Home > Directory > Sicurezza > SecureBulletin
SecureBulletin EN
Cybersecurity news in English · visibilità: nel misto della home, non in primo piano.
Sito originale · Feed RSS della fonte
1.213 voci in archivio · mostrate 1.051–1.075 .
Critical Active Directory certificate services vulnerabilities: implications and mitigation strategies
Microsoft’s Active Directory Certificate Services (AD CS), a PKI implementation in Active Directory environments, has been found to contain critical vulnerabilities that can enable attackers to gain long-term persistence in compromised netw…
Ransomware group breaches major chinese bank in London
The Hunters International ransomware group has allegedly compromised the London branch of the Industrial and Commercial Bank of China (ICBC). This alarming breach highlights the escalating threats faced by financial institutions.Scale of th…
Critical vulnerability compromises the security of .MOBI top-level domain
A recent vulnerability discovery has exposed a glaring security flaw in the .MOBI domain name ecosystem. This vulnerability, stemming from an expired WHOIS server domain, has allowed a group of researchers to gain unauthorized control over…
Threat landscape: EV charging infrastructure under attack
As electric vehicles (EVs) gain traction, their reliance on interconnected systems and widespread public charging infrastructure introduces significant cybersecurity risks. Vulnerabilities inherent in EV software and charging stations pose…
Browser-based credential theft: a growing threat
In the evolving cybersecurity landscape, web browsers have become a primary target for cybercriminals seeking to steal users’ credentials. This shift has significant implications for individuals and organizations alike.The Rise of Browser-B…
RansomHub’s malicious use of TDSSKiller to bypass endpoint detection and response (EDR)
Kaspersky Lab’s TDSSKiller is a widely used free utility for detecting and removing rootkits. However, a recent cyberattack campaign by the RansomHub ransomware gang has leveraged TDSSKiller to disable EDR systems, compromising their abilit…
Critical Zero-Day vulnerability in Microsoft’s App Control
Microsoft has released a critical security update to address an actively exploited zero-day vulnerability affecting its Windows Smart App Control (SAC) and SmartScreen security features. This vulnerability has been exploited in the wild sin…
Microsoft september 2024 Patch Tuesday: mitigating critical vulnerabilities
The latest Microsoft Patch Tuesday, released in September 2024, addresses a substantial number of security vulnerabilities, including four critical zero-day exploits. Organizations and individual users are strongly encouraged to apply these…
Flipper Zero firmware milestone: version 1.0 arrives after three years of evolution
As cybersecurity enthusiasts rejoice, Flipper Zero has finally unveiled its highly anticipated firmware version 1.0, marking the culmination of three years of development. This major release brings a plethora of enhancements that elevate Fl…
Data breach at payment gateway Slim CD: 1.7 million users impacted
Slim CD, Inc., a prominent payment processing platform for US and Canadian merchants, has recently disclosed a significant data breach that has potentially compromised the sensitive information of approximately 1.7 million users.Breach Deta…
Chinese hackers leverage open-source tools for cyber attacks
Cybersecurity researchers have uncovered that Chinese state-sponsored threat groups are actively exploiting open-source tools like Nmap to facilitate cyber attacks. These groups, including APT41, APT10, GALLIUM, Stately Taurus, and APT40, a…
Critical RCE vulnerabilities in Ivanti Endpoint Manager grant remote server access to attackers
Ivanti has released security updates for its Endpoint Manager (EPM) 2024 and 2022 SU6 versions to address multiple severe and critical vulnerabilities that could lead to unauthorized access to the EPM core server.Affected Versions and Vulne…
Preta Power: innovative tools empower cyber enhancement initiatives
Earth Preta, the notorious Chinese Advanced Persistent Threat (APT) group, has been active for over a decade, targeting government entities, academia, and research organizations globally. Their recent addition of new tools to their arsenal…
Air-Gapped systems not impregnable: new attacks expose sensitive data
Air-gapped computers, physically isolated from unsecured networks, were once considered impervious to cyberattacks. However, recent research has unveiled sophisticated techniques that can exfiltrate sensitive data from these supposedly secu…
WhatsApp’s view once privacy flaw: exploited and abusable
WhatsApp’s “View Once” feature, designed to enhance privacy by allowing users to share disappearing photos and videos, has come under fire due to a critical security flaw. This flaw has been actively exploited by malicious actors, compromis…
Alert: CISA warns of three actively exploited vulnerabilities
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding three critical vulnerabilities that are currently being exploited in the wild. These vulnerabilities affect widely used products and can have severe…
Quad7 Botnet: expanding threat landscape targets routers and VPNs
The Quad7 botnet, also known as the 7777 and xlogin botnets, has gained notoriety for utilizing compromised routers to launch attacks on Microsoft 365 accounts. This sophisticated botnet has been evolving its tactics and infrastructure, tar…
London High School hit by ransomware attack
Cybersecurity threats lurk in every corner of our digital world, and educational institutions are not immune to these malicious attacks. A recent ransomware assault has forced Charles Darwin School in South London to temporarily close its d…
GeoServer RCE vulnerability: a threat to geospatial data infrastructure
GeoServer, an open-source Java-based server, enables the sharing and management of geospatial data. However, a critical vulnerability (CVE-2024-36401) has emerged, allowing attackers to remotely execute commands and deploy malware.Nature of…
Fog ransomware extends reach to financial sector
The Fog ransomware, previously targeting educational and recreational sectors, has now shifted its focus to the lucrative finance industry. In a recent attack, threat actors compromised VPN credentials to infiltrate a mid-sized financial in…
Bitcoin ATM Scams: A Growing Threat
Bitcoin ATMs (BTMs) have emerged as a convenient way to buy and sell cryptocurrencies. However, they have also become a hotbed for scammers looking to exploit unsuspecting victims.The Rise of BTM ScamsIn recent years, fraud losses associate…
Russian military hackers: targeting critical infrastructure globally
Intelligence agencies have identified Russian military hackers linked to the Main Intelligence Directorate (GRU), Unit 29155, as responsible for cyberattacks against global targets. These attacks aim to steal sensitive data, damage reputati…
Veeam software vulnerabilities: urgent action required for enhanced cybersecurity
Veeam Software, a renowned provider of data protection solutions, has recently disclosed the discovery of several critical and high-severity vulnerabilities in multiple products. These vulnerabilities pose significant risks to users, highli…
SonicWall alerts to critical access control flaw actively targeted
As a cybersecurity expert, I’m here to alert you to a critical vulnerability (CVE-2024-40766) affecting SonicWall Firewall products. This improper access control flaw is actively being exploited in the wild, making it imperative to take imm…
Persistent backdoors via Linux pluggable authentication modules: a new threat
Recent research by the Group-IB Digital Forensics and Incident Response (DFIR) team has revealed a novel technique exploiting Linux’s Pluggable Authentication Modules (PAM) to create persistent backdoors on compromised systems. Exploiting P…