Home > Directory > Sicurezza > SecureBulletin
SecureBulletin EN
Cybersecurity news in English · visibilità: nel misto della home, non in primo piano.
Sito originale · Feed RSS della fonte
1.213 voci in archivio · mostrate 1.076–1.100 .
Critical Progress LoadMaster vulnerability: unauthenticated code execution
A severe vulnerability (CVE-2024-7591) has been discovered in the Progress LoadMaster product line, including all releases and the Multi-Tenant (MT) hypervisor. This flaw allows unauthenticated remote attackers to execute arbitrary code on…
Microchip Data Breach Confirmed by Company
Microchip Technology, a prominent American semiconductor manufacturer, has disclosed a cyberattack in August 2024 that compromised sensitive employee information. The company’s recent filing with the U.S. Securities and Exchange Commission…
Emansrepo: new cyber attacks
In August 2024, FortiGuard Labs unveiled a concerning new player in the cybersecurity landscape: Emansrepo, a Python-based infostealer. This malware has been propagated through cunning phishing emails, often disguised as fake purchase order…
Understanding the threat of RomCom’s ransomware campaign
In recent months, the cyber threat landscape has seen a significant uptick in ransomware attacks, with the Russian group known as RomCom, or Storm-0978, emerging as a formidable player. This group has been leveraging a specific zero-day vul…
Google Chrome update: enhancing security with version 128.0.6613
In the ever-evolving landscape of cybersecurity, Google has rolled out significant updates for its Chrome Stable and Extended Stable channels, now featuring version 128.0.6613. This update is gradually making its way to users across Windows…
Addressing the critical CVE-2024-7261 vulnerability in Zyxel devices
In a concerning development for network security, Zyxel has recently issued patches to address a critical operating system (OS) command injection vulnerability, designated as CVE-2024-7261. This flaw poses a significant risk to various vers…
Booking.com phishing attack: understanding the threat and protecting yourself
In recent months, a highly sophisticated phishing attack targeting Booking.com has emerged, raising alarms among hotel managers and travelers alike. This attack, marked by its complexity and high success rate, poses significant risks to all…
YubiKey vulnerability: understanding the EUCLEAK threat
In the ever-evolving landscape of cybersecurity, even the most trusted tools can fall prey to vulnerabilities. Recently, security researchers at NinjaLab uncovered a notable flaw in the YubiKey 5 Series, a device widely acclaimed for its ro…
Cybersecurity incident at Transport for London: a closer look
On September 2, 2024, Transport for London (TfL) found itself facing a significant cyber attack that disrupted its operations and raised serious concerns about the security of its systems. As the organization responsible for London’s public…
North Korean hackers exploit Chromium zero-day vulnerability
In the ever-evolving landscape of cybersecurity, the Chromium-based web browsers, such as Google Chrome and Microsoft Edge, have become prime targets for malicious actors. Recently, Microsoft cyber analysts uncovered a significant threat po…
The evolving threat of Latrodectus malware: a closer look at version 1.4
In the ever-changing landscape of cybersecurity, new threats emerge regularly, demanding constant vigilance and adaptation from professionals in the field. One such threat is the Latrodectus malware, first identified by Walmart in October 2…
Cybersecurity concerns rise as BMW Hong Kong faces data breach
In a troubling development for the automotive sector, a well-known threat actor identified as “888” has claimed responsibility for leaking sensitive customer data from BMW Hong Kong. The breach, which reportedly affects around 14,057 custom…
North Korean hackers targeting NPM packages
In recent weeks, the cybersecurity landscape has witnessed a concerning uptick in malicious activities targeting developers through compromised NPM (Node Package Manager) packages. Researchers from Phylum have uncovered a series of attacks…
Zero-day vulnerability CVE-2024-7971 and the threat posed by Citrine Sleet
Recent findings by Microsoft have shed light on a significant cybersecurity threat emerging from North Korea. The discovery of a zero-day vulnerability in the Chromium browser, labeled CVE-2024-7971, has raised alarms, particularly due to i…
Hacktivist group exploits WinRAR vulnerability to launch attacks
The hacktivist group Head Mare has made headlines for exploiting a vulnerability in WinRAR to infiltrate and encrypt systems across both Windows and Linux platforms. Active since the start of the Russo-Ukrainian conflict, Head Mare primaril…
Voldemort: new wave of Google Sheets exploits
In a concerning development within the cybersecurity landscape, researchers from Proofpoint have identified a sophisticated campaign leveraging Google Sheets as a covert platform for data exfiltration and malware deployment. This unusual ta…
The emergence of ManticoraLoader: a new threat in the cybersecurity landscape
In recent weeks, the cybersecurity community has been alerted to the rise of a new Malware-as-a-Service (MaaS) offering known as ManticoraLoader. Developed by the notorious group DeadXInject, which previously gained infamy with AresLoader a…
A critical vulnerability in Mirai botnet: remote DoS exploit discovered
Recent investigations into the Mirai botnet have unveiled a significant remote denial-of-service (DoS) exploit, identified as CVE-2024-45163. This vulnerability was discovered within the source code of the Mirai botnet, a notorious malware…
E-commerce vulnerabilities exposed: the Magento skimmer incident
A recent cyberattack targeting Magento, a widely used e-commerce platform, has raised significant concerns within the cybersecurity community. Hackers have successfully injected a malicious skimmer into Magento stores, enabling them to capt…
Emergence of PG_MEM malware targeting PostgreSQL databases
Aqua Nautilus researchers have uncovered a dangerous new malware strain named PG_MEM, specifically designed to exploit the PostgreSQL database management system for illicit cryptocurrency mining. The attack begins with a brute-force approac…
Overview of the August 12, 2024 Google Cloud Platform outage in London
On August 12, 2024, Google experienced a power outage at its London data center, leading to a notable disruption of Google Cloud Platform (GCP) and Workspace services for UK users. The outage, which lasted over two hours, primarily affected…
Disruption of the Radar/Dispossessor ransomware operation: a major victory against cybercrime
In a significant breakthrough for global cybersecurity, the FBI, in collaboration with law enforcement agencies from the UK and Germany, has successfully dismantled the notorious Radar/Dispossessor ransomware operation, led by the elusive c…
AMOS stealer campaign targeting Mac users via fake Loom website
Recent research from Moonlock Lab has unveiled a sophisticated cybercriminal operation, potentially connected to a group dubbed “Crazy Evil,” that is honing in on Mac users. This operation exploits the popularity of the screen recording too…
Vulnerabilities in Google’s Quick Share could lead to remote code execution
Recent findings have spotlighted significant security vulnerabilities in Google’s Quick Share, a file-sharing tool that works across Android, Windows, and Chrome OS devices. Identified as “QuickShell” by researchers at DEF CON 32, these vul…
Fenice exposes 1.4 billion Tencent records
A recent data breach attributed to the threat actor known as “Fenice” has resulted in the exposure of approximately 1.4 billion records from Tencent’s database. This alarming incident was disclosed on August 11th and involves the leakage of…