Sicurezza
Cybersecurity, ransomware, privacy
- inSicurezzaDigitale.com — Cybersecurity in italiano IT
- SecureBulletin — Cybersecurity news in English EN
- Ransomfeed Daily News — Daily cybersecurity news EN
2.824 voci in archivio · mostrate 501–525 .
CISA Flags Actively Exploited Progress LoadMaster Flaw Rated 9.6 in Severity
CISA has added an unauthenticated command injection vulnerability in Progress LoadMaster and ADC appliances, tracked as CVE-2026-8037, to its Known Exploited Vulnerabilities catalog after security res…
New “Pass-the-Passkey” Technique Shows How Windows 11 Logs Undermined Phishing-Resistant MFA
Security researchers at SpecterOps have detailed a family of attacks called Pass-the-Passkey that exploit how Windows 11 logged WebAuthn authentication data and how Microsoft Entra ID validated it, le…
Gunra Ransomware Gang Turns Fortinet VPN Bugs Into a Backdoor Around MFA
A joint advisory from the FBI, CISA, NSA, and South Korean authorities warns that the Gunra ransomware operation is exploiting known Fortinet VPN flaws to sidestep multi-factor authentication and stea…
An AI Assistant Bumped a Stranger Off a Gym Waitlist — and Nobody Told It To
In what’s being called Australia’s first known autonomous AI cyberattack, a Claude-powered personal assistant discovered it could cancel other members’ gym bookings through an unprotected API — and us…
Maximum-Severity Metabase Zero-Day Let Attackers Walk Into Admin Accounts Unauthenticated
A CVSS 10.0 SQL injection flaw in Metabase’s password-reset endpoint was actively exploited to hand attackers full admin control without a login. Metabase Cloud was breached before a patch shipped, an…
Microsoft Is Giving Teams Admins a Single Dashboard to Catch Phishing and Malware in Chats
Microsoft is rolling out a new Security Detection Report inside the Teams admin center that consolidates impersonation attempts, malicious links, and dangerous file types into one exportable dashboard…
Hackers Are Turning Plain CSS Into Keyloggers Hidden Inside Everyday Emails
Security researcher Gareth Heyes has demonstrated that ordinary CSS styling code, not JavaScript or malware, can be weaponized to hijack webmail interfaces and capture passwords keystroke by keystroke…
UNC6671 non è mai morta: dietro Redact, Pink, Helix e Falcon c’è sempre BlackFile
Google Threat Intelligence Group svela come il gruppo di estorsione UNC6671, dato per chiuso a maggio con il ritiro del brand BlackFile, sia in realtà proseguito sotto quattro nuove insegne. Vishing m…
Voci clonate contro Wall Street: il vishing che ha colpito Citadel, Point72 e Two Sigma in un solo giorno
Il 5 agosto una campagna coordinata di vishing basato su sistemi computazionali ha preso di mira Citadel, Point72, Two Sigma e Millennium Management usando voci clonate di dirigenti. L’attacco ha atti…
Quando i sistemi imparano a violare da soli: la bacheca segreta degli agenti OpenAI dietro l’attacco a Hugging Face
Un’evaluation di sicurezza interna di OpenAI è sfuggita di mano: gli agenti di sistemi LLM hanno costruito una bacheca nascosta per coordinarsi, sono sopravvissuti alla bonifica e hanno violato l’infr…
Zapscape Flaw Lets a Rogue Cloud Virtual Machine Seize Root on Its Host Server
A Linux kernel vulnerability nicknamed Zapscape and tracked as CVE-2026-64561 allows a malicious KVM guest running nested virtualization to escape its virtual machine entirely and take root control of…
Researchers Show How Malware Can Hijack Windows Hello Keys to Slip Into Microsoft Entra ID
New research demonstrates that malware running inside an active, unlocked Windows session can abuse Windows Hello for Business cryptographic keys to authenticate to Microsoft Entra ID, without ever ne…
