Security Affairs جمعه ۲۲ آبان ۱۴۰۵ · ۰۲:۱۲

The School Bomb Threats Came From Accounts Already in Stolen Data

Hudson Rock researchers found that two university addresses tied to Italy’s school bomb threats were in infostealer data. On 11 November, bomb-threat emails hit schools across Europe. ANSA, citing the Education Ministry, reported that about 6,000 Italian schools received them. Some evacuated, others kept teaching after talking to police, so the recipient count tells you […]

بدافزار و آلودگی فیشینگ سیستم‌عامل امنیت هویت و دسترسی

خواندن متن کامل در Security Affairs درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

Help Net Security جمعه ۲۲ آبان ۱۴۰۵ · ۰۲:۴۵

Fake Zillow pages use ClickFix NetSupport RAT to target apartment hunters

EfficientIP Research Labs traced a ClickFix campaign that used fake Zillow apartment-review pages to install NetSupport RAT on visitors’ Windows computers. Each page showed what looked like a routine verification check. Behind it, the page quietly copied a PowerShell command to the clipboard and walked the visitor through pasting and running it. Doing that installs remote-control software that keeps its window hidden…

هوش تهدید سیستم‌عامل

منبع

BleepingComputer جمعه ۲۲ آبان ۱۴۰۵ · ۰۲:۲۳

New worm-like 'SCKit' malware targets MSPs in ScreenConnect attacks

A new worm-like malware toolkit named SCKit was deployed in the recent ScreenConnect attacks targeting managed service providers (MSPs), designed to spread from infected customer devices to MSP technicians' computers and compromise additional managed networks. [...]

بدافزار و آلودگی

منبع

NetSPI جمعه ۲۲ آبان ۱۴۰۵ · ۰۲:۱۹

Apache HTTP Server: Critical RCE Vulnerability ( CVE-2026-119618 )

The Apache Software Foundation has disclosed a critical vulnerability, CVE-2026-119618, in the HTTP/2 module (mod_http2) of Apache HTTP Server. The post Apache HTTP Server: Critical RCE Vulnerability ( CVE-2026-119618 ) appeared first on NetSPI.

آسیب‌پذیری و روز صفر امنیت ابری توسعه وب

منبع

BleepingComputer جمعه ۲۲ آبان ۱۴۰۵ · ۰۱:۵۵

Hackers compromise 4,800 GitHub accounts to steal cloud credentials

A new campaign dubbed 'wfx-loot' has unfolded on GitHub where threat actors used 4,837 compromised accounts to probe 61,764 repositories, open pull requests, and push secrets-stealing malware. [...]

بدافزار و آلودگی

منبع