Home > Directory > Sicurezza > Ransomfeed Daily News
Ransomfeed Daily News EN
Daily cybersecurity news · visibilità: nel misto della home, non in primo piano.
Sito originale · Feed RSS della fonte
43 voci in archivio · mostrate 1–25 .
Ransomfeed: AuditTeam e il caso della vittima italiana non definita
Il 19 settembre il gruppo criminale conosciuto come AuditTeam, specializzato in attacchi ransomware, ha rivendicato una vittima italiana, senza indicarne il nome, come da suo modus operandi classico. Nominandola unicamente “td*up” poi cattu…
Untrusted Android Apps Can Gain Root on OnePlus and OPPO Devices
A researcher disclosed a two-stage local privilege-escalation chain affecting OnePlus and OPPO devices running OxygenOS, including the OnePlus 15 on OxygenOS 16.0.3.503 and the OnePlus 12 Pro. A normally installable sideloaded app with no d…
UK Plans National Centre to Counter Russian Disinformation
Prime Minister Andy Burnham announced plans for a National Centre for Information Defence to detect, attribute and disrupt hostile state-led disinformation, principally Russian influence operations. Burnham said Russian agencies are conduct…
Apache Tomcat 11.0.26 Fixes 12 WebSocket, HTTP/2, AJP, and TLS Flaws
The Apache Software Foundation released Apache Tomcat 11.0.26 to remediate 12 vulnerabilities affecting WebSocket, HTTP/2, AJP, authentication handling, and TLS certificate validation. The issues broadly affect Tomcat versions 11.0.0-M1 thr…
Malicious Firefox PDF Extension Hijacks Active Google Sessions
A malicious Firefox add-on named PDF Identity Verifier masqueraded as a protected-PDF or identity-verification tool to target signed-in Google users, primarily through Portuguese- and Spanish-language lures. Initially listed in the Firefox…
New Galago Ransomware Operation Emerges With Links to Panzer Extortion Group - gbhackers.com
. Fonte: https://news.google.com/rss/articles/CBMiX0FVX3lxTE1LU0k5bUZHd0NkaU8zTjVST1JvZEZ0Mnk0d2ZmM1JqR2VxTGVDNE81Q2ZqNElWQzJlWVliYXZwd0w1SzlaNm0zb3VJUjJCTzUtMVp5UVR0cDlzV0R0eXY00gFkQVVfeXFMTzdzakdYU2pOdF9DczlVX1VoOTc3clhlWXNTOFQ5aGRTVXZlem…
New Android Banking Trojan Uses AI-Built Overlays to Steal Users’ Banking PINs - CyberSecurityNews
. Fonte: https://news.google.com/rss/articles/CBMiaEFVX3lxTE5OOXNua2FHbUxydXZCRnVLUlJMdUlnM3NKOUVPOGRnejkyWVQ1SGM2Nk4yOW9kVDRmcUd3NVdlQTdtMzJMeDZrUFp5cmhlMU9aTVpRcDRFTDd5bEh2UGo5cjBmZjdCYUlN0gFoQVVfeXFMTk45c25rYUdtTHJ1dkJGdUtSUkx1SWczc0o5RU…
Canonical Moves Ubuntu Kernel CVE Fixes to Weekly Releases
Canonical is replacing Ubuntu's separate four-week Stable Release Update and two-week security-update schedules with overlapping two-week kernel release cycles, delivering a new kernel release each week. Each cycle spends its first week on…
DarkMe RAT Campaign Uses Phishing and MSI Loaders to Deploy VB6 Infostealer
A new DarkMe remote-access Trojan campaign has shifted from the exploit-led delivery associated with Water Hydra to straightforward phishing. Lures disguised as image links served executable .PIF files, which launched a remote MSI installer…
Critical WordPress Template Inclusion Flaw Enables Potential RCE
WordPress released version 7.1.2 to fix critical vulnerability CVE-2026-87902 / GHSA-7hp8-65ch-5whp, an improper filename-validation flaw (CWE-98) in getpagetemplate(). Under specific server and active-theme conditions, an unauthenticated a…
ShinyHunters Claims FBI Breach Exposed Personnel and Applicant Data
ShinyHunters claims it exploited an alleged pre-authentication Oracle PeopleSoft zero-day for remote code execution against an FBI jobs webpage, defaced the site, and pivoted into FBI-managed AWS GovCloud infrastructure. The group says it e…
SA is under cybersiege — and the situation will only get worse - Daily Maverick
. Fonte: https://news.google.com/rss/articles/CBMiswFBVV95cUxPMUFmUkVJQnFzT2I3aXduLVFFMUJVQ3lSVEtXR3dfbzFQQnZObFZuZXdnbHlDcTJ3eGx0cFA5UUVGTUl0aV9haVN6a2N6WnE4bnlTN0ZUc1hiV3RfMG5qZ2xuanhsM2tjRnpFcTZZZ29PSFFxNjZyUjl5R3FQN3lUSWxWNEladE9qaEt6QW…
Ireland among five EU countries 'targeted' by Chinese text-scam group - Irish Examiner
