// 05 // threat_feed.live

NEWS_CVE

Aggregato in tempo reale da CISA, Krebs on Security, The Hacker News, Bleeping Computer e Hacker News. Refresh ogni 30 minuti.

CISAKREBSTHNBLEEPINGHN

BLEEPING
MALWARE
💻 BLEEPINGNEWHIGH2026-05-27 21:31
GPU mining malware spreads via SEO poisoning, AI chatbots
Threat actors are targeting systems with high-performance computers in an ongoing cryptojacking campaign spread through a coordinated SEO poisoning operation that also manipulated AI chatbot recommendations. [...]
> leggi_articolo →
THN
BACKDOOR
⚡ THNNEW2026-05-27 16:10
Grandoreiro Malware and BTMOB RAT Campaigns Target Windows and Android Users
Latin America and Europe become the target of two banking trojan campaigns that are designed to infect Windows and Android devices with Grandoreiro and BTMOB malware, respectively. That's according to new findings from W
> leggi_articolo →
THN
AI / LLM
⚡ THNNEW2026-05-27 15:44
Malicious npm Package Stole Files From Claude AI User Directory via GitHub
Cybersecurity researchers have discovered a new malicious package on the npm registry that comes with information stealing capabilities. According to OX Security, the package, named "mouse5212-super-formatter," is design
> leggi_articolo →
BLEEPING
💻 BLEEPINGNEW2026-05-27 14:00
Can you enforce strong Active Directory password rules without frustrating users?
Strong Active Directory passwords don't have to come at the expense of usability. Specops Software explains how passphrases, breached password protection, and self-service resets can improve security without frustrating
> leggi_articolo →
THN
AI / LLM
⚡ THNNEW2026-05-27 13:28
5 Steps to Managing Shadow AI Tools Without Slowing Down Employees
When an employee installs an AI writing assistant, connects a coding copilot to their IDE, or starts summarizing meetings with a new browser tool, they are doing exactly what a productive employee should do: finding fast
> leggi_articolo →
BLEEPING
BOTNET
💻 BLEEPINGNEWHIGH2026-05-27 13:28
Glassworm botnet disrupted after resilient C2 infrastructure takedown
The Glassworm botnet targeting developers in software supply-chain attacks has been disrupted after researchers took down its resilient command-and-control infrastructure relying on Solana blockchain transactions and the
> leggi_articolo →
CISA
CVE-2026-8398
🛡 CISANEWMED2026-05-27 12:00
CVE-2026-8398CVE-2026-4532
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-8398 Daemon Tools Lite Embedded Malicious Code Vulnerability CVE-2026-4532
> leggi_articolo →
BLEEPING
RANSOMWARE
💻 BLEEPINGNEW2026-05-27 11:51
FBI warns of in-person data theft attacks from extortion gang
The FBI warned on Tuesday that the Silent Ransom Group (SRG) extortion gang is now targeting U.S.-based law firms in in-person data theft attacks. [...]
> leggi_articolo →
THN
MALWARE
⚡ THNNEWHIGH2026-05-27 11:48
GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure
CrowdStrike, in partnership with Google and the Shadowserver Foundation, has announced the simultaneous disruption of all command-and-control (C2) channels associated with GlassWorm, a persistent software chain campaign
> leggi_articolo →
THN
⚡ THNNEW2026-05-27 11:45
3 SOC Steps that Shut Down Incident Risks Early
Most organizations still picture cyber defense as a fortress problem: build stronger walls, add more guards, buy another detection engine. But modern incidents rarely crash through the front gate. They drift in disguised
> leggi_articolo →
THN
VULNERABILITY
⚡ THNNEWMED2026-05-27 10:06
Gitea Vulnerability Exposes Private Container Images without Authentication
Cybersecurity researchers have disclosed a security flaw in Gitea, an open-source, self-hosted platform for version control, that allows unauthenticated remote attackers to pull private container images from Gitea deploy
> leggi_articolo →
BLEEPING
ACTIVE EXPLOIT
💻 BLEEPINGNEW!! CRITICAL2026-05-27 10:06
CISA gives feds 4 days to patch actively exploited cPanel plugin flaw
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given U.S. federal agencies four days to secure their servers against a critical vulnerability in the LiteSpeed cPanel user-end plugin, which is active
> leggi_articolo →
BLEEPING
💻 BLEEPINGNEW2026-05-27 09:09
Dutch police arrests suspect linked to Ajax football club hack
The Dutch National Police arrested a 35-year-old man suspected of hacking the professional football club Ajax Amsterdam (AFC Ajax) earlier this year. [...]
> leggi_articolo →
BLEEPING
WINDOWS
💻 BLEEPINGNEW2026-05-27 08:33
Windows 11 KB5089573 update released with performance improvements
Microsoft has released the KB5089573 preview cumulative update for Windows 11 versions 25H2 and 24H2, which comes with 30 changes, including performance and reliability improvements. [...]
> leggi_articolo →
THN
MALWARE
⚡ THNNEW2026-05-27 07:45
AI Chatbot Recommendations Redirect Users to Cryptojacking Malware Sites
Microsoft has warned of an active cryptojacking campaign that makes use of artificial intelligence (AI) chatbot interactions as a mechanism for surfacing malicious download sites. "This emerging delivery technique extend
> leggi_articolo →
BLEEPING
0-DAY
💻 BLEEPING!! CRITICAL2026-05-26 20:07
KnowledgeDeliver flaw exploited as a zero-day to install web shells
Hackers exploited a critical zero-day vulnerability in a server running the KnowledgeDeliver learning management system (LMS) to deploy the Godzilla web shell. [...]
> leggi_articolo →
BLEEPING
RANSOMWARE
💻 BLEEPING2026-05-26 19:46
Charter confirms data breach after ShinyHunters extortion threat
U.S. telecommunications giant Charter Communications has confirmed it suffered a data breach after the ShinyHunters extortion group threatened to leak stolen data unless a ransom is paid. [...]
> leggi_articolo →
THN
⚡ THN2026-05-26 15:48
MuddyWater Uses DLL Side-Loading in Espionage Campaign Targeting 9 Countries
The Iranian hacking group known as MuddyWater has been linked to a new campaign affecting at least nine organizations across nine countries on four continents in the first quarter of 2026. The activity targeted industria
> leggi_articolo →
BLEEPING
AI / LLM
💻 BLEEPING2026-05-26 14:01
How Varonis Atlas integrates Claude Compliance API for AI governance
