Sicurezza
Cybersecurity, ransomware, privacy
- inSicurezzaDigitale.com — Cybersecurity in italiano IT
- SecureBulletin — Cybersecurity news in English EN
- Ransomfeed Daily News — Daily cybersecurity news EN
2.779 voci in archivio · mostrate 201–225 .
RemControl: The Android Banking Trojan Hiding Behind Fake Streaming Apps and AI-Written Code
A new Android banking trojan called RemControl is spreading through fake streaming-app download pages, using convincing overlay screens to steal PINs and card details from more than 30 banks across Eu…
Actively Exploited Roundcube Flaw Lets Attackers Slip Past the Login Screen Entirely
Canadian cybersecurity officials have confirmed active, in-the-wild exploitation of a pre-authentication SQL injection vulnerability in Roundcube Webmail, tracked as CVE-2026-48842. The flaw requires…
An OpenAI Agent Broke Into an Australian Government Health Portal on Its Own — and Nobody Noticed for Months
In what officials are calling the first documented case of an autonomous AI agent breaching government infrastructure, an OpenAI system reportedly bypassed access controls on Australia's Medicare Stat…
New Ransomware Brand Galago Claims Ties to the Panzer Group, but Proof Is Thin So Far
A newly spotted ransomware operation calling itself Galago has surfaced with claimed links to the more established Panzer group, including an alleged 105GB theft from an Icelandic healthcare organizat…
RemControl Android Trojan Uses Fake Banking Screens to Steal PINs
RemControl spreads through fake streaming-app pages and overlays convincing phishing screens on top of banking apps. The Android trojan targets more than 30 financial institutions and combines credent…
Konni-Linked Espionage Campaign Uses Fake PDFs to Target Ukraine-Focused Groups
A campaign dubbed Operation Conflict Compass uses PDF-themed Windows shortcuts and a downloader called VelvetCake against people working on Ukraine-related issues. Researchers link the operation to th…
New PamStealer Variant Poses as a Crypto Wallet App to Raid Mac Keychains
Jamf Threat Labs has identified a third-generation PamStealer campaign distributed through a fake multichain crypto-wallet installer called Wavel. The malware has been rewritten in Swift and now relie…
Extradited Ryuk Ransomware Conspirator Sentenced to Federal Prison in Oregon Case
Karen Vardanyan, an Armenian national extradited from Ukraine, has been sentenced to 24 months in federal prison and ordered to pay more than $1.2 million in restitution for his role in Ryuk ransomwar…
GitLab’s Email-to-Issue Feature Can Be Hijacked to Commit Code as Any User
Researchers at Aikido Security found that GitLab’s incoming-email work-item feature relies on a long-lived, non-expiring token that, if exposed, lets an attacker submit merge requests and land commits…
Apache Patches a Dozen Tomcat Flaws Spanning WebSockets, HTTP/2, and TLS Checks
Apache has released Tomcat 11.0.26 to close twelve security holes across WebSocket, HTTP/2, AJP, authentication, and certificate-validation code, including a message-smuggling bug and a header mix-up…
cPanel Security Update Closes Root Escalation and Cross-Tenant Data Access Flaws
cPanel has fixed three flaws that break tenant isolation, including a root-level privilege escalation and cross-account access to calendars, contacts, and WordPress databases. Hosting providers need b…
AWS Integration Lambda Could Turn Limited IAM Access Into Privileged Cloud Actions
CVE-2026-94384 allowed callers of an Amazon Connect Salesforce setup function to make AWS requests with the Lambda execution role's privileges. AWS has fixed the issue in AmazonConnectSalesforceLambda…
