Covenant Health says May data breach impacted nearly 478,000 patients
The Covenant Health organization has revised to nearly 500,000 the number of individuals affected by a data breach discovered last May.
European regulators take aim at X after Grok creates deepfake of minor
European regulators take aim at X after Grok creates deepfake of minor
Sedgwick confirms cyber incident affecting its major federal contractor subsidiary
Cryptocurrency theft attacks traced to 2022 LastPass breach
Blockchain investigation firm TRM Labs says ongoing cryptocurrency thefts have been traced to the 2022 LastPass breach, with attackers draining wallets years after encrypted vaults were stolen and laundering the crypto through Russian exchanges.
Happy New (?) Fear
Nuovo anno, nuove minacce. Questo non significa però dover cedere alla tentazione di inseguire le nuove paure al costo dei fondamentali e delle vecchie cautele. Altrimenti, la postura di sicurezza cyber è destinata ad un doloroso fallimento
Over 10K Fortinet firewalls exposed to actively exploited 2FA bypass
Over 10,000 Internet-exposed Fortinet firewalls are still vulnerable to attacks exploiting a five-year-old two-factor authentication (2FA) bypass vulnerability.
Google is testing a new image AI and it's going to be its fastest model
Google is testing a new image AI model called "Nano Banana 2 Flash," and it's going to be as good as the Gemini 3 Pro Nano Banana, but it'll be cheaper.
Finland arrests two crew members of ship suspected of cable break
Trust Wallet links $8.5 million crypto theft to Shai-Hulud NPM attack
Trust Wallet believes the compromise of its web browser to steal roughly $8.5 million from over 2,500 crypto wallets is likely related to an "industry-wide" Sha1-Hulud attack in November.
The Kimwolf Botnet is Stalking Your Local Network
The story you are reading is a series of scoops nestled inside a far more urgent Internet-wide security advisory. The vulnerability at issue has been exploited for months already, and it's time for a broader awareness of the threat. The…
Regolamento 2690 e NIS2: cosa cambia e come le misure di base portano alla piena conformità
Regolamento 2690 e NIS2: relazione tra le misure base e gli obblighi avanzati. Guida sulle timeline di conformità.
AI giuridica: perché i LLM non capiscono (ancora) le leggi e cosa serve per renderli affidabili
I LLM falliscono sistematicamente nell'interpretazione giuridica: piccole variazioni nei prompt generano risposte opposte. Manca il senso comune giuridico e la stabilità richiesta dal diritto. Per realizzare il mito della “giustizia computazionale” servono modelli verticali, standard rigorosi e controllo umano costante
CISA Known Exploited Vulnerabilities Surged 20% in 2025
CISA KEV added 245 flaws in 2025, raising total known exploited vulnerabilities to 1,484 and highlighting rising ransomware risks.
Whistleblowing e gestione del rischio: una lettura critica delle linee guida ANAC
Secondo una lettura critica e sistemica, alla luce degli snodi interpretativi, le Linee Guida ANAC 2025 chiedono di interpretare il whistleblowing non come un adempimento settoriale, bensì come un'infrastruttura trasversale di sicurezza organizzativa e di governance del rischio
Si combatte così come ci si è addestrati: le logiche militari sottese al DORA
Leggere il DORA con la lente militare dimostra come la resilienza operativa digitale sia un’estensione naturale dei principi che regolano la leadership: preparazione, addestramento, disciplina. Ecco perché il Regolamento europeo che definisce la resilienza operativa digitale non è un set di adempimenti tecnici, ma una dottrina del comando
New GlassWorm malware wave targets Macs with trojanized crypto wallets
A fourth wave of the "GlassWorm" campaign is targeting macOS developers with malicious VSCode/OpenVSX extensions that deliver trojanized versions of crypto wallet applications.
The biggest cybersecurity and cyberattack stories of 2025
2025 was a big year for cybersecurity, with cyberattacks, data breaches, threat groups reaching new notoriety levels, and, of course, zero-day flaws exploited in breaches. Some stories, though, were more impactful or popular with our readers than others. This article explores 15 of the biggest cybersecurity stories of 2025.
OpenAI is offering $20 ChatGPT Plus for free to some users
If you're already subscribed to ChatGPT Plus, which costs $20, you can request OpenAI to cancel your subscription, and it may offer one month of free usage.
8 Powerful Use Cases for the StalkPhish API in Anti-Fraud and Anti-Phishing Operations
Phishing remains one of the most persistent threats facing organizations today. According to recent reports, phishing attacks account for over 80% of reported security incidents, with the average c…
Vulnerability & Patch Roundup — December 2025
Stay informed about our latest WordPress vulnerability reports and patch releases for December 2025. Update now to enhance your security!
NYC mayoral inauguration bans Flipper Zero, Raspberry Pi devices
New York City's 2026 mayoral inauguration of Zohran Mamdani has published a list of banned items for the event, specifically prohibiting the Flipper Zero and Raspberry Pi devices.
Punto di “sniffing”
In questi giorni ho rimesso mano al mio home lab aggiungendo qualche pezzo ed in particolare mi sono dotato di una componente hardware che solitamente, per esigenze di spazio e comodità, utilizzavo…
Hackers drain $3.9M from Unleash Protocol after multisig hijack
The decentralized intellectual property platform Unleash Protocol has lost around $3.9 million worth of cryptocurrency after someone executed an unauthorized contract upgrade that allowed asset withdrawals.
RondoDox botnet exploits React2Shell flaw to breach Next.js servers
The RondoDox botnet has been observed exploiting the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable Next.js servers with malware and cryptominers.
Finland seizes ship suspected of damaging subsea cable in Baltic Sea
Supply chain globale: come Fincantieri affronta la compliance NIS2
La compliance NIS2 ridisegna la sicurezza delle supply chain globali: cruciali valutazione del rischio, contratti e cultura condivisa.
What the f**k is a CAO and do I need one?
The CAO (Chief Automation Officer) is the "Chief Enabler." The role assesses automation feasibility, ensuring the right solution (deterministic vs. agentic) for business problems.
IBM warns of critical API Connect auth bypass vulnerability
IBM urged customers to patch a critical authentication bypass vulnerability in its API Connect enterprise platform that could allow attackers to access apps remotely.
Disney will pay $10 million to settle children's data privacy lawsuit
Disney has agreed to pay a $10 million civil penalty to settle claims that it violated the Children's Online Privacy Protection Act by mislabeling videos and allowing data collection for targeted advertising.
AI come arma cognitiva: dall’ISIS alla tecnodestra, la nuova ingegneria della radicalizzazione
L'IA abbassa le barriere dell'estremismo: ISIS produce deepfake credibili, la tecnodestra “inonda la zona” di contenuti alternativi. Non più propaganda unidirezionale ma radicalizzazione personalizzata. Ecco come l’intelligenza artificiale sta diventando un moltiplicatore di forza cognitiva