Google expands Gemini AI use to fight malicious ads on its platform
Google says it is increasingly using its Gemini AI models to detect and block harmful ads on its advertising platforms, as scammers and threat actors continue to evolve their tactics to evade detection.
Google colpisce azienda cinese delle reti proxy: è collegata ad arma informatica di massa
L'intervento di Google, che ha rimosso decine di domini riconducibili a Ipidea, società cinese operante nel settore dei servizi proxy residenziali, si fonda su elementi tecnici e legali specifici. Il nodo centrale della questione riguarda le modalità attraverso cui i dispositivi vengono inclusi nelle reti proxy
Dall’attacco all’analisi forense: come investigare step by step una compromissione APT
L’analisi forense completa di un attacco APT può aiutare l’azienda a comprendere i punti deboli della propria infrastruttura e uscire dall’incubo del cosiddetto APTNightmare. Ecco la guida pratica per analizzare la macchina del CEO in seguito a un attacco mirato
Most "AI SOCs" Are Just Faster Triage. That's Not Enough.
AI-powered SOC tools promise automation, but most only speed up triage instead of reducing real workload. Tines shows how real gains come from end-to-end workflows that execute actions across systems, not just summarize alerts.
New ATHR vishing platform uses AI voice agents for automated attacks
A new cybercrime platform called ATHR can harvest credentials via fully automated voice phishing attacks that use both human operators and AI agents for the social engineering phase.
L’orizzonte quantistico: la difesa AI-on-AI non è più un problema del futuro
C'è un nuovo campo di battaglia quando l'AI attacca l'AI. Ecco perché non bisogna aspettare che il primo incidente quantistico significativo faccia notizia, per cominciare a muoversi
Cisco has released security updates to patch four critical vulnerabilities, including a fixed improper certificate validation flaw in the company's cloud-based Webex Services platform that requires further customer action.
Data breach at edtech giant McGraw Hill affects 13.5 million accounts
The ShinyHunters extortion group has leaked data from 13.5 million McGraw Hill user accounts, stolen after breaching the company's Salesforce environment earlier this month.
Cisco Talos discovered an ongoing malicious campaign, operating since at least December 2025, affecting a broader workforce in the Czech Republic with a previously undocumented botnet we call “PowMix.”
EHDS, il Comitato UE per lo spazio comune dei dati sanitari è operativo: lo stato dell’arte
L’EHDS, lo Spazio europeo dei dati sanitari, è forse il più ampio progetto normativo europeo che viene costruito in modo (parzialmente) partecipativo in tempo reale con l’obiettivo di costruire la prima architettura comune dei dati sanitari UE, a fini di ricerca e condivisione per fini di cura. I punti salienti
US nationals behind DPRK IT worker 'laptop farm' sent to prison
Two U.S. nationals have been sent to prison for helping North Korean remote information technology (IT) workers to pose as U.S. residents and get hired by over 100 companies across the country, including many Fortune 500 firms.
After the cyber attacks timelines, it’s time to publish the statistics for March 2026 where I collected and analyzed 282 events: a sharp increase compared to the 176 events of the previous month. I…
Cyber threat intelligence: ecco perché il framework CERT-EU arriva nel momento giusto
L'intelligenza artificiale ha innescato un cambio di paradigma, dentro il quale il nuovo Cyber Threat Intelligence Framework di CERT-EU assume un valore particolarmente rilevante. Ecco come permette di classificare, valutare e prioritizzare le attività cyber malevole
In April 2026, education company McGraw Hill confirmed a data breach following an extortion attempt. Attributed to a Salesforce misconfiguration, the company stated the incident exposed "a limited set of data from a webpage hosted by Salesforce on its platform". More than 100GB of data was later publicly distributed, containing 13.5M unique email addresses across multiple files, with additional fields such as name, physical address and phone number appearing inconsistently across some records.
Critical Nginx UI auth bypass flaw now actively exploited in the wild
A critical vulnerability in Nginx UI with Model Context Protocol (MCP) support is now being exploited in the wild for full server takeover without authentication.
