Flashpoint EASM: Industry-Leading Vulnerability Intelligence, Mapped to Your Internet-Facing Assets
Catch exposures before threat actors do. Here is how Flashpoint’s new module works and the top questions answered from our live demo.
🔗️ [Flashpoint] https://link.is.it/xrCx0J
Catch exposures before threat actors do. Here is how Flashpoint’s new module works and the top questions answered from our live demo.
🔗️ [Flashpoint] https://link.is.it/xrCx0J
[Webinar] Tales from the Frontlines: An exclusive briefing on Q2 incidents
Register for an exclusive, unrecorded 30-minute webinar to review the most high-impact incidents Talos IR faced in Q2.
🔗️ [Talosintelligence] https://link.is.it/8TiIHa
Register for an exclusive, unrecorded 30-minute webinar to review the most high-impact incidents Talos IR faced in Q2.
🔗️ [Talosintelligence] https://link.is.it/8TiIHa
Hacker Iran contro 30 aziende idriche Usa: la lezione per le infrastrutture critiche
CyberAv3ngers, il collettivo di hacker iraniani, avrebbe colpito 30 aziende idriche del Minnesota e del Michigan, mettendo offline le...
🔗️ [Cybersecurity360] https://link.is.it/w7IM3J
CyberAv3ngers, il collettivo di hacker iraniani, avrebbe colpito 30 aziende idriche del Minnesota e del Michigan, mettendo offline le...
🔗️ [Cybersecurity360] https://link.is.it/w7IM3J
Threat Hunting and Defending #2: concepts, framework, Threat Model (p2)
Come detto nei precedenti blog-post, la disciplina richiede l’acquisizione di diverse skills che, per essere applicate con efficacia ed in modo efficiente, devono essere affiancate a strument…
🔗️ [Roccosicilia] https://link.is.it/GnWeeB
Come detto nei precedenti blog-post, la disciplina richiede l’acquisizione di diverse skills che, per essere applicate con efficacia ed in modo efficiente, devono essere affiancate a strument…
🔗️ [Roccosicilia] https://link.is.it/GnWeeB
Biotech giant Amgen says patient data stolen from third-party cloud systems
The biotech giant Amgen informed regulators that patient information and proprietary company data were accessed through a breach of third-party cloud systems.
🔗️ [Therecord] https://link.is.it/j8zXnI
The biotech giant Amgen informed regulators that patient information and proprietary company data were accessed through a breach of third-party cloud systems.
🔗️ [Therecord] https://link.is.it/j8zXnI
Hackers steal 31,000 records identifying people behind Liechtenstein companies, foundations
A cyberattack compromised tens of thousands of records related to companies, foundations and trusts in Liechtenstein, prompting the government to to form a “crisis unit” to address the breach.
🔗️ [Therecord] https://link.is.it/H9QEwY
A cyberattack compromised tens of thousands of records related to companies, foundations and trusts in Liechtenstein, prompting the government to to form a “crisis unit” to address the breach.
🔗️ [Therecord] https://link.is.it/H9QEwY
Bitcoin hardware wallet maker destroys some inventory after more than $88 million stolen
The company behind a popular hardware wallet for bitcoin owners was forced to destroy part of its inventory after thieves siphoned more than $88 million from customers through a firmware vulnerability.
🔗️ [Therecord] https://link.is.it/rZSTy6
The company behind a popular hardware wallet for bitcoin owners was forced to destroy part of its inventory after thieves siphoned more than $88 million from customers through a firmware vulnerability.
🔗️ [Therecord] https://link.is.it/rZSTy6
The Assets You Don’t Know You Own: Attack Surface Sprawl Is a Discovery Problem, Not a Tooling Problem
Cyble breaks down why continuous attack surface discovery and asset visibility are essential to reduce cyber risk and protect modern cloud-first environments.
🔗️ [Cyble] https://link.is.it/0lwjm4
Cyble breaks down why continuous attack surface discovery and asset visibility are essential to reduce cyber risk and protect modern cloud-first environments.
🔗️ [Cyble] https://link.is.it/0lwjm4
Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts
Microsoft has linked a global campaign targeting hospitality Wi-Fi networks to the Russian threat actor Midnight Blizzard, also known as APT29.
🔗️ [Bleepingcomputer] https://link.is.it/0LqQd7
Microsoft has linked a global campaign targeting hospitality Wi-Fi networks to the Russian threat actor Midnight Blizzard, also known as APT29.
🔗️ [Bleepingcomputer] https://link.is.it/0LqQd7
❤1
New Pass-ta-key attacks let malware hijack Google-synced passkeys
Security researchers have discovered three attacks that allow malware on already-compromised Windows devices to abuse Google Password Manager's synced passkeys to take over accounts, bypass user verification, and extract passkey private keys.
