Global Magecart Campaign Puts Banks Under Pressure, Leveraging Redsys Payment Mimicry and Hijacking
Read ANY.RUN report featuring both executive-level insights and technical analysis of the campaign.
Three Individuals Charged for Trying to Smuggle ‘America-Made’ AI Tech Worth $170M
US DOJ charges two US and one Chinese national for attempting to smuggle $170 million worth 'America-made' AI tech to China.
Resilienza digitale 2.0: integrare l’AI nel perimetro di sicurezza DORA
Il passaggio alla Resilienza 2.0 non è più solo una scelta competitiva, ma un imperativo metodologico. Ecco come possiamo integrare l'AI nel perimetro di sicurezza senza che questa diventi il "punto di rottura" sistemico previsto dal legislatore
La nuova Cyber Strategy USA va oltre i confini nazionali: i 6 pilastri operativi
La strategia tocca temi centrali per l'intero ecosistema cyber globale: dalla postura offensiva nella gestione delle minacce, alla deregolamentazione del settore privato, fino alla supremazia nelle tecnologie emergenti come intelligenza artificiale e crittografia post-quantistica. Ecco i 6 pillar della Cyber Strategy nazionale della Casa Bianca
Node.js Fixes Critical Flaws, Patches DoS Risk in Latest Security Update
Node.js patches CVE-2026-21637 and other flaws across versions 20.x–25.x, fixing DoS risks, HTTP bugs, and permission model issues.
Attacco alla sanità: ecco perché una cartella clinica vale fino a mille euro nel dark web
I dati sanitari non sono solo dati sottratti, ma una chiave capace di aprire molte porte. Ed è proprio questa versatilità criminale a determinarne il valore di una cartella clinica che, in seguito ad un cyber attacco, finisce nel dark web
Coruna: the framework used in Operation Triangulation
Kaspersky GReAT experts look into the Coruna exploit kit targeting iPhones. We discovered that the kernel exploit for CVE-2023-32434 and CVE-2023-38606 is an updated version of the Operation Triangulation exploit.
Port of Vigo Hit by Ransomware Attack, Cargo Systems Disrupted
The Port of Vigo cyberattack incident also points to a broader trend, cyberattacks are no longer limited to data theft.
The Energy Sector’s Ransomware Nightmare: Why Critical Infrastructure Can’t Catch a Break
Ransomware attacks on the energy sector are rising fast, exposing legacy systems, OT risks, and global threats. Learn why resilience matters now.!
RedLine Infostealer Network’s Second Defendant Now Faces a U.S. Court
US presents in Austin Court, an Armenian national behind RedLine Infostealer campaign.
ANY.RUN Recognized for Innovations and Market Leadership at Global InfoSec Awards 2026
ANY.RUN won in two categories for innovative malware analysis and market-leading threat intelligence. More details inside.
Scuf Gaming - 128,683 breached accounts
In June 2015, custom gaming controller maker Scuf Gaming suffered a data breach. The incident exposed 129k unique email addresses along with usernames, display names, IP addresses and password hashes.
Kali Linux 2026.1 Launches with 8 New Tools, UI Refresh, and Kernel Upgrade
Kali Linux 2026.1 adds BackTrack mode, MetasploitMCP, 8 tools, kernel 6.18, NetHunter updates, and fixes with improved UI experience.
Sound Radix - 292,993 breached accounts
In March 2026, the audio production tools company Sound Radix disclosed a data breach that they subsequently self-submitted to HIBP. Attributed to unauthorised access to a customer support platform, the incident impacted 293k unique email addresses and names of users who had interacted with their support team. Sound Radix advised that whilst there is no evidence their broader user database was accessed, it is possible that additional data including hashed passwords may have been exposed. No financial or credit card information was impacted.
Magento sotto attacco: PolyShell, sfruttamento di massa in pochi giorni
La vulnerabilità “PolyShell” in Magento Open Source e Adobe Commerce è passata dalla disclosure alla compromissione su larga scala in tempi estremamente rapidi: secondo Sansec, azienda specializzata in sicurezza informatica, lo sfruttamento di massa è iniziato il 19 marzo 2026, appena due giorni dopo la divulgazione pubblica, e oggi le tracce di attacco risultano presenti …
GitHub adds AI-powered bug detection to expand security coverage
GitHub is adopting AI-based scanning for its Code Security tool to expand vulnerability detections beyond the CodeQL static analysis and cover more languages and frameworks.
PolyShell attacks target 56% of all vulnerable Magento stores
Attacks leveraging the 'PolyShell' vulnerability in version 2 of Magento Open Source and Adobe Commerce installations are underway, targeting more than half of all vulnerable stores.
CISA's acting chief warns shutdown is increasing cyber risks, causing resignations
Bubble AI app builder abused to steal Microsoft account credentials
Threat actors are evading phishing detection in campaigns targeting Microsoft accounts by abusing the no-code app-building platform Bubble to generate and host malicious web apps.
New Torg Grabber infostealer malware targets 728 crypto wallets
A new info-stealing malware called Torg Grabber is stealing sensitive data from 850 browser extensions, more than 700 of them for cryptocurrency wallets.
USA, stop all’import di router consumer esteri: le 3 campagne d’attacco alla base del divieto
Il cuore della questione è di natura tecnica prima ancora che geopolitica. Ecco cosa impone il divieto della FCC Usa di import di router consumer e apparati considerati non abbastanza sicuri prodotti all'estero
Russia arrests alleged owner of cybercrime forum LeakBase, report says
Russian state-owned media reported that police in Russia arrested the administrator of LeakBase, a large hacking forum.
Supply chain attack hits widely-used AI package, risks impacting thousands of companies
Ransomware attack disrupts operation at major Spanish fishing port
Citrix urges admins to patch NetScaler flaws as soon as possible
Citrix has patched two NetScaler ADC and NetScaler Gateway vulnerabilities, one of which is very similar to the CitrixBleed and CitrixBleed2 flaws exploited in zero-day attacks in recent years.
Puerto Rico government agency cancels driver’s license appointments after cyberattack
Analisi statica del codice: con LiSA la tecnologia italiana sale sul podio mondiale
LiSA, il framework di Ca’ Foscari per la verifica del software, conquista il terzo posto a SVCOMP 2026 nella categoria Java. Progetto co-finanziato da SERICS, si basa su interpretazione astratta. Integrato dalla NSA in Ghidra, si candida come tecnologia italiana per l’analisi statica del codice
Russian botnet operator linked to major ransomware attacks sentenced in US
Paid AI Accounts Are Now a Hot Underground Commodity
AI accounts are becoming part of the cybercrime supply chain, sold like email accounts or VPS access. Flare Systems shows how underground markets bundle and resell premium AI access at scale.
The Agentic AI Attack Surface: Prompt Injection, Memory Poisoning, and How to Defend Against Them
Learn how prompt injection attacks expose agentic AI systems to risk, alongside memory poisoning, and how to secure autonomous decision-making.