Microsoft to stop Exchange 2016 / 2019 security updates in October
Microsoft has reminded customers that it will stop shipping security updates for Exchange 2016 and 2019 through the Extended Security Update (ESU) program in October.
Vibe Coding e IA: rischi di sicurezza nello sviluppo software
Analisi dei rischi del vibe coding e dell'IA sulla sicurezza informatica aziendale e le novità della OWASP.
Sovranità digitale e SASE: le domande che le aziende dovrebbero fare ai fornitori
La sovranità digitale non dipende solo da dove vengono archiviati i dati. Nel modello SASE entrano in gioco anche metadati, management plane, controllo operativo e governance tecnologica. Ecco quali aspetti valutare per scegliere davvero un fornitore affidabile
Se i chatbot fanno consulenza sull’aborto
Le persone si affidano sempre più spesso ai modelli linguistici per ottenere informazioni e risposte sull’interruzione di gravidanza. Ma gli algoritmi che le forniscono attingono da un ecosistema di fonti dove autorevolezza e visibilità non sempre coincidono. E che le realtà pro-choice faticano a presidiare
Proton VPN, sconto del 70%: piano Plus da 2,99 euro con 1 mese di prova
Proton VPN offre uno sconto del 70% e 1 mese di prova della VPN: ecco come funziona l'offerta, come aderire e tutti i vantaggi inclusi.
FBI Updates IC3 Scam Warning Over AI Videos Targeting Victims
FBI IC3 scam warnings highlight AI-generated videos, fake websites, and impersonators targeting previous fraud victims.
UK Cybercrime Journal: H1 2026 Dark Web Seizures & Arrests
What Happened Nemesis Dark Web Drug Dealers Arrested On 14 May 2026, two Cambridgeshire drug dealers were sentenced after being arrested in...
La cyber security delle piattaforme di collaborazione
Sempre più centrali nelle operazioni aziendali, le piattaforme di collaborazione non sono esenti da rischi. Che tendono a essere proporzionali all’aumento del volume dei dati scambiati e alla crescita della superfice d’attacco. I rimedi da prendere in considerazione
Apple Faces Lawsuit Over Hide My Email Privacy Vulnerability
Apple faces a class-action lawsuit as Anthony Alvarez alleges Hide My Email failed to protect users’ emails despite privacy promises.
Google Unveils Gemini 3.5 Flash Cyber to Find and Fix Software Vulnerabilities Faster
Google launches Gemini 3.5 Flash Cyber, an AI cybersecurity model built to detect, validate and patch software vulnerabilities at scale.
US Seizes 1,000+ Domains Used to Illegally Stream FIFA World Cup
Illegal World Cup streaming domains face a major U.S. crackdown as authorities seize more than 1,000 websites.
Chick-fil-A discloses data breach after credential stuffing attacks
American fast food restaurant chain Chick-fil-A is notifying customers of a data breach after their accounts were hacked in a wave of recent credential stuffing attacks.
Hackers Deface Kenya President William Ruto’s Website, Demand $330K Ransom
Kenya cyberattack temporarily defaced President William Ruto’s official website as hackers demanded five bitcoins.
OpenAI says its AI models hacked Hugging Face during testing
OpenAI says its AI models, including GPT‑5.6 Sol and a pre-release model, hacked into the Hugging Face artificial intelligence repository while being tested in a sandboxed testing environment.
I Asked Claude for a Housing Map. It Gave Me a Gambling Site
By Jeffrey
LG to Ban Residential Proxies from Smart TV Apps
The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one's television into an always-on residential proxy node. The move comes less than a month after researchers…
Police dismantle Kratos phishing platform, arrest developer
Authorities in Germany and the U.S. dismantled the central infrastructure of Kratos, a phishing-as-a-service (PhaaS) platform with global reach, and its developer was arrested in Indonesia.
FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware
A large-scale operation dubbed 'FakeGit' is pushing SmartLoader and StealC malware through 7,600 malicious GitHub repositories that accumulated more than 14 million downloads.
Critical SharePoint RCE flaw exploited to steal machine keys
Hackers are actively exploiting the critical CVE-2026-50522 vulnerability in Microsoft SharePoint to steal machine keys and maintain access even after affected servers are patched.
DNI nominee Clayton wins Senate panel’s approval
Anubis ransomware claims Coca-Cola Fairlife attack, threatens data leak
The Anubis ransomware gang has claimed responsibility for the cyberattack on Coca-Cola's Fairlife dairy subsidiary, threatening to publish allegedly stolen corporate data unless the company pays a ransom.
Understanding Illicit Ecosystems: Inside Rehub’s Rise as a Primary Ransomware Marketplace
Flashpoint intelligence tracks Rehub, breaking down its migration, infrastructure, and the various RaaS groups sponsoring it.
WhatsApp Username Scam Domains: 11-Site Cluster Signals Pre-Launch Phishing Infrastructure
11 domains impersonate WhatsApp's new username feature with fake reservation sites, marketplaces, and phishing risk. IOCs and blocklist inside.
Identity & Access Management e approccio Zero Trust: la governance degli accessi logici
Per proteggere l'identità digitale aziendale nell'era del lavoro distribuito la strategia più efficace per garantire una governance solida e scalabile degli accessi logici consiste nell’adottare un sistema di Identity & Access Management (IAM) unito a una filosofia Zero Trust. Ecco come e perché
Spain fines 23andMe nearly $3 million for cybersecurity failings enabling 2023 hack
Critical wp2shell WordPress flaws exploited to install webshells
Hackers are exploiting the "wp2shell" critical vulnerability suite (CVE-2026-63030 and CVE-2026-60137) affecting WordPress Core to deploy persistent webshells and install malicious plugins on affected servers.
Cyber security industriale, arriva l’iperammortamento: la roadmap in 4 fasi
La sicurezza informatica cessa di essere una voce di spesa dell'ufficio IT e diventa una condizione di continuità del business. Il Credito d'Imposta 4.0/5.0 lascia il posto all'iperammortamento, ecco quali vantaggi offre e perché non è un pranzo gratis. Ecco cosa deve fare chi guida la sicurezza in azienda
Closing the Identity Gaps in Critical Infrastructure Security
Critical infrastructure attacks often begin with stolen credentials, compromised devices, or trusted accounts. Specops Software explains why Zero Trust should verify both user identities and device trust before granting access to critical systems.
Situation-Based SOC: Why Alerts Are the Wrong Unit of Work
Alerts are the unit of detection, not of work. Reorganizing the SOC around Situations and working toward zero queue changes where human judgment lands.
AI Act, dal 2 agosto cambiano gli obblighi di trasparenza dei sistemi di AI: ecco come
La Commissione europea ha pubblicato le linee guida definitive per aiutare fornitori e operatori dei sistemi di AI a rispettare gli obblighi di trasparenza imposti dall’art. 50 dell’AI Act che scatteranno dal prossimo 2 agosto 2026, l’unica scadenza importante rimasta valida indipendentemente dal Digital Omnibus. Vediamo meglio