Critical infrastructure attacks often begin with stolen credentials, compromised devices, or trusted accounts. Specops Software explains why Zero Trust should verify both user identities and device trust before granting access to critical systems.

Alerts are the unit of detection, not of work. Reorganizing the SOC around Situations and working toward zero queue changes where human judgment lands.

La Commissione europea ha pubblicato le linee guida definitive per aiutare fornitori e operatori dei sistemi di AI a rispettare gli obblighi di trasparenza imposti dall’art. 50 dell’AI Act che scatteranno dal prossimo 2 agosto 2026, l’unica scadenza importante rimasta valida indipendentemente dal Digital Omnibus. Vediamo meglio

Per anni l’idea di un attacco informatico condotto interamente da un agente di Intelligenza Artificiale è rimasta confinata ai laboratori di ricerca e alle presentazioni dei vendor. Oggi non è più così. La piattaforma Hugging Face, punto di riferimento mondiale per lo sviluppo e la distribuzione di modelli AI open source, ha confermato di essere …

Il controllo degli accessi rappresenta il cuore pulsante della sicurezza informatica, eppure molti amministratori ne sottovalutano la complessità e le implicazioni operative. Ecco come costruire strategie operative gestibili senza compromettere la produttività dei dipendenti

We cover two recent cases of BitLocker extortion using RDP, MSSQL, RMM tools, web shells, and printers. The story includes TTPs and recommendations.

SOC, MDR, Vulnerability Assessment, Penetration Test, Red Teaming e Cyber Threat Intelligence implicano uno scambio bidirezionale di informazioni spesso molto sensibili. Le FAQ ACN chiariscono cosa sono gli accordi previsti dall’articolo 17, quando diventano necessari, con quali fornitori devono essere formalizzati e come devono essere comunicati

The U.S. Justice Department has seized more than 1,000 websites and blocked 1,970 domains used to stream FIFA World Cup 2026 matches without authorization.

Will AI let me spend my time at the beach while patching a critical vulnerability in one of the most used CMS in the world? Yes it will. We recently released PAI, our AI Security Agent that acts as a Senior Security Specialist for a wide range of security tasks. For our WAAP (Web Application & API Protection) service WP2Shell was the perfect test run. WP2Shell dropped Friday night (CEST). By Saturday morning we had a virtual patch live on every WordPress site behind our WAAP: one shared rule, ab

The Qilin ransomware gang is exploiting a critical PAN-OS GlobalProtect authentication bypass flaw to breach victims' networks, according to cybersecurity company Arctic Wolf.

Estée Lauder data breach is tied to an Oracle EBS flaw, exposing personal data after a Clop cyberattack. Identity monitoring offered.

Microsoft has shared manual mitigations to help IT administrators fix Windows Server Update Services (WSUS) servers affected by a known issue that causes Windows Update scans to fail or time out.

Kaspersky GReAT experts describe a new Project CAV3RN C2 module. It uses Outlook calendar for communication via Microsoft Graph and has a backup connection via DNS AAAA responses.

Free unofficial patches are available for a recently disclosed Windows zero-day flaw that allows attackers to escalate privileges on up-to-date Windows systems.

Il centro della protezione non è più il documento, ma la capacità dell’organizzazione di continuare a funzionare durante una crisi reale. Ecco come la resilienza si trasforma da esercizio teorico a capacità concreta

Discover how Kali365 targets US organizations with device code phishing, putting Microsoft 365 accounts and sensitive business data at risk.

We are presenting here our most complete analysis to date of the Pegasus spyware. This blog post builds on previous technical reports and forensic investigations by Amnesty International’s Security Lab. Significantly it also draws on previously unpublished internal NSO Group marketing material and internal technical material which was disclosed as part of a long-running civil […]

Cosmetics giant Estée Lauder is notifying customers of a data breach after hackers exploited a flaw in Oracle E-Business Suite that the company used for human resources (HR) operations.

The Ostium trading platform announced that an attacker stole $23.75 million from its liquidity provider vault last week, after compromising off-chain infrastructure used to feed prices into the protocol.

Two recently disclosed SonicWall SMA1000 vulnerabilities were exploited in zero-day attacks for weeks, allowing threat actors to install custom malware on vulnerable VPN appliances.

The JadePuffer autonomous AI agent has upgraded with custom malware called EncForge that focuses on encrypting AI assets, such as training datasets, vector databases, and model checkpoints.

Researchers escaped the sandboxes in Cursor, Codex, Gemini CLI and Antigravity by having the AI agent write files that trusted host tools later run. Multiple CVEs, patches, and Google downgrading two Antigravity findings.

In November 2025, AI music generation tool Suno suffered a data breach that later came to light in July the following year. The data contained over 55M unique email addresses. Phone numbers were also present where they had been used as the sign-up method. Although representing a small portion of the corpus, the breach also included tens of thousands of Stripe records relating to purchases, containing names, physical addresses, purchase amounts and partial credit card data including the card type, expiry date and last 4 digits. The company advised that "Suno does not have access to customers' full credit card numbers in Stripe".

A technical walkthrough of the HackTheBox Paper challenge, by Andy From Italy.