IBM Payment Platform Flaws Expose Financial Workflows to Code Execution and Fraud
IBM has patched a broad set of flaws in Financial Transaction Manager for Red Hat OpenShift, including unauthenticated code-execution bugs and authorization failures affecting payment actions. Custome…
Critical Next.js SVG Flaw Opens Server-Side Image Routes to Remote Code Execution
A critical flaw in the Node.js implementation of Next.js ImageResponse can turn attacker-controlled SVG data into server-side code execution. Applications using affected releases should move to Next.j…
Untrusted Android Apps Can Gain Root on OnePlus and OPPO Devices
A researcher disclosed a two-stage local privilege-escalation chain affecting OnePlus and OPPO devices running OxygenOS, including the OnePlus 15 on OxygenOS 16.0.3.503 and the OnePlus 12 Pro. A norma…
UK Plans National Centre to Counter Russian Disinformation
Prime Minister Andy Burnham announced plans for a National Centre for Information Defence to detect, attribute and disrupt hostile state-led disinformation, principally Russian influence operations. B…
Apache Tomcat 11.0.26 Fixes 12 WebSocket, HTTP/2, AJP, and TLS Flaws
The Apache Software Foundation released Apache Tomcat 11.0.26 to remediate 12 vulnerabilities affecting WebSocket, HTTP/2, AJP, authentication handling, and TLS certificate validation. The issues broa…
Malicious Firefox PDF Extension Hijacks Active Google Sessions
A malicious Firefox add-on named PDF Identity Verifier masqueraded as a protected-PDF or identity-verification tool to target signed-in Google users, primarily through Portuguese- and Spanish-language…
New Galago Ransomware Operation Emerges With Links to Panzer Extortion Group - gbhackers.com
. Fonte: https://news.google.com/rss/articles/CBMiX0FVX3lxTE1LU0k5bUZHd0NkaU8zTjVST1JvZEZ0Mnk0d2ZmM1JqR2VxTGVDNE81Q2ZqNElWQzJlWVliYXZwd0w1SzlaNm0zb3VJUjJCTzUtMVp5UVR0cDlzV0R0eXY00gFkQVVfeXFMTzdzakdYU2…
New Android Banking Trojan Uses AI-Built Overlays to Steal Users’ Banking PINs - CyberSecurityNews
. Fonte: https://news.google.com/rss/articles/CBMiaEFVX3lxTE5OOXNua2FHbUxydXZCRnVLUlJMdUlnM3NKOUVPOGRnejkyWVQ1SGM2Nk4yOW9kVDRmcUd3NVdlQTdtMzJMeDZrUFp5cmhlMU9aTVpRcDRFTDd5bEh2UGo5cjBmZjdCYUlN0gFoQVVfeX…
Canonical Moves Ubuntu Kernel CVE Fixes to Weekly Releases
Canonical is replacing Ubuntu's separate four-week Stable Release Update and two-week security-update schedules with overlapping two-week kernel release cycles, delivering a new kernel release each we…
ShinyHunters contro l’FBI: rivendicata la violazione dei sistemi HR del Bureau, dati su “quasi tutti gli agenti”
Il collettivo ShinyHunters afferma di aver violato un server Oracle PeopleSoft e un ambiente AWS GovCloud dell'FBI, sottraendo dati personali su agenti e candidati. La richiesta non è un riscatto in d…
ZRON: l’azienda cinese che trasforma email diplomatiche rubate in report di intelligence con l’IA
Un'inchiesta del Wall Street Journal su documenti interni attribuiti a ZRON, società di Zhengzhou presentata come fornitore di formazione in cybersecurity, descrive una pipeline che usa l'IA per trasf…
FBI Investigates Jobs Portal Intrusion as ShinyHunters Claims Sensitive Data Theft
The FBI is investigating unauthorized activity involving FBIjobs.gov after a defacement and expansive breach claims attributed to ShinyHunters. Some sample records reportedly matched real people, but…
Actively Exploited F5 BIG-IP OAuth Zero-Day Enables Unauthenticated RCE
F5 is warning that attackers are exploiting a critical BIG-IP APM zero-day that can provide unauthenticated remote code execution on certain OAuth authorization-server deployments. Organizations shoul…