Home > Directory > Sicurezza > SecureBulletin
SecureBulletin EN
Cybersecurity news in English · visibilità: nel misto della home, non in primo piano.
Sito originale · Feed RSS della fonte
1.213 voci in archivio · mostrate 1.026–1.050 .
AI and cryptography: enhancing security with ChatGPT
Cybersecurity breaches are often the result of vulnerabilities in cryptographic implementations. Traditional static analysis tools often fall short in detecting these misuses. This article explores the potential of ChatGPT, an AI language m…
Access Sports data breach: analysis
Access Sports Medicine & Orthopaedics has fallen victim to a significant data breach, compromising the sensitive information of over 88,000 users. This incident serves as a sobering reminder of the persistent cybersecurity threats that heal…
Critical macOS Calendar vulnerability: zero-click execution of malicious code
A severe zero-click vulnerability has been discovered within Apple’s macOS Calendar application, posing a significant threat to user security. This vulnerability enables attackers to compromise user devices without requiring any interaction…
Fileless Remcos RAT: a threat to watch out for in weaponized Excel documents
Remcos, a Remote Access Trojan (RAT), has been actively used in cybercriminal campaigns since 2016. Recently, cybersecurity researchers have uncovered a new wave of malware operations involving Excel documents weaponized to deliver a filele…
Malicious Google ads target mac users with fake AppleCare+ scam
A recent malicious campaign has been discovered targeting Mac users seeking support or extended warranty services through AppleCare+. These scams use deceptive tactics to lure victims into losing money.The Scam Strategy
SAP employee data leak: a critical 888 threat
A recent Twitter post by DarkWebInformer has raised concerns about a potential data leak involving sensitive employee information belonging to SAP SE, a leading enterprise software provider. This alleged breach, if confirmed, could have sig…
Android malware on the rise: Ajina threatens mobile banking security
The cybersecurity landscape is constantly evolving, with malicious actors developing increasingly sophisticated malware to target users’ devices. Recent advancements in Android malware have taken a concerning turn, as new threats emerge cap…
Medusa ransomware exploits critical Fortinet vulnerability
The notorious Medusa ransomware group has once again demonstrated its advanced capabilities by exploiting a critical SQL injection vulnerability (CVE-2023-48788) in Fortinet’s FortiClient EMS software. This vulnerability has enabled Medusa…
Port of Seattle hit by Rhysida ransomware attack
In a concerning development, the Port of Seattle has disclosed a cyberattack attributed to the notorious Rhysida ransomware group. The incident, which occurred on August 24, 2024, disrupted airport and maritime operations, highlighting the…
1.3 Million Android TV boxes compromised by Android.Vo1d malware
Android TV boxes have become increasingly popular for streaming content, apps, and other online services. However, a recent discovery by cybersecurity analysts at Dr. Web reveals that a massive number of these devices have been infected by…
Hadooken malware targeting Oracle WebLogic servers
Oracle WebLogic Server, a widely used application server for enterprise applications, has recently become a target of a new Linux malware known as Hadooken. This malicious program exploits weak administrator credentials to gain access and d…
Teenage suspect arrested in major cyberattack on London Transport
In a significant development, the National Crime Agency (NCA) has arrested a 17-year-old teenager from Walsall in connection with the recent cyberattack that targeted Transport for London (TfL).Ongoing InvestigationThe arrest stems from an…
Fortinet suffers data breach via compromised third-party file-sharing service
Fortinet, a leading cybersecurity provider, has disclosed a data breach incident involving unauthorized access to a third-party cloud-based file-sharing service used by the company. The breach reportedly affected a limited number of Fortine…
Cybercriminals exploit legitimate software for insidious attacks
Cybercriminals are evolving their tactics, leveraging legitimate software to evade detection and compromise systems. By blending into normal network traffic, these actors render traditional security measures ineffective, making threat mitig…
Kawasaki Europe hit by cyberattack, RansomHub group demands ransom
Kawasaki Motors Europe (KME) has confirmed a cyberattack in early September that resulted in disruptions to its operations. While the attack was initially reported as “unsuccessful,” the company isolated its servers as a precautionary measu…
Critical Cisco vulnerability threatens Web-Based management interfaces
Cisco has recently disclosed a severe vulnerability (CVE-2024-20381) impacting the JSON-RPC API feature used by various web-based management interfaces in its products. This flaw poses a significant risk to organizations utilizing these pla…
Mastercard bolsters cybersecurity defenses with Recorded Future acquisition
Mastercard has made a significant stride in its cybersecurity services with the announcement of its acquisition of Recorded Future, a renowned global threat intelligence company. This strategic move, valued at $2.65 billion, aims to elevate…
Criminal IP and IPLocation.io collaborate for enhanced IP solutions
Criminal IP, a leading cyber threat intelligence (CTI) search engine, has integrated its IP risk detection data with IPLocation.io, a renowned IP address geolocation tracker. This collaboration elevates IP analysis by providing comprehensiv…
Cybersecurity alert for Small and Mid-sized Businesses: CosmicBeetle threat actor on the rise
Small and mid-sized businesses (SMBs) are increasingly becoming targets of cybercriminals due to weaker security measures and lack of cybersecurity awareness. Cyberattackers often exploit vulnerabilities in outdated software and systems to…
Kali Linux 2024.3: elevating cybersecurity with enhanced features
Kali Linux, the ubiquitous penetration testing and ethical hacking distribution, has unveiled its latest iteration, version 2024.3. This comprehensive update introduces a plethora of new features, including 11 cutting-edge hacking tools, en…
Urgent: GitLab warns of critical vulnerability, advises immediate patching
GitLab, a popular DevOps platform, has recently released a critical security update to address several high-severity vulnerabilities. Organizations using GitLab must prioritize upgrading to the latest patched versions immediately to safegua…
Protecting critical data with Google Cloud’s Air-Gapped backup vaults
In a bid to combat the growing threat of ransomware and data manipulation, Google Cloud has introduced air-gapped backup vaults as part of its enhanced Backup and Disaster Recovery service.Enhanced Data ProtectionThe centerpiece of this upd…
Android banking malware: TrickMo threatens login credentials
Banking malware is a growing menace, targeting financial institutions and their customers. Android banking malware, in particular, has seen a significant surge, exploiting vulnerabilities in the Android operating system to steal sensitive u…
Lazarus’s Shadow: identifying six north korean threat groups
Lazarus Group, a notorious Advanced Persistent Threat (APT) group, has been linked to the North Korean government and its intelligence agency. This group has engaged in a wide range of cybercriminal activities since 2009, targeting critical…
Phishing attacks get smarter: attackers exploit HTTP response headers
Cybersecurity researchers at Unit 42 have uncovered a sophisticated new phishing technique that leverages HTTP response headers to deliver malicious webpages. This technique poses a significant threat to users, as it allows attackers to byp…