Da ChatGPT contraffatto a OpenClaw, gli attaccanti sfruttano la corsa all’IA. Per Dmitry Galov, però, non bisogna fermare l’adozione degli agenti ma renderla controllata, verificabile e sicura.

The experienced Cloud Atlas group remains active, continuing to target government sectors and diplomatic entities in Russia and Belarus, employing both new and established techniques.

Microsoft confirms active exploitation of CVE-2026-41091 and CVE-2026-45498 in Defender, with CVSS-rated risks, KEV listing, and urgent patches issued.

Le boardroom devono imparare a leggere il rischio cyber come un rischio d’impresa trasversale, integrandolo nei processi decisionali strategici e smettendo di confinarlo ai reparti IT. Ecco come, alla luce delle normative europee come NIS2, GDPR, DORA e AI Act

A practical guide to online payments fraud prevention: map risks, layer signals, and measure impact while keeping approval rates high and friction low.

Microsoft confirms active exploitation of CVE-2026-41091 and CVE-2026-45498 in Defender, with CVSS-rated risks, KEV listing, and urgent patches issued.

U.S. and Canadian authorities arrested and charged a Canadian man with operating the KimWolf distributed denial-of-service (DDoS) botnet, which infected nearly two million devices worldwide.

Under the banner name "Operation Saffron," the authorities shuttered 33 critical servers of the First VPN service provider during the seizure and detained the alleged administrator of the service in Ukraine, in a coordinated operation.

In un sistema aperto, veloce e dispersivo, in cui ogni informazione può essere modificata lungo il percorso, il rischio informativo non è un evento eccezionale, ma una condizione strutturale. Vediamo cosa è in gioco

Financial Services DDoS Attacks surge as AI botnets target banks across EMEA and global financial networks.

Cisco patches CVE-2026-20223, a critical Secure Workload REST API flaw tied to CWE-306 that could expose sensitive tenant data.

INJ3CTOR3 deploys JOMANGY and ZenharR malware toolkit in a self-healing campaign targeting vulnerable FreePBX systems globally.

Secondo uno studio, modificare lo 0,1% del dataset di addestramento per ottenere effetti misurabili sul comportamento del modello. Una volta avvenuto, l'avvelenamento è difficile da rimediare. Ecco come mitigare il rischio di attacco di data poisoning su un modello di machine learning

The Government Office for Technology Transfer played a key role in helping the NCSC bring the cyber security device to market.

L’epoca d’oro dei bug bounty potrebbe stare entrando in una nuova fase molto più complessa. HackerOne, una delle piattaforme più importanti al mondo per la segnalazione responsabile di vulnerabilità, ha drasticamente ridotto le ricompense economiche del proprio programma Internet Bug Bounty (IBB), provocando forti reazioni nella comunità dei ricercatori di sicurezza. Secondo quanto riportato da …

Is your WordPress site down? Learn how to quickly identify and fix common issues to get your site back online fast.

Canadian authorities on Wednesday arrested a 23-year-old Ottawa man on suspicion of building and operating Kimwolf, a fast spreading Internet-of-Things botnet that enslaved millions of devices for use in a series of massive distributed denial-of-service (DDoS) attacks over the past…

First VPN promised hackers complete anonymity for their cyberattacks. But Europol said it was able to notify the service’s users that they have now been identified.

Google has accidentally leaked details about an unfixed issue in Chromium that keeps JavaScript running in the background even when the browser is closed, allowing remote code execution on the device.

In this edition of the Threat Source newsletter, William explores the value of being "ungovernable" in a professional setting, sharing how challenging the status quo and seeking out the smartest people in the room can lead to a more fulfilling and successful career.

Apple revealed that it blocked over $11 billion in fraudulent App Store transactions over the last six years, more than $2.2 billion in potentially fraudulent App Store transactions in 2025 alone.

Secondo un report, il 57% delle aziende si aspetta un miglioramento del rilevamento delle minacce grazie all’AI, mentre il 49% punta su risposte automatizzate agli incidenti. Ecco le opportunità e i rischi legati alle AI agentiche

CRIL uncovers JOMANGY, a stealth PHP webshell by INJ3CTOR3 with 6 persistence layers and self-healing cron jobs built to survive host cleanup.

Cisco has released security updates to address a maximum-severity vulnerability in Secure Workload that allows attackers to gain Site Admin privileges.

A Chinese cyber-espionage campaign has been targeting telecommunications providers with newly discovered Linux and Windows malware dubbed Showboat and JFMBackdoor, respectively.

Modern crypto drainers don't hack wallets. They trick users into approving malicious transactions. Flare explores how the Lucifer DaaS platform scales wallet theft through phishing and automation.