Erio Carangella’s Post

A simultaneous update can cause immense damage. This is why I think intelligent updates are gradual and not simultaneous! I'm surprised that a company considered competent in the cybersecurity sector acts in this unintelligent way! And even more so that Microsoft allows it to be done on Windows systems. https://lnkd.in/ewg4WnXE #crowdstrike #windows #down

Vulnerabilità Windows kernel #cybersecurity #windows #patchitall

An impressive distributed and coordinate DDOS Attack.has been detected and stopped according to this report the attack duration is 60 seconds and the total traffic volume is 3.8 Tbps. Also the DDOS defenders looks like distributed and in sync!

aggiunto BitByte in AdrenalineRX. BitByte confronta i profili entropici di un file di controllo e di un file sospetto, misurando la differenza nelle entropie segmentate dei file.

Discovered the most sophisticated zero-day attack of 2024 and RomCom and the invisible Backdoor In recent weeks, the threat landscape has been shaken by the emergence of attacks that exploit the lethal combination of two zero-day vulnerabilities, CVE-2024-9680 and CVE-2024-49039, linked to Firefox and Windows respectively. The target was identified in a targeted campaign led by the cybercriminal group behind the #backdoor RomCom.

🚨 New Resource Alert from CrowdStrike ! 🚨 Yesterday, CrowdStrike released an informative video designed to assist users in repairing their PCs. This video is specifically tailored for those with administrative privileges, offering step-by-step guidance and expert tips to troubleshoot and resolve common issues. #CrowdStrike #PCRepair #ITSupport #AdminTools #Cybersecurity

🚨Bon à savoir 🚨 #CyberSecurityAwareness #StaySafeOnline #CyberSkills #AwarenessTraining #BeCyberSmart #HackerNews #EthicalHacking #BugBounty #Hackers #CTF (Capture The Flag) #CyberSecurityConference #CyberAttack #Malware #Ransomware #Phishing #DataBreach #Hack #ZeroDay #ThreatHunting

Even #Ransomware Gets It Wrong! Six Companies Avoid Ransom Due to DLS Bugs Thanks to the discovery of weaknesses in the systems of extortionist hacker groups, six companies managed to avoid paying large sums to the attackers. Two organizations received free keys to restore encrypted data, and four #cryptocurrency companies were promptly warned of impending attacks. Vangelis Stykas, a security researcher and CTO of Atropos.ai, conducted an in-depth study of the control servers of more than 100 ransomware groups. The goal of the project was to identify #vulnerabilities that could reveal information about the criminal hackers themselves and their potential victims. During the research, Stykas discovered a number of critical vulnerabilities in the web dashboards of at least three hacker groups, which allowed access to the internal structure of their operations. While cybercriminals typically hide their activities on the #darkweb, coding errors and security flaws in data breach sites have provided researchers with the opportunity to gain unauthorized access to sensitive information. In some cases, these vulnerabilities have exposed the IP addresses of servers, which could potentially help determine their true locations. Among the issues found were instances where Everest used a standard password to access its SQL databases, as well as open APIs that allowed BlackCat to track attack targets in real time. Stykas also discovered a vulnerability that allowed him to access all of the Mallox group administrator’s messages, which led to two decryption keys that were transferred to the affected companies. While Stykas did not reveal the names of the companies, he said that two of them are small businesses, while the remaining four are cryptocurrency companies, two of which are estimated to be worth more than $1 billion. Notably, neither company has publicly reported the incidents. This research shows that even cybercriminal groups are vulnerable to basic security flaws. This opens up new perspectives in the fight against ransomware and in preventing its illegal enrichment, despite official bodies such as the FBI still advising victims of cyber attacks not to make concessions to the attackers.

🚨 Lumma Stealer Campaign Exploits Italian Domain with Fake CAPTCHA 🚨 CERT-AGID reveals sophisticated infostealer campaign targeting Italian organizations. 🔍 Key Details: 👉 Compromised .it domain serving malicious CAPTCHA. 👉 65% success rate in credential harvesting. 👉 Campaign active since December 2024. 🎯 Attack Methodology: Phishing emails with legitimate domain Fake CAPTCHA verification page Malicious JavaScript payload Stealer deployment 📊 Data Targeted: Browser credentials Cryptocurrency wallets Banking information Email accounts Corporate VPN access ⚠️ Campaign Metrics: 10,000+ Italian targets 150+ compromised organizations Primary focus on financial sector Secondary targeting of government entities #CTI #ThreatIntel #Malware #InfoStealer #Phishing #CyberSecurity #Italy