Home > Directory > Sicurezza > SecureBulletin
SecureBulletin EN
Cybersecurity news in English · visibilità: nel misto della home, non in primo piano.
Sito originale · Feed RSS della fonte
1.213 voci in archivio · mostrate 1–25 .
Critical Cisco Expressway Cluster Flaw Opens Path to Root RCE
Cisco has patched a CVSS 9.8 vulnerability that could let a remote attacker execute operating-system commands as root on clustered Expressway systems. There is no workaround, making an upgrade to a fixed release the central defensive action…
Splunk Patches 24 Flaws, Including Four Critical Enterprise and SOAR Bugs
Splunk has issued a broad security release correcting 24 vulnerabilities across Enterprise, SOAR, and Secure Gateway. Four flaws are rated critical, while several others create command-execution, authorization-bypass, or denial-of-service r…
Quest Diagnostics Investigates Unauthorized Access to Lab Results Platform
Quest Diagnostics has suspended its Quanum Lab Services Manager after discovering unauthorized access involving patient health or identifying information. The company says core operations remain available while investigators determine the n…
Unpatched Linux KSMBD Flaws Exposed Before Fixes Were Ready
Technical details for several unresolved Linux-related vulnerabilities were posted publicly before fixes were broadly available. Two CVSS 9.0 KSMBD flaws could enable remote code execution, although exposure depends on use of the kernel SMB…
Major US Banks Scramble to Rein In Rogue AI Agents Inside Customer Accounts
Morgan Stanley, Chase, Bank of America, Wells Fargo, and Citi are grappling with third-party AI assistants that customers have handed their banking logins to, some of which have gone on to contact call centers or take actions banks never ap…
eMudhra Abandons Global SSL/TLS Certificate Business After Weak-Key Disaster
Indian digital trust provider eMudhra is walking away from the global SSL/TLS certificate market entirely, weeks after researchers showed that eight of its intermediate CA certificates were signed with private keys weak enough to recover al…
Anthropic’s Claude Security Moves From One-Off Scans to Always-On Vulnerability Monitoring
Anthropic has updated Claude Security so it continuously rescans connected code repositories as they change, rather than waiting for someone to kick off a scan, and now automatically tracks whether previously reported flaws have actually be…
New Extortion Gang ScarlettGroup Puts Countdown Timers on Alleged Corporate Breaches
Researchers at Foresiet have identified a previously unseen extortion operation, dubbed ScarlettGroup, that lists alleged corporate victims on a dark web site complete with countdown timers pressuring them to pay before any data is publishe…
Railway Incident May Have Exposed Customer API Keys and Database Secrets
Railway says an unauthorized party may have accessed customer environment variables, including some decrypted secrets. Customers are being urged to rotate credentials immediately while the cloud platform investigates the scope of the incide…
GitLab Fixes 12-Year-Old CVSS 10 Flaw Enabling Unauthenticated RCE
GitLab has patched a maximum-severity vulnerability that could let an unauthenticated attacker execute code on self-managed servers. The affected code dates to GitLab 7.0, making immediate upgrades and log review a priority for administrato…
Node.js Patches Brotli RCE and High-Severity TLS and DNS Flaws
New Node.js releases address ten vulnerabilities across supported branches, including a potential Brotli remote code execution flaw and certificate-validation bypasses. Teams should update runtimes, rebuild application images and test netwo…
Malicious LiteLLM 1.107.0 Package Steals Credentials and Opens RAT Channel
LiteLLM 1.107.0 was compromised on PyPI and in container images, delivering a credential stealer plus a remote-code loading mechanism. Anyone who installed the release should isolate affected systems, rebuild from trusted sources and rotate…
GoDaddy Forces Mass TLS Certificate Reset After Compliance Lapse Hits 400,000+ Sites
GoDaddy has revoked more than 404,000 SSL/TLS certificates issued under its GoDaddy and Starfield chains after discovering the certificates did not match its published certificate policies, then missed its own revocation deadline. Site owne…
Report: Most AI Agents Sit Idle for Months Yet Keep Full Access to Company Systems
A new telemetry-based report from Arrakis Security finds that 76% of AI agents deployed inside organizations haven't run in over 60 days — yet their credentials, permissions, and triggers remain fully active, with a quarter of them startabl…
Criminals Lean on AI-Enhanced ‘Antidetect’ Browsers to Run Armies of Fake Accounts
Check Point Research has documented how commercially sold antidetect browsers such as Kameleo, AdsPower, and MultiLogin are being used by criminal groups to disguise thousands of fake accounts as unique, legitimate users — and how AI integr…
Gentlemen Ransomware Gang Disarms Windows Defender and Shreds Backups Before Encrypting Files
Acronis researchers have detailed how the Gentlemen ransomware-as-a-service operation disables Windows Defender, kills backup services, wipes Volume Shadow Copies, and even abuses a vulnerable Lenovo driver to kill security tools at the ker…
Stolen UpdraftCentral Keys Let Attackers Backdoor WordPress Sites
A breach at TeamUpdraft exposed remote-management keys that attackers used to push malicious plugins to connected WordPress sites. Administrators should update UpdraftPlus, remove old connection keys and hunt for unauthorized users or backd…
PHP Prepares Emergency Fixes for Two Critical 9.2 Flaws
PHP is preparing security updates for two critical vulnerabilities rated 9.2 under CVSS 4.0. Administrators should inventory exposed PHP systems now and apply the official fixes as soon as affected versions are confirmed. The post PHP Prepa…
Compromised eMudhra CA Keys Force Emergency Trust-Store Updates
Eight eMudhra intermediate certificate-authority keys were shown to be compromised, triggering emergency blocks across browsers and software ecosystems. Browsers update quickly, but applications with bundled or stale trust stores may remain…
WP2Shell Chains WordPress Flaws Into Unauthenticated Server Takeover
The WP2Shell technique combines two WordPress Core vulnerabilities to create administrator access and deploy a plugin-based web shell without a login. Operators should upgrade to a fixed release and check for distinctive archives, PHP files…
Ransomware Negotiator Allegedly Ran Extortion Site for ShinyHunters, FBI Probe Finds
Federal investigators suspect an executive at a major U.S. consulting firm helped ShinyHunters run a pressure site that pushed nearly 100 breached companies toward paying extortion demands. The case, running alongside the separate arrest of…
Fraudsters Turn Open Banking Links Into a Free Stolen-Card Checking Service
Group-IB uncovered a scheme in which criminals abused a spend-management platform's open-banking integration to silently verify stolen card and bank credentials, while the platform unknowingly footed the bill. The same operation used the pl…
Ransomware Gangs Lean on Generative AI to Outrun Signature-Based Defenses
New Zscaler research shows ransomware operators increasingly using generative AI to write custom malware, craft near-flawless phishing lures, and sift stolen data faster than ever. The trend is eroding the value of detection built around kn…
Midnight Mimosa Firmware Malware Infects Thousands of Budget Android Phones Worldwide
Researchers have traced a firmware-embedded malware campaign called Midnight Mimosa to thousands of low-cost Android devices across 150+ countries, giving attackers system-level control before a single app is installed. The malware briefly…
Exploited SiteGuard Flaw Can Elevate Attackers to Root or SYSTEM
Attackers are exploiting CVE-2026-106931, a command-injection flaw in SiteGuard Server Edition's default-enabled statistics feature. Administrators should preserve diagnostic evidence before applying the vendor's update or replacement-file…