Sicurezza
Cybersecurity, ransomware, privacy
- inSicurezzaDigitale.com — Cybersecurity in italiano IT
- SecureBulletin — Cybersecurity news in English EN
- Ransomfeed Daily News — Daily cybersecurity news EN
2.824 voci in archivio · mostrate 1.076–1.100 .
Critical Fortinet FortiClient EMS Vulnerability CVE-2026-21643 Actively Exploited — CISA Demands Patch Today
CISA has added CVE-2026-21643, a critical pre-authentication SQL injection flaw in Fortinet FortiClient EMS (CVSS 9.1), to its Known Exploited Vulnerabilities catalog with a mandatory patching deadlin…
Booking.com Confirms Data Breach: Reservation Data and Personal Details of Customers Exposed
Booking.com has confirmed hackers accessed customer reservation data including names, addresses, phone numbers, and booking details. Security experts warn the exposed information enables highly target…
Handala e la Cyber-Offensiva dell’Iran: 6 Petabyte distrutti e 149 Terabyte rubati dall’infrastruttura critica di Dubai
Il 12 aprile 2026, il gruppo Handala legato all’Iran ha attaccato l’infrastruttura critica di Dubai, distruggendo 6 petabyte di dati e rubando 149 terabyte di documenti classificati da tre istituzioni…
ShinyHunters Breaches Rockstar Games via Third-Party Vendor, Threatens to Leak GTA VI Contracts
ShinyHunters has breached Rockstar Games by exploiting authentication tokens from third-party analytics vendor Anodot to access Snowflake data warehouses. The stolen data reportedly includes financial…
Adobe Acrobat Zero-Day CVE-2026-34621: Four Months of Targeted Espionage via Prototype Pollution Exploit
Adobe patched a critical zero-day in Acrobat Reader (CVE-2026-34621) that was exploited for at least four months via a sophisticated prototype pollution technique. The attack chain enables full sandbo…
Microsoft April 2026 Patch Tuesday: 163 CVEs Including Two Zero-Days and a Public “BlueHammer” Exploit
Microsoft’s April 2026 Patch Tuesday addresses 163 CVEs, including an actively exploited SharePoint spoofing zero-day (CVE-2026-32201) and a publicly leaked Defender EoP exploit dubbed “BlueHammer” (C…
Google Patches Actively Exploited Chrome Zero-Day CVE-2026-5281 — CISA Deadline Hits Today
Google has patched a high-severity use-after-free zero-day in Chrome’s WebGPU implementation (CVE-2026-5281) that is actively exploited in the wild. CISA set a mandatory federal remediation deadline o…
Drift Protocol: il più grande furto DeFi del 2026 perpetrato da hacker nord-coreani con una campagna di social engineering durata 6 mesi
Il 1° aprile 2026, hacker nord-coreani hanno drenato 285 milioni di dollari da Drift Protocol attraverso una campagna di social engineering durata 6 mesi, sfruttando la durable nonce di Solana per ott…
Phishing SPID contro le Pubbliche Amministrazioni: CERT-AGID smonta la campagna che usa siti WordPress legittimi per rubare credenziali istituzionali
CERT-AGID ha rilevato una campagna di phishing che impersona l’Agenzia delle Entrate-Riscossione per sottrarre credenziali SPID a funzionari PA e aziende private. L’attacco sfrutta istanze WordPress c…
APT35 e la Cyber Guerra Parallela: come l’Iran aveva già compromesso ogni paese colpito nell’Operazione Epic Fury
Prima che i missili iraniani illuminassero il cielo di sette nazioni, i gruppi APT dell’IRGC avevano già compromesso silenziosamente le infrastrutture critiche di quei paesi. L’analisi delle operazion…
European Commission Suffers 91.7 GB Cloud Data Breach via Trivy Supply-Chain Compromise
CERT-EU has documented a cloud breach at the European Commission stemming from a supply-chain compromise in the Trivy container scanner. Approximately 91.7 GB of sensitive EU institutional data was ex…
ShinyHunters Claims Amtrak Breach: 9.4 Million Salesforce Records Allegedly Stolen
The ShinyHunters extortion group claims to have stolen 9.4 million records from Amtrak’s Salesforce environment, posting data samples as proof. The alleged breach highlights escalating ransomware thre…
