Home > Directory > Sicurezza > SecureBulletin
SecureBulletin EN
Cybersecurity news in English · visibilità: nel misto della home, non in primo piano.
Sito originale · Feed RSS della fonte
1.213 voci in archivio · mostrate 1.126–1.150 .
RansomHub ransomware: a new threat in the cybercrime landscape
Cybersecurity researchers at Lab52 have highlighted the rise of the RansomHub ransomware gang, which employs a mix of old and new tactics to breach systems. Using tools like Advanced Port Scanner and hidden PowerShell scripts, this adaptabl…
Ongoing exploitation of VMware ESXi vulnerability CVE-2024-37085
A vulnerability in VMware’s ESXi virtualization platform, identified as CVE-2024-37085, continues to leave thousands of servers susceptible to ransomware attacks. Despite ongoing exploitation by cybercriminals and warnings from major securi…
Leveraging AI/ML to improve MDR efficiency and reduce false positives
Key Findings from the 2023 MDR Analysis Report: AI/ML in Incident Detection: Challenges and Solutions: Balancing Detection and False Positives: Performance and Monitoring: Conclusion:
EchoSpoofing campaign exploits Proofpoint vulnerability
An unknown attacker exploited a vulnerability in Proofpoint’s email routing settings to send mass fraudulent messages impersonating well-known companies such as Best Buy, IBM, Nike, and Walt Disney. The campaign, dubbed EchoSpoofing, began…
Russian information operations target French snap elections: operation “Doppelgänger”
From early June to late July 2024, Russian actors conducted a series of sophisticated information operations under the code name “Doppelgänger.” These campaigns were particularly active during the unexpected snap elections in France, prompt…
Ransomware threats loom over Paris 2024 olympics
A recent study by ExtraHop has highlighted the near inevitability of ransomware attacks targeting the Paris 2024 Olympics. The event’s IT infrastructure has faced frequent attacks over the past year, resulting in ransom payments totaling $2…
Apache superset security update: addressing CVE-2024-34693
The Apache Software Foundation has released critical security updates to mitigate an arbitrary file read vulnerability (CVE-2024-34693) in Apache Superset. This vulnerability could enable attackers to read arbitrary files on the server, pot…
Kaspersky unveils the return of Mandrake Android spyware on Google Play Store
Kaspersky researchers have uncovered the resurgence of the Mandrake Android spyware, which has been active on the Google Play Store for the past two years, accumulating over 32,000 downloads through five different applications. First brough…
European parliament member targeted by sophisticated spyware attack
In a disturbing development, German Member of the European Parliament (MEP) Daniel Freund revealed that he was the target of a sophisticated spyware attack two weeks before the European Parliament elections. Freund, known for his strong adv…
False File Immutability (FFI) Vulnerability
A newly discovered vulnerability class, termed “False File Immutability” (FFI), has been identified by Gabriel Landau of Elastic Security, exposing a significant flaw in Windows Code Integrity (CI). This vulnerability allows attackers to ci…
Rapid7 Unveils Kimsuky APT Group’s Evolving Tactics
Rapid7, a leading cybersecurity firm, has released an in-depth report on the Kimsuky advanced persistent threat (APT) group, a North Korean state-sponsored actor. Known for targeting government, research, and think tank organizations global…
WhatsApp Messenger for Android vulnerability allows malicious apps to disguise as PDF files
In a recent discovery that has raised concerns within the cybersecurity community, malware analyst @0x6rss identified a significant security issue in WhatsApp Messenger for Android. This vulnerability allows an attacker to disguise a malici…
Zscaler Investigates Possible Cybersecurity Threats
Zscaler, a prominent company in the cybersecurity sector, has stated that it is at the center of an investigation regarding potential threats to the security of its systems. The company issued an official statement confirming awareness of a…
Safeguarding Your Cloud Resources: Defending Against Muddled Libra Threats
In response to the evolving tactics of threat actors like Muddled Libra, organizations must prioritize robust cybersecurity measures to safeguard their cloud resources
Ransomware saga: Change Health’s exploits
After paying a staggering $22 million ransom to safeguard sensitive patient data, a new threat emerged in the form of RansomHUB, demanding $20 million to prevent the public release of stolen information
Beware the Lazy Koala: Unveiling the Threat of Basic Malware in Government Organizations
Targeting government organizations across several countries, Lazy Koala’s tactics underscore the importance of user education, layered security measures, and continuous monitoring in safeguarding against cyber threats
Beirut Airport Hacked Amidst Hezbollah-Israel Clashes, Threatening Regional Stability
Beirut’s international airport falls victim to hacking by domestic anti-Hezbollah groups. As departure and arrival information screens are replaced with accusations against Hezbollah, the incident heightens concerns about Lebanon’s security
New Year Cyber Threats Unveiled: Remcos RAT Targets Celebratory Spirit in Deceptive Campaign
A Sophisticated New Year Cyber Threat Exploits Celebratory Spirit, as Remcos RAT Orchestrates Multi-Stage Malware Campaign Through Deceptive Spam Emails
Cybersecurity Breach Shakes Australian Courts: Recordings of Hearings Compromised
Unauthorized access to CSV systems disrupts audio-visual in-court technology, potentially compromising recordings of hearings, including those in the Supreme Court of Victoria
Parallels Desktop Faces Critical Security Vulnerability – Swift Action Required
Parallels Desktop’s Urgent Call for Cybersecurity Vigilance Amidst CVE-2023-50226
Malicious Exploits Threaten Persistent Access to Google Accounts
Cybercriminals Exploit OAuth 2.0 Vulnerabilities in Malware-as-a-Service, Gaining Persistent Access to Google Accounts Despite Password Resets
Unprecedented iPhone Espionage Campaign Unveiled: Operation Triangulation Exposes Apple’s Achilles’ Heel
The Most Sophisticated iPhone Espionage Campaign, Exploiting Undisclosed Apple Chip Functions and Posing Unprecedented Cybersecurity Challenges
Panasonic Avionics Corporation Discloses Cyberattack and Employee Data Breach
Panasonic Avionics Faces Employee Data Compromise, as Internal Systems Succumb to a Year-Long Cyberattack, Prompting a Reevaluation of Cybersecurity Measures in the Aviation Industry
Ateam Inc. Exposes Nearly A Million Records in Cloud Service Data Breach
Unprecedented Data Breach Shakes Ateam Inc. as Nearly a Million Records Exposed Due to Cloud Security Lapse
Critical Vulnerability in QNAP’s VioStor NVR Devices Raises Alarms in Cybersecurity Landscape
The Exploitation of CVE-2023-47565 in QNAP’s VioStor NVR Devices Reveals Critical Vulnerabilities and Ignites Urgent Calls for Firmware Upgrades and Enhanced Network Security Measures