Home > Directory > Sicurezza > SecureBulletin
SecureBulletin EN
Cybersecurity news in English · visibilità: nel misto della home, non in primo piano.
Sito originale · Feed RSS della fonte
1.213 voci in archivio · mostrate 1.001–1.025 .
Ransomware claims surge: Akira and RansomHub lead the charge
As ransomware incidents reach unprecedented levels, these groups have gained notoriety for their aggressive tactics and increasing effectiveness in targeting organizations. Ransomware Claims Surge: Akira and RansomHub Lead the Charge In a c…
DoJ indicts 14 North Koreans for $88M IT worker fraud scheme over six years
The U.S. Department of Justice has indicted 14 North Korean nationals for their alleged involvement in an extensive fraud scheme that reportedly generated $88 million over six years. The indictment claims that these individuals orchestrated…
Critical vulnerabilities in Skoda and Volkswagen infotainment systems
Cybersecurity researchers from PCAutomotive have uncovered 12 significant vulnerabilities in the infotainment systems of certain Skoda and Volkswagen vehicles, exposing over 1.4 million cars to potential exploitation. These findings were di…
Coordinated hacktivist cyberattacks target France
On December 6, 2024, the hacktivist alliance known as the “Holy League” launched coordinated cyberattacks against France, citing the nation’s support for Ukraine and Israel as motivation. The group comprises ideologically diverse factions…
November 2024 APT attack trends in South Korea
In November 2024, South Korea faced a surge in Advanced Persistent Threats (APTs), with spear phishing being the most prevalent attack vector. This report by AhnLab highlights key trends and tactics used by cybercriminals. Key Findings Reco…
QNAP NAS vulnerabilities
QNAP NAS systems, widely used for data storage, have been flagged for several critical vulnerabilities that pose significant risks to users and organizations. Here’s what you need to know and how to secure your system. Key Vulnerabilities I…
U.S. Officials Warn Americans to Use Only Encrypted Messaging Apps
In light of a significant cyberespionage campaign targeting U.S. telecommunications, federal agencies have issued an urgent advisory for Americans to adopt encrypted messaging apps. This move is part of a broader effort to mitigate the risk…
Critical NTLM Vulnerability in Windows
Security researchers have identified a critical vulnerability affecting all Windows Workstation and Server versions, including Windows 7, Server 2008 R2, Windows 11 (v24H2), and Server 2022. This vulnerability allows attackers to obtain NTL…
Phishing evolved: how fake CAPTCHAs are tricking users
A recent article highlights a sophisticated phishing attack discovered by ANY.RUN, a malware analysis platform. This attack employs a fake CAPTCHA mechanism to deceive users into revealing sensitive information. Key Highlights of the Report…
Apache Tomcat vulnerability (CVE-2024-38286)
A severe vulnerability has emerged in Apache Tomcat, a widely used Java application server. Identified as CVE-2024-38286, this flaw poses a serious risk to organizations that rely on Tomcat to run their mission-critical applications.Vulnera…
Unmasking north korean IT workers targeting global tech sectors
In today’s digital landscape, organizations face an escalating threat from cybersecurity attacks, leading to severe financial and reputational consequences. Cybersecurity encompasses a comprehensive arsenal of technologies, processes, and p…
Beware of sophisticated phishing attacks targeting hotel Bookings
Phishing attacks are a common form of cybercrime that involves attackers impersonating legitimate entities to trick victims into revealing sensitive information. One such attack targeting travelers revolves around the popular booking platfo…
Unveiling UNC1860: Iran’s stealthy cyber threat
In the ever-evolving cybersecurity landscape, state-sponsored threat actors continue to pose significant risks to organizations worldwide. Among them is UNC1860, an Iranian-based cyber espionage group recently exposed by Mandiant.Sophistica…
TeamTNT resurfaces: cybersecurity experts warn of new cloud server attacks
The notorious hacking group TeamTNT has returned with a new campaign targeting Virtual Private Server (VPS) infrastructures running on the CentOS operating system. This attack highlights the escalating complexity of securing cloud environme…
Raptor Train Botnet hacked 200,000+ devices worldwide
A botnet is a formidable network of compromised devices controlled by a central entity known as a bot herder. These devices, known as bots, are infected with malware and can be used to execute various malicious activities. Recently, the dis…
Tor remains safe despite law enforcement infiltration
In response to recent reports alleging that German law enforcement agencies have breached the Tor network to identify criminals, the Tor Project maintains that its anonymity protections remain secure for most users.Infiltration and Mitigati…
Russia’s Dr.Web disconnects servers to mitigate attack
In a recent cyberattack, the Russian cybersecurity firm Dr.Web (Dr.Web) was compelled to take immediate action to protect its infrastructure and users. This incident highlights the importance of robust incident response plans and the ongoin…
Discord unveils End-to-End encryption for enhanced voice and video privacy
Discord, the popular voice and chat platform, has recently announced the rollout of end-to-end encryption (E2EE) for audio and video calls. This significant update marks a major step forward in the company’s commitment to user privacy and s…
ServiceNow instances expose sensitive corporate data
A recent study by AppOmni has uncovered a critical vulnerability in over 1,000 enterprise ServiceNow instances, resulting in the exposure of sensitive corporate data. Organizations relying on ServiceNow for knowledge management and collabor…
SpyCloud reveals infostealer epidemic, emphasizing the urgency of enhanced cybersecurity
Recent research by SpyCloud, a leading provider of Cybercrime Analytics, has uncovered an alarming trend: infostealers, a type of malware designed to steal digital identity data, are increasingly becoming the precursor to ransomware attacks…
Windows MiniFilter vulnerability: a threat to EDR security
Endpoint Detection and Response (EDR) solutions are essential for modern cybersecurity defenses. However, research has revealed a vulnerability in Windows MiniFilter drivers that can be exploited to prevent EDR drivers from loading, effecti…
Ghostly cybercrime lair exposed: admin faces charges
In a groundbreaking triumph for law enforcement, the sophisticated encrypted communication platform Ghost has been dismantled in a worldwide operation known as “Kraken.” This international collaboration effectively targeted a platform desig…
PRC-Linked cyber actors leveraging massive botnet for malicious activities
In a joint cybersecurity advisory, the FBI, Cyber National Mission Force (CNMF), and National Security Agency (NSA) have exposed a significant threat to Internet-connected devices. Chinese hackers have compromised thousands of devices, crea…
Critical Windows kernel vulnerability disclosed
Microsoft has issued an urgent warning regarding a critical Windows kernel vulnerability (CVE-2024-37985) that could result in the disclosure of sensitive information. This vulnerability affects ARM-based systems and poses a moderate level…
Apple iOS 18 patches 32 security flaws
Apple has released iOS 18, a major software update that addresses a multitude of security vulnerabilities across its operating system. These vulnerabilities posed significant risks to user privacy and security, making it imperative for Appl…