP, pronti ad attivarsi come nuovi server di coman…
North Korea-Linked Hackers Hide OtterCookie Malware Inside 14 Fake Mac Apps
Researchers have identified fourteen trojanized macOS installers impersonating popular utilities like The Unarchiver and Sketch, all delivering the OtterCookie credential-stealing malware. The campaig…
Over 14,000 Dahua Cameras Compromised With Backdoors That Survive Factory Resets
Researchers at Hunt.io say a 35-day campaign compromised more than 14,000 internet-connected Dahua cameras, planting hidden administrator accounts and abusing cloud recovery codes that persist even th…
Trezor Reveals Its ShipMonk Breach Was Far Bigger Than First Disclosed
Hardware wallet maker Trezor has confirmed that a breach at its fulfillment partner ShipMonk exposed far more customers than originally reported, after retained order data that should have been delete…
Google Rushes Emergency Chrome Patch as Attackers Exploit V8 Zero-Day
Google has pushed an emergency Chrome update after confirming that a type confusion flaw in the V8 engine, tracked as CVE-2026-85046, is being actively exploited in the wild. Simply visiting a malicio…
TP-Link Patches Archer AX55 Flaws Enabling Code Execution and Password Theft
TP-Link has fixed two Archer AX55 v4 vulnerabilities affecting EasyMesh and web login security. A local attacker could crash or potentially take over the router, while captured HTTP logins may expose…
NodeStealer Adds Keylogging and Screenshots to Its Account-Theft Arsenal
A new NodeStealer variant adds continuous keylogging, clipboard monitoring and screenshots to its browser and Facebook data theft. Financial services were the most affected sector in recent activity s…
Toy Ghouls Hide New Windows Backdoors Behind MQTT and Matrix Traffic
The Toy Ghouls group has deployed two custom Windows backdoors that use MQTT and Matrix-based services for command traffic. The malware adds durable remote control to compromises previously associated…
AI-Orchestrated Intrusions Hit Asian Government and Political Networks
Attackers used an AI-orchestration framework alongside conventional exploits, stolen credentials and custom malware in a campaign spanning Asian government, political and education targets. The case s…
GoCaracal: Dark Caracal nasconde il comando e controllo dentro un contratto Ethereum
Il gruppo di cyberspionaggio libanese Dark Caracal ha dotato il suo nuovo impianto Go, GoCaracal, di un canale di fallback che legge l'indirizzo del server C2 di backup da uno smart contract Ethereum…
Leaked AWS Administrator Key Fuels Costly LLMjacking Through Bedrock and Marketplace
A leaked AWS IAM key with administrator privileges allowed an attacker to create a new identity, activate premium AI models and bill inference usage to the victim. The incident shows why cloud teams n…
Rogue ScreenConnect Clients Turn Remote Support Sessions Into a Worm-Like Infection Chain
Attackers are abusing unauthorized ScreenConnect installations to push staged malware into newly connected Windows systems. The campaign begins with social engineering, then uses trusted remote-suppor…