Agenti AI che usano un wiki pubblico come memoria esterna, condividono istruzioni e si adattano quando l’attività viene ostacolata. Il caso ricostruito da Reuters porta OpenAI a riconoscere una zona grigia tra misalignment e incidente cyber e riapre una questione decisiva: quando un comportamento anomalo deve diventare pubblico?

Identity verification company IDScan has confirmed that hackers accessed customer data stored in its cloud platform, days after reports linked the company to a massive database containing more than 153 million driver's license scans.

Identity was the target in roughly half of all confirmed malicious activity. Prophet Security breaks down the four main attack patterns seen across customer environments between May and July 2026, and explains why some attacks succeeded while others were blocked.

Multiple cyber-espionage groups deployed an exploit kit dubbed "BlueMoon" that leveraged zero-day vulnerabilities in Microsoft Windows and Google Chrome.

Gli HMI collegano operatori e processi industriali, ma possono anche diventare punti critici. Accessi, sistemi embedded, connessioni remote e backup devono essere protetti per evitare che un terminale compromesso si trasformi in fermo produzione

Cyble has rolled out a significant upgrade to Executive Monitoring inside Cyble Vision, bringing unified findings, AI-driven scoring, and expanded alerting

How infostealer malware fuels the credential theft pipeline — from harvesting and stealer logs to enrichment and dark web marketplace listings.

Microsoft has fixed a known issue that wiped mouse settings on some Windows 11 systems after installing the KB5120998 August 2026 preview update.

The EU Cyber Resilience Act's 24-hour vulnerability reporting duty starts Sept. 11, 2026. Deadlines, scope, ENISA's platform and €15M penalties explained.

Dal 27 al 29 ottobre, it-sa Expo&Congress 2026 riunisce a Norimberga la community europea della cyber security per confrontarsi su AI, resilienza, sovranità digitale e nuove minacce. Per i nostri lettori è disponibile un biglietto gratuito valido per i tre giorni della manifestazione

Di fronte a uno scenario sempre più complesso, limitare l’intervento a logiche legate a scelte tecnologiche non è sufficiente. Serve un ecosistema completo che permetta il salto di qualità

Discover why ANY.RUN is a G2 Malware Analysis Leader and how it helps SOC teams deliver measurable value to their enterprises.

This article was written by an AI agent working under human supervision; the human it works for verified and approved it before publication. An open directory on a freshly-registered Indonesian dom…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a critical WatchGuard Firebox firewall vulnerability, which it flagged as actively exploited in December.

Surfshark al prezzo di 2,49 euro al mese offre una VPN con antivirus integrato su dispositivi illimitati: ecco come attivarla e come funziona

In vigore dal 2024, il Cyber Resilience Act prevede severi obblighi di segnalazione dall'11 settembre 2026. Ecco cosa comportano gli obblighi di comunicazione dell’articolo 14

La rappresentazione classica, veicolata anche sui siti dell’UE, prevede quattro diversi livelli di rischio: ecco quali e ulteriori interventi da parte dell’autorità

Preinstalled but Not Safe. OnePlus OEM App Session Takeover Vulnerability

Microsoft says the September 2026 Patch Tuesday updates fix a known issue causing desktop settings to be lost or reset on some Windows devices.

Proteggere gli impianti industriali oggi significa superare la separazione tra IT e OT. Il progetto sviluppato da A2A Smart City mostra come standardizzazione, monitoraggio continuo e governance unificata rafforzino resilienza e continuità operativa delle infrastrutture critiche: un modello replicabile anche per altre realtà industriali

Trezor warned customers on Wednesday that threat actors who breached its third-party email provider are targeting them in phishing attacks.

In August 2026, healthcare and pharmaceutical company McKesson was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published a substantial corpus of data they alleged was sourced from the company, which included 6.4M unique email addresses among other personal and corporate data attributes. The impacted data related to a range of individuals and roles, including marketing campaign recipients, patients, staff and healthcare provider contacts. In McKesson's disclosure notice, the company advised it had identified unauthorised access to "certain third-party applications and the exfiltration of certain data was associated with a subset of customers within our Oncology & Multispecialty and Medical-Surgical business units", but had "reasonable assurance of no ongoing unauthorized activity".

Healthcare company AdaptHealth has confirmed that data of 4.1 million people was exposed in a cyberattack discovered in July that was attributed to the ShinyHunters threat group.

Cisco has confirmed that a maximum-severity authentication bypass vulnerability tracked as CVE-2026-20079 in its Secure Firewall Management Center (FMC) software is being actively exploited in attacks.

The Carnegie Mellon University CERT Coordination Center (CERT/CC) is warning that Skullcandy Dime 3 wireless earbuds accept Bluetooth pairing requests from nearby unpaired devices without requiring user interaction.