Le troppe falle nella cybersicurezza dei trasporti italiani
Opacità, rischi sistemici e vulnerabilità diffusa: quanto e come sono protetti i nostri porti, aeroporti, ferrovie e non solo?
Cina, Stati Uniti e la sfida degli abissi
La mappatura dei fondali oceanici sta diventando un elemento sempre più importante della competizione tra le due superpotenze, per motivi militari, economici e scientifici.
Polymarket e i pericoli dei mercati predittivi
Scommesse su guerre e tragedie, rischi di insider trading e minacce: perché la nuova frontiera della speculazione selvaggia deve preoccuparci
Fuga da Big Tech
È possibile sottrarsi alle grandi piattaforme e ricreare un ambiente online libero, collettivo e governato dagli stessi utenti? Come scrive Kenobit in “Assalto alle piattaforme”, le alternative esistono, ma la strada per conquistare la libertà digitale è ancora molto lunga.
The Danger of Multi-SSO AWS Cognito User Pools
The Danger of Multi-SSO AWS Cognito User Pools
Scam Alert: MetaChat Impersonations Targeting AI API Keys
PreCrime™ Labs uncovers a MetaChat phishing campaign using EdgeOne Pages to steal AI API keys and credentials. Learn to identify and block these emerging threats.
Event Test
BforeAI automates remediation quickly and effectively identifies, flags, and removes malicious content, minimizing the risk.
More Attack Context for Faster Triage, Response, and Hunting. Now Available to Every SOC
Test threat intelligence in real SOC workflows with ANY.RUN’s improved free plan. Faster triage, response, and hunting.
Inside agenteV2: How Brazilian Attackers Use Fake Court Summons to Steal Banking Credentials in Real Time
Brazilian phishing delivers agenteV2: a Nuitka-compiled banking stealer targeting major banks with live screen streaming via WebSocket.
Phishing-to-RMM Attacks: The Remote Access Blind Spot CISOs Can’t Ignore
Phishing-to-RMM attacks abuse trusted remote management tools to gain unauthorized access. See why this creates a visibility gap for CISOs.
Margin vs. Madness: Fixing MSSP Top 5 Operational Nightmares
Discover 5 biggest operational pains killing MSSP margins and how ANY.RUN’s Threat Intelligence and Sandbox solve them for scalable growth.
Release Notes: Expanded Threat Intelligence Access, AI Assisted Search 1,770 New Detections and More
ANY.RUN April updates: expanded Threat Intelligence access, AI-assisted search, new detection coverage, and fresh TI Reports.
New Phishing Campaign Targets US with Credential Theft: What CISOs Need to Know
ANY.RUN researchers uncovered a large-scale fake invitation phishing campaign targeting U.S. organizations with credential theft and RMM delivery.
How CISOs Reduce Cyber Risk with MITRE ATT&CK
Discover how CISOs use MITRE ATT&CK in SOC workflows — monitoring, triage, IR, and hunting — powered by ANY.RUN's threat intelligence.
ANY.RUN & Elastic Security: Bring Threat Intelligence into Detection and Investigation Workflows
Integrate ANY.RUN Threat Intelligence Feeds with Elastic Security to bring real-time, behavior-validated IOCs into detection, investigation, and response.
New SOC-Ready Reporting for Faster Triage, Escalation, and Incident Response with ANY.RUN
Improve operational continuity across tiers and processes with new Tier 1 reports within ANY.RUN’s Interactive Sandbox.
LATAM Under Siege: Agent Tesla’s 18-Month Credential Theft Campaign Against Chilean Enterprises
Deep-dive into an active Agent Tesla credential-stealing campaign targeting Chilean and LATAM enterprises via spear-phishing since 2024.
Oh MyAudi!
This is quite a different post as it is not related as usual to Windows vulnerabilities 😉. In the past period, I have been looking into the myAudi connected vehicle platform “Audi Connect and…
Tabletop Simulations: Where Theory Meets Reality
Introducing RAPTR
Apple fixes bug that cops used to extract deleted chat messages from iPhones
The iPhone and iPad bug allowed law enforcement using forensic tools to read messages that had long been deleted by the Signal app.
France confirms data breach at government agency that manages citizens’ IDs
The French government agency that issues and manages national IDs, passports, and other documents, announced that hackers stole the personal information of an unspecified number of citizens.
Surveillance vendors caught abusing access to telcos to track people’s phone locations, researchers say
The Citizen Lab found two separate surveillance vendors abusing the backbone of cellular networks to spy on several victims across the world.
Another spyware maker caught distributing fake Android snooping apps
Researchers have found a new case where government authorities used a fake Android app to plant spyware on a target’s phone. The company that allegedly developed the spyware was not previously known to sell this type of software.
Hacker who allegedly carried out cyberattacks for China is extradited to US
Xu Zewei is accused of participating in a Chinese government hacking group that broke into thousands of U.S. organizations and stole COVID-19-related research.
Paragon is not collaborating with Italian authorities probing spyware attacks, report says
Despite promising to help determine what happened with the hacks targeting journalists and activists in Italy, Israeli-American spyware maker Paragon has reportedly not responded to authorities’ requests for information.
Ubuntu services hit by outages after DDoS attack
A group of hacktivists have claimed responsibility for a distributed denial-of-service attack, which has affected several Ubuntu and Canonical websites, and prevented users from updating the Linux-based operating system.
Hackers are mass-exploiting the cPanel bug to gain control of thousands of websites
Days after the disclosure of a critical vulnerability in popular web hosting software cPanel and WHM, hackers keep targeting and hacking websites.
Hackers steal students’ data during breach at education tech giant Instructure
The data breach at education tech giant Instructure includes students' private data, according to a sample of the allegedly stolen data seen by TechCrunch.
AI evaluation startup Braintrust confirms breach, tells every customer to rotate sensitive keys
Braintrust, a startup that makes an “operating system for engineers building AI software,” notified customers that hackers broke into one of its Amazon cloud environments, and is asking customers to rotate their API keys.