Casino entertainment company Boyd Gaming has disclosed a data breach after hackers gained access to its internal IT systems. Boyd Gaming said in a filing with the SEC that the cybersecurity incident has not impacted its properties and business operations. The Las Vegas-based company is conducting an investigation with assistance from outside cybersecurity experts and ..
Categoria : Security
The US cybersecurity agency CISA has shared details on the exploitation of a year-old GeoServer vulnerability to compromise a federal civilian executive branch (FCEB) agency. The exploited bug, tracked as CVE-2024-36401 (CVSS score of 9.8) and leading to remote code execution (RCE), was disclosed on June 30, 2024, two weeks before CISA added it to ..
The recent cyberattack aimed at aerospace and defense company Collins Aerospace, which has caused significant disruptions at major airports in Europe, reportedly involved a piece of ransomware known as HardBit. The HardBit ransomware emerged in October 2022 and it came into the spotlight a few months later when it emerged that the cybercriminals were willing ..
In the light of recent supply chain attacks targeting the NPM ecosystem, GitHub will implement tighter authentication and publishing rules meant to improve the NPM registry’s security. Several major incidents occurred over the past three months, with the most recent involving the Shai-Hulud self-replicating worm that impacted dozens of maintainer accounts last week. The attackers ..
Web performance and security company Cloudflare reported on Tuesday that its systems blocked another record-breaking distributed denial-of-service (DDoS) attack. The latest record-breaking attack peaked at 22.2 terabits per second (Tbps) and 10.6 billion packets per second (Bpps), and lasted only 40 seconds. The company said this hyper-volumetric DDoS attack, which was double in size compared ..
Dietro i numeri apparentemente trionfali emersi dal nuovo report di Google DORA 2025 “State of AI-assisted Software Development 2025“, si nasconde una verità più complessa e sfumata. Il 2025 segna un punto di svolta nell’adozione dell’intelligenza artificiale nello sviluppo software. Non più una curiosità per early adopter, ma una realtà consolidata che coinvolge il 90% ..
SonicWall has released a fresh software update for its SMA 100 appliances to help users remove the Overstep malware deployed in a recent campaign. As part of the attacks, flagged in July by Google’s Threat Intelligence Group, a threat actor tracked as UNC6148 infected fully patched SMA appliances with a persistent backdoor and user-mode rootkit ..
Libraesva has addressed a vulnerability in its integrated email security platform that has been exploited in the wild. Tracked as CVE-2025-59689 (CVSS score of 6.1), the flaw is described as a command injection issue that could lead to the execution of arbitrary commands as a non-privileged user. According to Libraesva’s advisory, the bug could be ..
Il settore sanitario italiano si trova sotto assedio informatico, come documentato dall’Agenzia per la Cybersicurezza Nazionale (ACN). Secondo la relazione ufficiale ACN 2024, negli ultimi anni si sono verificati in media 2,6 eventi cyber malevoli al mese ai danni di strutture sanitarie, dei quali la metà circa ha dato luogo a “incidenti”. Nel 2024, secondo ..
Most of the Building Management Systems (BMS) and Building Automation Systems (BAS) used in healthcare facilities were designed in the 1990s or early 2000s when cybersecurity wasn’t a big issue. These systems control and monitor a hospital’s lighting, heating and cooling, elevator operation and much more. A recent study revealed that 75% of BMS — ..
