In April 2026, 7-Eleven was the victim of a "pay or leak" extortion campaign by ShinyHunters, with the data later published that month. The incident exposed 185k unique email addresses, along with names, physical addresses, dates of birth and phone numbers. A small number of records also contained additional exposed data fields. The company later advised the breach was limited to "certain 7-Eleven systems used to store franchisee documents", a statement consistent with the exposed data.

What Happened: On 11 May 2026, the UK Information Commissioner’s Office (ICO) fined South Staffordshire Water £963,900 after the Cl0p rans...

A supply chain attack targeting the Laravel Lang localization packages has exposed developers to a sophisticated credential-stealing malware campaign after attackers abused GitHub version tags to distribute malicious code through Composer packages.

Apple, Meta, and Google offer special security modes that provide your devices more secure against targeted spyware attacks. Here are how those modes work, what they do, and how to switch them on.

Italian authorities have dismantled a piracy ecosystem centered around the CINEMAGOAL app that provided access to various streaming platforms, including Netflix, Disney+, and Spotify.

Financial crime investigators in the Netherlands (FIOD) arrested two men and seized 800 servers linked to a web hosting company that enabled cyberattacks, interference operations, and disinformation campaigns.

According to users on X, the website was hijacked by hackers in an attempt to trick visitors into installing malware.

Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecurity reported this week that a CISA contractor intentionally published AWS GovCloud keys and a vast trove of other agency secrets…

Premessa Ho pensato di proporre, su LinkedIn, delle piccole challenge dedicate alla sicurezza offensiva: semplici scenari di attacco che prendo dal mondo vero (cose che a tutti i PenTester sono suc…

Two former executives of a call-tracking and analytics company pleaded guilty to concealing a years-long tech support fraud scheme that victimized individuals worldwide.

Analisi tecnica dei servizi vpn proxy: focus su costi, protocolli di cifratura avanzati per la protezione dell'identità.

President Trump’s branded cell phone maker and cell provider said the exposure was linked to a third-party platform, and was evaluating whether it needs to notify customers.

La Commissione europea ha elaborato le linee guida, al momento in bozza, riguardanti la classificazione dei sistemi di intelligenza artificiale ad alto rischio conformemente all’AI Act. Ecco perché è un punto di arrivo importante

L'erronea convinzione che essere stati vittima di un attacco cyber, o più in generale di una violazione, faccia diminuire la probabilità che questa si ripeta in futuro non solo è profondamente erronea, ma espone ancor più le organizzazioni a subire nuovi disastri cyber

Japanese cybersecurity software company Trend Micro has addressed an Apex One zero-day vulnerability exploited in attacks targeting Windows systems.

Il provvedimento del Garante Privacy nei confronti di The European House – Ambrosetti nasce da una violazione di dati personali notificata dalla società nell’aprile 2024 a seguito di un accesso non autorizzato ai propri sistemi, ma è di natura più culturale che meramente tecnica. Ecco i motivi della sanzione

Fraud losses don't stop at chargebacks. False declines, account takeovers, and abuse also damage revenue and trust. IPQS breaks down why fraud teams need broader visibility into risk and customer impact.

Drupal is warning that hackers are attempting to exploit a "highly critical" SQL injection vulnerability announced earlier this week.

Ubiquiti has released security updates to patch three maximum severity vulnerabilities in Unify OS that can be exploited by remote attackers without privileges.

The Cyber Express weekly roundup highlights cybersecurity threats, AI misuse, supply chain attacks, and global incidents in 2026.

The pitch for "Active Listening," an AI-powered advertising service that listened to consumers' real-world conversations through their smartphones and smart

Beyond vulnerability exploitation, the DBIR identified major changes in social engineering tactics.