Home > Directory > Sicurezza > SecureBulletin
SecureBulletin EN
Cybersecurity news in English · visibilità: nel misto della home, non in primo piano.
Sito originale · Feed RSS della fonte
1.243 voci in archivio · mostrate 976–1.000 .
Massive Data Breach Hits NBI: Millions of Records Exposed Online
In a shocking development that has sent ripples through the digital landscape, the National Bureau of Investigation (NBI) of the Philippines has been hit by a massive data breach, exposing sensitive information of millions. The breach, alle…
The increasing popularity of real estate scams in the Middle-East
The rise of real estate scams is a pressing issue in today’s digital landscape, as highlighted by recent analyses from Group-IB. With the growing reliance on online platforms for property searches, individuals are increasingly falling victi…
15,000 FortiGate firewall configurations leaked by the Belsen Group
A new zero-day vulnerability has been identified in Fortinet firewalls, raising significant concerns for organizations relying on these security devices. This vulnerability is particularly alarming as it exploits a flaw that allows attacker…
Adobe has released critical security updates for multiple products
Adobe has recently issued a critical security update addressing multiple vulnerabilities in Photoshop that could allow attackers to execute arbitrary code on affected systems. This update is essential for users to protect their systems from…
The FBI and DOJ have successfully removed PlugX malware from thousands of U.S. computers
In a cyber operation, the U.S. Department of Justice (DOJ) and the FBI have successfully removed the PlugX malware from over 4,200 computers across the United States. This malware, linked to the Chinese state-sponsored hacking group Mustang…
Amazon S3 buckets targeted by new ransomware attacks
A new wave of ransomware attacks has emerged, targeting Amazon Web Services (AWS) by exploiting its Server-Side Encryption with Customer Provided Keys (SSE-C). This tactic allows threat actors to encrypt Amazon S3 buckets, effectively locki…
Nominet UK provider confirms cybersecurity incident after hack exploit on Ivanti VPN
Nominet, the prominent U.K. domain registry responsible for managing .co.uk domains, has confirmed a significant cybersecurity incident linked to a recently disclosed vulnerability in Ivanti’s VPN software. In a communication sent to its cu…
Vulnerability in the Aviatrix Controller used to deploy backdoors
A critical security vulnerability in the Aviatrix Controller cloud networking platform, identified as CVE-2024-50603, is currently being exploited by cybercriminals to deploy backdoors and cryptocurrency mining operations. This flaw, which…
Attorney General of the State of New York alleges against unknown parties in ownership of digital wallet addresses
New York’s Attorney General Letitia James has launched a significant legal battle, aiming to reclaim over $2 million in cryptocurrency that was stolen through a sophisticated remote job scam. This lawsuit, filed in late November 2022, highl…
WordPress threats targeting website with credit card skimmer
A new wave of cyber threats has emerged, targeting WordPress websites with a sophisticated credit card skimmer that operates through database injections. This malware, which stealthily embeds itself within the WordPress database, specifical…
HexaLocker V2: double extortion and Skuld Stealer
The notorious HexaLocker ransomware has resurfaced with a revamped version, HexaLocker V2, which is now being disseminated through the Skuld Stealer. This new iteration introduces advanced functionalities that heighten its threat level sign…
OneDrive Bug Fix: say goodbye to freezes on MacOS 15 Sequoia
Microsoft announced a fix for a frustrating bug that has been causing macOS applications to freeze when users attempt to open or save files in OneDrive. This issue primarily affected users running macOS 15 Sequoia, the latest operating syst…
Russian ISP Nodex confirmed that its network had been “destroyed” by Ukrainian hacktivists
On January 8, 2025, a significant cyber incident unfolded as the Russian internet service provider (ISP) Nodex confirmed that its network had been “destroyed” following a coordinated attack by Ukrainian hacktivists from the Ukrainian Cyber…
Hackers are exploiting new vulnerability on Ivanti
Ivanti has issued a critical warning regarding the exploitation of a newly discovered vulnerability in its Connect Secure product, identified as CVE-2025-0282. This remote code execution flaw has been actively targeted by hackers in zero-da…
T-Mobile data breach: Washington State has initiated legal proceedings
Washington State has initiated legal proceedings against T-Mobile, alleging significant cybersecurity failures that led to a massive data breach in 2021. This breach compromised the personal information of over 79 million customers nationwi…
Mirai-based botnet also targets Huawei routers
A new wave of cyber threats has emerged as a sophisticated Mirai-based botnet has been discovered targeting industrial routers and smart home devices using zero-day exploits. This alarming development, reported by Chainxin X Lab, indicates…
Critical vulnerabilities in Oracle WebLogic Server and Mitel MiCollab, CISA warns
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding critical vulnerabilities in Oracle WebLogic Server and Mitel MiCollab systems that are currently being exploited in cyberattacks. This adviso…
Brazilian business attacked from Water Makara campaign
A recent cyber threat report highlights the Water Makara campaign, a sophisticated spear-phishing attack specifically targeting Brazilian enterprises. This operation employs advanced social engineering tactics to deceive victims into clicki…
China accused of demaged undersea cable near Taiwan
Taiwan has recently accused a Chinese-owned cargo ship of deliberately damaging an undersea communication cable off its northeastern coast, an incident that underscores the vulnerabilities of the island’s critical infrastructure amid rising…
Atos denies any breach of their systems, after SpaceBears ransomware claim
Atos, a prominent player in the global IT services sector, has recently found itself at the center of a cybersecurity controversy following allegations of a ransomware attack by the group known as Space Bears. The allegations surfaced when…
DoS vulnerability CVE-2024-56332 in Next.js, update now
Next.js, a popular React framework, has recently addressed a critical denial-of-service (DoS) vulnerability identified as CVE-2024-56332. This security flaw was discovered in the server actions feature of Next.js, which could potentially al…
New NonEuclid RAT, anti-scan e persistent threat
The recent emergence of the NonEuclid Remote Access Trojan (RAT) has raised significant concerns within the cybersecurity community, with its sophisticated capabilities making it a formidable threat to both individuals and organizations. De…
Threat intelligence perspective of DORA Regulation
Team Cymru discusses the Digital Operational Resilience Act (DORA) and its implications from a threat intelligence perspective. DORA aims to enhance the digital resilience of financial entities within the European Union by establishing a co…
Glutton: a new PHP backdoor
On April 29, 2024, XLab’s threat analysis system detected unusual activities linked to a new malware named Glutton, designed to stealthily infiltrate popular PHP frameworks. This malware was discovered while distributing a malicious PHP fil…
3.1 million fake “stars” on GitHub projects
A recent study has unveiled a troubling trend on GitHub, revealing that over 3.1 million fake “stars” have been used to artificially inflate the popularity of certain projects. This manipulation not only misleads users but also facilitates…