Home > Directory > Sicurezza > SecureBulletin
SecureBulletin EN
Cybersecurity news in English · visibilità: nel misto della home, non in primo piano.
Sito originale · Feed RSS della fonte
1.243 voci in archivio · mostrate 1.051–1.075 .
Windows MiniFilter vulnerability: a threat to EDR security
Endpoint Detection and Response (EDR) solutions are essential for modern cybersecurity defenses. However, research has revealed a vulnerability in Windows MiniFilter drivers that can be exploited to prevent EDR drivers from loading, effecti…
Ghostly cybercrime lair exposed: admin faces charges
In a groundbreaking triumph for law enforcement, the sophisticated encrypted communication platform Ghost has been dismantled in a worldwide operation known as “Kraken.” This international collaboration effectively targeted a platform desig…
PRC-Linked cyber actors leveraging massive botnet for malicious activities
In a joint cybersecurity advisory, the FBI, Cyber National Mission Force (CNMF), and National Security Agency (NSA) have exposed a significant threat to Internet-connected devices. Chinese hackers have compromised thousands of devices, crea…
Critical Windows kernel vulnerability disclosed
Microsoft has issued an urgent warning regarding a critical Windows kernel vulnerability (CVE-2024-37985) that could result in the disclosure of sensitive information. This vulnerability affects ARM-based systems and poses a moderate level…
Apple iOS 18 patches 32 security flaws
Apple has released iOS 18, a major software update that addresses a multitude of security vulnerabilities across its operating system. These vulnerabilities posed significant risks to user privacy and security, making it imperative for Appl…
AI and cryptography: enhancing security with ChatGPT
Cybersecurity breaches are often the result of vulnerabilities in cryptographic implementations. Traditional static analysis tools often fall short in detecting these misuses. This article explores the potential of ChatGPT, an AI language m…
Access Sports data breach: analysis
Access Sports Medicine & Orthopaedics has fallen victim to a significant data breach, compromising the sensitive information of over 88,000 users. This incident serves as a sobering reminder of the persistent cybersecurity threats that heal…
Critical macOS Calendar vulnerability: zero-click execution of malicious code
A severe zero-click vulnerability has been discovered within Apple’s macOS Calendar application, posing a significant threat to user security. This vulnerability enables attackers to compromise user devices without requiring any interaction…
Fileless Remcos RAT: a threat to watch out for in weaponized Excel documents
Remcos, a Remote Access Trojan (RAT), has been actively used in cybercriminal campaigns since 2016. Recently, cybersecurity researchers have uncovered a new wave of malware operations involving Excel documents weaponized to deliver a filele…
Malicious Google ads target mac users with fake AppleCare+ scam
A recent malicious campaign has been discovered targeting Mac users seeking support or extended warranty services through AppleCare+. These scams use deceptive tactics to lure victims into losing money.The Scam Strategy
SAP employee data leak: a critical 888 threat
A recent Twitter post by DarkWebInformer has raised concerns about a potential data leak involving sensitive employee information belonging to SAP SE, a leading enterprise software provider. This alleged breach, if confirmed, could have sig…
Android malware on the rise: Ajina threatens mobile banking security
The cybersecurity landscape is constantly evolving, with malicious actors developing increasingly sophisticated malware to target users’ devices. Recent advancements in Android malware have taken a concerning turn, as new threats emerge cap…
Medusa ransomware exploits critical Fortinet vulnerability
The notorious Medusa ransomware group has once again demonstrated its advanced capabilities by exploiting a critical SQL injection vulnerability (CVE-2023-48788) in Fortinet’s FortiClient EMS software. This vulnerability has enabled Medusa…
Port of Seattle hit by Rhysida ransomware attack
In a concerning development, the Port of Seattle has disclosed a cyberattack attributed to the notorious Rhysida ransomware group. The incident, which occurred on August 24, 2024, disrupted airport and maritime operations, highlighting the…
1.3 Million Android TV boxes compromised by Android.Vo1d malware
Android TV boxes have become increasingly popular for streaming content, apps, and other online services. However, a recent discovery by cybersecurity analysts at Dr. Web reveals that a massive number of these devices have been infected by…
Hadooken malware targeting Oracle WebLogic servers
Oracle WebLogic Server, a widely used application server for enterprise applications, has recently become a target of a new Linux malware known as Hadooken. This malicious program exploits weak administrator credentials to gain access and d…
Teenage suspect arrested in major cyberattack on London Transport
In a significant development, the National Crime Agency (NCA) has arrested a 17-year-old teenager from Walsall in connection with the recent cyberattack that targeted Transport for London (TfL).Ongoing InvestigationThe arrest stems from an…
Fortinet suffers data breach via compromised third-party file-sharing service
Fortinet, a leading cybersecurity provider, has disclosed a data breach incident involving unauthorized access to a third-party cloud-based file-sharing service used by the company. The breach reportedly affected a limited number of Fortine…
Cybercriminals exploit legitimate software for insidious attacks
Cybercriminals are evolving their tactics, leveraging legitimate software to evade detection and compromise systems. By blending into normal network traffic, these actors render traditional security measures ineffective, making threat mitig…
Kawasaki Europe hit by cyberattack, RansomHub group demands ransom
Kawasaki Motors Europe (KME) has confirmed a cyberattack in early September that resulted in disruptions to its operations. While the attack was initially reported as “unsuccessful,” the company isolated its servers as a precautionary measu…
Critical Cisco vulnerability threatens Web-Based management interfaces
Cisco has recently disclosed a severe vulnerability (CVE-2024-20381) impacting the JSON-RPC API feature used by various web-based management interfaces in its products. This flaw poses a significant risk to organizations utilizing these pla…
Mastercard bolsters cybersecurity defenses with Recorded Future acquisition
Mastercard has made a significant stride in its cybersecurity services with the announcement of its acquisition of Recorded Future, a renowned global threat intelligence company. This strategic move, valued at $2.65 billion, aims to elevate…
Criminal IP and IPLocation.io collaborate for enhanced IP solutions
Criminal IP, a leading cyber threat intelligence (CTI) search engine, has integrated its IP risk detection data with IPLocation.io, a renowned IP address geolocation tracker. This collaboration elevates IP analysis by providing comprehensiv…
Cybersecurity alert for Small and Mid-sized Businesses: CosmicBeetle threat actor on the rise
Small and mid-sized businesses (SMBs) are increasingly becoming targets of cybercriminals due to weaker security measures and lack of cybersecurity awareness. Cyberattackers often exploit vulnerabilities in outdated software and systems to…
Kali Linux 2024.3: elevating cybersecurity with enhanced features
Kali Linux, the ubiquitous penetration testing and ethical hacking distribution, has unveiled its latest iteration, version 2024.3. This comprehensive update introduces a plethora of new features, including 11 cutting-edge hacking tools, en…