Home > Directory > Sicurezza > SecureBulletin
SecureBulletin EN
Cybersecurity news in English · visibilità: nel misto della home, non in primo piano.
Sito originale · Feed RSS della fonte
1.213 voci in archivio · mostrate 1.101–1.125 .
Critical zero-day vulnerability in Microsoft Office: CVE-2024-38200
On August 8th, Microsoft revealed a significant zero-day vulnerability, tracked as CVE-2024-38200, affecting multiple versions of its Office suite with a CVSS score of 7.5. This information disclosure vulnerability could enable unauthorized…
Escalating iranian cyber influence operations ahead of the 2024 US elections
As the 2024 US presidential election looms, the Microsoft Threat Analysis Center (MTAC) has unveiled an alarming uptick in cyber-enabled influence operations orchestrated by Iranian actors, marking a continuation of their growing threat in…
Nexera suffers $1.8 million breach amidst security vulnerabilities
Nexera, a blockchain infrastructure protocol known for its tokenization solutions, recently experienced a significant security breach that resulted in the theft of $1.8 million, as revealed by cybersecurity experts from Cyvers. Formerly kno…
SharpRhino: the emerging C# RAT from Hunters International
In late 2023, the ransomware group Hunters International emerged on the cyber threat landscape, drawing attention due to their sophisticated tactics and tools. Recently, researchers at Quorum Cyber reported the group’s use of a new C#-based…
Analysis of NetSupport RAT campaigns by Cisco Talos
In recent months, Cisco Talos has heightened its monitoring efforts concerning malicious campaigns centered around the NetSupport Remote Access Trojan (RAT). The emergence of these campaigns signifies an ongoing trend of cybercriminals empl…
A vulnerability unveiled: the 0.0.0.0 threats to browser security
A recent study by Oligo Security has revealed a critical vulnerability impacting the world’s leading web browsers for the past 18 years. Dubbed the “0.0.0.0 Day” vulnerability, this issue arises from the way browsers manage requests directe…
Regulatory action against advanced: a case study in data security breaches
In an intensive examination of data security practices, British regulators have levied a preliminary fine of £6.09 million on Advanced, a prominent service provider for the National Health Service (NHS), following a significant data breach…
Alert: beware of deceptive WinRar impersonation website
SonicWall has issued a critical cybersecurity alert regarding a fraudulent website, win-rar.co, which closely imitates the legitimate WinRar site (win-rar.com). This deceptive site exploits a common typing error—omitting the “-m” in “.com”—…
NVIDIA’s controversial use of copyrighted content for AI training
Recent internal communications revealed that NVIDIA has utilized videos from platforms such as YouTube and Netflix to train its AI models, particularly as part of a project known as Cosmos. This initiative aims to create advanced video gene…
Apple enhances privacy with new macOS Sequoia security strategy
Apple is taking significant strides in its commitment to privacy and security with the upcoming macOS Sequoia release. A notable feature of this update involves a new approach to permissions for third-party screenshot and screen recording a…
Urgent security update: vulnerabilities addressed in Apache Linkis
Apache Linkis, a vital middleware for connecting applications to various data processing engines, has recently patched two significant security vulnerabilities affecting versions 1.3.2 to 1.5.0. These vulnerabilities pose risks to user safe…
BlankBot: a rising threat in Android banking trojans
A new Android banking trojan, identified as “BlankBot,” has emerged as a critical threat for mobile users, particularly targeting those in Turkey. Unveiled by Intel 471 Malware Intelligence researchers on July 24, 2024, BlankBot exhibits ad…
The evolving landscape of Proton ransomware: a focus on the Zola variant
Since its emergence in March 2023, the Proton ransomware family has shown a remarkable capacity for evolution, with the latest variant, Zola, highlighting significant advancements in its attack methodology. The Acronis Threat Research Unit…
Mint Stealer: a deep dive into Malware-as-a-Service
Cyfirma’s recent report has shed light on Mint Stealer, a sophisticated malware operating within the Malware-as-a-Service (MaaS) framework. This advanced threat targets a wide array of sensitive data, including browser credentials, cryptocu…
End of Life for Linux Kernel 6.9: time to upgrade
As of May 2024, the Linux Kernel 6.9 series has officially reached its end of life (EOL) with the release of version 6.9.12. Users are now faced with critical security risks as the EOL status indicates that no further updates, including ess…
Evasive Panda’s infiltration of ISP systems
In mid-2023, a security report from Volexity unveiled a significant cyber espionage campaign orchestrated by the Chinese hacking group known as StormBamboo, or Evasive Panda. This group managed to compromise an Internet Service Provider (IS…
The rise and fall of Cryptonator: a cautionary tale of unlicensed cryptocurrency exchanges
The U.S. Department of Justice (DOJ) has officially charged Roman Pikulev with the creation and operation of Cryptonator, an unlicensed cryptocurrency exchange implicated in processing over $235 million in illegal funds. Operating from 2014…
Understanding the “Sitting Ducks” attack: a growing threat to domain security
Recent research highlights a critical vulnerability in domain security, termed the “Sitting Ducks” attack, which has enabled cybercriminals to seize over 35,000 registered domains. This method bypasses traditional security measures by manip…
Twilio discontinues Authy desktop service amidst investor pressures
Twilio has officially terminated its Authy desktop service, a move that will impact users who previously relied on the desktop application for multi-factor authentication. As of August 1, individuals were forcibly logged out of the platform…
Chinese hackers accused of executing a cyberattack
On July 31, Germany publicly accused Chinese hackers of executing a cyberattack against its Federal Agency for Cartography and Geodesy (BKG) in 2021. This assertion followed a meeting where German authorities summoned the Chinese ambassador…
Sophisticated Android malware campaign exposes over 107,000 devices
A recent report from Zimperium’s zLabs has uncovered a widespread and highly sophisticated Android malware campaign that has compromised more than 107,000 devices across 113 countries since February 2022. This silent SMS stealer targets one…
Reddit’s exclusive partnership with Google: a game changer in content licensing
In a significant move, Reddit has opted to restrict access to its content exclusively to Google, effectively banning all other search engines, including Bing and DuckDuckGo. This decision stems from a lucrative licensing agreement in which…
Microsoft expands Microsoft 365 subscription benefits with Defender VPN
Microsoft has recently enhanced its Microsoft 365 Personal and Family subscriptions by introducing the Microsoft Defender VPN service, now available for free to users in the United States, the United Kingdom, Germany, and Canada. This VPN s…
Increasing phishing threats targeting Microsoft OneDrive users
In an emerging and sophisticated phishing campaign identified by the Trellix Advanced Research Center, Microsoft OneDrive users are facing a new wave of cyber threats. This campaign employs social engineering tactics to deceive victims into…
Vulnerability in OAuth, XSS for millions of websites
A critical vulnerability within the OAuth authentication standard poses a substantial risk to millions of websites and their users, potentially leading to account hijacking and data theft. Cybersecurity experts from Salt Security have ident…