Home > Directory > Sicurezza > SecureBulletin
SecureBulletin EN
Cybersecurity news in English · visibilità: nel misto della home, non in primo piano.
Sito originale · Feed RSS della fonte
1.243 voci in archivio · mostrate 751–775 .
SonicWall SonicOS Flaws Let Attackers Bypass Firewall Access Controls and Trigger Denial of Service
SonicWall has patched three vulnerabilities in SonicOS — CVE-2026-0204 (CVSS 8.0), CVE-2026-0205, and CVE-2026-0206 — affecting Generation 6, 7, and 8 firewalls. Discovered by CrowdStrike, the flaws allow attackers to bypass access controls…
Europol Dismantles €50 Million Investment Fraud Network Operating Corporate-Style Scam Call Centres in Albania
A coordinated Europol operation has taken down a €50 million online investment fraud network operating out of corporate-style call centres in Tirana, Albania, with up to 450 employees. Ten suspects were arrested and nearly €900,000 in cash…
BlueNoroff Deploys AI Deepfake Zoom Lures and Fileless PowerShell to Drain Crypto Wallets Across 20+ Countries
North Korea’s BlueNoroff subgroup has launched a sophisticated global campaign targeting cryptocurrency and Web3 executives, using AI-generated deepfake Zoom meetings, ClickFix clipboard injection, and fileless PowerShell implants that oper…
cPanel Emergency Patch: Critical Authentication Bypass Threatens Millions of Hosted Websites
cPanel has issued emergency security patches across all supported versions to address a critical authentication vulnerability in cPanel and WHM that could allow attackers to bypass login mechanisms and gain root-level server control. The fl…
Critical GitHub RCE Vulnerability CVE-2026-3854 Exposed Millions of Repositories to Cross-Tenant Access
Wiz researchers used AI-augmented reverse engineering to uncover CVE-2026-3854, a critical RCE flaw in GitHub’s internal git infrastructure that could have enabled any authenticated user to execute code on backend servers and access million…
APT28 Exploits Windows 0-Click Flaw CVE-2026-32202 to Steal NTLM Hashes via Defender SmartScreen Bypass
Russian state-sponsored APT28 is actively exploiting CVE-2026-32202, a zero-click Windows Shell vulnerability that bypasses Defender SmartScreen and silently exfiltrates Net-NTLMv2 credential hashes. Microsoft patched the flaw in April 2026…
Hackers Weaponize Fake Claude Code Leak to Distribute Vidar Infostealer and GhostSocks Proxy Malware
Threat actors are using fake GitHub repositories impersonating the leaked Anthropic Claude Code source to deliver a Rust dropper that installs both the Vidar infostealer (v18.7) and GhostSocks proxy malware. The campaign is part of a broade…
ClickUp’s Hardcoded API Key Has Silently Leaked 959 Corporate and Government Emails for 15 Months
A hardcoded API key in ClickUp’s public JavaScript file exposed 959 corporate and government email addresses for over 15 months after responsible disclosure in January 2025. Affected organizations include Fortinet, Home Depot, Mayo Clinic…
Microsoft Defender “RedSun” Zero-Day (CVE-2026-33825): Unpatched Exploit Grants Full SYSTEM Access
An unpatched zero-day dubbed RedSun (CVE-2026-33825) actively exploits a flaw in Windows Defender’s cloud file rollback mechanism to grant attackers full SYSTEM privileges. A public PoC has been available since April 16 and threat actors ar…
Critical CVSS 9.8 Flaw in CrowdStrike LogScale Lets Unauthenticated Attackers Read Server Files
CrowdStrike has issued an emergency advisory for CVE-2026-40050, a CVSS 9.8 unauthenticated path-traversal flaw in LogScale that lets remote attackers read arbitrary files from the server filesystem. Self-hosted deployments must patch immed…
Pack2TheRoot: Critical Linux Privilege Escalation Flaw in PackageKit Affects 12+ Years of Releases (CVE-2026-41651)
Deutsche Telekom’s Red Team has disclosed Pack2TheRoot (CVE-2026-41651), a critical local privilege escalation flaw in the PackageKit daemon affecting all major Linux distributions across 12+ years of releases, allowing any unprivileged use…
ShinyHunters Claims Udemy Data Breach: 1.4 Million User Records at Risk as Ransom Deadline Expires
ShinyHunters has claimed a breach of Udemy affecting 1.4 million user records, setting a “Pay or Leak” ransom deadline of April 27, 2026. Udemy has not yet issued an official statement as cybersecurity researchers monitor the group’s dark w…
