Mount Royal University confirms breach as hackers claim attack
Mount Royal University in Calgary says hackers stole and then deleted data from its file storage systems after breaching the university's network.
Cash App owner to pay $45 million to settle allegations of lax security
Greek victims file lawsuit against Intellexa over Predator spyware
Fake Paysafe, Skrill SDKs on NPM and PyPi steal credentials
Malicious packages on the Node Package Manager (npm) and the Python Package Index (PyPI) delivered stealer malware to developers and users of Paysafe, Skrill, and Neteller payment applications.
Hackers exploit Roundcube flaw to spy on academic researchers
A China-linked threat cluster has been exploiting vulnerable Roundcube servers at U.S. and Canadian universities to steal credentials and deploy backdoor malware.
Taiwan charges two businessmen over alleged role in Chinese espionage campaign
Entra passkey enrollment vishing targets Microsoft 365 users
A threat actor has been targeting organizations across multiple sectors with voice-based fake security requests that ask Microsoft 365 users to enroll a new Entra passkey.
Apple e la privacy: cosa insegna il caso del bug in “Nascondi la mia email”
Un bug nella funzione “Nascondi la mia email” espone da oltre un anno gli indirizzi reali degli utenti iCloud, mettendo in discussione una delle principali promesse di privacy di Apple. Il caso riapre il dibattito su vulnerability management, trasparenza e tutela dell’identità digitale
Former UK privacy chief preparing legal action against woman who reported him, minister says
TrojPix, così rubano dati sfruttando i cavi video: un nuovo rischio per le reti isolate
TrojPix conferma che la sicurezza delle reti air-gapped non dipende soltanto dall'assenza di connessioni Internet. Emissioni elettromagnetiche, malware e canali laterali possono aggirare l'isolamento fisico, ampliando il perimetro della cyber security degli ambienti più sensibili
Spain arrests alleged supporter of pro-Russian hacktivist groups after FBI tip
3 Ways AI Powers Service Desk Attacks and How to Prevent Them
Specops Software explains how AI is making service desk impersonation attacks more convincing, personalized, and scalable, along with practical steps organizations can take to strengthen onboarding and identity verification.
EU unveils cyber plan to reduce reliance on foreign AI systems
Felons, Fraudsters Flog Offensive Cybersecurity Startup
A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair of far-right conspiracy theorists and convicted felons whose most recent ventures included fake intelligence companies and a now-defunct AI-based lobbying…
DuckDuckGo browser now blocks YouTube video ads
DuckDuckGo announced that its browser can now block most video ads on YouTube, including those shown before the video starts playing and during playback.
Protect Your WordPress Using Claude Code and Karna
When we open-sourced Karna WAF, we immediately added AI Agent Skills to help agents not just use and configure Karna, but also learn how to protect web apps and APIs. Now you can ask to Claude Code to protect your web application using Karna without knowing how to do it yourself.
Karna Skills are grouped in 4 different categories:
configuration: tells to your AI Agent how to configure Karna and what each parameter means.
deploy: instruction about how to deploy Karna via an isolated docker con
Telco giant KDDI says data breach affects over 12 million people
Japanese telecommunications giant KDDI says that millions of people had their email addresses and passwords exposed after attackers breached an email platform used by five internet service providers (ISPs) in the country.
NIST CSF 2.0 Practical Guide to the Six Core Functions: Building a Modern Security Program for Risk Management
Check the NIST CSF 2.0 practical guide for CISOs to close security gaps, improve threat visibility, and strengthen incident response with ANY.RUN.
Action Plan europeo su cyber security e AI: dalle regole alla capacità operativa
L’Action Plan europeo su cyber security e AI punta a rafforzare valutazione dei modelli, gestione delle vulnerabilità, software open source e competenze. Dopo la stagione della regolazione, Bruxelles prova a costruire capacità operative e sovranità tecnologica
CISA orders feds to prioritize patching Langflow auth bypass flaw
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) gave federal agencies until Friday to patch an actively exploited vulnerability in the Langflow visual framework for building AI agents.
Inside the Underground Economy: 5 Dark Web Trends Shaping the 2026 Threat Landscape
Transizione post-quantum: l’evoluzione degli standard crittografici per la tutela dei dati aziendali
La crittografia post-quantum non è una minaccia del futuro: la strategia “harvest now, decrypt later” rende urgente la transizione oggi. Con la pubblicazione degli standard NIST FIPS 203-206 nel 2024, le organizzazioni hanno ora gli strumenti per avviare la migrazione. Questa guida illustra il percorso in sei passi verso la quantum-resistance
È possibile decolonizzare l’intelligenza artificiale?
Organizzazioni, collettivi e istituzioni fuori dal mondo occidentale si interrogano su come sfruttare le potenzialità delle intelligenze artificiali generative e svincolarsi da Big Tech. Ma il valore della sfida politica si scontra con la disparità di potere.
Ubiquiti warns of new max severity UniFi OS vulnerability
Ubiquiti has released security updates to patch seven critical vulnerabilities in UniFi OS, including a maximum-severity flaw that can be exploited in command injection attacks.
UK Cybercrime Journal: SMS Blaster Gang Convicted
What Happened Officers from the City of London Police’s Dedicated Card and Payment Crime Unit (DCPCU) secured the conviction of a man who ...
CISA orders feds to patch max severity ColdFusion flaw by Friday
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered government agencies to patch an actively exploited maximum-severity flaw in the Adobe ColdFusion commercial web app development platform by Friday.
È il momento d’oro dei data center. Trainati da cloud, AI e PA digitale
L’Italia, con 251 infrastrutture attive al giugno 2026 e un valore di mercato atteso a 14,97 miliardi di dollari entro il 2031, si posiziona come hub emergente della data economy mediterranea. Stato dell’arte, trend di mercato, quadro normativo e prospettive di sviluppo per operatori, investitori e istituzioni
Januscape Flaw in Linux KVM’s MMU Code Enables VM Escape on Intel and AMD
CVE-2026-53359, or Januscape, is a Linux KVM flaw in the shadow MMU code that enables VM escape and host compromise on Intel and AMD systems.
Mount Royal University Data Breach Confirmed After June Cyberattack Exposes Student and Employee Files
Mount Royal University cyberattack exposed employee and student data in June. The investigation continues as recovery efforts move forward.
Accenture confirms breach after hacker offers stolen data for sale
IT services giant Accenture has confirmed it suffered a security breach after a threat actor claimed to have stolen 35 GB of source code and other data from the company.