Google releases new privacy controls for activity history, personalization
Google is rolling out new privacy controls for Search services and Google Play, giving you more control over saved history and personalized recommendations.
DraftKings hacker 'Snoopy' sentenced to 18 months in prison
A 21-year-old using the alias "Snoopy" was sentenced to 18 months in prison for his role in hacking DraftKings accounts in the November 2022 cyberattack.
New website names and shames companies that still don’t offer passkeys to users
According to a new site, 24% of the most popular websites in the world don't offer support for passkeys, which are considered the most secure way to log into apps and services.
Mandiant reveals how Cisco SD-WAN zero-day attacks gained root access
New details have been revealed on how hackers exploited a Cisco Catalyst SD-WAN vulnerability tracked as CVE-2026-20245 in zero-day attacks to create rogue root accounts on targeted devices.
Malicious Edge extension abuses Native Messaging as bridge to malware
A malicious Microsoft Edge extension dubbed 'Edgecution' has been used in a ransomware attack to escape the browser sandbox and deploy a Python-based backdoor.
Three ‘cybercrime as a service’ operations undercut by Microsoft, law enforcement
KPI di sicurezza: come monitorare i fornitori esterni in modo continuativo
Definizione, misurazione e automazione dei KPI di sicurezza per il monitoraggio continuo dei partner commerciali: catalogo operativo, vendor scorecard e dashboard per il management
Amadey, StealC malware operations disrupted in Operation Endgame action
Microsoft, Europol, and international partners have disrupted infrastructure used by the Amadey and StealC malware operations as part of Operation Endgame, which targets cybercriminal services and ransomware gangs.
CISA warns of max severity Ubiquiti flaws exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of hackers actively exploiting flaws in Ubiquity UniFi OS and Lantronix serial-to-ethernet servers.
ACN, maggio in chiaroscuro: troppe aziende vivono la cyber come notifica e non come governo del rischio
L'Operational summary di Acn registra a maggio 2026 ben 158 incidenti, in calo del 10% rispetto ad aprile, mentre la NIS2 fa emergere gli eventi. Ecco il report nei dettagli: ma non deve diventare il bollettino meteo della minaccia, perché è l'ora di costruire il tetto
German rail services resume after wireless communications outage
Securing the service desk: Why social engineering attacks keep succeeding
Service desks have become a favored target for attackers seeking password resets, MFA changes, and access to corporate accounts. Specops Software breaks down how service desk social engineering attacks work and how organizations can defend against them.
Madison Square Garden Sports - 9,796,738 breached accounts
In June 2026, the sports and entertainment company Madison Square Garden Sports was the target of a ShinyHunters "pay or leak" extortion campaign. The group later published the alleged data, which included almost 10M unique email addresses spanning staff and customers, along with extensive personal, employment and customer relationship information.
Indian auto giant Bajaj Auto hit by ransomware incident
L’economia dei token e il vero prezzo dell’intelligenza artificiale
Quanto sareste disposti a pagare per usare Claude e ChatGPT? Il passaggio dalle tariffe fisse a quelle a consumo ha fatto esplodere i budget aziendali e sta mostrando la fragilità del sistema AI (modificato)
L’economia dei token e il vero prezzo dell’intelligenza artificiale
Quanto sareste disposti a pagare per usare Claude e ChatGPT? Il passaggio dalle tariffe fisse a quelle a consumo ha fatto esplodere i budget aziendali e sta mostrando la fragilità del sistema AI (modificato)
L’economia dei token e il vero prezzo dell’intelligenza artificiale
Quanto sareste disposti a pagare per usare Claude e ChatGPT? Il passaggio dalle tariffe fisse a quelle a consumo ha fatto esplodere i budget aziendali e sta mostrando la fragilità del sistema AI (modificato)
AI e minaccia cyber, l’allarme dei Five Eyes: il tempo non si misura più in anni, ma in mesi
Le agenzie di cyber sicurezza dei Five Eyes avvertono governi e imprese: l’AI sta accelerando la minaccia cyber. Ecco cosa cambia per aziende, governance e resilienza digitale
Stealthy Mistic backdoor linked to ransomware access broker KongTuke
A new backdoor dubbed Mistic has been observed in financially motivated attacks targeting organizations in the insurance, education, IT, and professional services sectors.
StrikeShark: investigating a new campaign delivering Cobalt Strike through SharkLoader
Kaspersky researchers analyze a new global campaign dubbed StrikeShark that delivers Cobalt Strike Beacon via custom SharkLoader malware.
VPN con connessione internet veloce di Surfshark: prezzi, vantaggi e servizi inclusi nell’offerta
Per chi cerca una VPN con connessione a internet veloce l'offerta di Surfshark: ecco come attivarla e quali sono i vantaggi imperdibili.
Digital Identity Shadowing: quando qualcuno crea un’identità digitale a tua insaputa
Il rischio non è solo il furto di credenziali: il Digital Identity Shadowing descrive uno scenario in cui un attaccante crea un’identità digitale SPID parallela, formalmente valida e intestata alla vittima. Una minaccia che mette alla prova governance, antifrode e fiducia digitale
KDDI Data Breach May Have Exposed Up to 14.22 Million Email Accounts
KDDI data breach exposes up to 14.22M emails and passwords via ISP systems after threat actor exploited third-party software flaws.
UK Cybercrime Journal: Hargreaves Landsdown Extortion Attempt by Bashe
What Happened Over the course of September 2025 to May 2026, Hargreaves Lansdown the UK-based investment platform has been the subject of IT...
Quell’ignoranza inconsapevole delle intelligenze artificiali
Hanno le allucinazioni perché non possono percepire i limiti di ciò che sanno e sono addestrate a non rispondere mai "non lo so". Ma quando questo avviene in ambiti critici come la sicurezza informatica, gli effetti e danni possono essere rovinosi. Parla Enrico Frumento, Cybersecurity Research Lead del Cefriel
National Health Care Fraud Takedown Charges 455 Defendants in $6.5 Billion Fraud Crackdown
The National Health Care Fraud Takedown led to charges against 455 defendants tied to over $6.5 billion in alleged health care fraud.
Multiple Vulnerabilities in QNAP NAS Devices Resolved Through Security Updates
Vulnerabilities in QNAP NAS, including CVE-2025-59382, could enable code execution, data theft, privilege escalation, and DoS attacks.
TfL Hackers Plead Guilty After Breach Exposed Customer Data and Cost £29 Million
Two alleged Scattered Spider members pleaded guilty to the Transport for London cyberattack that exposed customer data.
TfL Hackers Plead Guilty After Breach Exposed Customer Data and Cost £29 Million
Two alleged Scattered Spider members pleaded guilty to the Transport for London cyberattack that exposed customer data.
PCI Compliance Isn’t a Checkbox: How to Secure Ecommerce Checkouts Before Attackers Arrive
Learn about PCI Compliance and its crucial role in securing your checkout page and protecting customer payment information.