AI governance requires visibility into how AI tools interact with enterprise data. Varonis explains how its Atlas platform uses Claude Compliance API data to help monitor usage, investigate risk, and support compliance.
> leggi_articolo →
CISA
CISA
🛡 CISAMED2026-05-26 12:00
Eppendorf BioFlo 320
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to gain full access to functionality and data with the bioreactor. The following versions of Eppendorf BioFlo 320 are affected: BioF
> leggi_articolo →
CISA
CISA
🛡 CISAMED2026-05-26 12:00
ABB Ability Camera Connect
View CSAF Summary ABB is aware of public reports of vulnerabilities in a 3rd party component VLC media player Version 2.2.4 which was delivered together with the installation package of Camera Connect Version 1.5.0.14 an
> leggi_articolo →
CISA
ADVISORY
🛡 CISAMED2026-05-26 12:00
ABB B&R Automation Runtime DoS Vulnerability in System Diagnostics Manager (SDM)
View CSAF Summary An update is available that resolves a vulnerability identified by B&Rs internal security analysis in the product versions listed as affected in this advisory. An attacker who successfully exploited thi
> leggi_articolo →
CISA
ADVISORY
🛡 CISAMED2026-05-26 12:00
ABB LVS MConfig
View CSAF Summary ABB became aware of an internally discovered vulnerability in the MConfig product versions listed as affected in the advisory. An attacker with access to local networks who successfully exploits vulnera
> leggi_articolo →
CISA
PRIVESCCVE-2026-48172
🛡 CISAMED2026-05-26 12:00
CVE-2026-48172
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-48172 LiteSpeed cPanel Plugin Privilege Escalation Vulnerability This type of
> leggi_articolo →
CISA
ADVISORY
🛡 CISAMED2026-05-26 12:00
ABB AC500 V2
View CSAF Summary ABB became aware of vulnerabilities in AC500 V2 listed as affected in the advisory. An attacker who successfully exploited this vulnerability could access fragments of Modbus telegrams that have been se
> leggi_articolo →
CISA
ADVISORY
🛡 CISAMED2026-05-26 12:00
ABB Terra AC
View CSAF Summary ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the pollution of heap memory which poten
> leggi_articolo →
CISA
ADVISORY
🛡 CISAMED2026-05-26 12:00
ABB AbilityTM Zenon Remote Transport Vulnerability
View CSAF Summary ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. The vulnerability enables unauthorized access to the Reboot OS function within the Remote Transport Service, a
> leggi_articolo →
THN
DDoS
⚡ THN2026-05-26 11:58
[THN Webinar] New AI DDoS Attacks Are Smarter. Learn How to Fight Back
Every single day, hackers are finding new ways to crash websites and steal data. But right now, something has changed. Hackers are no longer working alone. They are now using powerful Artificial Intelligence (AI) tools t
> leggi_articolo →
THN
RCE
⚡ THNHIGH2026-05-26 11:49
CVE-2026-45659
Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions
Microsoft has rolled out updates to fix a remote code execution vulnerability impacting SharePoint that could be exploited by bad actors in attacks without requiring any specialized conditions to be met. The vulnerabilit
> leggi_articolo →
KREBS
🔍 KREBS2026-05-25 13:21
Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks
Authorities in the Netherlands have arrested the co-owners of two related Internet hosting companies for operating IT infrastructure used by Russia to carry out cyberattacks, influence operations and disinformation campa
> leggi_articolo →
KREBS
DATA BREACH
🔍 KREBS2026-05-22 16:34
Lawmakers Demand Answers as CISA Tries to Contain Data Leak
Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecurity reported this week that a CISA contractor intentionally published AWS G
> leggi_articolo →
CISA
WEB EXPLOITCVE-2026-9082
🛡 CISAMED2026-05-22 12:00
CVE-2026-9082
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-9082 Drupal Core SQL Injection Vulnerability This type of vulnerability is a f
> leggi_articolo →
KREBS
BOTNET
🔍 KREBS2026-05-21 21:50
Alleged Kimwolf Botmaster ‘Dort’ Arrested, Charged in U.S. and Canada
Canadian authorities on Wednesday arrested a 23-year-old Ottawa man on suspicion of building and operating Kimwolf, a fast spreading Internet-of-Things botnet that enslaved millions of devices for use in a series of mass
> leggi_articolo →
KREBS
DATA BREACH
🔍 KREBSHIGH2026-05-18 20:48
CISA Admin Leaked AWS GovCloud Keys on Github
Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a
> leggi_articolo →
KREBS
PATCH
🔍 KREBSMED2026-05-12 21:46
Patch Tuesday, May 2026 Edition
Artificial intelligence platforms may be just as susceptible to social engineering as human beings, but they are proving remarkably good at finding security vulnerabilities in human-made computer code. That reality is on
> leggi_articolo →
KREBS
DATA BREACH
🔍 KREBS2026-05-08 02:58
Canvas Breach Disrupts Schools & Colleges Nationwide
An ongoing data extortion attack targeting the widely-used education technology platform Canvas disrupted classes and coursework at school districts and universities across the United States today, after a cybercrime gro
> leggi_articolo →
KREBS
BOTNET
🔍 KREBS2026-04-30 14:04
Anti-DDoS Firm Heaped Attacks on Brazilian ISPs
A Brazilian tech firm that specializes in protecting networks from distributed denial-of-service (DDoS) attacks has been enabling a botnet responsible for an extended campaign of massive DDoS attacks against other networ
> leggi_articolo →
KREBS
🔍 KREBS2026-04-21 14:53
‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty
A 24-year-old British national and senior member of the cybercrime group "Scattered Spider" has pleaded guilty to wire fraud conspiracy and aggravated identity theft. Tyler Robert Buchanan admitted his role in a series o
> leggi_articolo →
KREBS
0-DAY
🔍 KREBS!! CRITICAL2026-04-14 21:47
Patch Tuesday, April 2026 Edition
Microsoft today pushed software updates to fix a staggering 167 security vulnerabilities in its Windows operating systems and related software, including a SharePoint Server zero-day and a publicly disclosed weakness in
> leggi_articolo →
KREBS
COMPROMISED
🔍 KREBS2026-04-07 17:02
Russia Hacked Routers to Steal Microsoft Office Tokens
Hackers linked to Russia's military intelligence units are using known flaws in older Internet routers to mass harvest authentication tokens from Microsoft Office users, security experts warned today. The spying campaign
> leggi_articolo →

