Kremlin-linked hackers pose as charities to spy on Ukraine’s military
Allarme password aziendali deboli: più del 40% è violabile in meno di un’ora
Gli utenti aziendali usano ancora password deboli, tanto che il 40% di esse è violabile in meno di un'ora: è quanto emerge dati condivisi da Errevi System.
Convincing LinkedIn comment-reply tactic used in new phishing
Scammers are flooding LinkedIn posts with fake "reply" comments that appear to come from the platform, warning of bogus policy violations and urging users to click external links. Some even abuse LinkedIn's official lnkd.in shortener, making the phishing attempts harder to spot.
Asset management: perché l’IT non deve essere l’asset owner e come farlo bene
L'asset management efficace trasforma l'inventario da semplice adempimento tecnico a strumento strategico che ottimizza investimenti di protezione e massimizza il valore degli asset organizzativi. Per questo motivo è importante farlo bene. Ecco un’utile guida operativa
Target employees confirm leaked code after ‘accelerated’ Git lockdown
Multiple current and former Target employees confirmed that leaked source code samples posted by a threat actor match real internal systems. The company also rolled out an "accelerated" lockdown of its Git server, requiring VPN access, a day after being contacted by BleepingComputer.
Wraps - AWS Email Pricing with Modern Developer Experience
82% of domains have no DMARC. Of those that do, most set p=none—which tells receivers not to enforce. An interactive deep-dive into email authentication.
Report annuale Polizia Postale 2025: la normalità dell’attacco, il dovere della resilienza
Il Report annuale 2025 della Polizia Postale fotografa l’evoluzione del cybercrime in Italia: frodi da 269 milioni, 9.250 eventi di computer crime e nuove sfide su minori e violenza digitale. Ecco dati chiave e best practice per imprese e Paese
Quando un incidente cyber smette di essere un problema tecnico e diventa di interesse pubblico
Il nuovo paradigma introdotto dalla NIS 2 spiega perché l’incidente significativo non è più un fatto “interno”. Ecco quale ruolo assume il CSIRT Italia e perché la sicurezza informatica diventa oggi una responsabilità che travalica l’organizzazione colpita
CastleLoader: A Deep Dive into Stealthy Loader Targeting Government Sector
Read full-cycle technical analysis of CastleLoader malware, covering its entire multi-stage execution by ANY.RUN.
deVixor: An Evolving Android Banking RAT with Ransomware Capabilities Targeting Iran
Cyble analyzed deVixor, an advanced Android banking RAT with ransomware features actively targeting Iranian users.
The Alliance That Never Was: A Critical Analysis of the Ransomware “Alliance” Announced by Stormous
One of the clearest examples of this pattern is the alleged seven-group ransomware alliance announced by Stormous in October 2025—an initiative that, in
Hacker gets seven years for breaching Rotterdam and Antwerp ports
The Amsterdam Court of Appeal sentenced a 44-year-old Dutch national to seven years in prison for multiple crimes, including computer hacking and attempted extortion.
Facebook login thieves now using browser-in-browser trick
Hackers over the past six months have relied increasingly more on the browser-in-the-browser (BitB) method to trick users into providing Facebook account credentials.
Internet monitoring experts say Iran blackout likely to continue
Assemblea dei Soci 2026
L’assemblea annuale dei soci di Berghem-in-the-Middle ETS si terrà lunedì 16 febbraio 2026, dalle 19:00 alle 22:00, presso la saletta …
Armenia probes alleged sale of 8 million government records on hacker forum
CISA orders feds to patch Gogs RCE flaw exploited in zero-day attacks
CISA has ordered government agencies to secure their systems against a high-severity Gogs vulnerability that was exploited in zero-day attacks.
Hungary grants asylum to former Polish minister implicated in spyware probe
'Bad actor' hijacks Apex Legends characters in live matches
Apex Legends players over the weekend experienced disruptions during live matches as threat actors hijacked their characters, disconnected them, and changed their nicknames.
Sweden detains ex-military IT consultant suspected of spying for Russia
University of Hawaii Cancer Center hit by ransomware attack
University of Hawaii says a ransomware gang breached its Cancer Center in August 2025, stealing data of study participants, including documents from the 1990s containing Social Security numbers.
Fintech firm Betterment confirms data breach after hackers send fake crypto scam notification to users
Hackers gained access to some Betterment customers’ personal information through a social engineering attack, then targeted some of them with a crypto-related phishing message.
Target's dev server offline after hackers claim to steal source code
Hackers are claiming to be selling internal source code belonging to Target Corporation, after publishing what appears to be a sample of stolen code repositories on a public software development platform. After BleepingComputer notified Target, the files were taken offline and the retailer's developer Git server was inaccessible.
Apple confirms Google Gemini will power Siri, says privacy remains a priority
Apple and Google have confirmed that the next version of Siri will use Gemini and Google Cloud in a multi-year collaboration between the two tech giants.
Ispezioni NIS2: come funzionano e quali responsabilità ricadono sulle organizzazioni
Ispezioni NIS2: regime ispettivo ex ante ed ex post, incidenti gravi e responsabilità organizzativa. Quando ACN verifica.
Hidden Telegram proxy links can reveal your IP address in one click
A single click on what may appear to be a Telegram username or harmless link is all it takes to expose your real IP address to attackers due to how proxy links are handled. Telegram says it will add warnings to proxy links after researchers demonstrated that such one-click interactions could reveal a Telegram user's real IP address.
Microsoft is retiring the Lens scanner app for iOS, Android
Microsoft has started retiring the Microsoft Lens PDF scanner app for Android and iOS devices on Friday, January 9th, with plans to remove it from app stores next month.
Spanish energy giant Endesa discloses data breach affecting customers
Spanish energy provider Endesa and its Energía XXI operator are notifying customers that hackers accessed the company's systems and accessed contract-related information, which includes personal details.
Cos’è la guerra cognitiva e qual è la posizione della NATO
Il paradigma della sicurezza globale è al centro di un cambiamento sostanziale. La NATO ha formalizzato la guerra cognitiva come nuova frontiera per la superiorità strategica. Cosa è la guerra cognitiva e quali sono i rischi che la caratterizzano
Raccolta dati e AI, come informare correttamente gli interessati: le raccomandazioni
La CNIL chiarisce come informare gli utenti/interessati quando si utilizzano sistemi di intelligenza artificiale, rendendo note delle linee guida molto operative e altrettanto dettagliate circa gli obblighi di trasparenza quando si raccolgono dati con l’AI. Il tutto in perfetta linea con i dettami del GDPR. Vediamo meglio