Home > Directory > Sicurezza > SecureBulletin
SecureBulletin EN
Cybersecurity news in English · visibilità: nel misto della home, non in primo piano.
Sito originale · Feed RSS della fonte
1.243 voci in archivio · mostrate 851–875 .
Arkanix: A Sneaky New Malware Stealing from Homes and Small Offices
New malware is emerging with a distinct focus on stealing sensitive information from home users and small businesses: the Arkanix stealer. This advanced tool leverages common vulnerabilities to infiltrate networks, gain access to user data…
ShadyPanda’s Seven-Year Heist: How a Simple Extension Became a Mass Spy Tool
A sophisticated threat group, dubbed ShadyPanda, has quietly exploited millions of users across the world by weaponizing popular Chrome and Edge extensions. This stealthy campaign, spanning seven years and leveraging seemingly legitimate ap…
Android’s December Patch: Zero-Day Vulnerabilities and Their Impact
The latest security bulletin from Google has brought forth a grim reality for Android users: multiple zero-day vulnerabilities are actively exploited by threat actors, demanding immediate attention. This update unveils the gravity of these…
A Critical Design Flaws in Microsoft Azure API Management Threatens Organizations
Microsoft’s Azure API Management (APIM) Developer Portal, a platform commonly used for managing and securing APIs, is vulnerable to a significant security flaw that enables attackers to bypass access controls and create unauthorized account…
Pakistan-based APT36 Leverages Python and Linux for Sophisticated Indian Government Espionage
A new wave of cyberespionage has emerged, targeting the critical infrastructure of Indian government institutions. This time, it’s not your average phishing attack – the threat is more sophisticated, employing advanced techniques that chall…
Handala Targeting Israel’s Tech & Aerospace with Doxing and Financial Incentives
A recent shift in the geopolitically motivated cyber landscape has raised serious concerns as the Handala hacker group launches a targeted campaign against Israeli high-tech and aerospace professionals. This attack goes beyond traditional p…
A Polish Arrest Uncovers the Real Face of Cybercrime
Recent developments in Poland have highlighted a disturbing trend – the rise of sophisticated cyberattacks targeting businesses across Europe, with seemingly motivated individuals serving as fronts for broader organized crime networks. On N…
Battlefield 6’s Rise Is Fueling a Surge of Malware: How Attackers are Capitalizing on the Hype
Since its release this October, “Battlefield 6” has ignited gaming communities, with millions eagerly jumping into the action-packed experience. However, alongside the excitement comes a darker side – cybercriminals have seized on this popu…
OpenAI API Users: Mixpanel Data Leak Exposes Personal Information
OpenAI, the renowned developer of AI models like ChatGPT, has recently acknowledged a data breach involving its third-party analytics provider, Mixpanel. This incident exposed sensitive user information for API users primarily accessing Ope…
The FBI’s Latest Warning: Phishing Scams Target the IC3
The internet is a constant battleground, and today’s cybercriminal tactics are more intricate and insidious than ever before. Recently, the Federal Bureau of Investigation (FBI) issued urgent warnings about a particularly cunning phishing s…
HashJack: weaponizing trust in AI browser assistants
A vulnerability in the way AI browser assistants handle URL fragments opens doors for malicious attacks. For years, we’ve seen AI take center stage across various industries, revolutionizing everything from customer service to medical diagn…
A Critical Security Flaws in HashiCorp’s Provider
HashiCorp’s Vault Terraform provider, a cornerstone of secure secrets management for organizations worldwide, has been found with a critical security flaw. This vulnerability, tracked as CVE-2025-13357, affects users implementing LDAP authe…
ClickFix: Fake Windows Updates and PNG Steganography Make a Darker Play for User Machines
For those deeply involved with cybersecurity, the past few years have seen a dramatic rise in sophisticated phishing campaigns leveraging social engineering to deliver malware onto unsuspecting victims. One such method, often dubbed “ClickF…
How Hackers are using Open-Source repositories to steal crypto
A new wave of malware targeting cryptocurrency users is hitting developers hard, showcasing the growing sophistication and accessibility of attacks in 2023. The root cause? A well-executed supply chain attack leveraging a seemingly innocent…
ToddyCat’s new tricks: email hacking evolves with the cloud
The age-old adage “if it ain’t broke, don’t fix it” doesn’t always hold true in cybersecurity. As attackers are increasingly leveraging cloud services to protect sensitive data, their methods are evolving too – and with them, the level of s…
Wireshark 4.6.1: critical security update addresses major vulnerabilities
A recent update from the Wireshark Foundation addresses critical vulnerabilities impacting the widely used network protocol analyzer, potentially exposing users to denial-of-service conditions. The vulnerability lies within the core parsing…
APT24: three years of obscure espionage with the “BadAudio” download
For years, APT24, a sophisticated cyber espionage group linked to China’s People’s Republic, has been quietly crafting targeted attacks against key players across global industries. Their latest offensive weapon, dubbed “BadAudio”, has push…
Oracle hit: Clop’s Zero-Day exploit leaves tech giant exposed
Yesterday, the cybersecurity world was rocked by news of a potentially massive breach targeting Oracle. The notorious Clop ransomware gang has publicly claimed responsibility for compromising the tech giant’s internal systems and exfiltrati…
Databreach: 2.3TB data from Italian rail group, Almaviva
A colossal digital archive, estimated at approximately 2.3 terabytes, has appeared in the darkest corners of the web. A malicious actor claims to possess it, pointing the finger at Almaviva and a wide range of companies in the Ferrovie dell…
Eternidade Stealer: WhatsApp-Enabled banking trojan sophistication
The Trustwave SpiderLabs team has unearthed a particularly unsettling piece of malware – Eternidade Stealer – that’s raising serious questions about the security practices surrounding WhatsApp and the increasingly complex techniques employe…
Akira: a CAPTCHA breach unravels enterprise security
The recent escalation of attacks attributed to the Howling Scorpius ransomware group has highlighted a chillingly simple, yet devastatingly effective, entry vector. While often touted as the vanguard of the Akira ransomware strain, the core…
Nova Stealer: macOS cryptocurrency theft
The cybersecurity landscape is consistently shaped by increasingly sophisticated threats, and the latest to garner significant attention is Nova Stealer – a meticulously crafted malware campaign specifically targeting macOS users and their…
The Cloudflare cascade: operational failure
The recent, prolonged disruption experienced by Cloudflare, affecting global internet traffic for several hours, wasn’t a conventional cyberattack. Instead, it’s a stark and unsettling illustration of the vulnerabilities inherent within eve…
DoorDash data breach: a social engineering compromise
The recent disclosure by DoorDash regarding a cybersecurity incident, initially attributed to a social engineering attack, warrants a detailed examination beyond the standard press release narrative. While the immediate announcement focused…
WhatsApp’s silent threat: the screen-sharing scams
The current wave of WhatsApp scams, fueled by the platform’s recently introduced screen-sharing feature, is a prime example. It’s a chilling demonstration of how a seemingly innocuous feature can become a high-yield attack vector, draining…