Sicurezza
Cybersecurity, ransomware, privacy
- inSicurezzaDigitale.com — Cybersecurity in italiano IT
- SecureBulletin — Cybersecurity news in English EN
- Ransomfeed Daily News — Daily cybersecurity news EN
2.824 voci in archivio · mostrate 1.151–1.175 .
Arkanix: A Sneaky New Malware Stealing from Homes and Small Offices
New malware is emerging with a distinct focus on stealing sensitive information from home users and small businesses: the Arkanix stealer. This advanced tool leverages common vulnerabilities to infilt…
ShadyPanda’s Seven-Year Heist: How a Simple Extension Became a Mass Spy Tool
A sophisticated threat group, dubbed ShadyPanda, has quietly exploited millions of users across the world by weaponizing popular Chrome and Edge extensions. This stealthy campaign, spanning seven year…
Android’s December Patch: Zero-Day Vulnerabilities and Their Impact
The latest security bulletin from Google has brought forth a grim reality for Android users: multiple zero-day vulnerabilities are actively exploited by threat actors, demanding immediate attention. T…
La fine di Cryptomixer: come Europol ha svuotato la lavatrice da 1,3 miliardi in criptovalute
Nel mondo della criptovaluta, il confine tra privacy e crimine è spesso labile quanto una transazione non tracciabile. Per anni, strumenti come i mixers hanno offerto a utenti e organizzazioni una via…
A Critical Design Flaws in Microsoft Azure API Management Threatens Organizations
Microsoft’s Azure API Management (APIM) Developer Portal, a platform commonly used for managing and securing APIs, is vulnerable to a significant security flaw that enables attackers to bypass access…
Pakistan-based APT36 Leverages Python and Linux for Sophisticated Indian Government Espionage
A new wave of cyberespionage has emerged, targeting the critical infrastructure of Indian government institutions. This time, it’s not your average phishing attack – the threat is more sophisticated…
Handala Targeting Israel’s Tech & Aerospace with Doxing and Financial Incentives
A recent shift in the geopolitically motivated cyber landscape has raised serious concerns as the Handala hacker group launches a targeted campaign against Israeli high-tech and aerospace professional…
Databreach Mixpanel: quando un fornitore terzo mette a rischio i dati degli utenti API di OpenAI
Nel panorama della cybersecurity, l’attenzione si concentra spesso sulle vulnerabilità dirette delle piattaforme principali. Eppure, a volte, la minaccia arriva da dove meno te l’aspetti: i fornitori…
A Polish Arrest Uncovers the Real Face of Cybercrime
Recent developments in Poland have highlighted a disturbing trend – the rise of sophisticated cyberattacks targeting businesses across Europe, with seemingly motivated individuals serving as fronts fo…
Polonia, arrestato cittadino russo per attacchi informatici a reti locali
In un’operazione che conferma la crescente sofisticazione della minaccia cyber proveniente da attori legati a stati nazionali, le autorità polacche hanno arrestato un cittadino russo sospettato di ave…
ShadowV2: la botnet che ha sfruttato il caos AWS per colonizzare l’IoT globale
Mentre il mondo assisteva al collasso dei servizi Amazon Web Services lo scorso ottobre, un’altra storia, più silenziosa e insidiosa, si stava scrivendo nelle reti globali. Nel vuoto lasciato dall’inf…
Battlefield 6’s Rise Is Fueling a Surge of Malware: How Attackers are Capitalizing on the Hype
Since its release this October, “Battlefield 6” has ignited gaming communities, with millions eagerly jumping into the action-packed experience. However, alongside the excitement comes a darker side –…
OpenAI API Users: Mixpanel Data Leak Exposes Personal Information
OpenAI, the renowned developer of AI models like ChatGPT, has recently acknowledged a data breach involving its third-party analytics provider, Mixpanel. This incident exposed sensitive user informati…
HashJack: quando un cancelletto nell’URL inganna l’IA nel browser
C’è una nuova, sottile minaccia che sfrutta uno dei simboli più innocui del web – il cancelletto (hashtag) “#” – per aggirare le difese di sicurezza e manipolare gli assistenti IA integrati nei browse…
The FBI’s Latest Warning: Phishing Scams Target the IC3
The internet is a constant battleground, and today’s cybercriminal tactics are more intricate and insidious than ever before. Recently, the Federal Bureau of Investigation (FBI) issued urgent warnings…
HashJack: weaponizing trust in AI browser assistants
A vulnerability in the way AI browser assistants handle URL fragments opens doors for malicious attacks. For years, we’ve seen AI take center stage across various industries, revolutionizing everythin…
A Critical Security Flaws in HashiCorp’s Provider
HashiCorp’s Vault Terraform provider, a cornerstone of secure secrets management for organizations worldwide, has been found with a critical security flaw. This vulnerability, tracked as CVE-2025-1335…
ClickFix: Fake Windows Updates and PNG Steganography Make a Darker Play for User Machines
For those deeply involved with cybersecurity, the past few years have seen a dramatic rise in sophisticated phishing campaigns leveraging social engineering to deliver malware onto unsuspecting victim…
How Hackers are using Open-Source repositories to steal crypto
A new wave of malware targeting cryptocurrency users is hitting developers hard, showcasing the growing sophistication and accessibility of attacks in 2023. The root cause? A well-executed supply chai…
ToddyCat’s new tricks: email hacking evolves with the cloud
The age-old adage “if it ain’t broke, don’t fix it” doesn’t always hold true in cybersecurity. As attackers are increasingly leveraging cloud services to protect sensitive data, their methods are evol…
Wireshark 4.6.1: critical security update addresses major vulnerabilities
A recent update from the Wireshark Foundation addresses critical vulnerabilities impacting the widely used network protocol analyzer, potentially exposing users to denial-of-service conditions. The vu…
Com groups: come un moderatore è finito dietro le sbarre
Nel sottobosco digitale di Telegram, dove l’anonimato e la crittografia offrono un rifugio apparentemente sicuro, si annidano comunità criminali sempre più strutturate e spietate. Una di queste, un “C…
TamperedChef: la fabbrica degli avvelenatori di certificati digitali
C’è una certa quiete, quasi rassicurante, quando apriamo un installer, nel vedere quella piccola finestra di dialogo di Windows che certifica la validità di una firma digitale. È un sigillo di fiducia…
APT24: three years of obscure espionage with the “BadAudio” download
For years, APT24, a sophisticated cyber espionage group linked to China’s People’s Republic, has been quietly crafting targeted attacks against key players across global industries. Their latest offen…
Oracle hit: Clop’s Zero-Day exploit leaves tech giant exposed
Yesterday, the cybersecurity world was rocked by news of a potentially massive breach targeting Oracle. The notorious Clop ransomware gang has publicly claimed responsibility for compromising the tech…