A financially motivated threat actor is using open-source AI agent frameworks to attack hundreds of online retailers at scale, stealing more than 600,000 credit card records.

ShinyHunters sostiene di essere riuscito a violare l'infrastruttura dell'FBI e di aver sottratto una grande quantità di informazioni relative ad agenti, dipendenti ed ex dipendenti, oltre a persone che avrebbero presentato domanda per lavorare nell'agenzia. Il Bureau non ha ancora confermato ufficialmente, ecco cosa risulta verificato

Attackers are increasingly targeting the management systems used to control enterprise infrastructure, with several critical vulnerabilities actively exploited before or shortly after vendors disclosed them.

Claude Opus 5.5 avvicina le capacità cyber dei modelli più avanzati a una platea molto più ampia e per questo Anthropic ha introdotto nuovi safeguard, routing delle richieste sensibili, sandbox e accessi verificati: per le aziende cambia il modo di governare gli agenti AI

A Kubernetes user with limited permissions can potentially gain control of an entire Google Cloud organization by exploiting the authority granted to Google Kubernetes Config Connector. Varonis explains how this confused deputy problem can turn a single Kubernetes YAML file into a path to organization-wide privilege escalation.

Norton 360 Advanced offre il servizio anti-truffa Pro con IA per proteggere fino a 10 dispositivi: ecco come funziona e quali sono i costi.

Arista Networks has released security patches for a zero-day flaw that is being actively exploited and affects VeloCloud Orchestrator (VCO) On-Prem deployments.

Microsoft warned that the September 2026 security updates may also break Always On VPN connections on some Windows 11 systems.

Explore phishing risk across 5 key US industries and learn how faster detection and threat visibility help mitigate attacks.

Il Garante privacy ha 120 giorni per notificare la contestazione, non per concludere il procedimento sanzionatorio. La Cassazione chiarisce la distinzione, ma lascia emergere un problema irrisolto: manca un termine finale certo. Una lacuna che incide sulla difesa delle imprese e che l’Autorità potrebbe colmare con il proprio regolamento

EU KIDS Act proposes new age limits, parental controls and safety requirements for children using social media and online platforms in the EU.

CVE-2026-65660 is a SharePoint RCE flaw rated 8.8 that Microsoft first called a 6.5 spoofing bug.

The FBI is investigating after Shiny Hunters claimed it stole thousands of agents' personal data via FBIjobs.go.

The Cyber Express talks to Harness' Rahul Sood about AI-speed development, faster remediation, runtime visibility and limits on AI agents.

L’intelligenza artificiale sta abbattendo drasticamente il costo necessario per produrre codice, documenti, analisi e informazioni. Verificarli, però, continua a richiedere tempo, competenza e responsabilità. Il rischio è trasformare la produttività individuale in un debito di verifica collettivo

Sekoia TDR analysts conduct an assessment of threats regarding the major elections that will occur in 2024.

Learn about the techniques used by the Mallox ransomware affiliate to compromise an MS-SQL server. Dive into our detailed technical analysis.

The Sekoia's AI SOC platform, designed for MSSP, centralizes management, integrates with any infrastructure, and automates tasks with pre-built playbooks. It supports MSSPs' transformation into MDRs, offering an intuitive XDR approach and multi-tenant mod

Uncover the details of the DoppelGänger campaign, a Russian influence operation aimed at undermining support for Ukraine.

This time, we're not revealing a new cyber threat investigation or analysis, but I want to share some insights about the team behind all Sekoia Threat Intelligence and Detection Engineering reports. Let me introduce you to the Sekoia TDR…

This blog post provides an in-depth analysis of PikaBot, focusing on its anti-analysis techniques implemented in the different malware stages.

The Filigran x Sekoia.io partnership announcement is an opportunity to put the spotlight back on the benefits of the integration between OpenCTI and Sekoia Threat Intelligence.

The cybersecurity market is undergoing significant transformation marked by major acquisitions and mergers among key players. Traditional on-premise solutions are being replaced by comprehensive, SaaS-based platforms that offer faster deployment.

Discover how new cybersecurity tools can revolutionize SOC operations. Boost efficiency and stay ahead of cyber threats with integrated solutions.