Microsoft ha annunciato il takedown di Fox Tempest, gruppo di cyber criminali che offriva un servizio malware signing as a service capace di fare apparire come legittimi dei software malevoli

Threat actors earlier today published more than 600 malicious packages to the Node Package Manager (npm) index as part of a new Shai-Hulud supply-chain campaign.

Microsoft's total vulnerability count stayed steady in 2025, but critical flaws surged year over year. BeyondTrust breaks down why attackers are increasingly focused on privilege escalation and identity abuse.

Convenience store chain giant 7-Eleven confirmed that its systems were breached in a cyberattack claimed by the ShinyHunters extortion group last month.

VPN integrata nel browser o software dedicato? Scopri i limiti dei proxy web, i pericoli di WebRTC leak e come validare la sicurezza.

VPN integrata nel browser o software dedicato? Scopri i limiti dei proxy web, i pericoli di WebRTC leak e come validare la sicurezza.

We are proud to announce that Cyble has been named a Challenger in the first-ever Gartner® Magic Quadrant™ for Cyberthreat Intelligence Technologies.

Attackers still abuse Microsoft’s legacy MSHTA utility on Windows to execute malicious VBScript and JavaScript payloads.

IT teams are increasingly overwhelmed by alerts from disconnected systems, forcing responders to manually coordinate investigations during network incidents. This webinar explores how automation and AI-assisted workflows can help reduce response delays and improve operational coordination.

Microsoft says customers in restricted network environments may encounter Windows Update failures after installing the January 2026 optional non-security preview updates.

Explore 5 phishing-driven social engineering attacks targeting companies in 2026 and learn how CISOs can close SOC visibility gaps with ANY.RUN.

When Filenames Become Attack Surfaces: Weaponizing NASA's CFITSIO Extended Filename Syntax

Cisco Talos has uncovered a BadIIS variant — identifiable by its embedded "demo.pdb" strings — that functions as commodity malware, likely sold or shared among multiple Chinese-speaking cyber crime groups operating under a malware-as-a-service (MaaS) model for continuous monetization.

I cavi sottomarini rappresentano la spina dorsale dell'economia digitale. La minaccia dell'Iran a mettere dazi sui cavi sottomarini che attraversano lo Stretto di Hormuz significa mettere in pericolo l'integrità di infrastrutture critiche per la connettività digitale mondiale

We sat with Sarah Psaila (Group-IB Europe) to discuss why iGaming operators are measuring the wrong fraud signals and seeing bloated success metrics and what intelligence-driven protection against fraud looks like in 2026.

We are proud to announce that Cyble has been named a Challenger in the first-ever Gartner® Magic Quadrant™ for Cyberthreat Intelligence Technologies.

Austria stopped 500 Eurovision cyberattack attempts targeting the Song Contest in Vienna amid protests and heightened security.

Banks rush to tackle AI-driven cyber risks as new vulnerabilities raise concerns across the global financial sector.

Attackers are exploiting NGINX vulnerability CVE-2026-42945, also called NGINX Rift, exposing millions of servers to attacks.

Le nuove FAQ ACN sui fornitori rilevanti NIS (FRN.8 e FRN.9) chiariscono i casi di subfornitore e fornitore infragruppo. Ecco come cambiano le regole e cosa devono fare concretamente le aziende per la compliance NIS2 entro il 31 maggio 2026

Banks rush to tackle AI-driven cyber risks as new vulnerabilities raise concerns across the global financial sector.

Attackers are exploiting NGINX vulnerability CVE-2026-42945, also called NGINX Rift, exposing millions of servers to attacks.

Given the scale of the retailer’s franchise operations, the full impact of the 7-Eleven data breach remains unclear.

La differenza fra procedure e linee guida ha peso strategico, capace di influenzare il modo in cui si lavora, il grado di adattabilità concesso a chi opera e la coerenza complessiva del sistema. Ecco la doppia natura di due strumenti diversi per tradurre obiettivi in azioni concrete

Microsoft reveals how Storm-2949 exploited MFA resets, Azure RBAC, and cloud tools to steal sensitive Microsoft 365 data.

Operation Ramz focused on tackling cyber threats that continue to cause financial and operational damage across the region.

In April 2026, data allegedly obtained from CTT, Portugal's national postal service, was posted to a public hacking forum. The data included 468k unique email addresses along with names, phone numbers and parcel tracking numbers which can be used to retrieve the tracking history of the parcel.

More than 200 individuals were arrested for cybercrime activities during INTERPOL's Operation Ramz, which focused on the Middle East and North Africa.

A new variant of the 'SHub' macOS infostealer uses AppleScript to show a fake security update message and installs a backdoor.