Il Cyber Resilience Act definisce i requisiti di sicurezza dei prodotti digitali, ma la nuova Direttiva UE 2024/2853 sulla responsabilità per danno da prodotti difettosi aggiunge un tassello decisivo: la cyber security esce dall'ambito della compliance e diventa un fattore di responsabilità civile e di rischio d'impresa

NordVPN: propone uno sconto sulla VPN del 75% e aggiunge anche tre mesi extra: ecco le tariffe per navigare su una rete privata virtuale.

Google fined €890 million by the European Commission for breaching the Digital Markets Act over self-preferencing and anti-steering practices.

Update your KARR Security System using an iPhone or Android app to fix a Bluetooth flaw affecting over 2.2 million dealer-installed alarms.

The Clop ransomware gang (also tracked as Cl0p) is targeting Internet-exposed PTC Windchill and FlexPLM instances in a new data theft extortion campaign.

La trasparenza nella gestione dei dati non costituisce un vincolo, ma si traduce in un elemento di differenziazione competitiva presso consumatori sempre più consapevoli dei propri diritti. Ecco come principi, progettazione e vantaggio competitivo agevolano la fiducia dei consumatori

Bitkub cyberattack case draws Thailand SEC complaint over 2021 disclosures as the exchange says customer assets remained safe and intact.

Zimbra phishing campaign linked to Russian state-supported actors exploits CVE-2025-66376 to steal emails, credentials and sensitive data.

1,721 ransomware attacks hit the United States between January and June, according to new research from Cyble Research and Intelligence Labs (CRIL)

We spoke with several cybersecurity researchers, who look for unknown vulnerabilities and develop tools to exploit them, about how OpenAI’s and Anthropic’s guardrails affect their work.

A new Dolphin X remote access trojan claims to use an AI-powered profiling feature to score and rank infected users, helping cybercriminals identify which victims should be targeted first.

Origin Energy has confirmed that an unauthorized party accessed and subsequently leaked customer data online, exposing sensitive personally identifiable information (PII), among others.

A malvertising campaign on the Bing search service is pushing a fake Claude desktop app installer hosted on a legitimate Claude.ai domain to deliver the SectopRAT malware.

Thorsten explores Q2 2026 stats, the artificial buffer zone of 2026, and why smart, prioritized patching is more critical than ever.

CISA is warning that the Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is targeting organizations using Zimbra Collaboration email servers by combining phishing attacks with the exploitation of a now-patched Zimbra vulnerability.

Ukraine's CERT has uncovered attacks distributing an archive containing the legitimate Notepad++ application and a malicious utility called LunchPoke disguised as a plugin to establish persistence.

L’AI non è più solo assistente per analisti, ma diventa componente specializzato di agenti capaci di cercare vulnerabilità, validarle e contribuire alla generazione di patch. Ecco cosa significa il lancio di Gemini 3.5 Flash Cyber e perché arriva con un programma pilota con accesso limitato a governi e partner scelti

Microsoft Teams and several Microsoft 365 services are experiencing an ongoing outage, with users reporting problems accessing Teams, SharePoint, Excel and the Microsoft 365 Admin Center.

Registro delle informazioni, due diligence, clausole contrattuali e governance: una guida operativa alla compliance DORA sui fornitori di terze parti per una corretta gestione del rischio ICT

Si riduce l’intervallo fra scoperta delle vulnerabilità ed attacco e le banche devono fare presto. L'avvertimento di Bankitalia ai soggetti vigilati sui rischi AI legati sistema finanziario prevede la richiesta di preparare un piano, ecco quale

The ransomware economy has been rewired. Meet the eight ransomware groups driving the shift, from affiliate breakaways to AI-assisted attacks based on Group-IB Threat Intelligence.

Come proteggere la filiera digitale, ridurre il rischio di terze parti e trasformare la compliance normativa alla NIS2 in un vantaggio competitivo

FedRAMP 20X replaces point-in-time assessments with continuous, machine-readable evidence that demonstrates security controls are working. Anecdotes explains what the transition from Rev5 to FedRAMP 20X means and how organizations can prepare for continuous, evidence-based assurance.

Flashpoint’s practical, repeatable framework for prioritizing vulnerabilities based on real-world risk, exploitability, and business impact.

The European Commission fined Google €890 million ($1 billion) on Thursday after finding the company had violated the European Union's Digital Markets Act (DMA), which ensures fair online competition.

A nine-year-old race condition vulnerability in the Linux kernel's XFS filesystem, tracked as CVE-2026-64600, allows local attackers to overwrite protected files and gain root privileges.

Le sanzioni del Garante privacy a due operatori del settore energetico ridefiniscono le regole del credit scoring automatizzato. Trasparenza, qualità dei dati, governance degli algoritmi e tutela dei diritti diventano i pilastri di un modello destinato a estendersi ben oltre il mercato dell'energia