NEWS_CVE

GPU mining malware spreads via SEO poisoning, AI chatbots

Grandoreiro Malware and BTMOB RAT Campaigns Target Windows and Android Users

Malicious npm Package Stole Files From Claude AI User Directory via GitHub

Can you enforce strong Active Directory password rules without frustrating users?

5 Steps to Managing Shadow AI Tools Without Slowing Down Employees

Glassworm botnet disrupted after resilient C2 infrastructure takedown

CISA Adds Three Known Exploited Vulnerabilities to Catalog

FBI warns of in-person data theft attacks from extortion gang

GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure

3 SOC Steps that Shut Down Incident Risks Early

Gitea Vulnerability Exposes Private Container Images without Authentication

CISA gives feds 4 days to patch actively exploited cPanel plugin flaw

Dutch police arrests suspect linked to Ajax football club hack

Windows 11 KB5089573 update released with performance improvements

AI Chatbot Recommendations Redirect Users to Cryptojacking Malware Sites

KnowledgeDeliver flaw exploited as a zero-day to install web shells

Charter confirms data breach after ShinyHunters extortion threat

MuddyWater Uses DLL Side-Loading in Espionage Campaign Targeting 9 Countries

How Varonis Atlas integrates Claude Compliance API for AI governance

Eppendorf BioFlo 320

ABB Ability Camera Connect

ABB B&R Automation Runtime DoS Vulnerability in System Diagnostics Manager (SDM)

ABB LVS MConfig

CISA Adds One Known Exploited Vulnerability to Catalog

ABB AC500 V2

ABB Terra AC

ABB AbilityTM Zenon Remote Transport Vulnerability

[THN Webinar] New AI DDoS Attacks Are Smarter. Learn How to Fight Back

Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions

Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks

Lawmakers Demand Answers as CISA Tries to Contain Data Leak

CISA Adds One Known Exploited Vulnerability to Catalog

Alleged Kimwolf Botmaster ‘Dort’ Arrested, Charged in U.S. and Canada

CISA Admin Leaked AWS GovCloud Keys on Github

Patch Tuesday, May 2026 Edition

Canvas Breach Disrupts Schools & Colleges Nationwide

Anti-DDoS Firm Heaped Attacks on Brazilian ISPs

‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty

Patch Tuesday, April 2026 Edition

Russia Hacked Routers to Steal Microsoft Office Tokens