@CyberWorldOps

Notizie di cybersecurity aggiornate ogni giorno: vulnerabilità, ransomware, data breach e APT. Database CVE con punteggi CVSS e prodotti colpiti

 Italy
cyberworldops.eu
Joined July 2026
  • Tweets484
  • Following1
  • Followers17
Sandworm and UAC-0099 teamed up to wipe a Ukrainian logistics company, using the new MythicRatatoskr backdoor for access, per ESET. #Cybersecurity #Sandworm #Ukraine cyberworldops.eu/en/sandworm…

Sandworm Wiping Attack Followed UAC-0099 Access

ESET describes UAC-0099 phishing access to a Ukrainian logistics firm, MythicRatatoskr backdoor via Yggdrasil, and later Sandworm wiping.

cyberworldops.eu
15
Microsoft links Storm-0940 to Microsoft 365 intrusions via compromised ConnectWise app credentials, aided by ARTEX agentic AI. Audit OAuth apps and rotate keys. #CyberSecurity #Microsoft365 #ThreatIntel cyberworldops.eu/en/compromi…

Compromised ConnectWise app credentials enabled ARTEX-assisted Microsoft 365 intrusions

Compromised ConnectWise app credentials enabled ARTEX-assisted Microsoft 365 intrusions

cyberworldops.eu
18
Tor relay hijacking exposed SSH passwords. Heartbreaker, a Rust-based macOS ransomware, attempts to recompile itself. Rotate exposed SSH credentials and review macOS detections. #ThreatIntel #MacOSSecurity cyberworldops.eu/en/tor-rela…

Tor relay hijacking exposed SSH passwords; Heartbreaker ransomware attempts to recompile itself

Tor relay hijacking exposed SSH passwords; Heartbreaker ransomware attempts to recompile itself

cyberworldops.eu
7
HPE patched 72 ArubaOS flaws, including 8 maximum-severity bugs enabling unauthenticated remote attacks. Update now to protect your network. #Cybersecurity #ArubaOS #HPE cyberworldops.eu/en/hpe-rele…

HPE releases ArubaOS fixes for remote attacks that require no login

HPE releases ArubaOS fixes for remote attacks that require no login

cyberworldops.eu
5
The New York Knicks tested staff with a fake free championship ring offer to simulate phishing. Would you have clicked? #CyberSecurity #Phishing #SocialEngineering cyberworldops.eu/en/knicks-u…

Knicks used free championship ring offer to test employees for phishing

Knicks used free championship ring offer to test employees for phishing

cyberworldops.eu
1
9
PHP developers released emergency updates for PHP2Shell, two decade-old flaws now facing broad exploitation. Patch PHP immediately and hunt for compromise. #PHP2Shell #InfoSec #CyberSecurity cyberworldops.eu/en/php2shel…

PHP2Shell PHP Flaws Reportedly Exploited, Updates Released

Amazon reports broad exploitation of PHP2Shell flaws as PHP developers release security updates; NSA urges immediate patching of servers and databases.

cyberworldops.eu
28
Attacker hijacked 333 Tor exit relays to intercept SSH logins and sniff plaintext email. Tor is not broken, but unencrypted traffic is exposed. Use SSH keys + end-to-end encryption. #Tor #CyberSecurity #InfoSec cyberworldops.eu/en/attacker…

333 Tor Exits Hijacked to Intercept SSH Logins

Attacker hijacked 333 Tor exit relays to redirect SSH logins to 12 servers and block encrypted email ports to attempt plaintext collection.

cyberworldops.eu
9
Arista patched CVE-2026-114625, a VeloCloud Orchestrator flaw under active exploitation. On-prem admins: patch now and check for compromise. #Cybersecurity #Arista #InfoSec cyberworldops.eu/en/arista-f…

Arista Fixes CVE-2026-114625 VeloCloud Flaw

Arista issued fixes for CVE-2026-114625, an actively exploited VeloCloud Orchestrator SQL injection allowing authenticated privilege escalation.

cyberworldops.eu
26
eMudhra is quitting global TLS after 8 intermediate certs were found with guessable private keys like 4, 56 and 237. Huge trust failure for the Web PKI. #CyberSecurity #TLS #PKI cyberworldops.eu/en/emudhra-…

eMudhra Exits TLS Business After Weak Keys Found

eMudhra will leave the global TLS business after researchers found weak intermediate keys, prompting browser blocks and scrutiny of its ceremony flaw.

cyberworldops.eu
13
Capcom confirms intruders accessed 11.7M CAPCOM ID accounts linked to its web services and online games. Reset your password, enable MFA, and watch for phishing. #Capcom #DataBreach #InfoSec cyberworldops.eu/en/capcom-s…

Capcom Confirms Breach Affecting 11.7M CAPCOM ID Accounts

Capcom says intruders reached 11.7M CAPCOM ID accounts, exposing emails and login details. Most passwords and payment data were unaffected.

