Marquis Accuses SonicWall of Security Lapses; Ties it to Ransomware Attack
Marquis sues SonicWall, alleging its cloud backup service breach led to a 2025 ransomware attack impacting 400,000+ individuals.
Turn Your SOC Into a Detection Engine: Rethinking Threat Monitoring
Build intelligence-driven threat monitoring that reduces risk, cuts noise, and strengthens SOC performance.
Continuous Vulnerability Detection
Managed Detection & Response services (MDR) 24/7 for network, endpoint, cloud, SaaS and OT, against every type of cyber attack
Claude Code Security crea il panico, ma… non uccide la cyber
Venerdì scorso Anthropic ha presentato Claude Code Security, una nuova funzione che analizza intere codebase alla ricerca di vulnerabilità e propone patch correttive. Il rilascio, per ora, è in modalità research preview limitata per clienti enterprise e team, mentre i maintainer open source possono chiedere accesso gratuito accelerato. L’effetto immediato, però, non si è visto …
Ex-L3Harris exec jailed for selling zero-days to Russian exploit broker
The former head of Trenchant, a specialized U.S. defense contractor unit, was sentenced Tuesday to more than seven years in federal prison for stealing and selling zero-day exploits to a Russian exploit broker whose clients include the Russian government.
Minacce cyber 2026, l’intelligenza artificiale è il nemico numero uno
Gli attacchi informatici guidati dall'IA sono la principale preoccupazione dell'anno per i professionisti della sicurezza cyber, secondo la nuova ricerca ISACA. Analizziamo i dati salienti
Windows 11 KB5077241 update improves BitLocker, adds Sysmon tool
Microsoft has released the KB5077241 optional cumulative update for Windows 11, which comes with 29 changes, including improvements to BitLocker, a new network speed test tool, and native System Monitor (Sysmon) functionality.
Canadian Tire - 38,306,562 breached accounts
In October 2025, retailer Canadian Tire was the victim of a data breach that exposed almost 42M records. The data contained 38M unique email addresses along with names, phone numbers and physical addresses. Passwords were stored as PBKDF2 hashes and for a subset of records, dates of birth and partial credit card data were also included (card type, expiry and masked card number). In its disclosure notice, Canadian Tire advised that the incident did not impact bank account information or loyalty program data.
SURXRAT, a Trojan’s LLM-Driven Expansion in Android Malware
SURXRAT evolves from ArsinkRAT roots, adds LLM module downloads, and operates via Telegram MaaS with surveillance and ransomware features.
U.S. Sanctions Russian Broker Over Zero-Day Exploits Theft
The evolving marketplace for exploits suggests the fight against zero-day exploits theft is only entering its next phase.
Scam Centers in Southeast Asia Drive Billion-Dollar Losses: FBI
While law enforcement cooperation is improving, the broader fight against scam centers in Southeast Asia will depend heavily on financial disruption.
datapizza-ai, Yet Another Vulnerable AI Framework
Hacktive Security - Advanced Cyber Security Services
Phishing campaign targets freight and logistics orgs in the US, Europe
A financially motivated threat group dubbed "Diesel Vortex" is stealing credentials from freight and logistics operators in the U.S. and Europe in phishing attacks using 52 domains.
In Iran la sorveglianza digitale va a caccia di manifestanti
Secondo le analisi condotte da ricercatori e gruppi per i diritti digitali, la localizzazione dei manifestanti sarebbe avvenuta attraverso i dati di posizione emessi dai loro dispositivi mobili. Ecco come funziona l'infrastruttura di sorveglianza digitale tra le più estese al mondo, ora impiegata sistematicamente per tracciare, identificare e neutralizzare il dissenso politico in Iran
ACN: a gennaio aumenta la capacità di monitoraggio e notifica da parte del CSIRT
In Italia aumentano le notifiche ricevute dal CSIRT Italia, dopo l'entrata in vigore dei nuovi obblighi previsti dal Decreto legislativo n. 138/2024 con cui è stata recepita in Italia la Direttiva NIS 2. Ecco i dati dell'ACN relativi al mese di gennaio e le principali cyber minacce
NordVPN: offerta di compleanno con sconto del 76% sui piani di 2 anni e 3 mesi sono extra
Scopri l'offerta anniversario NordVPN 2026 con sconti fino al 76% sui piani biennali: confronto dettagliato tra tariffe mensili e annuali.
Former L3Harris Trenchant boss jailed for selling hacking tools to Russian broker
Peter Williams, the former head of U.S. hacking tools maker L3Harris Trenchant, was sentenced to seven years in prison for stealing and selling his former company’s hacking and surveillance tools to a Russian firm.
Wynn Resorts confirms employee data breach after extortion threat
Wynn Resorts has confirmed that a hacker stole employee data from its systems after the company was listed on the ShinyHunters extortion gang's data leak site.
US sanctions Russian exploit broker for buying cyber tools stolen from defense contractor
1Campaign platform helps malicious Google ads evade detection
A newly identified cybercrime service known as 1Campaign is enabling threat actors to run malicious Google Ads that remain online for extended periods while evading scrutiny from security researchers.
Phishing operation with links to Russia, Armenia compromised Western cargo companies, researchers find
Treasury sanctions Russian zero-day broker accused of buying exploits stolen from U.S. defense contractor
The U.S. Treasury announced it was imposing sanctions against a Russian broker of zero-day exploits, its founder and two affiliates, citing a threat to U.S. national security. Another affiliated zero-day broker in the United Arab Emirates was also sanctioned.
CarGurus data breach exposes information of 12.4 million accounts
The ShinyHunters extortion group has published personal information in more than 12 million records allegedly stolen from CarGurus, a U.S.-based digital auto platform.
Android Deep Dive: Implicit Intents
Hacktive Security - Advanced Cyber Security Services
Android Deep Dive: Deep and App Linking
Hacktive Security - Advanced Cyber Security Services
Android Deserialization Deep Dive
Hacktive Security - Advanced Cyber Security Services
CVE-2025-25362: Old Vulnerabilities, New Victims – Breaking LLM Prompts with SSTI
Hacktive Security - Advanced Cyber Security Services
Lessons from a Blue Team failure
Hacktive Security - Advanced Cyber Security Services
🇮🇹 Conosciamo Edoardo Ottavianelli – Penetration Tester
Hacktive Security - Advanced Cyber Security Services
CVE-2025-47943: Stored XSS in Gogs via PDF
Hacktive Security - Advanced Cyber Security Services