Hackers abuse FTP server banners to deliver new Windows malware
Threat actors are abusing FTP banners to hide commands that deliver two previously undocumented remote access trojans named E4del and PINHOLE.
Phishing ai danni del Ministero della Salute sfrutta un falso “rimborso ticket sanitario”
SickKids data breach exposes employee and job applicant info
Toronto's Hospital for Sick Children (SickKids) says a cybersecurity incident exposed the personal information of some current and former employees and job applicants, stemming from a flaw in third-party software. Clinical systems and patient records were not affected. (264)
Endpoint Blind Spots: The 5 Places Ransomware Hides Before It Detonates
Explore ransomware attack vectors hiding in endpoint blind spots, from remote access tools and credentials to vendors, OT systems and phishing.
Automazione e gestione del rischio nel SOC moderno
L'impatto dell'automazione e dell'IA sulla gestione del rischio e l'evoluzione dei ruoli operativi nel SOC moderno.
Sicurezza dei siti web: quali garanzie cercare in un piano hosting
Con Aruba Hosting si può attivare il cloud hosting in tutta sicurezza a partire da 0,99€ con data center e WAF in Italia: ecco come fare.
The invisible passenger in your car
Kaspersky expert has discovered new Android malware designed to serve ads and build a proxy botnet. It’s delivered through legitimate software for DoFun head units.
Il “will” del GDPR: la volontà che trasforma il dovere in accountability
Nel Regolamento Generale sulla Protezione dei Dati, il principio di accountability, che la traduzione italiana “responsabilizzazione” restituisce solo a metà, nasce da una coppia di verbi ausiliari. Ecco un grande assente, il verbo "will" del GDPR, che affonda le radici etimologiche nella volontà
Someone targeted security researchers using a fake crypto conference as a lure
A hacker pretending to work for a leading cryptocurrency news website targeted several cybersecurity professionals using Google Docs as a way to deliver malware.
China’s ‘SilkParasite’ espionage operation targeting Central Asia with AI-assisted malware
Is Cyber missing the Marque?
In this week's newsletter, new author Mick Baccio introduces himself and explores the operational and security implications of the new White House memorandum regarding private sector participation in government-authorized offensive cyber operations.
Hackers poison arrayref Rust crate to push infostealer malware
Hackers compromised the maintainer account behind the widely used Rust crate arrayref to introduce malware that executed on developers' systems during compilation.
Senators press TikTok over withholding of safety features for some users
Critical Elementor Pro bug exposes WordPress sites to RCE attacks
A critical vulnerability in the Elementor Pro WordPress plugin could allow attackers to upload executable files for remote code execution on the server.
Insider Threat Report: Dark Web Recruitment & Access Trends
Flashpoint’s analysis of insider threat recruitment, illicit access advertising, and threat actor activity targeting enterprise environments.
How MSPs can catch phishing attacks email filters miss
AI is making phishing attacks more personalized, convincing, and difficult for traditional email filters to detect. Kaseya explains how MSPs can monitor identity, email, and endpoint activity to detect and contain attacks that make it past the inbox.
Phishing Klarna: crescita vertiginosa
Nella giornata odierna il team anti frode D3lab ha rilevato la 132a campagna di phishing del 2026 rivolta agli utilizzatori di Klarna.
Vettore di attacco
Klarna è una società svedese che si occupa di microcredito, permettendo agli utenti di rateizzare anche pagamenti di importo medio/basso
How Easy Is It to Scan a Contactless Payment and Access Card?
I recently tested NFC Canary against several real-world tools used by security researchers and penetration testers, and it raises an interesting question
Citrix urges admins to patch new NetScaler flaws as soon as possible
Citrix has warned customers to immediately secure their systems against two vulnerabilities affecting NetScaler Gateway secure remote access solutions and NetScaler ADC networking appliances.
Sanità sotto attacco: il ritorno a bit e carta, quasi una battaglia di altri tempi. Il caso Romania
I medici degli ospedali, quando il cyber attacco alla sanità in Romania ha costretto a mettere offline cento ospedali, hanno reagito creando soluzioni alternative per proteggere i pazienti fino al ripristino del servizio. Ecco quali
CISA warns of hackers exploiting critical MLflow vulnerability
The Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that threat actors are now exploiting a critical vulnerability in the MLflow open-source AI engineering platform.
Guild Group’s Mohammad Arif on the Security Risks of Enterprise AI
The Cyber Express speaks with Guild Group’s Mohammad Arif about the growingsecurity risks of AI, from data exposure and AI agents to supply-chain threats.
Dalla crittografia zero-knowledge alla protezione post-quantistica: l’evoluzione della tutela dei dati personali nel cloud europeo
Zero Knowledge Protocol e Cloud storage di Internxt: ecco come ottenere 1 TB di spazio a vita con l'85% di sconto e tariffe convenienti.
New Manic Android malware can exfiltrate data through nearby devices
A new Android malware named Manic targeting users in multiple European countries has a fallback data exfiltration mechanism that uses nearby infected devices.
UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations
Cisco Talos discovered a Chinese-speaking cybercrime group, tracked as UAT-10147, that targets a wide range of vulnerable web servers. This is an overview of the campaign, examining the countries affected, potential impact of BadIIS infections, the attack chain, and post-compromise tactics.
UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities
The newly identified SPECTRE implant represents an evolution in commodity intrusion tooling, integrating cross-platform C2 operations, process injection, credential theft, anti-analysis protections, and kernel-level endpoint detection and response (EDR) bypass functionality.
Critical Zimbra RCE flaw now actively exploited in attacks
CERT Polska, the Polish Computer Emergency Response Team (CERT), warned that attackers have begun exploiting a critical vulnerability in Zimbra Collaboration Suite (ZCS).
Archiviazione dati permanente e sovranità digitale: l’evoluzione dei modelli di storage cloud senza abbonamento
Come ottenere il cloud storage a vita da 199 €: crittografia AES a 256 bit con pCloud: ecco come attivare il servizio e i requisiti.
Manic: Blend between Banking Malware & Spyware
North Korean IT Workers Scheme: Detection IOCs and Tactics for Government and Corporate SOCs
See actionable steps and IOCs to protect your organization against hiring North Korean IT workers and avoid compromising your infrastructure.