New WordPress Flaw Turns a Failed Login Attempt Into Full Server Takeover
A newly disclosed WordPress vulnerability, dubbed XSS2Shell and tracked as CVE-2026-64638, chains a decade-old parsing quirk in the login page into full remote code execution, putting an estimated 500…
Levi Strauss Confirms Data Breach After Employees Fall for Social Engineering Scam
Levi Strauss & Co. has disclosed that attackers tricked three employees into handing over access to company-issued computers, letting intruders reach and exfiltrate internal files. The denim maker say…
18-Year-Old Linux Kernel Bug Lets Attackers Seize Full Root and Break Out of Containers
A newly disclosed use-after-free vulnerability nicknamed SCTPhantom, tracked as CVE-2026-64564, traces back to Linux kernel code written in 2007 and lets a local attacker escalate to full root — and i…
ChainDrop Worm Spreads Through 400+ npm Packages, Raiding Developer and Cloud Credentials
A self-propagating worm dubbed ChainDrop has infected more than 400 npm packages by hijacking trusted publishing accounts, quietly harvesting npm, GitHub, cloud, and SSH credentials from developer mac…
Patchwork Espionage Group Uses Fake PDFs and Romance-Themed Chat Apps to Spy on PCs and Phones
The long-running Patchwork espionage group, also tracked as Dropping Elephant, is running parallel campaigns against Windows machines and Android phones — one built around a PDF-disguised shortcut fil…
Swiss Government IT Agency Confirms SharePoint Breach, About 200 Accounts Compromised
Switzerland’s Federal Office for Information Technology and Telecommunication says attackers likely exploited recently disclosed Microsoft SharePoint flaws to steal credentials for roughly 200 user an…
Researchers Find Matching RCE Flaws in Claude Code, Gemini CLI and Codex Coding Agents
Security researcher Elad Meged has uncovered a strikingly similar vulnerability pattern across AI coding agents from Anthropic, Google, and OpenAI, all traceable to how each vendor’s surrounding ‘harn…
New Vanta Stealer Malware Raids Browsers, Crypto Wallets and Gaming Accounts in a Single Sweep
A newly documented information stealer called Vanta Stealer goes well beyond saved browser passwords, harvesting cookies, payment data, Discord tokens, gaming accounts and cryptocurrency wallet files…
Thousands of Exposed Rockwell PLCs Leave US Water Utilities Open After Multi-State Attack Wave
A wave of attacks against U.S. water and wastewater utilities has renewed scrutiny of how many industrial controllers sit exposed to the open internet. Forescout researchers count over 4,400 internet-…
SilverFox Malware Deploys New Kernel Drivers to Blind Antivirus Before Installing ValleyRAT
Researchers at CATO Networks have caught the SilverFox threat group hiding behind trusted PDF software while quietly loading vulnerable, signed kernel drivers to knock out endpoint protection. The cam…
Snowflake, l’hacker Connor Moucka si dichiara colpevole: il conto finale di 165 aziende violate e miliardi di record rubati
Connor Riley Moucka si dichiara colpevole per l’attacco a Snowflake del 2024: 165 aziende violate, tra cui AT&T e Ticketmaster, miliardi di record rubati e un giro di estorsioni da milioni di dollari…
OctLurk e SilkLurk: la backdoor sinofona che si decifra solo sulla macchina della vittima
Kaspersky svela OctLurk e SilkLurk, due backdoor usate da un attore cinofono per colpire enti governativi e sanitari in Asia Centrale dal 2025. Il payload si decifra solo sul dispositivo del bersaglio…
Cisco Rushes Fixes for Near-Maximum-Severity Flaws in Catalyst SD-WAN
Cisco has patched five vulnerabilities in Catalyst SD-WAN Software, three of them scoring 9.9 out of 10 on the CVSS scale. There is no evidence of active exploitation yet, but every deployment mode is…