Sicurezza
Cybersecurity, ransomware, privacy
- inSicurezzaDigitale.com — Cybersecurity in italiano IT
- SecureBulletin — Cybersecurity news in English EN
- Ransomfeed Daily News — Daily cybersecurity news EN
2.415 voci in archivio · mostrate 1.151–1.175 .
Critical RCE vulnerabilities in Ivanti Endpoint Manager grant remote server access to attackers
Ivanti has released security updates for its Endpoint Manager (EPM) 2024 and 2022 SU6 versions to address multiple severe and critical vulnerabilities that could lead to unauthorized access to the EPM…
Preta Power: innovative tools empower cyber enhancement initiatives
Earth Preta, the notorious Chinese Advanced Persistent Threat (APT) group, has been active for over a decade, targeting government entities, academia, and research organizations globally. Their recent…
Air-Gapped systems not impregnable: new attacks expose sensitive data
Air-gapped computers, physically isolated from unsecured networks, were once considered impervious to cyberattacks. However, recent research has unveiled sophisticated techniques that can exfiltrate s…
WhatsApp’s view once privacy flaw: exploited and abusable
WhatsApp’s “View Once” feature, designed to enhance privacy by allowing users to share disappearing photos and videos, has come under fire due to a critical security flaw. This flaw has been actively…
Alert: CISA warns of three actively exploited vulnerabilities
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding three critical vulnerabilities that are currently being exploited in the wild. These vulnerabilities affect w…
Quad7 Botnet: expanding threat landscape targets routers and VPNs
The Quad7 botnet, also known as the 7777 and xlogin botnets, has gained notoriety for utilizing compromised routers to launch attacks on Microsoft 365 accounts. This sophisticated botnet has been evol…
London High School hit by ransomware attack
Cybersecurity threats lurk in every corner of our digital world, and educational institutions are not immune to these malicious attacks. A recent ransomware assault has forced Charles Darwin School in…
GeoServer RCE vulnerability: a threat to geospatial data infrastructure
GeoServer, an open-source Java-based server, enables the sharing and management of geospatial data. However, a critical vulnerability (CVE-2024-36401) has emerged, allowing attackers to remotely execu…
L’ascesa delle intrusioni interattive: cosa rivelano i dati del Report Threat Hunting 2024 di CrowdStrike
Negli ultimi anni, il panorama delle minacce informatiche ha subito un’evoluzione drammatica, e il recente Threat Hunting Report 2024 di CrowdStrike offre uno sguardo approfondito su queste tendenze a…
Fog ransomware extends reach to financial sector
The Fog ransomware, previously targeting educational and recreational sectors, has now shifted its focus to the lucrative finance industry. In a recent attack, threat actors compromised VPN credential…
Bitcoin ATM Scams: A Growing Threat
Bitcoin ATMs (BTMs) have emerged as a convenient way to buy and sell cryptocurrencies. However, they have also become a hotbed for scammers looking to exploit unsuspecting victims.The Rise of BTM Scam…
Russian military hackers: targeting critical infrastructure globally
Intelligence agencies have identified Russian military hackers linked to the Main Intelligence Directorate (GRU), Unit 29155, as responsible for cyberattacks against global targets. These attacks aim…
Veeam software vulnerabilities: urgent action required for enhanced cybersecurity
Veeam Software, a renowned provider of data protection solutions, has recently disclosed the discovery of several critical and high-severity vulnerabilities in multiple products. These vulnerabilities…
SonicWall alerts to critical access control flaw actively targeted
As a cybersecurity expert, I’m here to alert you to a critical vulnerability (CVE-2024-40766) affecting SonicWall Firewall products. This improper access control flaw is actively being exploited in th…
Persistent backdoors via Linux pluggable authentication modules: a new threat
Recent research by the Group-IB Digital Forensics and Incident Response (DFIR) team has revealed a novel technique exploiting Linux’s Pluggable Authentication Modules (PAM) to create persistent backdo…
Critical Progress LoadMaster vulnerability: unauthenticated code execution
A severe vulnerability (CVE-2024-7591) has been discovered in the Progress LoadMaster product line, including all releases and the Multi-Tenant (MT) hypervisor. This flaw allows unauthenticated remote…
Microchip Data Breach Confirmed by Company
Microchip Technology, a prominent American semiconductor manufacturer, has disclosed a cyberattack in August 2024 that compromised sensitive employee information. The company’s recent filing with the…
Emansrepo: new cyber attacks
In August 2024, FortiGuard Labs unveiled a concerning new player in the cybersecurity landscape: Emansrepo, a Python-based infostealer. This malware has been propagated through cunning phishing emails…
Understanding the threat of RomCom’s ransomware campaign
In recent months, the cyber threat landscape has seen a significant uptick in ransomware attacks, with the Russian group known as RomCom, or Storm-0978, emerging as a formidable player. This group has…
Google Chrome update: enhancing security with version 128.0.6613
In the ever-evolving landscape of cybersecurity, Google has rolled out significant updates for its Chrome Stable and Extended Stable channels, now featuring version 128.0.6613. This update is graduall…
Addressing the critical CVE-2024-7261 vulnerability in Zyxel devices
In a concerning development for network security, Zyxel has recently issued patches to address a critical operating system (OS) command injection vulnerability, designated as CVE-2024-7261. This flaw…
Booking.com phishing attack: understanding the threat and protecting yourself
In recent months, a highly sophisticated phishing attack targeting Booking.com has emerged, raising alarms among hotel managers and travelers alike. This attack, marked by its complexity and high succ…
YubiKey vulnerability: understanding the EUCLEAK threat
In the ever-evolving landscape of cybersecurity, even the most trusted tools can fall prey to vulnerabilities. Recently, security researchers at NinjaLab uncovered a notable flaw in the YubiKey 5 Seri…
Cybersecurity incident at Transport for London: a closer look
On September 2, 2024, Transport for London (TfL) found itself facing a significant cyber attack that disrupted its operations and raised serious concerns about the security of its systems. As the orga…
North Korean hackers exploit Chromium zero-day vulnerability
In the ever-evolving landscape of cybersecurity, the Chromium-based web browsers, such as Google Chrome and Microsoft Edge, have become prime targets for malicious actors. Recently, Microsoft cyber an…