Dal SOC alla boardroom
Managed Detection & Response services (MDR) 24/7 for network, endpoint, cloud, SaaS and OT, against every type of cyber attack
Canadian investment regulator confirms hackers hit 750,000 investors
When Silence Becomes Mandatory: A Chronicle of an Injunction
Describing what it means to be subjected to an injunction is to give shape to an experience that often remains invisible: that of those who continue working under constant pressure, without the safeguards of a large newsroom, carrying the full weight of legal decisions personally.
Hackers now exploiting critical Fortinet FortiSIEM flaw in attacks
Attackers are now exploiting a critical Fortinet FortiSIEM vulnerability with publicly available proof-of-concept exploit code.
Microsoft: Windows 11 update causes Outlook freezes for POP users
Microsoft confirmed that the KB5074109 January Windows 11 security update causes the classic Outlook desktop client to freeze and hang for users with POP email accounts.
Cisco finally fixes AsyncOS zero-day exploited since November
Cisco finally patched a maximum-severity AsyncOS zero-day exploited in attacks targeting Secure Email Gateway (SEG) appliances since November 2025.
Starlink vuole la banda satellitare europea: in gioco c’è l’autonomia strategica UE
Diventa un caso la riassegnazione della banda satellitare europea a 2 GHz che si colloca in un momento di forte ridefinizione delle priorità industriali, tecnologiche e geopolitiche dell’UE. La decisione riguarda la capacità tecnica degli operatori, ma soprattutto la coerenza delle loro strategie con le priorità europee in termini di sicurezza e sovranità tecnologica
Microsoft: Some Windows PCs fail to shut down after January update
Microsoft has confirmed a new issue that prevents Windows 11 23H2 devices with System Guard Secure Launch enabled from shutting down.
Per il DORA la resilienza è essenzialmente disciplina e addestramento
La resilienza nasce dalla cultura del comando e si alimenta con la capacità di leggere i segnali deboli. Ecco il ruolo dei test, delle simulazioni, della capacità predittiva e della gestione dinamica del rischio
Ransomware and Supply Chain Attacks Soared in 2025
Ransomware attacks and supply chain attacks surged in 2025. Review key data, threat actors, targeted sectors, and trends shaping 2026 risks.
Il 64% delle app di terze parti accede a dati sensibili senza un motivo valido. La ricerca di Reflectiz
Secondo l'ultimo report di Reflectiz sulla web exposure, il 64% delle app di terze parti accede a dati sensibili senza una necessità tecnica o aziendale.
Critical flaw lets hackers track, eavesdrop via Bluetooth audio devices
A critical vulnerability in Google's Fast Pair protocol can allow attackers to hijack Bluetooth audio accessories like wireless headphones and earbuds, track users, and eavesdrop on their conversations.
Google now lets you change your @gmail.com address, rolling out
Google has confirmed that it's now possible to change your @gmail.com address. This means that if your current email is xyz@gmail.com, you can now change it to abc@gmail.com.
ChatGPT is now more reliable at finding and remembering your past chat
OpenAI is rolling out a big upgrade for ChatGPT with support for advanced chat history search, but the feature is rolling out to Plus and Pro subscribers only.
Gootloader now uses 1,000-part ZIP archives for stealthy delivery
The Gootloader malware, typically used for initial access, is now using a malformed ZIP archive designed to evade detection by concatenating up to 1,000 archives.
Anchorage police department takes servers offline after cyberattack on service provider
Grubhub confirms hackers stole data in recent security breach
Food delivery platform Grubhub has confirmed a recent data breach after hackers accessed its systems, with sources telling BleepingComputer the company is now facing extortion demands.
Chinese hackers targeting ‘high value’ North American critical infrastructure, Cisco says
Hackers exploit Modular DS WordPress plugin flaw for admin access
Hackers are actively exploiting a maximum severity flaw in the Modular DS WordPress plugin that allows them to bypass authentication remotely and access the vulnerable sites with admin-level privileges.
Verizon blames nationwide outage on a "software issue"
Verizon has confirmed that yesterday's nationwide wireless outage was caused by a software issue, though the company has not shared additional details about what went wrong.
Creating a Rust VBS Enclave DLL running in VTL1
A practical walkthrough for running Rust inside Windows VBS secure enclaves (VTL1) - including the CallEnclave linking issue, no_std DLL setup, and signing.
Iran’s internet shutdown is now one of its longest ever, as protests continue
Iran’s government-imposed internet shutdown enters its second week as authorities continue their violent crackdown on protesters.
Insider Threats: Turning 2025 Intelligence into a 2026 Defense Strategy
We break down the 91,321 instances of insider activity observed by Flashpoint in 2025, examine the top five cases that defined the year, and provide the technical and behavioral red flags your team needs to monitor for in 2026.
Microsoft Copilot Studio extension for VS Code now publicly available
Microsoft announced that the Copilot Studio extension for the Visual Studio Code (VS Code) integrated development environment is now available to all users.
Predicting 2026
In this week’s newsletter, Martin examines the evolving landscape for 2026, highlighting key threats, emerging trends like AI-driven risks, and the continued importance of addressing familiar vulnerabilities.
NSA, Cyber Command nominee defends record during Senate hearing
Global Innovation forum: l’innovazione delle startup passa da Seul
Il Global Innovation Forum nasce come risposta a una trasformazione profonda del modo in cui l’innovazione tecnologica viene raccontata e sostenuta all’interno delle grandi fiere internazionali. Ospitato all’interno di CES, la più grande manifestazione mondiale dedicata all’elettronica e all’innovazione, il forum si è progressivamente affermato come uno spazio pensato non per il singolo prodotto o …
Normative europee e attacchi cyber: il quadro della sicurezza digitale in Italia ed Europa
La crescita degli attacchi cyber spinge governi e imprese a rafforzare le misure di sicurezza. Le normative europee e nazionali definiscono una cornice più severa per resilienza, cooperazione e tutela dei dati
Google to pay $8.25 million to settle lawsuit alleging children’s privacy violations
Critical flaw lets hackers track, eavesdrop via Bluetooth audio devices
A critical vulnerability in Google's Fast Pair protocol can allow attackers to hijack Bluetooth audio accessories like wireless headphones and earbuds, track users, and eavesdrop on their conversations.