Japanese energy firm loses drive with data of 10.9 million clients
Kyushu Electric Power Co., Inc. has disclosed a physical security incident that affects private data of more than 10 million customers.
Maine breach portal abused to publish fake data breach disclosures
In an unusual misinformation campaign, fraudulent data breach disclosures were submitted to Maine's official breach portal and publicly posted before their legitimacy could be verified, prompting companies to deny the claims.
Oracle warns of security bug that hackers abused to breach 100+ companies
The tech giant warned of a security flaw that a cybercrime gang said it's exploiting as part of a mass-hacking campaign. Google said it notified more than 100 organizations that had potentially vulnerable servers.
Oracle mitigates PeopleSoft zero-day exploited in data theft attacks
Oracle is warning about a critical PeopleSoft Suite zero-day vulnerability tracked as CVE-2026-35273 that allows unauthenticated remote code execution, with the flaw actively exploited in ShinyHunter data theft attacks.
A tale of two eras
In this week’s newsletter, Amy reminisces on the tech toys of their childhood, inspired by a hilarious lesson about why your digital privacy shouldn't be left on an open channel.
Everest: Six Years of Evolution from Data Leak to Double Extortion – the interview
Cyber Force not included in Senate defense policy roadmap
Authorities dismantle 'AudiA6' ransomware crypto-laundering service
Law enforcement has dismantled the “AudiA6” cryptocurrency service allegedly used by ransomware actors and other cybercriminals to launder more than $380 million.
Cisco Talos, nel 2026 operazioni sponsorizzate dagli Stati sono meno rumorose ma più pazienti: ecco come difendersi
Oggi il rischio non è il ransomware che blocca platealmente i sistemi, ma l'avversario - invisibile per mesi - che sfrutta credenziali legittime e strumenti noti. Se gestiscono servizi critici e finanziari, le imprese devono superare il concetto classico di perimetro sicuro, adottando un nuovo approccio. Ecco quale e come mitigare il rischio
Hacker linked to Void Blizzard faces charges over cyberespionage campaign
British high school sends students home following cyberattack
University of Nottingham confirms cyber incident as Shiny Hunters group claims data theft
Why AI-driven threats are exposing the limits of MSP security stacks
AI-driven attacks are exposing the limits of fragmented MSP security stacks and slow response workflows. Kaseya breaks down why integrated security, automation, and recovery are becoming essential.
Software Bill of Materials (Sbom) nel 2026: i progessi e i 3 ostacoli all’adozione degli inventari
In base ai risultati dell’indagine dell'Enisa, più di 7 imprese su 10 hanno aumentato gli investimenti per gli SBOM. Oltre 4 intervistati su 10 dichiara che il CRA ha accelerato i piani di adozione degli inventari. Ma le PMI sono sotto rappresentate. Ecco cosa emerge dai dati sullo stato dell'adozione di Software Bill of Materials nel 2026
Coupang hit with record $409 million data breach fine in Korea
The Personal Information Protection Commission (PIPC), South Korea's data protection regulator, has fined e-commerce giant Coupang a record 624.6 billion won (roughly $409 million) following a massive data breach affecting more than 37 million customers
CISA tells govt agencies to patch critical exploited flaws in 3 days
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced a new Binding Operational Directive, 26-04, that prioritizes security updates for Federal Civilian Executive Branch (FCEB) agencies.
pCloud 20 GB di spazio cloud gratis: come funziona la promozione e quali vantaggi include
Come ottenere 20 GB di spazio cloud gratis con pCloud e accedere a tutti i vantaggi del servizio: le condizioni e i requisiti da avere.
May 2026 Cyber Attacks Statistics
165 events: Cyber Crime accounted for 73.8% of events, Malware remained the dominant weapon (48.8%) and Information & Communication was hit the most (37.6%)
Cyble Recognized in the 2026 Gartner® Magic Quadrant™ for Cyberthreat Intelligence Technologies — and What Cyble Feels It Means for the Next Era of Threat Intel
Cyble has been recognized as a Challenger in the 2026 Gartner® Magic Quadrant™ for CTI. Here’s what it means for the future of threat intelligence.
La sfida dei data center spaziali
La Cina ha già lanciato i primi satelliti per elaborare dati in orbita. Gli Stati Uniti, tra Pentagono, Google e SpaceX, stanno facendo lo stesso. Sta nascendo una nuova infrastruttura digitale globale, che però non appartiene a nessuno Stato e che nessuna legge regola ancora
Microsoft fixes BitLocker recovery bug on Windows Server 2025
Microsoft has resolved a known issue causing some Windows Server 2025 devices to boot into BitLocker recovery after installing the April 2026 security update.
AI nella PA: la formazione di massa alla prova della sicurezza dei dati e della conformità normativa
La diffusione di Microsoft 365 Copilot nella Pubblica Amministrazione accompagna un ampio sforzo formativo, da analizzare dal duplice punto di vista della sicurezza dei dati e della conformità normativa. Ecco quali sono le problematiche e le possibili soluzioni
L’importanza della discovery e dell’osservabilità nell’era agentica
La maggior parte dei programmi di sicurezza dà per scontato che applicazioni e agenti AI siano autorizzati dall'IT e monitorati. Ecco cosa offrono gli agenti OpenClaw ai CISO e responsabili della cyber security interessati alla visibilità unificata e a garantire che l'osservabilità degli agenti non sia isolata
From Infosecurity Europe to CONFidence and C1b3rWall: What Security Teams Are Prioritizing in 2026
Explore ANY.RUN’s highlights from Infosecurity Europe, CONFidence, and C1b3rWall 2026, including the SOC priorities shaping security operations today.
L’adozione dell’AI tra Mythos e Fable 5: le nuove sfide alla sicurezza nazionale
Project Glasswing e i modelli Mythos di Anthropic aprono una nuova fase della cyber sicurezza. La capacità di individuare migliaia di vulnerabilità in tempi record promette vantaggi difensivi senza precedenti, ma solleva interrogativi su sovranità digitale, sicurezza nazionale e dipendenza tecnologica europea
Mackay Sugar Security Incident Forces Mill Shutdowns and Halts Harvesting Operations
Mackay Sugar security incident has halted mill operations and sugarcane harvesting in Queensland, disrupting production.
Sniper’s Nest: From Brand Impersonation to Browser Hijacking and CPA Fraud
This blog provides a deep-dive into SniperDz, a centralised PhaaS platform with more than 80 ready-made phishing templates impersonating over 30 global brands, and uncovers the hidden infrastructure behind this sophisticated and highly-organized fraud ecosystem.
Nottingham University data breach affects over 450,000 students
The University of Nottingham confirmed on Wednesday that a hacking group gained access to its student records system in a breach affecting both current students and alums.
ServiceNow Flaw Exploited by Threat Actors to Access Customer Instances
A ServiceNow flaw was exploited by threat actors to access customer instances, prompting a security update and customer notifications.
APT28, an evolution of tradecraft
APT28, an evolution of tradecraft