Catan and Mouse
What do board games and cybersecurity have in common? Pattern recognition. Strategy. Adaptation. In this week’s Threat Source Bill explores why curiosity may be a defender’s most valuable skill.
Remus Stealer: A New, Not-So-New Infostealer
In this post, we explore the emergence of Remus Stealer, analyzing its structural and behavioral similarities to the infamous Lumma malware.
Supreme Court decision threatens EU-US data transfer agreement
Hacker russi dietro l’attacco a Jaguar Land Rover: nuovo capitolo della guerra ibrida
Le indagini, relative al cyber attacco a Jaguar Land Rover dello scorso settembre, che aveva causato paralisi operativa, portano ad hacker russi, ancora da stabilire se legati a Vladimir Putin. Ecco cosa è stato scoperto dell'incidente cyber più grave di sempre, costato danni pari a 1,9 miliardi di sterline, quanto il Pil di un Paese
Google loses final appeal to overturn €4.1 billion EU fine
Court of Justice of the European Union (CJEU) has dismissed Google's final appeal against a €4.1 billion ($4.7 billion) antitrust fine over the company's use of Android to promote its Chrome browser and search service.
Oltre la difesa logica: i pilastri della sicurezza fisica e strutturale dei data center
Standard di protezione strutturale e sicurezza fisica dei data center: difesa in profondità, controllo accessi, continuità operativa, certificazioni, valutazione provider
ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds
Il tempo che perdi non è nel rispondere, è nel capire
Managed Detection & Response services (MDR) 24/7 for network, endpoint, cloud, SaaS and OT, against every type of cyber attack
Se l’algoritmo decide la vita: il piano del Garante Privacy per disarmare l’IA
Il Garante privacy analizza l'impatto dell'intelligenza artificiale su giovani, lavoro e sanità, ridefinendo i confini della libertà.
Fable 5 torna online, ma con più filtri e più controllo pubblico
Anthropic ha riattivato Fable 5 dopo lo stop imposto da Washington. Il modello rientra con nuove misure di sicurezza, limiti più severi sulle richieste sensibili e un precedente che pesa sui prossimi rilasci dei frontier model
TotalVPN sconto dell’80%: offerta a 1,59 euro al mese con antivirus e ad blocker inclusi
TotalAV presenta la sua offerta per avere la VPN con lo sconto dell'80%: come funziona e quali sono i vantaggi da conoscere prima di aderire.
Microsoft fixes bug that removed Copilot button in Outlook
Microsoft has fixed a known issue causing the Copilot Chat or Copilot buttons in Classic Outlook to disappear for Windows users with the Copilot Chat (Basic) license.
Cisco finally confirms attackers exploiting Unified CM flaw
Cisco confirmed that attackers are now exploiting a Unified Communications Manager (Unified CM) vulnerability patched in early June.
Opera rolls out Paste Protect feature to fight ClickFix attacks
Opera has introduced Paste Protect, a security feature designed to block ClickFix-style attacks that trick users into executing malicious commands through social engineering.
CISA: Microsoft SharePoint RCE flaw now actively exploited
CISA warned on Wednesday that attackers have begun exploiting a high-severity Microsoft SharePoint remote code execution vulnerability patched in May.
Alleged Scattered Spider hacker extradited to the United States
A dual United States and Estonian citizen has been extradited to the U.S. to face charges alleging he was a member of the Scattered Spider hacking collective.
Missed incidents, persistent threats, and response gaps: Insights from compromise assessment projects
Kaspersky Compromise Assessment specialists analyze trends from the service’s 2025 projects and provide tips on how to enhance your organization’s security.
La professione cyber cresce di più nell’era AI: il lavoro non scompare, ma evolve
La domanda di lavoro cyber tende a spostarsi verso profili capaci di unire competenze tecniche, normative, applicative, governance dei processi. Ecco perché la professione della cyber security non risente dell'effetto sostituzione delle competenze umane tramite automazione man mano che l'intelligenza artificiale compie progressi
Vulnerability & Patch Roundup — June 2026
Discover important WordPress vulnerabilities in June 2026 and how to safeguard your site with essential security updates.
Cyber sicurezza nell’era quantistica: perché agire oggi
Il quantum computing offre molte opportunità, ma rappresenta anche un nuovo rischio per la cyber security. Ecco perché il Q-Day riguarda il presente, non il futuro, mentre si prepara una transizione quantum-safe credibile
How Attackers Weaponize AI
Bundled Page This page requires JavaScript to display. AI THREAT INTELLIGENCE Unpacking…
Japan’s Aflac, KDDI, Sapporo, Nidec: Four Breaches, One Common Entry Point
Four major Japan cyberattacks reveal how subsidiaries and third-party systems are becoming prime targets for cybercriminals.
Alleged Scattered Spider Member Arrested in Finland, Extradited to U.S.
An alleged Scattered Spider member has been extradited from Finland to the U.S. to face conspiracy, cyber intrusion, and fraud charges.
Medtronic notifies customers impacted by ShinyHunters data breach
Healthcare device firm Medtronic is notifying affected customers about a data breach that exposed their personal data to an unauthorized third party.
Verify You are Human: How Legitimate CAPTCHAs are Concealing Phishing Attacks
Verify You are Human: How Legitimate CAPTCHAs are Concealing Phishing Attacks
Verify You are Human: How Legitimate CAPTCHAs are Concealing Phishing Attacks
FortiBleed credential-theft campaign linked to Lynx ransomware
The massive FortiBleed credential theft campaign has been linked to the INC and Lynx ransomware operations, suggesting the stolen Fortinet credentials were intended to fuel future network intrusions.
FortiBleed credential-theft campaign linked to Lynx ransomware
The massive FortiBleed credential theft campaign has been linked to the INC and Lynx ransomware operations, suggesting the stolen Fortinet credentials were intended to fuel future network intrusions.
New ChocoPoC malware targets researchers via trojanized PoC exploits
Multiple weaponized proof-of-concept (PoC) exploits on GitHub were found delivering a Python-based remote access trojan (RAT) named ChocoPoC that can execute commands and steal sensitive data in a campaign believed to target cybersecurity researchers.