US intelligence chief grilled on absence of election threats in security assessment
ConnectWise patches new flaw allowing ScreenConnect hijacking
ConnectWise is warning ScreenConnect customers of a cryptographic signature verification vulnerability that could lead to unauthorized access and privilege escalation.
Bank software vendor Marquis says more than 670,000 impacted by August breach
Ransomware gang exploits Cisco flaw in zero-day attacks since January
The Interlock ransomware gang has been exploiting a maximum severity remote code execution (RCE) vulnerability in Cisco's Secure Firewall Management Center (FMC) software in zero-day attacks since late January.
Cyble and Optiv Partner to Bring Digital Risk Protection to Managed Security Operations
Cyble is pleased to announce its partnership with Optiv, integrating Cyble’s AI-powered Digital Risk Protection capabilities into Optiv’s Managed Security
Storm-2561 e il SEO poisoning: così con falsi client VPN rubano credenziali
È stata identificata una campagna malevola che, mediante la tecnica del SEO poisoning, mira a indirizzare le vittime verso siti controllati dagli attaccanti inducendole a scaricare finti client VPN che nascondono un infostealer progettato per sottrarre credenziali di accesso alle reti aziendali. Tutti i dettagli e come difendersi
Marquis: Ransomware gang stole data of 672K people in cyberattack
Marquis, a Texas-based financial services provider, revealed this week that a ransomware gang stole the data of over 670,000 individuals in an August 2025 cyberattack that also disrupted operations at 74 banks across the United States.
Apple corregge WebKit senza aggiornare iOS: debuttano i Background Security Improvements
Usati per la prima volta i Background Security Improvements per correggere una vulnerabilità nel motore WebKit. Ecco cos’è e come funziona il nuovo meccanismo di aggiornamento silenzioso per la sicurezza e perché rivoluziona il patch management su iOS e macOS
Russians caught stealing personal data from Ukrainians with new advanced iPhone hacking tools
A suspected group of Russian government hackers was caught targeting Ukrainians with new iPhone hacking tools designed for espionage and potentially to steal crypto.
CISA official says agency has not seen uptick in cyber threats amid Iran war
Inside DarkSword: A New iOS Exploit Kit Delivered Via Compromised Legitimate Websites
Shortly after our publication on the Coruna exploit kit, a collaborating researcher at Lookout flagged a suspicious-looking URL possibly related to the threat actor from Russia linked with Coruna.
Inside DarkSword: A New iOS Exploit Kit Delivered Via Compromised Legitimate Websites
New “Darksword” iOS exploit used in infostealer attack on iPhones
A new exploit kit for iOS devices and delivery framework dubbed "Darksword" has been used to steal a wide range of personal information, including data from cryptocurrency wallet app.
The Refund Fraud Economy: Exploiting Major Retailers and Payment Platforms
Refund fraud is now a business, with methods and tutorials sold to exploit return policies for profit. Flare shows how fraudsters turn refunds and chargebacks into a repeatable profit model.
Nordstrom's email system abused to send crypto scams to customers
Customers of upscale department store chain Nordstrom received fraudulent messages from a legitimate company email address that promoted cryptocurrency scams disguised as a St. Patrick's Day promotion.
Handala, cosa sapere del cyber gruppo iraniano che attacca l’Occidente
Handala è diventato di colpo nome centrale del cyber conflitto che ruota attorno a Iran, Israele e, più di recente, anche bersagli occidentali (Usa in primis), da ultima l'azienda americana Stryker. Chi sono, quali tecniche usano, come difendersi
Moscow seeks to limit internet to state-approved websites amid ongoing outages
Agentic AI Run Fraud Campaigns Earning 4.5 Times More: Interpol
AI-enhanced fraud schemes now generate 4.5 times more revenue than conventional fraud tactics.
AI-Powered Cyber Warfare: How Autonomous Attack Agents Are Changing the Threat Landscape
The SOC Files: Time to “Sapecar”. Unpacking a new Horabot campaign in Mexico
Maxi truffe travestite da informazioni finanziarie sfruttano l’advertising di Meta: come proteggersi
Un'indagine ha svelato un ecosistema di truffe finanziarie su larga scala, la cui distribuzione sfrutta pubblicità a pagamento sulle piattaforme di advertising di Meta. Ecco come funziona la frode, che usa più tecniche di cloaking e impersonation sfruttando siti affidabili per eludere i filtri e rendere le truffe credibili, e come mitigare il rischio
L’AI nella kill chain: i vantaggi e le perplessità nella guerra in Iran
Il numero di oltre 2.000 obiettivi iraniani, vittime di attacco per mano americana in soli quattro giorni, dimostra la maggiore rapidità ed efficacia degli strumenti AI rispetto ai sistemi tradizionali guidati dall’uomo. Ecco i motivi della dilagante diffusione dell’AI in ambito militare e come funziona Maven di Palantir nel conflitto contro l’Iran
How a Ukrainian Vishing Ring Stole €2M From EU Citizens — and Nearly Got Away
Latvian and Ukrainian law enforcement dismantled a vishing ring that defrauded European Union citizens for at least €2 million.
How to Reduce MTTR in Your SOC with Better Threat Intelligence
Learn how SOC teams reduce MTTR with ANY.RUN Threat Intelligence Feeds and Lookup. Faster detection, triage, and incident response.
La sicurezza dell’Active Directory come pilastro della cyber security
Questo servizio è il cuore dell’identità digitale aziendale, ma anche il suo punto più vulnerabile. Una sua compromissione può bloccare l’intera organizzazione: difenderla significa tutelare tutto ciò che conta davvero
Transparent COM instrumentation for malware analysis
In this article, Cisco Talos presents DispatchLogger, a new open-source tool that delivers high visibility into late-bound IDispatch COM object interactions via transparent proxy interception.
Fusion Fireside #17: Inside the Chinese Smishing Triad with Gary Warner
CRIL Flags Growing Threat of Middle East Cyber Attacks and Hacktivist Campaigns
The expansion of Middle East cyber warfare highlights the importance of strengthening cyber defenses across industries.
How Cortex XDR BIOC Rules Could Become an Attack Surface
Study shows Cortex XDR BIOC rules can be decrypted, exposing endpoint detection logic and creating risks for multiple industries.
‘Give to Gain’ is Relevant for Security and Resilience: Bonnie Butlin, Chats with TCE
Few people have worked as actively to connect these conversations across borders and disciplines as Bonnie Butlin.
FBI Intensifies Crackdown on Thai Scam Centers Targeting Americans
FBI in Thailand targets scam centers defrauding Americans, exposing billion-dollar fraud networks and dismantling global cybercrime rings.