Home > Directory > Sicurezza > SecureBulletin
SecureBulletin EN
Cybersecurity news in English · visibilità: nel misto della home, non in primo piano.
Sito originale · Feed RSS della fonte
1.213 voci in archivio · mostrate 951–975 .
Amazon S3 buckets targeted by new ransomware attacks
A new wave of ransomware attacks has emerged, targeting Amazon Web Services (AWS) by exploiting its Server-Side Encryption with Customer Provided Keys (SSE-C). This tactic allows threat actors to encrypt Amazon S3 buckets, effectively locki…
Nominet UK provider confirms cybersecurity incident after hack exploit on Ivanti VPN
Nominet, the prominent U.K. domain registry responsible for managing .co.uk domains, has confirmed a significant cybersecurity incident linked to a recently disclosed vulnerability in Ivanti’s VPN software. In a communication sent to its cu…
Vulnerability in the Aviatrix Controller used to deploy backdoors
A critical security vulnerability in the Aviatrix Controller cloud networking platform, identified as CVE-2024-50603, is currently being exploited by cybercriminals to deploy backdoors and cryptocurrency mining operations. This flaw, which…
Attorney General of the State of New York alleges against unknown parties in ownership of digital wallet addresses
New York’s Attorney General Letitia James has launched a significant legal battle, aiming to reclaim over $2 million in cryptocurrency that was stolen through a sophisticated remote job scam. This lawsuit, filed in late November 2022, highl…
WordPress threats targeting website with credit card skimmer
A new wave of cyber threats has emerged, targeting WordPress websites with a sophisticated credit card skimmer that operates through database injections. This malware, which stealthily embeds itself within the WordPress database, specifical…
HexaLocker V2: double extortion and Skuld Stealer
The notorious HexaLocker ransomware has resurfaced with a revamped version, HexaLocker V2, which is now being disseminated through the Skuld Stealer. This new iteration introduces advanced functionalities that heighten its threat level sign…
OneDrive Bug Fix: say goodbye to freezes on MacOS 15 Sequoia
Microsoft announced a fix for a frustrating bug that has been causing macOS applications to freeze when users attempt to open or save files in OneDrive. This issue primarily affected users running macOS 15 Sequoia, the latest operating syst…
Russian ISP Nodex confirmed that its network had been “destroyed” by Ukrainian hacktivists
On January 8, 2025, a significant cyber incident unfolded as the Russian internet service provider (ISP) Nodex confirmed that its network had been “destroyed” following a coordinated attack by Ukrainian hacktivists from the Ukrainian Cyber…
Hackers are exploiting new vulnerability on Ivanti
Ivanti has issued a critical warning regarding the exploitation of a newly discovered vulnerability in its Connect Secure product, identified as CVE-2025-0282. This remote code execution flaw has been actively targeted by hackers in zero-da…
T-Mobile data breach: Washington State has initiated legal proceedings
Washington State has initiated legal proceedings against T-Mobile, alleging significant cybersecurity failures that led to a massive data breach in 2021. This breach compromised the personal information of over 79 million customers nationwi…
Mirai-based botnet also targets Huawei routers
A new wave of cyber threats has emerged as a sophisticated Mirai-based botnet has been discovered targeting industrial routers and smart home devices using zero-day exploits. This alarming development, reported by Chainxin X Lab, indicates…
Critical vulnerabilities in Oracle WebLogic Server and Mitel MiCollab, CISA warns
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding critical vulnerabilities in Oracle WebLogic Server and Mitel MiCollab systems that are currently being exploited in cyberattacks. This adviso…
Brazilian business attacked from Water Makara campaign
A recent cyber threat report highlights the Water Makara campaign, a sophisticated spear-phishing attack specifically targeting Brazilian enterprises. This operation employs advanced social engineering tactics to deceive victims into clicki…
China accused of demaged undersea cable near Taiwan
Taiwan has recently accused a Chinese-owned cargo ship of deliberately damaging an undersea communication cable off its northeastern coast, an incident that underscores the vulnerabilities of the island’s critical infrastructure amid rising…
Atos denies any breach of their systems, after SpaceBears ransomware claim
Atos, a prominent player in the global IT services sector, has recently found itself at the center of a cybersecurity controversy following allegations of a ransomware attack by the group known as Space Bears. The allegations surfaced when…
DoS vulnerability CVE-2024-56332 in Next.js, update now
Next.js, a popular React framework, has recently addressed a critical denial-of-service (DoS) vulnerability identified as CVE-2024-56332. This security flaw was discovered in the server actions feature of Next.js, which could potentially al…
New NonEuclid RAT, anti-scan e persistent threat
The recent emergence of the NonEuclid Remote Access Trojan (RAT) has raised significant concerns within the cybersecurity community, with its sophisticated capabilities making it a formidable threat to both individuals and organizations. De…
Threat intelligence perspective of DORA Regulation
Team Cymru discusses the Digital Operational Resilience Act (DORA) and its implications from a threat intelligence perspective. DORA aims to enhance the digital resilience of financial entities within the European Union by establishing a co…
Glutton: a new PHP backdoor
On April 29, 2024, XLab’s threat analysis system detected unusual activities linked to a new malware named Glutton, designed to stealthily infiltrate popular PHP frameworks. This malware was discovered while distributing a malicious PHP fil…
3.1 million fake “stars” on GitHub projects
A recent study has unveiled a troubling trend on GitHub, revealing that over 3.1 million fake “stars” have been used to artificially inflate the popularity of certain projects. This manipulation not only misleads users but also facilitates…
Cyber attack takes down IT infrastructure of Thomas Cook
Global travel agency Thomas Cook’s Indian division is currently grappling with the aftermath of a significant cyber attack that has severely disrupted its IT infrastructure. In a formal announcement made on December 31, the company disclose…
Data breach: China hacked Treasury Dept
The U.S. Treasury Department has recently reported (on Dec. 8) a significant cybersecurity breach, which they attribute to a state-sponsored group from China. This incident has been classified as a “major incident,” highlighting the severit…
Urgent: update your .NET installer link, new Microsoft issue
Microsoft has issued an urgent warning to .NET developers regarding the imminent shutdown of two critical domains used for installing .NET components: dotnetcli.azureedge.net and dotnetbuilds.azureedge.net. This action is prompted by the ba…
USA proposes new cybersecurity rules to limit impact of healthcare data leaks
The Biden administration has recently proposed new cybersecurity regulations aimed at enhancing protections within the healthcare sector. This initiative is part of a broader effort to strengthen the nation’s cybersecurity framework, partic…
North Korean threat actors adopt infostealer spreading tactics
In a recent development, North Korean hackers have adopted advanced malware distribution techniques reminiscent of the notorious Clickfix campaigns, marking a significant evolution in their cybercrime strategies. This new approach highlight…