EU AI | Protect Not Surveil

JPEG image FUD ransomware: a way to evades antivirus solutions - Secure Bulletin

In a concerning development for cybersecurity professionals, threat actors have begun leveraging a novel Fully UnDetectable (FUD) ransomware attack technique that utilizes seemingly benign JPEG image files as the initial infection vector.

China-Linked APTs exploit critical SAP NetWeaver vulnerability to breach over 580 systems globally - Secure Bulletin

In a significant escalation of cyber-espionage activities, multiple China-affiliated advanced persistent threat (APT) groups have been found actively exploiting a recently disclosed critical vulnerability in SAP NetWeaver, identified as CVE-2025-3132…

Amendments to the Montana Consumer Data Privacy Act Bring Big Changes to Big Sky Country

German authorities shut down major crypto-swapping platform “eXch,” seizing €34 million in illicit assets - Secure Bulletin

On April 30, 2025, the Frankfurt am Main General Prosecutor’s Office-Central Unit for Combating Internet Crime (ZIT)-in close collaboration with the German Federal Criminal Police Office (BKA), executed a decisive operation to dismantle the crypto-sw…

New malware LOSTKEYS uncovered in COLDRIVER campaign targeting Western governments and NGOs - Secure Bulletin

The Google Threat Intelligence Group (GTIG) has recently uncovered a sophisticated new malware strain, dubbed LOSTKEYS, deployed by the Russian state-sponsored threat actor COLDRIVER (also known as UNC4057, Star Blizzard, or Callisto).

COMUNICATO STAMPA - L'Istituto Italiano per la Privacy e la Valorizzazione dei Dati lancia un chatbot powered by OpenAI sulla protezione dei dati online

Roma, 12 maggio 2025 - L'Istituto Italiano per la Privacy e la Valorizzazione dei Dati (IIP) è orgoglioso di annunciare il lancio di Privacy AIngel, un innovativo chatbot generativo alimentato dall'intelligenza artificiale di OpenAI, progettato per s…

Tactical reality behind the India-Pakistan hacktivist surge - Secure Bulletin

In May 2025, a wave of hacktivist activity targeting Indian digital infrastructure sparked widespread alarm in media and social networks, with numerous groups claiming significant breaches of government, educational, and critical infrastructure websi…

From PDF invoice to geo-fenced RAT delivery campaign - Secure Bulletin

A recent campaign targeting Southern European organizations demonstrates advanced evasion techniques combining social engineering, trusted platforms, and geolocation filtering. The attack chain unfolds through four precision stages: 1.

Emerging DOGE Big Balls ransomware campaign leverages multi-stage tooling and BYOVD exploits - Secure Bulletin

A recent analysis of newly discovered payloads linked to the DOGE Big Balls ransomware operation reveals a complex infection chain combining open-source tools, kernel-level exploits, and psychological warfare.

(in)sicurezza digitale

Notizie cybersecurity, malware, ransomware e sicurezza dei dati

Consent for Processing Personal Data in the Age of AI: Key Updates Across Asia-Pacific

This Issue Brief summarizes key developments in data protection laws across the Asia-Pacific region since 2022, when the Future of Privacy Forum (FPF) and the Asian Business Law Institute (ABLI) published a series of reports examining 14 jurisdiction…

Malicious npm packages hijack macOS Cursor AI IDE - Secure Bulletin

The Socket Threat Research Team has uncovered a sophisticated supply chain attack targeting macOS developers using the Cursor AI code editor.

- YouTube

Profitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.

REUSE - Make licensing easy for everyone

We make licensing easy for humans and machines alike. REUSE solves a fundamental issue that Free Software licensing has at the very source. Adopting our recommendations is as easy as one-two-three!

EDRi-gram, 7 May 2025 - European Digital Rights (EDRi)

What has the EDRis network been up to over the past two weeks? Find out the latest digital rights news in our bi-weekly newsletter.

Hungary’s new biometric surveillance laws violate the AI Act - European Digital Rights (EDRi)

Such use of this technology risks discouraging people from exercising their fundamental rights undermining their trust in democracy.

AI & Tech Summit 2025

POLITICO Live AI & Tech Summit 2025 - May 13-14 - Brussels

DMA +++ LLW 2025 +++ PMPC +++SFP - FSFE

In April, our work on Device Neutrality continued with news and meetings on DMA; we had a PMPC meeting in Germany and talked about the German coalition agr...

The Curse of Dimensionality: De-identification Challenges in the Sharing of Highly Dimensional Datasets

publiccode.eu/en/

Technical experts call on Commissioner Virkkunen for a seat on the table of the European Commission’s Technology Roadmap on encryption - European Digital Rights (EDRi)

EDRi, in a group of 39 organisations and 43 experts, published an open letter today to call for a scientific evidence-based approach to encryption.

Stealthy Linux backdoor leveraging residential proxies and NHAS reverse SSH - Secure Bulletin

A recently discovered Linux backdoor (SHA256: ea41b2bf1064efcb6196bb79b40c5158fc339a36a3d3ddee68c822d797895b4e) employs advanced evasion techniques to bypass detection while establishing persistent access via SOCKS5 proxies and in-memory payload exec…

US indicts Black Kingdom ransomware operator: technical analysis of ProxyLogon exploitation and law enforcement response - Secure Bulletin

The U.S. Department of Justice unsealed charges against Yemeni national Rami Khaled Ahmed (36) for deploying Black Kingdom ransomware via ProxyLogon exploits (CVE-2021-26855) against 1,500+ systems, including U.S.

Come mitigare l’esecuzione non autorizzata di PowerShell via Microsoft Word

Microsoft Word può eseguire comandi di PowerShell, indicando un possibile attacco informatico

Sophisticated npm malware campaign exploits Cross-Ecosystem typosquatting - Secure Bulletin

A coordinated malware operation targeting npm employs cross-ecosystem typosquatting to mimic popular libraries from Python, Java, C++, and .NET ecosystems.

Security Weekly 28-2/5/25

I 42.000 domini Phishing as-a-service di LabHost analizzati: hai verificato che la tua rete non abbia avuto contatti con uno di loro? Script Python.

Viktoriia Roshchyna: cronaca e analisi politica di una morte annunciata

ilGlobale - Quotidiano di informazione economica, politica e tecnologica

Dismantling “764”: inside the takedown of a sophisticated child exploitation network - Secure Bulletin

In a significant development for cybersecurity and child protection efforts, law enforcement agencies have successfully apprehended two key figures allegedly behind "764," a highly organized online child exploitation network.

Hijacking Trust: how Gmail and Google APIs are being weaponized for stealthy C2 channels - Secure Bulletin

In the ever-evolving landscape of cybersecurity, attackers are increasingly exploiting trusted services to establish covert command-and-control (C2) channels.

(in)sicurezza digitale

Notizie cybersecurity, malware, ransomware e sicurezza dei dati

FPF Launches Major Initiative to Study Economic and Policy Implications of AgeTech - Future of Privacy Forum

FPF and University of Arizona Eller College of Management Awarded Grant by Alfred P. Sloan Foundation to Address Privacy Implications, and Data Uses of Technologies Aimed at Aging At Home The Future of Privacy Forum (FPF) — a global non-profit focuse…