Home > Directory > Sicurezza > SecureBulletin
SecureBulletin EN
Cybersecurity news in English · visibilità: nel misto della home, non in primo piano.
Sito originale · Feed RSS della fonte
1.213 voci in archivio · mostrate 1.176–1.200 .
Unveiling a Critical Vulnerability in Elementor: A Deep Dive and Urgent Call to Action on WordPress
Discover and address a critical Elementor vulnerability with insights from our cybersecurity analysis. Upgrade to version 3.18.2 for enhanced website protection against potential exploits. Stay secure in the dynamic world of WordPress with…
Navigating the Frontier: Building a Secure Future for Artificial Intelligence
Explore the essential guide to securing the future of Artificial Intelligence. Discover robust measures for data security, model integrity, and privacy protection. Learn how a proactive approach and user education contribute to building a t…
Fighting Ursa’s Covert Campaign: A Threat to Digital Security
In the wake of Unit 42 researchers exposing Fighting Ursa’s covert campaign, organizations and governments are urged to take proactive measures to protect their systems from cyber espionage attacks utilizing Microsoft Outlook vulnerabilitie…
Lessons Learned from the Aliquippa Water Authority Cyber Attack
Discover the lessons learned from a recent cyber attack on a Pennsylvania water authority. Explore key cybersecurity measures to safeguard critical infrastructure, addressing PLC vulnerabilities and emphasizing password security, remote acc…
PALIG’s Response to the MOVEit Transfer Software Security Incident
Explore PALIG’s proactive response to a recent data breach, delving into cybersecurity measures, identity theft risks, and crucial steps for affected individuals. Navigate the aftermath with heightened awareness and practical tips in this c…
Critical Vulnerabilities in Extreme Networks’ EXOS: A Call to Secure Your Network
Discover and address critical vulnerabilities in Extreme Networks’ EXOS with swift patches and enhanced security measures. Strengthen your cybersecurity posture to safeguard against potential breaches and secure your network infrastructure…
Unmasking Teal Kurma: The Enigmatic Sea Turtle Resurfaces in Cyber Espionage
Uncover the enigmatic cyber threat of Teal Kurma, alias Sea Turtle, as PwC’s comprehensive analysis reveals its evolved tactics in European and Middle Eastern cyber espionage. Explore the actor’s weapon of choice, SnappyTCP, and learn about…
Critical Vulnerability Threatens the Core of MLflow
Explore the profound implications of CVE-2023-43472, a critical vulnerability in MLflow, unraveling the threats to machine learning models and data integrity. Discover the urgent call to action within the MLflow community to upgrade, fortif…
Unveiling the OwnCloud Security Abyss: A Deep Dive into CVE-2023-49105
Explore the critical security vulnerability CVE-2023-49105 impacting ownCloud versions 10.6.0 to 10.13.0. Delve into the twofold threat, including unauthenticated control over files and privilege escalation, as revealed by a security resear…
Unveiling RustBucket: A Mac-targeting Malware Campaign by BlueNoroff APT
Delve into the intricate world of cybersecurity as we uncover the latest threat – RustBucket, a sophisticated macOS malware attributed to the notorious BlueNoroff APT. Explore the evolution of this insidious campaign, its utilization of the…
Critical Vulnerability in Adobe ColdFusion Puts Government Servers at Risk
Discover the latest cybersecurity threat as Adobe ColdFusion becomes the target of a severe vulnerability. Learn about CVE-2023-26360 and its impact on government servers. Find out the recommended mitigation strategies and the importance of…
Cybercrime kingpin Vladimir Dunaev pleads guilty: Trickbot’s mastermind faces 35 years in prison
In a landmark development in the battle against cybercrime, Russian national Vladimir Dunaev, the mastermind behind the notorious Trickbot malware, has pleaded guilty to orchestrating cyber-attacks on American entities
The Silent Warfare within Outlook’s Secure Walls
Explore the hidden dangers within Outlook as Check Point security researchers reveal the silent warfare of hyperlinks, attachments, and passive threats. Uncover the simplicity and sophistication of these attack vectors, urging individuals a…
Critical Security Update Released for Joomla! CMS to Mitigate Exposure of Sensitive Data
The Joomla! Project has urgently released security updates (Joomla 5.0.1 and 4.4.1) to counter a critical vulnerability (CVE-2023-40626) affecting versions 1.6.0-4.4.0 and 5.0.0.
Unveiling the Shadows: Kaspersky Security Bulletin 2023 Exposes Alarming Cyber Threats
The Kaspersky Security Bulletin 2023 provides key insights into the ever-changing cybersecurity landscape, highlighting trends and challenges. Discover the staggering figures of cyber attacks and the rise of ransomware. Learn about the geog…
MW WP Form Plugin Patched to Address Critical Security Vulnerability
Recent discovery of a severe vulnerability in the MW WP Form plugin that put over 200,000 active installations at risk. Find out how attackers were able to infiltrate websites and execute malicious code, and discover the prompt response fro…
Iranian Hackers Breach US Water Authority and Target Israeli-Made Industrial Control Devices
This blog post discusses the recent cyberattack on a small water authority in Pennsylvania by Iran-affiliated hackers. It highlights the larger campaign targeting organizations in the United States and the concern among cybersecurity expert…
Beware of the Latest Phishing Scam Targeting WordPress Users
Learn about the latest phishing scam targeting WordPress users and how to protect your website from cybersecurity threats. Stay vigilant and follow best practices to enhance your WordPress security. Regularly update WordPress, be cautious o…
Escalating Cybercrime in Iran: A Threat to Financial Security
Discover the alarming rise of cybercrime in Iran with the proliferation of counterfeit mobile applications and phishing attacks. Learn how to protect your financial security and the importance of cybersecurity measures. Stay informed and vi…
WhatsApp Introduces Secret Code Feature for Enhanced User Privacy
Explore WhatsApp’s latest privacy feature, Secret Code, offering users an additional layer of protection for sensitive conversations. Learn how this feature, coupled with Chat Lock, enhances privacy by allowing users to set a custom passwor…
Unveiling a Sophisticated Mobile Banking Malware Campaign Targeting Iranian Users
In a recent expose, Zimperium reveals an intricate mobile banking malware campaign targeting Iranian users. Originating in July, the campaign, initially reported with 40 malicious apps, has expanded to 245, evading detection and evolving in…
Europol’s Successful Operation Against Ransomware Syndicate: A Milestone in Global Cybersecurity
In a resounding victory for global cybersecurity, the European Union Agency for Law Enforcement Cooperation (Europol) has successfully executed a collaborative operation with Ukrainian police, resulting in the apprehension of four hackers i…
Zyxel NAS Devices: Critical Vulnerabilities and Patch Updates
Learn about the critical vulnerabilities in Zyxel NAS devices and the importance of promptly installing patches. Discover security measures to protect your NAS device and safeguard your valuable data. Stay updated with the latest firmware r…
The Use of Invasive Spyware to Suppress Civil Society: A Recent Incident in Serbia
Learn about the use of invasive spyware in Serbia and its impact on civil society. Discover the work of organizations like Access Now, SHARE Foundation, and the Citizen Lab in investigating and exposing surveillance technology. Understand t…
Iranian-Backed Cyber Group Targets Municipal Water Authority in Pennsylvania
On October 29, 2023, the Municipal Water Authority of Aliquippa (MWA) fell victim to a cyber attack by an Iranian-backed group known as CyberAv3ngers. This blog post discusses the details of the attack, the potential motives behind it, and…