Phishing & Email Security: An AI-Ready Playbook
Real-World Examples of AI in Cybersecurity
ChatGPT Go now unlocks unlimited access to GPT-5.2 Instant for $8
ChatGPT Go is finally worth your money, as OpenAI has almost doubled the usage limits and enabled ultimate access to GPT 5.2 Instant.
You can get ChatGPT's $20 Plus subscription for free for a limited time
OpenAI is offering ChatGPT Plus, which costs $20 in the United States, for free, but the offer is valid for some accounts only, and it's a limited-time deal.
Fake ad blocker extension crashes the browser for ClickFix attacks
A malvertising campaign is using a fake ad-blocking Chrome and Edge extension named NexShield that intentionally crashes the browser in preparation for ClickFix attacks.
New PDFSider Windows malware deployed on Fortune 100 firm's network
Ransomware attackers targeting a Fortune 100 company in the finance sector used a new malware strain, dubbed PDFSider, to deliver malicious payloads on Windows systems.
Raaga - 10,225,145 breached accounts
In December 2025, data allegedly breached from the Indian streaming music service "Raaga" was posted for sale to a popular hacking forum. The data contained 10M unique email addresses along with names, genders, ages (in some cases, full date of birth), postcodes and passwords stored as unsalted MD5 hashes.
UK govt. warns about ongoing Russian hacktivist group attacks
The U.K. government is warning of continued malicious activity from Russian-aligned hacktivist groups targeting critical infrastructure and local government organizations in the country in disruptive denial-of-service (DDoS) attacks.
Hacker admits to leaking stolen Supreme Court data on Instagram
A Tennessee man has pleaded guilty to hacking the U.S. Supreme Court's electronic filing system and breaching accounts at the AmeriCorps U.S. federal agency and the Department of Veterans Affairs.
Piattaforme di criptovalute: fra opacità e tracciabilità, gli ostacoli per il contrasto alle truffe
L’International Consortium of Investigative Journalists, il New York Times ed altre 37 testate partner in 35 Paesi hanno scoperto il fenomeno, mentre l’industria delle criptovalute assume una crescente legittimazione istituzionale e commerciale. Ecco i principali ostacoli al contrasto degli abusi in ambito crypto
Il Dns come asset strategico di sicurezza
La centralità del Dns lo trasforma in un potenziale vettore d'attacco di eccezionale efficacia e, al contempo, in un punto di controllo per la sicurezza. Ecco come trasformarlo da punto debole a strumento di difesa
Oltre le dimissioni di un componente del Garante privacy: le 4 opzioni in gioco
Le dimissioni di Guido Scorza da componente del board dell'Autorità per la protezione Privacy non sono un episodio isolato né meramente personale. Rappresentano un momento critico ma anche un’opportunità. Ecco cosa è in ballo davvero
Jordanian pleads guilty to selling access to 50 corporate networks
A Jordanian man has pleaded guilty to operating as an "access broker" who sold access to the computer networks of at least 50 companies.
1-15 January 2026 Cyber Attacks Timeline
And I am back with the 1-15 January 2026 cyber attacks timeline. In the first timeline of January 2026, I collected 61 events (4.07 events/day) with a threat landscape dominated by malware with 36%…
Iranian state TV feed reportedly hijacked to air anti-regime messages
Ingram Micro says ransomware attack affected 42,000 people
Information technology giant Ingram Micro has revealed that a ransomware attack on its systems in July 2025 led to a data breach affecting over 42,000 individuals.
Il caso OVHcloud e l’illusione della sovranità dei dati
Il caso OVHcloud mostra come la geografia normativa non coincida più con la geografia fisica dei server: un banco di prova della maturità del diritto internazionale e del diritto dell’UE nel governare la dimensione extraterritoriale del potere di accesso ai dati
deVixor: An Evolving Android Banking RAT with Ransomware Capabilities Targeting Iran
Cyble analyzed deVixor, an advanced Android banking RAT with ransomware features actively targeting Iranian users.
Nuova campagna di phishing a tema SPID sfrutta Google Sites
OpenAI hostname hints at a new ChatGPT feature codenamed "Sonata"
OpenAI is reportedly testing a new feature or product codenamed "Sonata," and it could be related to music or audio-related experiences on ChatGPT.
Dall’entusiasmo all’adozione strategica: un framework per la maturità dei sistemi IA
La valutazione della maturità organizzativa nell'IA richiede l'utilizzo di framework strutturati. Ecco i modelli di maturità per l'IA, stato dell'arte e limitazioni
CERT-AGID 10-16 gennaio: ancora phishing PagoPA e nuovi malware bancari
La truffa Tessera Sanitaria si evolve e ora punta anche ai dati delle carte di pagamento. Continuano le campagne PagoPA e debuttano DonutLoader e AMOS
New OpenAI leak hints at upcoming ChatGPT features
OpenAI is internally testing a new update for ChatGPT, at least on the web. It'll begin rolling out in the coming weeks.
Pass'Sport - 6,366,133 breached accounts
In December 2025, data from France's Pass'Sport program was posted to a popular hacking forum. Initially misattributed to CAF (the French family allowance fund), the data contained 6.5M unique email addresses affecting 3.5M households. The data also included names, phone numbers, genders and physical addresses. The Ministry of Sports subsequently released a statement acknowledging the incident.
Google Chrome tests Gemini-powered AI "Skills"
Google is testing "Skills" for Gemini in Chrome, which will allow AI in Chrome to perform tasks automatically, and it could challenge Perplexity Comet or Edge's Copilot mode.
CIRO confirms data breach exposed info on 750,000 Canadian investors
The Canadian Investment Regulatory Organization (CIRO) confirmed that the data breach it suffered last year impacts about 750,000 Canadian investors.
Microsoft releases OOB Windows updates to fix shutdown, Cloud PC bugs
Microsoft has released multiple emergency, out-of-band updates for Windows 10, Windows 11, and Windows Server to fix two issues caused by the January Patch Tuesday updates.
Pagination with Cisco ACI
When dealing with a large number of records, pagination becomes necessary. By default, Cisco ACI pagination allows you to retrieve up to 500 objects. A maximum value is not explicitly documented ; however, it is not recommended to go beyond this limit in order to avoid overloading the APIC.
Google Chrome now lets you turn off on-device AI model powering scam detection
Google Chrome now lets you delete the local AI models that power the "Enhanced Protection" feature, which was upgraded with AI capabilities last year.
Malicious GhostPoster browser extensions found with 840,000 installs
Another set of 17 malicious extensions linked to the GhostPoster campaign has been discovered in Chrome, Firefox, and Edge stores, where they accumulated a total of 840,000 installations.