Critical Marimo Python Notebook Zero-Day (CVE-2026-39987) Exploited Within 10 Hours of Disclosure
A critical pre-authentication RCE vulnerability (CVE-2026-39987, CVSS 9.3) in the popular Marimo Python notebook platform was weaponised within 10 hours of public disclosure. Attackers are actively ha…
ChipSoft Ransomware Attack Cripples Netherlands Healthcare Systems, Exposing 13 Million Support Tickets
A ransomware attack on ChipSoft, a major Dutch healthcare software provider, has exposed 13 million support tickets, 15,000 employee records, and sensitive corporate documents. The attack disrupted he…
La catena di fornitura software colpita: come CPUID è stata compromessa per distribuire il RAT stealer STX
Nel mese di aprile 2026, gli attaccanti hanno compromesso i server CPUID e reindirizzato i download di CPU-Z e HWMonitor verso versioni trojanizzate contenenti STX RAT. Per sei ore, oltre 150 utenti h…
Attacco SCADA nel mirino: le APT iraniane prendono di mira i controllori Unitronics negli Stati Uniti
A partire da marzo 2026, attori APT affiliati all’Iran hanno compromesso almeno 75 controllori programmabili Unitronics negli USA, utilizzando il software legittimo Studio 5000 Logix Designer per modi…
Supply Chain Attack Backdoors Smart Slider 3 Pro: 800,000+ WordPress Sites at Risk
Attackers compromised Nextend’s update infrastructure to distribute a weaponized version of Smart Slider 3 Pro (v3.5.1.35) for approximately six hours on April 7, 2026. Sites that auto-updated receive…
Fortinet Issues Emergency Patch for Actively Exploited FortiClient EMS Zero-Day CVE-2026-35616
A critical zero-day vulnerability (CVE-2026-35616, CVSS 9.1) in Fortinet FortiClient EMS was exploited in the wild before Fortinet published its advisory. The pre-authentication flaw allows remote cod…
PoC Exploit Leaked for Unpatched Windows Privilege Escalation Zero-Day ‘BlueHammer’
A disgruntled researcher has published a working exploit for BlueHammer, an unpatched Windows local privilege escalation zero-day that abuses Windows Defender’s update mechanism. Fully patched Windows…
Adobe Patches Actively Exploited Acrobat Reader Zero-Day CVE-2026-34621 — Exploited Since December 2025
Adobe has issued an emergency patch for CVE-2026-34621 (CVSS 8.6), a prototype pollution zero-day in Acrobat Reader actively exploited since December 2025. Attackers can achieve code execution by deli…
ShinyHunters colpisce Rockstar Games attraverso Anodot: la campagna Salesforce-Snowflake mette a rischio 400 aziende
ShinyHunters ha violato l’infrastruttura Snowflake di Rockstar Games sfruttando Anodot, un fornitore SaaS terzo di monitoraggio cloud, per sottrarre token di autenticazione. La campagna è parte di un’…
CISA Warning: Iranian-Affiliated Hackers Targeting US Critical Infrastructure PLCs to Cause Disruption
CISA has issued an urgent advisory (AA26-097A) warning that Iranian-affiliated APT actors have been actively targeting internet-exposed Programmable Logic Controllers across U.S. critical infrastructu…
Russia’s APT28 Deploys New PRISMEX Malware in Espionage Campaign Targeting Ukraine and NATO Allies
Russia-linked APT28 (Fancy Bear) has launched a new spear-phishing espionage campaign deploying PRISMEX, a previously undocumented malware suite combining steganography, COM hijacking, and cloud-based…
APT Iran Claims 375TB Breach of Lockheed Martin — F-35 Blueprints and Source Code Allegedly Stolen
Pro-Iranian hacktivist group APT Iran claims to have stolen 375 terabytes of data from Lockheed Martin, including alleged F-35 blueprints and internal source code. The group is demanding over $400 mil…
Google Patches Actively Exploited Chrome Zero-Day CVE-2026-5281 — Update Now
Google has confirmed that CVE-2026-5281, a high-severity use-after-free vulnerability in Chrome’s Dawn WebGPU implementation, is being actively exploited in the wild. CISA has added the flaw to its Kn…