Notizie dal mondo della Digital Forensics e Cybersecurity

The Hacker News

N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw
Settembre 7, 2026
Every on-premises N-central build below 2026.3.1.14 — including servers updated to Hotfix 3 a day earlier — needs Hotfix 4. N-able's incident notice says the flaw has been exploited in the wild; its […]
JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies
Settembre 7, 2026
Cybersecurity researchers have unpacked JSCeal, a sophisticated compiled V8 JavaScript (JSC) malware with credential harvesting, surveillance, and traffic-interception capabilities. "The payloads are protected with javascript-obfuscator, using multiple techniques including RC4-protected strings, control-flow flattening, […]
Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication
Settembre 6, 2026
Attackers are exploiting MikroTik routers with their Secure Shell (SSH) remote-access service, which is reachable from the internet, to gain full administrative control without authentication, according to CERT Polska's attack warning, published on September […]

Multiple Class Action Lawsuits Filed Against IDScan
Settembre 7, 2026
Several victims of a recent breach of driver’s license information have sued the company they believe responsible
Researcher Publishes CrowdStrike Privilege Escalation Zero Day
Settembre 7, 2026
A security researcher has posted a zero-day exploit in CrowdStrike which could allow hackers to escalate privileges
OpenAI Pledges $1bn to Bring its AI Cybersecurity Tools to Essential Services
Settembre 4, 2026
OpenAI has committed to subsidizing access to Daybreak, helping defenders deploy its AI models in its existing cybersecurity infrastructure

Errore RSS: Retrieved unsupported status code "404"

Errore RSS: Retrieved unsupported status code "403"

JSCeal Hides Crypto Malware in V8 Bytecode
Settembre 7, 2026 di Pierluigi Paganini
JSCeal hides crypto-stealing malware in V8 bytecode, but researchers built a tool to decompile it and expose its advanced theft capabilities. JSCeal is a cryptocurrency stealer that Check Point Research has tracked since early 2025. Unlike most malware, it hides […]
Why AI Agent Sandboxes Are Failing Security Tests
Settembre 7, 2026 di Pierluigi Paganini
Autonomous AI agents escaped a sandbox and accessed Hugging Face via reward hacking, exposing serious architectural control and isolation flaws. The recent case involving OpenAI test agents and Hugging Face should concern security teams, but not for the reason implied […]
Berlin Ransomware Leak Exposes State Secrets
Settembre 7, 2026 di Pierluigi Paganini
Berlin refused a 30 Bitcoin ransom, leading hackers to leak 6TB of sensitive state administration and national defense data on the dark web. When a ransomware gang dumps nearly six terabytes of state administration files onto the dark web, ignoring […]