UK warns of Iranian cyberattack risks amid Middle-East conflict
The United Kingdom's National Cyber Security Centre (NCSC) alerted British organizations to a heightened risk of Iranian cyberattacks amid the ongoing conflict in the Middle East.
L’AI di Anthropic usata nei raid Usa contro l’Iran: la questione non è etica, ma istituzionale
L’escalation del braccio di ferro fra Anthropic e il Dipartimento della Guerra dell'amministrazione Trump ha avuto un esito imprevisto: l'impiego di Claude nella guerra in Iran, nonostante l'ordine esecutivo di Trump che ne vietava l'uso. Anche Palantir utilizza Claude
ClawJacked: quando un sito web prende il controllo del tuo agente AI
La vulnerabilità Clawjacked scoperta nel gateway WebSocket di OpenClaw rivela un vettore d'attacco silenzioso e ad alto impatto: una pagina web malevola può dirottare l’agente AI locale dello sviluppatore, registrarsi come dispositivo fidato e accedere a dati, log e configurazioni. Patch disponibile, ma il contesto è molto più ampio
How Deepfakes and Injection Attacks Are Breaking Identity Verification
Deepfakes and injection attacks are targeting identity verification moments, from onboarding to account recovery. Incode explains why enterprises must validate the full session—media, device integrity, and behavior—to stop synthetic and injected attacks in real time.
German court convicts alleged mastermind behind global investment scam network
British organizations urged to be alert to threat of Iranian cyberattacks
Anthropic confirms Claude is down in a worldwide outage
Claude appears to be having a major outage right now, with elevated errors reported across all platforms.
Vendor assessment nell’era del TPRM continuo: perché il questionario non basta più
Normative come NIS2 e DORA spingono in questa direzione: non basta più “avere un contratto e un questionario”, ma dimostrare che i rischi legati a terzi vengono identificati, monitorati e gestiti con continuità e secondo priorità. Il vendor assessment “una tantum” non è più sufficiente, ma serve un Third-Party Risk Management (TPRM), continuo e data-driven
Sekoia achieves SOC2 compliance
Sekoia achieves SOC 2 Type 1 compliance across its infrastructure, reinforcing its commitment to data security and trust.
Cyberattack briefly disrupts Russian internet regulator and defense ministry websites
CISA Warns RESURGE Malware Can Remain Dormant on Ivanti Connect Secure Devices
The updated RESURGE malware report reflects that attackers are prioritizing persistence over immediate impact.
Ring Camera Doorbell Ad Triggers Privacy Concerns and Public Criticism in America
Super Bowl ad for Ring camera doorbells fuels debate on security cameras, surveillance growth and privacy concerns across the US and beyond.
Iran, super attacchi cyber: massima allerta per le aziende italiane
Usa e Israele hanno fatto anche attacchi cyber contro l'Iran, di proporzioni eccezionali. Molti adesso molti temono una rappresaglia cyber dall'Iran, anche contro le nostre aziende. Alcuni analisti, Crowdstrike e Anomali, già vedono i primi segnali
Chilean National Extradited to U.S. Over Stolen Credit Card Data Trafficking Scheme
The stolen credit card data trafficking case reflects a larger cybersecurity reality: digital financial crime is no longer limited by geography.
In Francia, attacco alla sanità: violati dati di oltre dieci milioni di cittadini
Un attacco hacker, condotto a fine 2025 ai danni di una società di software per la gestione degli studi medici, ha compromesso un database contenente informazioni personali di un numero compreso tra 11 e 15 milioni di francesi
Lovora - 495,556 breached accounts
In February 2026, the couples and relationship app Lovora allegedly suffered a data breach that exposed 496k unique email addresses. The data also included users’ display names and profile photos, along with other personal information collected through use of the app. The app’s maker, Plantake, did not respond to multiple attempts to contact them about the incident.
Vietnam Announces National Cybersecurity Firewall Plan Under New Digital Governance Law
Vietnam unveils a national cybersecurity firewall plan under its 2025 cybersecurity law, expanding digital governance and data oversight powers.
Quitbro - 22,874 breached accounts
In February 2026, the porn addiction app Quitbro allegedly suffered a data breach that exposed 23k unique email addresses. The data also included users’ years of birth, responses to questions within the app and their last recorded relapse time. The app’s maker, Plantake, did not respond to multiple attempts to contact them about the incident.
KomikoAI - 1,060,191 breached accounts
In February, the AI-powered comic generation platform KomikoAI suffered a data breach. The incident exposed 1M unique email addresses along with names, user posts and the AI prompts used to generate content. The exposed data enables the mapping of individual AI prompts to specific email addresses.
ClawJacked attack let malicious websites hijack OpenClaw to steal data
Security researchers have disclosed a high-severity vulnerability dubbed "ClawJacked" in the popular AI agent OpenClaw that allowed a malicious website to silently bruteforce access to a locally running instance and take control over it.
Verificatruffa.it bloccato da attacchi criminali: perché sostenerlo
Il servizio di Marco Camisani Calzolari ha aiutato migliaia di persone prima di subire una temporanea sospensione a causa di attacchi informatici
Samsung TVs to stop collecting Texans’ data without express consent
Samsung and the State of Texas have reached a settlement agreement over the alleged unlawful collection of content-viewing information through its smart TVs
Il concetto di detection e il punto di vista offensivo
Questa miniserie è collegata alla serie sui lab-test che prevedono test offensivi e lo studio della detection. Diciamo che in realtà è la stessa serie declinata in due modi diversi: nel lab gli asp…
Oblivion, il nuovo malware Android che “abbassa la soglia” degli attacchi
Un Remote Access Trojan venduto a 300 dollari al mese, capace di aggirare le protezioni delle versioni di Android dalla 8 alla16 e prendere il controllo dei dispositivi. Ecco perché Oblivion rappresenta una svolta nel panorama del mobile malware e cosa devono fare aziende e utenti per proteggersi
Fuzzing embedded systems - Part 2, Writing a fuzzer with LibAFL
Blog by Sparrrgh on security research and hacking.
Fuzzing embedded systems - Part 1, Introduction
Intro
QuickLens Chrome extension steals crypto, shows ClickFix attack
A Chrome extension named "QuickLens - Search Screen with Google Lens" has been removed from the Chrome Web Store after it was compromised to push malware and attempt to steal crypto from thousands of users.
$4.8M in crypto stolen after Korean tax agency exposes wallet seed
South Korea's National Tax Service accidentally exposed the mnemonic recovery phrase of a seized cryptocurrency wallet in an official press release, allowing hackers to steal 6.4 billion won ($4.8M) worth in cryptocurrency.
Who is the Kimwolf Botmaster “Dort”?
In early January 2026, KrebsOnSecurity revealed how a security researcher disclosed a vulnerability that was used to assemble Kimwolf, the world's largest and most disruptive botnet. Since then, the person in control of Kimwolf -- who goes by the handle…
Microsoft testing Windows 11 batch file security improvements
Microsoft is rolling out new Windows 11 Insider Preview builds that improve security and performance during batch file or CMD script execution.