New Veeam vulnerabilities expose backup servers to RCE attacks
Veeam released security updates to patch multiple security flaws in its Backup & Replication software, including a critical remote code execution (RCE) vulnerability.
Cyberattack forces British high school to cancel classes and delay reopening
Google Search AI hallucinations push Google to hire "AI Answers Quality" engineers
AI, including AI Overviews on Google Search, can hallucinate and often make up stuff or offer contradicting answers when asked in two different ways.
CryptPad e paradigma zero-knowledge: binomio vincente per la sicurezza dei dati aziendali
CryptPad è una suite collaborativa e di produttività open source ilcui fondamento architetturale sposa pienamente il principio Zero-Knowledge, per cui il fornitore del servizio non ha alcuna possibilità tecnica di accedere ai dati degli utenti in chiaro. Ecco un'utile guida pratica
UK announces plan to strengthen public sector cyber defenses
The United Kingdom has announced a new cybersecurity strategy, backed by more than £210 million ($283 million), to boost cyber defenses across government departments and the wider public sector.
CPR come zone offline: quando la cyber security diventa esclusione sociale
Dalla cronaca alla domanda scomoda: cosa succede quando “stacchi la rete” alle persone? Il caso del centro di permanenza per i rimpatri (CPR) di Macomer ci ricorda che il diritto di comunicare è un diritto digitale effettivo e che la cyber security può diventare uno strumento di esclusione sociale. Ecco perché
How Cisco Talos powers the solutions protecting your organization
What happens under the hood of Cisco's security portfolio? Our reputation and detection services apply Talos' real-time intelligence to detect and block threats. Here's how.
OpenAI is reportedly getting ready to test ads in ChatGPT
Multiple reports suggest that OpenAI is going ahead with its plans to add ads to ChatGPT, but the experiment will be initially limited to its employees.
Ecco come organizzare una difesa preventiva contro i ransomware
L'imperativo è: anticipare per non dover correre ai ripari in emergenza. E scongiurare un aumento esponenziale dei danni e dei costi. I suggerimenti dell'esperto
Ghost Tapped: Tracking the Rise of Chinese Tap-to-pay Android Malware
OpenAI is rolling out GPT-5.2 “Codex-Max” for some users
OpenAI is testing a new model for Codex, and it could be the company's best coding model yet.
Taiwan says China's attacks on its energy sector increased tenfold
The National Security Bureau in Taiwan says that China's attacks on the country's energy sector increased tenfold in 2025 compared to the previous year.
Microsoft cancels plans to rate limit Exchange Online bulk emails
Microsoft announced today that it has canceled plans to impose a daily limit of 2,000 external recipients on Exchange Online bulk email senders.
New D-Link flaw in legacy DSL routers actively exploited in attacks
Threat actors are exploiting a recently discovered command injection vulnerability that affects multiple D-Link DSL gateway routers that went out of support years ago.
Kimwolf Android botnet abuses residential proxies to infect internal devices
The Kimwolf botnet, an Android variant of the Aisuru malware, has grown to more than two million hosts, most of them infected by exploiting vulnerabilities in residential proxy networks to target devices on internal networks.
Jaguar Land Rover wholesale volumes down 43% after cyberattack
Jaguar Land Rover (JLR) revealed this week that a September 2025 cyberattack led to a 43% decline in third-quarter wholesale volumes.
Why Effective CTEM Must be an Intelligence-Led Program
Flashpoint believes that effective CTEM must be intelligence-led, using curated threat intelligence as the core to prioritize risk.
UK government admits years of cyber policy have failed, announces reset
Sedgwick confirms breach at government contractor subsidiary
Claims administration and risk management company Sedgwick has confirmed that its federal contractor subsidiary, Sedgwick Government Solutions, was the victim of a security breach.
How generative AI accelerates identity attacks against Active Directory
Generative AI is accelerating password attacks against Active Directory, making credential abuse faster and more effective. Specops Software explains how AI-driven cracking techniques exploit weak and predictable AD passwords.
Are Copilot prompt injection flaws vulnerabilities or AI limits?
Microsoft has pushed back against claims that multiple prompt injection and sandbox-related issues raised by a security engineer in its Copilot AI assistant constitute security vulnerabilities. The development highlights a growing divide between how vendors and researchers define risk in generative AI systems.
Singapore Cyber Agency Warns of Critical IBM API Connect Vulnerability (CVE-2025-13915)
Singapore warns of critical CVE-2025-13915 in IBM API Connect. Authentication bypass flaw scored 9.8 CVSS. Patches and mitigations released.
WhiteDate - 6,076 breached accounts
In December 2025, the dating website "for a Europid vision" WhiteDate suffered a data breach that exposed 6k unique email addresses. The breach exposed extensive further personal information including data related to physical appearance, income, education and IQ.
Coupang, una violazione dati con terremoto al seguito: quale lezione dalla Corea del Sud
Coupang, la più grande piattaforma e-commerce della Corea del Sud, è stata vittima di una violazione che ha esposto i dati di 33 milioni di clienti. Le critiche, sollevate anche dal legislatore, hanno causato un terremoto. Cosa è successo e quale rischio c’è che possa succedere anche in Italia
Cloud file-sharing sites targeted for corporate data theft attacks
A threat actor known as Zestix has been offering to corporate data stolen from dozens of companies likely after breaching their ShareFile, Nextcloud, and OwnCloud instances.
ClickFix attack uses fake Windows BSOD screens to push malware
A new ClickFix social engineering campaign is targeting the hospitality sector in Europe, using fake Windows Blue Screen of Death (BSOD) screens to trick users into manually compiling and executing malware on their systems.
Russian hackers target European hospitality industry with ‘blue screen of death’ malware
US broadband provider Brightspeed investigates breach claims
Brightspeed, one of the largest fiber broadband companies in the United States, is investigating security breach and data theft claims made by the Crimson Collective extortion gang.
Hacktivist deletes white supremacist websites live on stage during hacker conference
A hacker known as Martha Root broke in and deleted three white supremacists websites at the end of a talk during the annual hacker conference Chaos Communication Congress in Germany.
Justice Department Announces Actions to Combat Two Russian State-Sponsored Cyber Criminal Hacking Groups
The Justice Department announced two indictments in the Central District of California charging Ukrainian national Victoria Eduardovna Dubranova for her role in conducting cyberattacks and computer intrusions against critical infrastructure and other victims around the world, in support of Russia’s geopolitical interests.