cyberworldops.eu
33
Imperva's Node2Shell shows crafted Brotli input can trigger RCE via CVE-2026-111497 on stock Node.js 24. Patch and audit Brotli-exposed inputs now. #NodeJS #CyberSecurity #RCE cyberworldops.eu/en/crafted-…

Imperva Demonstrates Brotli Code Execution in Node.js

Imperva demonstrated crafted Brotli input causing code execution on a stock Node.js build via request and response paths, with fixes and limits explained.

cyberworldops.eu
2
81
Compromised LiteLLM 1.107.0 pushed a credential stealer via PyPI and containers. If you run LiteLLM, freeze deploys and rotate keys now. Details: cyberworldops.eu/en/compromi… #SupplyChain #InfoSec #LiteLLM cyberworldops.eu/en/compromi…

Compromised LiteLLM 1.107.0 Spread Credential Stealer

Compromised LiteLLM v1.107.0 distributed credential-stealing code via PyPI and containers; researchers reported stolen AWS credentials were tested.

cyberworldops.eu
23
INTERPOL's Operation Serengeti III disrupted 10,909 malicious networks across 21 countries from June 29 to Aug 31, 2026. A major coordinated strike on cybercrime. #CyberSecurity #INTERPOL #ThreatIntel cyberworldops.eu/en/operatio…

Operation Serengeti III Disrupts 10,909 Malicious Networks

Operation Serengeti III disrupted 10,909 networks across 21 countries, with 1,462 arrests and over $105M recovered, INTERPOL reports.

cyberworldops.eu
18
Cisco patched 34 flaws across 14 advisories, including a critical RCE in Expressway Series. Admins should update Snort 3 and other affected products ASAP. #Cisco #CyberSecurity #PatchTuesday cyberworldops.eu/en/cisco-fi…

Cisco Fixes 34 Flaws, Critical Expressway RCE

Cisco issued 14 advisories for 34 CVEs in Expressway, Snort 3, Unified Communications, IOS XR and Secure Client, including critical root execution risk

cyberworldops.eu
16
Railway warns customer secrets may have been accessed and urges immediate credential rotation. Check env variables, API keys and tokens. #CyberSecurity #CloudSecurity #DataBreach cyberworldops.eu/en/railway-…

Railway Warns Customer Secrets May Be Exposed

Railway warns an intruder may have accessed encrypted environment variables and urges customers to rotate secrets and review logs for unusual activity.

cyberworldops.eu
23
Google Chrome 156 stable fixes 353 security flaws, including 6 critical memory-safety bugs. Update and restart your browser now. #Chrome #CyberSecurity #InfoSec cyberworldops.eu/en/chrome-1…

Chrome 156 Fixes 353 Flaws, Six Critical Memory Bugs

Chrome 156 reaches stable with 353 security fixes, including six critical memory-safety issues across core components.

cyberworldops.eu
64
Tracebit's 'Context Bombs' aim to lure AI attack agents into costly decoys, per SecurityWeek. Research concept, not a breach. cyberworldops.eu/en/tracebit… #AISecurity #Deception cyberworldops.eu/en/tracebit…

Tracebit Context Bombs Divert AI Attack Agents

Tracebit tested context bombs, defensive prompts that steer AI attack agents toward decoys and costly tasks in controlled research.

cyberworldops.eu
20
Kaspersky links Lazarus FlashHole campaign targeting South Korean orgs to malware delivery hidden with post-quantum key exchange. Evasion is evolving. #Lazarus #PostQuantum #Cybersecurity cyberworldops.eu/en/lazarus-…

FlashHole Campaign Attributed to Lazarus Uses ML-KEM

Kaspersky reports FlashHole, attributed to Lazarus, uses phishing, in-memory loaders and ML-KEM key exchange to hide malware delivery per BleepingComputer

cyberworldops.eu
19
GMO Internet halted Onamae Desktop Cloud after intruders breached its infrastructure and installed malware on customer servers. Up to 26,739 servers at risk. #Cybersecurity #CloudSecurity #Japan cyberworldops.eu/en/gmo-halt…

GMO Halts Desktop Cloud After 26,739 Servers at Risk

GMO shut down Desktop Cloud after unauthorized access potentially exposed up to 26,739 servers, with unauthorized programs in some environments.

cyberworldops.eu
1
66
CISA flagged 6 actively exploited flaws in Plex Media Server, Siemens Software Center and SiteGuard Server Edition. Federal deadline for one is Oct 23 - patch now. #CISA #CyberSecurity #InfoSec cyberworldops.eu/en/cisa-fla…

CISA Flags Six Exploited Flaws in Plex, Siemens, SiteGuard

CISA added six flaws in Plex Media Server, Siemens Software Center and SiteGuard Server Edition to its KEV catalog citing exploitation evidence.

cyberworldops.eu
1
84
Load more