Bitwarden CLI npm Package Compromised in Sophisticated GitHub Actions Supply Chain Attack
Security researchers at Socket have confirmed that the official Bitwarden CLI npm package (version 2026.4.0) was tampered with via a compromised GitHub Actions workflow, injecting credential-stealing malware as part of the ongoing Checkmarx…
GlassWorm Escalates: 73 New “Sleeper” Extensions Discovered on Open VSX Marketplace
Aikido Security has identified 73 new GlassWorm “sleeper” extensions on the Open VSX marketplace, marking a dangerous escalation in a supply chain campaign targeting developers through hidden malicious code embedded in VS Code-compatible ed…
State-Sponsored UAT-4356 Deploys FIRESTARTER Backdoor on Cisco Firepower Devices via Chained N-Day Vulnerabilities
Cisco Talos has uncovered an active espionage campaign by state-sponsored group UAT-4356, which chains two Cisco Firepower FXOS vulnerabilities (CVE-2025-20333 and CVE-2025-20362) to deploy the FIRESTARTER backdoor — a stealthy implant that…
CISA Adds Two Actively Exploited SimpleHelp Vulnerabilities to KEV Catalog — May 8 Patch Deadline
CISA has added two chained vulnerabilities in SimpleHelp remote support software — CVE-2024-57726 (missing authorization) and CVE-2024-57728 (path traversal) — to its KEV catalog after confirming active exploitation. Organizations have unti…
ADT Confirms Data Breach: ShinyHunters Claims 10 Million Records Stolen via Vishing Attack
Home security giant ADT Inc. has confirmed a data breach following a ShinyHunters claim of stealing over 10 million records. The group used a vishing attack to compromise an employee Okta SSO account and access Salesforce data, with an Apri…
PhantomRPC: Unpatched Windows RPC Flaw Enables SYSTEM-Level Privilege Escalation on All Windows Versions
Kaspersky researchers have revealed PhantomRPC, an unpatched architectural flaw in the Windows RPC runtime that allows local privilege escalation to SYSTEM level via five distinct attack paths. Microsoft has declined to issue a CVE or patch…
Kali Linux 2026.1 Released: Eight New Hacking Tools, Kernel 6.18, and Enhanced Mobile Pentesting
Kali Linux 2026.1 has been released with eight new hacking tools including AdaptixC2, Atomic-Operator, and MetasploitMCP, alongside the Linux 6.18 kernel, enhanced Samsung S10 wireless support, and Claude AI integration for AI-assisted pene…
Microsoft Confirms Windows Server 2025 Domain Controllers Enter Reboot Loops After April 2026 Patch
Microsoft has confirmed that the April 2026 cumulative update KB5082063 causes Windows Server 2025 domain controllers to enter reboot loops, with some systems also failing to install the update. IT admins should pause DC patching immediatel…
Microsoft’s April 2026 Update Adds New RDP Security Warnings to Protect Against Phishing via .rdp Files
Microsoft’s April 2026 Patch Tuesday introduces new multi-layer warning dialogs in Windows Remote Desktop Connection, designed to protect users from phishing attacks that weaponize .rdp files — a technique previously exploited by Russian st…
Microsoft Patch Tuesday April 2026: 168 Vulnerabilities Fixed Including Actively Exploited SharePoint Zero-Day
Microsoft’s April 2026 Patch Tuesday fixes a record 168 vulnerabilities, including an actively exploited SharePoint zero-day (CVE-2026-32201) and a publicly disclosed Microsoft Defender privilege escalation flaw. Security teams should patch…
Threat Group UNC6692 Breaches Enterprise Networks via Microsoft Teams Impersonation and SNOW Malware Suite
The newly identified threat group UNC6692 is compromising enterprise networks by impersonating IT helpdesk staff on Microsoft Teams, deploying a modular three-component malware suite called SNOW, and leveraging AWS S3 and Heroku for command…
Hackers Abuse SS7 and Diameter Protocols to Track Mobile Users Worldwide
Citizen Lab researchers have uncovered two sophisticated threat actors, STA1 and STA2, exploiting legacy SS7 and 4G Diameter telecom protocols to silently track high-value mobile users across the globe. The attacks require no malware on the…
North Korean IT Worker Scheme: How DPRK Operatives Infiltrate Companies to Fund Weapons Programs
A Team Cymru investigation has exposed the technical infrastructure behind North Korea’s long-running fake IT worker scheme, revealing how state-sponsored operatives use stolen identities, commercial VPNs, and U.S.-based laptop farms to fra…