Home > Directory > Sicurezza > SecureBulletin
SecureBulletin EN
Cybersecurity news in English · visibilità: nel misto della home, non in primo piano.
Sito originale · Feed RSS della fonte
1.243 voci in archivio · mostrate 951–975 .
LLMjacking: the exploitation of API keys in DeepSeek and beyond
The rise of LLMjacking, a sophisticated cyberattack targeting large language models (LLMs), has sparked growing concerns among enterprises relying on AI-driven cloud services. This technique, which involves the theft and misuse of API keys…
Canadian national faces charges in $65M crypto-hacking spree
A Canadian man is facing charges related to a series of cryptocurrency hacks that siphoned off an estimated $65 million, according to recent reports. While details are still emerging, this case highlights several key aspects of the current…
The rising threat of ADFS spoofing attacks
In a recent alarming development, hackers have launched a sophisticated phishing campaign targeting Microsoft Active Directory Federation Services (ADFS) to steal user credentials and bypass multi-factor authentication (MFA). This attack, i…
Silent Lynx: a new threat actor in central Asia’s cyber landscape
In recent weeks, cybersecurity experts have identified a previously undocumented threat actor known as Silent Lynx, which has been linked to a series of sophisticated cyber attacks targeting entities in Kyrgyzstan and Turkmenistan. This eme…
Critical vulnerabilities in Netgear routers demand immediate attention
On February 4, 2025, Netgear issued a crucial alert regarding two significant vulnerabilities impacting several of its WiFi router models. These security flaws, which allow unauthenticated attackers to execute remote code and bypass authent…
Grubhub confirmed data breach from unauthorized access to third-party service provider
In a recent cybersecurity incident, Grubhub revealed that hackers accessed sensitive personal data from customers through a breach involving a third-party service provider. The company disclosed that the breach allowed unauthorized access t…
A critical race condition vulnerability (CVE-2025-24118) in Apple’s macOS kernel has been discovered
A critical vulnerability has been identified in the macOS kernel (XNU), designated as CVE-2025-24118, which poses significant risks for users of Apple’s operating systems. With a CVSS score of 9.8, this flaw allows attackers to escalate pri…
Malicious scripts on the CASIO e-shop stole credit card and personal customer details
On February 3, 2025, the Casio UK online store fell victim to a significant cyberattack, leading to the unauthorized access and theft of customer credit card information. This breach highlights the ongoing vulnerabilities that online retail…
Meta’s recent disclosure on ZeroClick WhatsApp spyware campaign
Meta-owned WhatsApp confirmed the disruption of a sophisticated spyware campaign targeting journalists and civil society members. This revelation underscores the ongoing challenges in cybersecurity and the misuse of technology for surveilla…
Operation Marya: Deep Web Konek investigates online child exploitation networks
The recent investigation known as Operation Marya has shed light on the alarming scale of online child exploitation networks, particularly involving thousands of Filipino minors. This operation, conducted by Konek, a cybercrime unit, highli…
Extradition in International Bank Fraud case
On January 31, 2025, the U.S. Attorney’s Office for the Southern District of New York announced the extradition of Joey Grant Luther, who faces serious charges related to international bank fraud and money laundering. This case highlights t…
Texas governor bans DeepSeek and RedNote on government devices
In a significant move reflecting heightened cybersecurity concerns, Texas Governor Greg Abbott has issued an order banning the use of DeepSeek and RedNote applications on government devices. This decision underscores the growing scrutiny of…
Fake wedding invitations to spread Android Malware in Southeast Asia
Since mid-2024, a new malware campaign targeting Android users has emerged, identified as the Tria stealer. This malware exploits wedding invitation themes to lure victims into installing malicious APK files. The attacks are primarily conce…
Ransomware targets ESXi systems to tunnel traffic to C2 infrastructure using SSH
Cybersecurity analysts have recently highlighted a concerning trend in ransomware attacks targeting ESXi systems. These attacks are not only compromising virtual infrastructure but also utilizing these systems as conduits for command-and-co…
DeepSeek: the rise of China’s AI challenger and its implications for the cyber landscape
In recent weeks, a new player in the artificial intelligence (AI) space has taken the tech world by storm: DeepSeek, a Chinese startup with ambitious goals of achieving Artificial General Intelligence (AGI). Founded in 2023, DeepSeek has qu…
Malware, ClickFix attack variant using Silk Road founder as lure
In a striking development in the cyber threat landscape, a new ClickFix attack variant has emerged, utilizing the recent pardon of Silk Road founder Ross Ulbricht as bait to deploy malware. This sophisticated campaign, reported by BleepingC…
Large Scale Botnet AIRASHI
In August 2024, a significant cyber assault orchestrated by the AISURU botnet targeted the distribution platforms of the highly anticipated Chinese game, Black Myth: Wukong. This attack was meticulously planned and executed in four distinct…
Conor Fitzpatrick, Pompompurin on Breachforums, to be resentenced
Conor Fitzpatrick, known in the cyber underworld as “Pompompurin,” is back in the spotlight as he prepares for resentencing after a federal appeals court vacated his previous lenient sentence. This decision underscores the serious implicati…
Linked a newly discovered Android malware named “Tanzeem” to the APT group DoNot Team
The recent research by CYFIRMA unveils a sophisticated Android malware operation linked to the Indian APT group known as DONOT, which appears to be leveraging a seemingly innocuous application for malicious purposes. This group, believed to…
Critical vulnerability in the 7-Zip file archiver allows attackers to bypass MotW
A significant security vulnerability has been identified in the popular file archiver 7-Zip, allowing attackers to bypass the Windows Mark of the Web (MotW) security feature. This flaw, tracked as CVE-2025-0411, poses a serious risk as it e…
Murdoc_Botnet: researchers have identified a campaign exploiting vulnerabilities in AVTECH IP cameras, in a variant of Mirai
Cybersecurity researchers have raised alarms over the emergence of the Murdoc_Botnet, a new variant of the infamous Mirai botnet that exploits vulnerabilities in AVTECH IP cameras and Huawei HG532 routers. This large-scale campaign, which h…
Identified a Python-based backdoor used by RansomHub affiliate to spread encryptors
In a recent incident response analysis, GuidePoint Security has uncovered a sophisticated use of a Python-based backdoor by a threat actor affiliated with RansomHub. This development highlights a growing trend in ransomware tactics, where a…
Kaspersky has revealed multiple vulnerabilities in the Mercedes-Benz User Experience (MBUX) infotainment system
Recent reports have revealed significant vulnerabilities in the infotainment systems of Mercedes-Benz vehicles, raising concerns about potential cybersecurity threats. These vulnerabilities could allow unauthorized access to sensitive vehic…
German company D-trust Gmbh suffers cyberattack, personal data of applicants potentially exposed
On January 13, 2025, D-Trust GmbH, a prominent player in digital security solutions, fell victim to a cyberattack targeting its application portal for signature and seal cards. The breach was detected shortly after it occurred, raising conc…
Blacon High School forced to close after ‘ransomware attack’
Blacon High School in Cheshire has announced a temporary closure following a significant ransomware attack that occurred on Friday, January 17, 2025. The school will remain closed to students on Monday, January 20, and Tuesday, January 21…