. Fonte: https://news.google.com/rss/articles/CBMiY0FVX3lxTE9OWUtlVkxVajhmOUJma1dCV1N6X0RZNnF5b1ZOSVJDSmtwLXNqYkxhaDNucWdGTXdUQUFGeEl0ZWx2Qm9yak1tWHRsY0NjbFBMdWFaM3cwUUZoMzZWQVduMUpwMA?oc=5
Spaggiari Hacked, xpl0itrs Claims 6.1 TB From 3,000+ Italian Schools. Is ClasseViva Safe? - Pasquale Pillitteri
Spaggiari Hacked, xpl0itrs Claims 6.1 TB From 3,000+ Italian Schools. Is ClasseViva Safe? Pasquale Pillitteri. Fonte: https://news.google.com/rss/articles/CBMijwFBVV95cUxOWVcwdnF1UUFsV1dYUnhKWVZDSlBpU3hkc3pSdTZqcWVnN0VnTUtnX01UQzh0Qm1JajF4S…
Japan outlines measures to protect infrastructure from cyberattacks - The Japan Times
Japan outlines measures to protect infrastructure from cyberattacks The Japan Times. Fonte: https://news.google.com/rss/articles/CBMiqgFBVV95cUxQbEJEQ29kb2JycjZJdUNqTUFDTy1zbmdRM0VxSnozeGNDTllnMFRjd0lqZGdjWkhTUjdjM2tEdmtQT1dRQU5Pc3hZaWpQaEd…
Mustang Panda Deploys SolidPDFCreator Stage-1 Backdoor Against India Targets
Researchers identified a Windows DLL backdoor dubbed SolidPDFCreator and attributed it to the China-linked threat group Mustang Panda, describing the malware as a stage-1 backdoor used in a campaign targeting entities in India. The sample w…
OAuth Client ID Spoofing Enables Stealthy Microsoft Entra Account Enumeration
Proofpoint reported that attackers are increasingly abusing OAuth client ID spoofing against Microsoft Entra ID to enumerate accounts and validate credentials without registering a legitimate OAuth application. The activity relies on Resour…
Ghostcommit Uses PNG-Hidden Prompts to Make AI Coding Agents Leak Secrets
Researchers disclosed Ghostcommit, a proof-of-concept software supply-chain attack that hides prompt-injection instructions inside a PNG image referenced by an AGENTS.md file, allowing malicious pull requests to appear benign during review…
Allies Attribute Turla Espionage and Router Intrusions to Russia’s FSB Centre 16
The UK, France, the EU, and partner cyber agencies publicly attributed a broad cyber-espionage campaign to FSB Centre 16, linking the Russian intelligence unit to both the long-running Turla intrusion set and active exploitation of internet…
CERT Polska Discloses Four Vulnerabilities in GNU gawk
CERT Polska disclosed four vulnerabilities in GNU gawk, tracked as CVE-2026-40467, CVE-2026-40468, CVE-2026-40469, and CVE-2026-40553. The issues were highlighted in a CERT Polska advisory and later amplified by security reporting, identify…
Debian 13.6 Ships Broad Security Fixes and Secure Boot Certificate Updates
Debian has released Debian 13.6 as a point update focused on security and maintenance, alongside Debian 12.15 for the previous stable branch. Debian 13.6 bundles roughly 120 security updates and more than 120 bug fixes, with patches affecti…
Ryuk Operator Pleads Guilty as BlackCat Negotiator Gets Prison Sentence
U.S. prosecutors announced two significant ransomware case outcomes: Armenian national Karen Serobovich Vardanyan pleaded guilty to conspiracy and computer fraud for helping compromise U.S. organizations and deploy Ryuk ransomware, while Fl…
Keycloak fixes FGAPv2 privilege escalation and multiple access control flaws
Keycloak disclosed and patched a high-severity privilege escalation flaw, CVE-2026-9795, in its Fine-Grained Admin Permissions v2 (FGAPv2) feature after researchers reported that a delegated administrator could bypass missing authorization…
Google and FBI Disrupt NetNut Residential Proxy Network Used by Malware Operators
Google said it disrupted NetNut—also known as Popa—a large residential proxy network that investigators linked to malware delivery, command-and-control activity, and efforts by cybercriminal and espionage actors to mask their origin IP addr…
Alibaba Bans Claude Code Over Alleged Hidden China-Detection Logic
Alibaba has ordered employees to stop using Anthropic’s Claude Code for work and reportedly directed them to remove other Anthropic products, classifying the software as high risk over alleged security vulnerabilities and backdoor concerns…