Sicurezza
Cybersecurity, ransomware, privacy
- inSicurezzaDigitale.com — Cybersecurity in italiano IT
- SecureBulletin — Cybersecurity news in English EN
- Ransomfeed Daily News — Daily cybersecurity news EN
2.824 voci in archivio · mostrate 1.176–1.200 .
Databreach: 2.3TB data from Italian rail group, Almaviva
A colossal digital archive, estimated at approximately 2.3 terabytes, has appeared in the darkest corners of the web. A malicious actor claims to possess it, pointing the finger at Almaviva and a wide…
Eternidade Stealer: WhatsApp-Enabled banking trojan sophistication
The Trustwave SpiderLabs team has unearthed a particularly unsettling piece of malware – Eternidade Stealer – that’s raising serious questions about the security practices surrounding WhatsApp and the…
Whatsapp: rilevata vulnerabilità crittografica globale
Un silenzio digitale ha avvolto per mesi i server di WhatsApp (che non si sono opposti allo sfruttamento), un vuoto di sicurezza che ha permesso a un gruppo di ricerca dell’Università di Vienna di con…
Akira: a CAPTCHA breach unravels enterprise security
The recent escalation of attacks attributed to the Howling Scorpius ransomware group has highlighted a chillingly simple, yet devastatingly effective, entry vector. While often touted as the vanguard…
Nova Stealer: macOS cryptocurrency theft
The cybersecurity landscape is consistently shaped by increasingly sophisticated threats, and the latest to garner significant attention is Nova Stealer – a meticulously crafted malware campaign speci…
The Cloudflare cascade: operational failure
The recent, prolonged disruption experienced by Cloudflare, affecting global internet traffic for several hours, wasn’t a conventional cyberattack. Instead, it’s a stark and unsettling illustration of…
DoorDash data breach: a social engineering compromise
The recent disclosure by DoorDash regarding a cybersecurity incident, initially attributed to a social engineering attack, warrants a detailed examination beyond the standard press release narrative…
WhatsApp’s silent threat: the screen-sharing scams
The current wave of WhatsApp scams, fueled by the platform’s recently introduced screen-sharing feature, is a prime example. It’s a chilling demonstration of how a seemingly innocuous feature can beco…
Il buio di Cloudflare: Internet down il 18 novembre
Stamattina, intorno alle 11:30 GMT, un brusio ha iniziato a propagarsi nelle stanze digitali di sysadmin, sviluppatori e semplici utenti. Un brusio che si è rapidamente trasformato in un coro di coste…
Google’s “Agentic SOC” takes a concrete step: alert triage and investigation agent
The hype around AI-driven security operations has become almost deafening, but often lacks the granular detail necessary for serious assessment. Google’s public preview of the Alert Triage and Investi…
Chrome: a rapid-response Zero-Day exploits type confusion vulnerabilities
Google’s Chrome browser has found itself squarely in the crosshairs. A critical, previously unknown vulnerability – a zero-day – is actively being leveraged in the wild, triggering a swift and decisiv…
The Payroll Pirates: a malvertising and layered attack infrastructure
The “Payroll Pirates,” as Check Point researchers have dubbed them, represent a particularly insidious threat – a coordinated campaign targeting payroll systems, credit unions, and trading platforms a…
La mano silenziosa di AppCloud: segnali di sorveglianza persistente sui dispositivi Samsung Galaxy
Le recenti accuse relative alla preinstallazione dell’AppCloud di IronSource sugli smartphone Samsung Galaxy serie A e M, in particolare nella regione del Medio Oriente e Nord Africa (MENA), rappresen…
SpearSpecter: Iran’s Patient, multi-layered targeting campaign
The cybersecurity landscape is increasingly characterized by sophistication, and the ongoing SpearSpecter campaign represents a particularly concerning evolution in state-sponsored espionage. This isn…
Microsoft Entra guest invitations: a sophisticated TOAD evolution
The landscape of sophisticated social engineering attacks is constantly shifting, and a recent development involving Microsoft Entra guest user invitations highlights a concerning trend: the seamless…
The AppCloud anomaly: pre-installed surveillance on Samsung Galaxy devices
The recent accusations surrounding Samsung’s deployment of the AppCloud analytics application within its Galaxy A and M series smartphones, primarily targeting the Middle East and North Africa (MENA)…
CrazyRDP takedown: quando l’hosting “bulletproof” mostra la corda
C’è una regola non scritta, nel sottobosco digitale, che chi fornisce infrastrutture “bulletproof” – quelle che ignorano deliberatamente abuse report e richieste delle forze dell’ordine – siano in qua…
SilentButDeadly: a targeted disruption of EDR networks
The relentless evolution of cyber threats has forced security professionals to continually adapt, often relying on increasingly complex Endpoint Detection and Response (EDR) solutions. However, this r…
FortiWeb CVE-2025-64446 PoC: a critical weapon now widely available
The cybersecurity landscape has shifted once again, driven by the public release of a proof-of-concept exploit targeting the critical vulnerability CVE-2025-64446 within FortiWeb devices. This disclos…
Linux imballa la memoria con la ceralacca. Glibc 2.43 porta mseal in ogni programma
C’è un che di antico, di quasi romantico, nell’idea di sigillare qualcosa con la ceralacca. Un gesto definitivo, una promessa di integrità che sopravvive al tempo. Ebbene, questa metafora così fisica…
SmartApeSG: the persistent evolution of a ClickFix-based RAT campaign
The SmartApeSG campaign, previously identified by aliases like ZPHP and HANEY MANEY, continues to demonstrate a remarkable capacity for adaptation, moving beyond initial tactics of deceptive browser u…
NVIDIA NeMo Framework: a critical cascade of vulnerabilities
The NVIDIA NeMo Framework, a cornerstone of conversational AI development, has recently revealed a significant and frankly concerning weakness. The disclosure, detailed in a critical security update…
Rhadamanthys: c’è l’ombra di un nuovo Endgame Operation 3
Qualcuno, in queste ore, sta perdendo l’accesso ai propri server. Non per un banale errore di configurazione o per un attacco di concorrenti sleali, ma perché altri — molto probabilmente una forza di…
Il caso Francesco Nicodemo, vediamo come funziona Paragon Graphite
Si dice che nel mondo dello spionaggio digitale commerciale, i nomi cambino ma la musica resti la stessa. L’ultima prova arriva da casa nostra, dove Francesco Nicodemo, un consulente politico, si è tr…
LANDFALL: la nuova spia commerciale Android e la catena di exploit che colpisce i dispositivi Samsung
Era solo questione di tempo. Dopo le rivelazioni di agosto su una sofisticata catena di exploit zero-click che sfruttava vulnerabilità nella elaborazione di immagini DNG su iOS, era inevitabile che qu…