Q1 2026 Cyber Risk Report: Insights from 2.1 Million Malware and Phishing Investigations
Explore a quarterly Cyber Risk report to discover seven key malware trends and their strategic implications for Q2 2026.
Police dismantles fake ID marketplace used by migrant smugglers
French and Spanish authorities took down an online marketplace selling fake identity documents to migrant smuggling rings operating within the European Union.
The NHS Was Lucky. The Next Victim Might Not Be.
In May 2026, malicious code appeared inside packages used across NHS software projects. The software supply chain attack named Mini Shai-hulud by researchers
AI-Powered Bots Are Blurring the Line Between Users and Cyber Threats
Modern AI-powered bots are now capable of mimicking legitimate users with a level of sophistication that many organizations struggle to detect.
Hypotheses, telemetry, and human judgment: Inside Cisco Talos Threat Hunting
Learn how Cisco Talos Threat Hunting uses hypothesis-driven methods and multi-domain telemetry correlation to find stealthy threats operating below automated detection thresholds.
Winning the cyber marathon with Tony Giandomenico
Tony Giandomenico, Senior Director of Product Management, joins Amy to discuss the Talos Threat Hunting launch what he's excited about for the future of cybersecurity, and, of course, his Ironman triathlons.
Hypotheses, telemetry, and human judgment: Inside Cisco Talos Threat Hunting
Learn how Cisco Talos Threat Hunting uses hypothesis-driven methods and multi-domain telemetry correlation to find stealthy threats operating below automated detection thresholds.
Winning the cyber marathon with Tony Giandomenico
Tony Giandomenico, Senior Director of Product Management, joins Amy to discuss the Talos Threat Hunting launch what he's excited about for the future of cybersecurity, and, of course, his Ironman triathlons.
Cisco warns of critical Unified CM flaw with PoC exploit code
Cisco has released security updates to patch a critical-severity Unified Communications Manager (Unified CM) flaw that allows attackers to gain root privileges.
Whistleblowing: ecco cosa accade quando chi segnala o è segnalato non lavora più
La dimensione temporale della segnalazione è un tema poco esplorato del Decreto Legislativo 24/2023. Ecco cosa accade quando, al momento della segnalazione whistleblowing, avviene la cessazione del rapporto di lavoro
Own Goal? Piracy as an Attack Vector to Target Football Fans
Le 4 dimensioni del rischio sistemico cyber nell’era dell’intelligenza artificiale
Il rischio sistemico cyber sta emergendo come una delle sfide più critiche e sottovalutate, mentre l'intelligenza artificiale si sta integrando nelle infrastrutture digitali, sociali e istituzionali. Ecco un modello per la comprensione e la gestione del rischio sistemico cyber nell'era dell'IA
FSB’s matryoshka #3/3 – Gamaredon’s gifts that keeps unpacking – GammaSteel
Discover part 3 of our FSB Matryoshka investigation. We deep dive into Gamaredon's Gammasteel info-stealer, its data exfiltration TTPs, and indicators.
Ransomware and Geopolitical Tensions Drive Cyber Threats Across META in Q1 2026
The full META Threat Landscape Report offers a closer look at the threat groups, industries, and attack trends in early 2026.
Error 524 Decoy: Desenmascarando una Operación Global de Smishing Oculta Tras Páginas de Error
Introducción América Latina, concentra una alta adopción móvil y controles desiguales contra la suplantación de SMS, lo que la convierte en un blanco frecuente de operadores de fraude. Los investigadores de Group-IB han identificado una operación sofisticada y a gran escala de smishing y phishing, activa desde el segundo semestre de 2025, que utiliza la […]
Vulnerability & Patch Roundup — May 2026
Discover important WordPress vulnerabilities in May 2026 and how to safeguard your site with essential security updates.
CISA directive for AI executive order to be released this week, Andersen says
DentaQuest - 2,553,599 breached accounts
Chinese hackers use new Atlas RAT malware in European cyberattacks
The U.S. sanctions Nobitex crypto exchange used by ransomware
CISA warns of cyberattacks targeting fuel tank monitoring systems
DHS chief signals efforts to reshape CISA
New 'HTTP/2 Bomb' DoS attack crashes web servers in under a minute
Instagram is alerting users who were targeted by hackers during AI chatbot attacks
Hackers appeared to take over victims’ accounts even after Meta said it fixed its AI-powered support chatbot, which granted hackers access to victims’ accounts.
Ciao, Carola
CISA warns of active attacks exploiting Android, Linux bugs
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are exploiting vulnerabilities in the Linux kernel and Android operating system.
AI sotto controllo federale in USA: cosa cambia davvero con l’ordine esecutivo di Trump
Il provvedimento segna una svolta rispetto all'approccio finora permissivo che la Casa Bianca aveva adottato fin dal ritorno di Trump alla presidenza. Ma s'inquadra in uno scenario globale in cui il dibattito sulla governance dell'IA si fa sempre più urgente, sia sul piano della sicurezza che su quello della tutela dei cittadini
Understanding Illicit Ecosystems: XSS and the Current State of the Russian-Speaking Underground
In this post, we explore XSS’ shift from a unified forum to a scattered community spread across several competing factions.
ChatGPhish, così una pagina web malevola trasforma l’AI in strumento di phishing
La nuova tecnica di attacco ribattezzata ChatGPhish dimostra che, nell’era dell’intelligenza artificiale, anche la semplice consultazione di una pagina web può trasformarsi in un’opportunità per gli attaccanti di manipolare la percezione degli utenti e aumentare l’efficacia delle proprie campagne di phishing
What 345 Days of Untested Exposure Looks Like at a Bank
A two-week penetration test can leave roughly 345 days of real-world exposure unvalidated. Sprocket Security explores why continuous testing is becoming critical as attack surfaces constantly change.