Microsoft tests faster Windows File Explorer, new context menu
Microsoft has started testing a faster File Explorer and a less cluttered and more customizable context menu in Windows 11 preview builds rolling out to Insiders this week.
CISA: Windows Task Host flaw now exploited by ransomware gangs
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a high-severity Windows Task Host vulnerability that was flagged as actively exploited in April.
La monetizzazione dei dati personali nell’era dei data broker: l’efficacia dei servizi automatizzati di cancellazione
Rimozione dati personali da 5,99 €: ecco come funziona l'offerta di Incogni per la sicurezza e la privacy online, i costi e i servizi inclusi
Falso “rimborso farmaci” sfruttato per un phishing a tema Fascicolo Sanitario Elettronico
Mirage2FA Hijacks Companies’ Microsoft 365 Sessions, with Over 4K Victims in the US
Read about Mirage2FA, a new phishing threat to US enterprises with over 4K compromised companies to date. Collect IOCs for your SOC.
Microsoft confirms outage affecting search in Microsoft 365 apps
Microsoft says some users are experiencing issues searching in Microsoft 365 apps, including Outlook on the web, Outlook desktop, SharePoint Online, and OneDrive.
Microsoft starts removing WMIC tool used by cybercriminals
Microsoft announced that it removed the Windows Management Instrumentation Command-line (WMIC) tool from Windows 11 24H2 and 25H2, as well as from Windows 11 beta builds released this week.
La complessità è nemica della cyber security: la lezione del principio KISS
Ogni funzione, dipendenza e riga di codice aggiuntiva può ampliare la superficie di attacco. Dal principio KISS a DRY e YAGNI, progettare sistemi più semplici non è minimalismo fine a sé stesso: significa ridurre vulnerabilità, costi e complessità operativa, trasformando la sicurezza in un vantaggio competitivo
678,000 People Hit in French Tax Authority Data Breach
DGFiP cyberattack exposed tax & cadastral data linked to 678,000 individuals and professionals, while a separate claim alleges 2 mn were affected.
Gestione dei rischi NIS 2: il modello ibrido che collega servizi, informazioni, tecnologie e scenari di rischio
Ogni prospettiva descrive un livello di una catena d'attacco. Da sola, nessuna la descrive tutta. Ma il modello ibrido nasce dalla consapevolezza: non elimina i metodi esistenti, ma li collega. Ecco perché nella gestione dei rischi NIS 2, si fa largo il modello ibrido
AI Models Escaped Test Environments and Hit Real Targets
AI security incidents expose gaps in model evaluation environments as Irregular reviews internet access, monitoring and containment controls.
‘Unprecedented’ number of Apple users received recent spyware alert, say investigators
Cybersecurity experts who investigate spyware attacks say the number of people who received a recent threat notification from Apple is unusually high.
Nearly 750k had financial info, SSNs leaked in South Carolina loan company breach
Hacker claims 3.6 million Azure account records stolen from major companies
A threat actor is selling employee databases allegedly stolen from the Microsoft Azure infrastructure of multiple Fortune 500 companies after gaining access using compromised credentials.
Pokémon Center data breach exposes customer info, cancels some orders
Pokémon Center is notifying customers in the United Kingdom and Germany that it suffered a third-party data breach after hackers stole customer personal and order information from third-party logistics provider CEVA Logistics.
SafePal latest crypto hardware wallet maker affected by breach, with nearly 40,000 impacted
Poland probes MyDr healthcare software breach potentially affecting 19 million people
Irregular faces criticism over ‘spin’ in AI hacking postmortem
Brand Impersonation Takedown: From Whack-a-Mole to Managed Response
Manual phishing and brand impersonation takedowns can't keep pace with attackers. See why consulting firms need managed, continuous takedown response.
Microsoft confirms GitHub is down worldwide
GitHub is down for some users as a widespread outage is causing errors across the website, API, Actions, Pull Requests, and several other services.
Certighost and the Privilege Hiding in Your Certificate Authority
CVE-2026-54121 lets a standard domain user turn your Enterprise CA into a Domain Controller. The patch is the easy part. The lesson is standing privilege, implicit trust, and treating PKI as the Tier 0 identity infrastructure it has always been.
Windows Server 2022 reaches end of mainstream support in 60 days
Microsoft has reminded IT administrators that Windows Server 2022 is rapidly approaching its mainstream end date of October 2026, when it will switch to extended support.
Ukraine says cyberattack hit Russian e-commerce giant Wildberries amid drone strikes
Philips and GE investigating Clop ransomware data theft claims
Tech giants General Electric (GE) and Philips have also confirmed they're investigating claims that the Clop ransomware gang breached their systems and stole data.
French tax authority data breach affects 678,000 individuals
The French Ministry of the Economy and Finance has disclosed a data breach after an attacker accessed the General Directorate of Public Finances (DGFiP) systems and stole data belonging to 678,000 individuals.
Identity Resilience: perché il backup di Active Directory non basta più nell’era del ransomware
La vera sfida non è salvare i dati, ma garantire un recupero rapido e sicuro delle identità dopo una compromissione. Ecco perché in uno scenario, la semplice disponibilità di un backup non è più sufficiente
Oltre l’antivirus: la suite Kaspersky Premium integra VPN illimitata, IA e identity protection senza impattare sulle prestazioni
Cosa offre l'offerta di Kaspersky Premium che include altri servizi oltre all'antivirus: come aggiungere VPN e identity protection.
Dati personali al sicuro dall’IA delle Big Tech: come la crittografia end-to-end di Proton Drive protegge il cloud storage
Proton Drive offre cloud storage crittografato e privacy data: ecco quanto costa questa offerta e quali sono tutti i servizi inclusi.
Attacchi informatici: le nuove strategie tra infiltrazione fisica e IA
Le truffe e gli attacchi informatici si evolvono tra infiltrazioni fisiche e clonazione vocale. Ecco i dati e i casi reali.
Microsoft working on Defender patch for ShieldBreak zero-day
Microsoft is working on a security patch for the "ShieldBreak" zero-day vulnerability disclosed last week by security researcher "Nightmare Eclipse" and now tracked as CVE-2026-69414.