A Hermes AI agent was used in an attack targeting Thailand's Ministry of Finance, where researchers also identified a Hades implant.

Stop alle telefonate spam con Incogni: ecco come ottenere uno sconto del 50% e tutti i vantaggi inclusi nell'offerta del gruppo.

Talos IR's Q2 report highlights a significant surge in phishing-based initial access and the weaponization of legitimate remote management tools. Learn how to sharpen your defenses.

Per chi cerca un'offerta vantaggiosa per la VPN, TotalAV propone la VPN con antivirus integrato a soli 1,59 euro al mese per 1 anno.

Healthcare billing company Medical Computer Business Services (MCBS) has disclosed that a 2025 network breach exposed the sensitive information of more than 1.2 million people.

Origin Energy data breach exposes details of 900,000 customers after unauthorized access. Frank Calabria warns of scams as investigations continue.

Learn how SOC teams can detect, investigate, and respond to modern AiTM phishing with browser-level visibility and threat intelligence.

Il modello della sicurezza del cantiere navale dimostra che l'intelligenza artificiale può rafforzare in modo decisivo la prevenzione degli infortuni. Però la tecnologia non è mai neutra quando osserva le persone. Ecco la sequenza per le organizzazioni volte a proteggere i lavoratori dagli infortuni e i loro diritti fondamentali

L'Agenzia per la Cybersicurezza europea ha pubblicato le linee guida per gli appalti in ambito sanitario, un settore particolarmente vulnerabile alle minacce informatiche e uno dei più colpiti, specie di questi tempi. Da questo report bene si evince che l’esposizione elevata sia dovuta a budget limitati per la cyber sicurezza. Vediamo meglio

Lo schema di decreto che recepisce la direttiva UE sul lavoro mediante piattaforme digitali introduce nuove regole su trasparenza algoritmica, supervisione umana e tutela dei dati personali. Ma resta aperta la sfida di trasformare le nuove garanzie in tutele davvero efficaci

Kaspersky researchers reveal previously undocumented malware attributed to Mirage Kitten (UNC1549, Smoke Sandstorm, Nimbus Manticore): NightLedger backdoor, ArcBridge, and BridgeHead tunneling tools.

In June 2026, Houston City College was the target of a ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from the college was later published publicly and included 832k unique email addresses along with names, addresses, phone numbers, academic records, and other personal information relating to both current students and alumni.

ZTNA is emerging as an alternative to VPN as federal agencies weigh security risks, zero trust requirements, costs, and technical limitations.

Hackers are actively exploiting a vulnerability in the FastJson open-source Java library, allowing remote code execution without user interaction or elevated privileges.

Arista has patched a maximum-severity command injection vulnerability in on-premises VeloCloud Orchestrator deployments that is being actively exploited in attacks.

A botnet called Dysphoria has compromised around 200,000 devices across the world and is using them for distributed denial of service (DDoS) attacks and traffic relay operations.

A proof-of-concept exploit for "Certighost," a Windows Active Directory Certificate Services vulnerability, has been released that can allow authenticated attackers to potentially compromise a Windows domain.

An untold number of Claude chats and Artifacts — the interactive mini apps and documents users can build inside Claude — were found publicly searchable on

Apple is being sued by three people who claim approximately $1.8 million in Bitcoin was stolen after downloading and using a fraudulent Sparrow Wallet application from the App Store.

The Coca-Cola Company has confirmed that hackers stole data from its dairy subsidiary, Fairlife, during a ransomware attack earlier this month.

In Operation Endgame, a major operation this week disrupted a key infection chain used by cyber criminals. Within an international cooperation, 14.971 websites infected with SocGholish malware were remediated. This malware is used by a criminal group that plays a pivotal role in international cybercrime, namely: Evil Corp.

Come il Regolamento europeo distingue tra AI vietata, ad alto rischio e a rischio limitato, con le novità del Digital Omnibus di giugno 2026 e decreti attuativi italiani

The ShinyHunters extortion gang has claimed responsibility for a recently disclosed Ernst & Young data breach, saying it obtained credentials for some of the company's systems via a supply-chain attack.

ACN aggiorna le FAQ sulla supply chain dei soggetti NIS: le quattro fasi della gestione del rischio fornitori, i criteri minimi di valutazione e la proporzionalità dei requisiti nei contratti misti. Una guida operativa per il percorso di conformità NIS2