Home > Directory > Sicurezza > SecureBulletin
SecureBulletin EN
Cybersecurity news in English · visibilità: nel misto della home, non in primo piano.
Sito originale · Feed RSS della fonte
1.213 voci in archivio · mostrate 976–1.000 .
Captcha abuse attack
Cybersecurity experts at ReliaQuest have recently uncovered a troubling trend in cybercrime: the use of fake CAPTCHA pages to distribute malware. This tactic has seen a significant rise in incidents, particularly between October and Decembe…
Bashe, an APT73 group
Bashe, a newly emerged ransomware group formerly known as APT73 or Eraleig, has quickly made a name for itself in the cybercrime landscape since its inception in April 2024. With tactics reminiscent of the notorious LockBit group, Bashe has…
Ransomware attack on Ascension, 5.6 milion people impacted
A recent ransomware attack on Ascension, one of the largest healthcare systems in the United States, has reportedly impacted approximately 5.6 million individuals. This incident highlights the increasing vulnerability of healthcare organiza…
Pegasus spyware controversy: NSO Group faces legal consequences for 1,400 infections
A recent court ruling has significant implications for the controversial NSO Group, known for its development of the Pegasus spyware. The court found the company liable for approximately 1,400 infections linked to its software, which has be…
NodeStealer targets Facebook Ads Manager through Python
The latest findings from Trend Micro reveal a significant evolution in cyber threats with the emergence of a Python-based variant of NodeStealer, a malware previously known for its JavaScript origins. This new version is particularly alarmi…
The controversial gang Dragon Ransomware: ideology meets crime
Dragon Ransomware has emerged as one of the most polarizing actors in the global cybercrime landscape. Operating under the Ransomware-as-a-Service (RaaS) model, the group officially launched on July 9, 2024, with a stated mission that trans…
Mastercard finalized acquisition of Recorded Future for $2.6 billion
Mastercard has made a significant move in the cybersecurity landscape by acquiring Recorded Future, a leading threat intelligence provider. This acquisition, valued at approximately $780 million, aims to enhance Mastercard’s capabilities in…
LockBit developer arrested in Israel
In a significant development in the fight against cybercrime, Israeli authorities have arrested a key figure behind the notorious LockBit ransomware group. This arrest marks a critical step in disrupting one of the most prolific ransomware…
Lynx ransomware and its new utilities
The recent surge in ransomware attacks, particularly targeting the utilities sector, has raised significant concerns among cybersecurity experts. A new report from the Center for Internet Security (CIS) highlights the alarming trend of the…
XWorm: old malware revamped with new infection tactics
In the evolving landscape of cybersecurity threats, attackers are constantly innovating to exploit vulnerabilities and compromise sensitive systems. A recent analysis by Seqrite reveals the resurgence of XWorm malware, utilizing advanced mu…
Chinese communist party propaganda network expands through global communication hubs
The Chinese Communist Party (CCP) has significantly accelerated its global propaganda efforts, with the establishment of over 100 International Communication Centers (ICCs) across China. These centers aim to strengthen China’s narrative and…
U.S. cracks down on cybercrime: Rydox Marketplace shutdown
The U.S. Department of Justice has announced a significant crackdown on cybercrime with the shutdown of the Rydox marketplace, a notorious online platform facilitating illegal activities. This operation led to the arrest of three key admini…
Germany disrupts BadBox malware operation
The Federal Office for Information Security (BSI) in Germany has issued a significant warning regarding pre-installed malware found on Internet of Things (IoT) devices, specifically targeting digital photo frames and media players. This ale…
LockBit ransomware group sets the stage for a dramatic comeback with version 4.0
The notorious LockBit ransomware group is gearing up for a major return with the anticipated release of LockBit 4.0, scheduled for February 3, 2025. This announcement comes nearly a year after global law enforcement actions disrupted the gr…
Phishing attack targets European firms
A recent investigation by Unit 42 has unveiled a significant phishing campaign targeting European companies, particularly in the automotive and chemical sectors. This operation, which peaked in June 2024, aimed to harvest user credentials a…
C.A.S operations: RATs and Russian malware exploits
The Cyber Anarchy Squad (C.A.S), a prominent hacktivist group, has intensified its operations against organizations in Russia and Belarus since its emergence in 2022. Recent investigations have unveiled their sophisticated attack methodolog…
Who’s registering what? Exploring trends in gTLDs and ccTLDs with WhoisXML API
A recent white paper released by WhoisXML API sheds light on the evolving landscape of domain name registrations, revealing intriguing trends in both generic top-level domains (gTLDs) and country code top-level domains (ccTLDs). The researc…
Threat actors exploit brand collaborations to target popular YouTube channels
In recent years, collaborations between brands and influencers on platforms like YouTube have surged, creating lucrative opportunities for content creators. However, this trend has also attracted malicious actors who seek to exploit these p…
An app that contains a banker malware
A recent article on Securelist highlights a new malware threat known as “Mamont,” which is disguised as a parcel tracking application. This sophisticated banking Trojan targets users by masquerading as a legitimate service, making it easier…
Yokai Backdoor campaign using DLL side-loading techniques
Thai government officials are currently facing a sophisticated cyber threat as they become the primary targets of a new malware campaign utilizing a technique known as DLL side-loading. This attack delivers a previously unknown backdoor nam…
Curl vulnerability exposes user credentials in redirects
A recently discovered vulnerability in cURL, identified as CVE-2024-11053, poses a significant risk by potentially exposing user credentials during HTTP redirects. This flaw affects various applications that utilize cURL for data transfer…
FLUX#CONSOLE: new malware campaign exploits Windows Management Console
In a sophisticated attack dubbed FLUX#CONSOLE, threat actors are employing tax-themed phishing lures to exploit the Microsoft Management Console (MMC), leveraging .msc files to deliver stealthy backdoor payloads. This technique, which build…
Cryptojacking: protecting Docker and Kubernetes environments from new attacks
Cryptojacking—the unauthorized use of systems to mine cryptocurrency—has seen a troubling surge, with attackers increasingly exploiting misconfigured Docker and Kubernetes environments. This alarming trend targets high-performance cloud inf…
DragonRansomware emerges: a new threat on Telegram
A new ransomware variant called DragonRansomware has made its debut, promising customizable and efficient ransomware operations aimed at Windows systems. With a focus on speed, compactness, and user customization, DragonRansomware is poised…
Emerging ransomware threat targets macOS users
Apple users, beware! A new ransomware variant, macOS.NotLockBit, is shifting the cybersecurity landscape, traditionally dominated by Windows and Linux threats, to include macOS systems. Experts from Trend Micro and SentinelLabs have identif…