Briefing del 2026-05-05

Palo Alto sta correndo per correggere una vulnerabilità del firewall che gli attaccanti stanno già utilizzando per prendere il controllo dei dispositivi con portali di accesso esposti su Internet.

• Weaver E-cology flaw turned servers into command shells
• MOVEit Automation Auth Bypass Forces Full-Installer Upgrades
• ShadowPad Espionage Campaign Targets Exchange and IIS Servers
• Apache Protocol Parsers Expose Servers to RCE and DoS
• Polished Phishing Bypasses Trust Controls at Scale
• China-Nexus APT Reuses Malware Across Government Targets
• La breach di Canvas espone dati di identità condivisi degli studenti
• Karakurt Negotiator Sentenced After Extortion Campaign
• French Citizen Data Sale Creates Long-Term Fraud Pool
• Phishing Turns RMM Tools Into Redundant Backdoors
• macOS Users Become the Weak Link in Fake Updates
• Certificate Trust Breaks When DigiCert Is Breached
• PackageKit Auth Bypass Turns Local Users Root
• Cargo Theft Moves Into Broker Email and Load Boards
• Google Pays More for Harder Device Exploits
• Tax Phishing Delivers Swappable Malware in India and Russia
• ScarCruft Sposta BirdCall da Windows ad Android
• Il malware per Windows trasforma Phone Link in un bypass per 2FA
• Vulnerabilità nel AI Workflow Builder consente il completo takeover del server