🔗️ [Bleepingcomputer] https://link.is.it/Thof1d
Security researchers have discovered three attacks that allow malware on already-compromised Windows devices to abuse Google Password Manager's synced passkeys to take over accounts, bypass user verification, and extract passkey private keys.
🔗️ [Bleepingcomputer] https://link.is.it/Thof1d
Proton VPN, Proton taglia il prezzo del 70%: 2 anni a 2,99 euro al mese
Proton VPN con la sua nuova offerta permette di ottenere un risparmio del 70% per 2 anni: ecco come funziona la promo e quali sono i costi.
🔗️ [Cybersecurity360] https://link.is.it/762VMJ
Proton VPN con la sua nuova offerta permette di ottenere un risparmio del 70% per 2 anni: ecco come funziona la promo e quali sono i costi.
🔗️ [Cybersecurity360] https://link.is.it/762VMJ
NIS2, asset e servizi IT: come costruire un inventario realmente utile alla gestione del rischio
L’inventario degli asset non dovrebbe essere una semplice lista tecnica di server, applicazioni, dispositivi e servizi cloud. In ottica NIS2, deve...
🔗️ [Cybersecurity360] https://link.is.it/DGNkR7
L’inventario degli asset non dovrebbe essere una semplice lista tecnica di server, applicazioni, dispositivi e servizi cloud. In ottica NIS2, deve...
🔗️ [Cybersecurity360] https://link.is.it/DGNkR7
When Device Facts meet Behavioural Analytics
This article explains how a multi-model approach to behavioural analytics increase the Value Detection Rate (VDR) for banks.
🔗️ [Threatfabric] https://link.is.it/oEOE1Q
This article explains how a multi-model approach to behavioural analytics increase the Value Detection Rate (VDR) for banks.
🔗️ [Threatfabric] https://link.is.it/oEOE1Q
Major Cyber Attacks in July 2026: US and EU Organizations Hit by Phishing, RATs, and Stealers
Explore the major cyber attacks of July 2026, the risks they created across the US and Europe, and the steps security leaders can take to reduce exposure.
🔗️ [Any] https://link.is.it/KbtY0Q
Explore the major cyber attacks of July 2026, the risks they created across the US and Europe, and the steps security leaders can take to reduce exposure.
🔗️ [Any] https://link.is.it/KbtY0Q
Categorizzazione NIS 2: da adempimento a strumento di governo della sicurezza
La categorizzazione NIS2, che non è finita il 30 giugno, entra in una nuova fase: infatti apre il percorso, ma non lo conclude. Ecco perché il...
🔗️ [Cybersecurity360] https://link.is.it/DOylvE
La categorizzazione NIS2, che non è finita il 30 giugno, entra in una nuova fase: infatti apre il percorso, ma non lo conclude. Ecco perché il...
🔗️ [Cybersecurity360] https://link.is.it/DOylvE
Fail securely: perché la vera sicurezza si misura quando i sistemi falliscono
Nessun sistema è immune dai guasti. Il principio del fail secure insegna a progettare applicazioni e infrastrutture che, in caso di errore,...
🔗️ [Cybersecurity360] https://link.is.it/H3xqEl
Nessun sistema è immune dai guasti. Il principio del fail secure insegna a progettare applicazioni e infrastrutture che, in caso di errore,...
🔗️ [Cybersecurity360] https://link.is.it/H3xqEl
Phishing a tema “multe” sfrutta il nome della Polizia di Stato e di pagoPA
Il CERT-AGID ha avuto evidenza di una campagna di phishing che sfrutta nome, loghi e grafiche della Polizia di Stato e di pagoPA per indurre le vittime a pagare una sanzione stradale fittizia. I siti malevoli sono ospitati tramite nomi di dominio che contengono la parola "poliziadistato" ma utilizzano estensione differente e che, naturalmente, non appartengono a canali istituzionali.
🔗️ [Cert-agid] https://link.is.it/TkJXdZ
Il CERT-AGID ha avuto evidenza di una campagna di phishing che sfrutta nome, loghi e grafiche della Polizia di Stato e di pagoPA per indurre le vittime a pagare una sanzione stradale fittizia. I siti malevoli sono ospitati tramite nomi di dominio che contengono la parola "poliziadistato" ma utilizzano estensione differente e che, naturalmente, non appartengono a canali istituzionali.
🔗️ [Cert-agid] https://link.is.it/TkJXdZ
PNLD Data Breach Exposes Police and Government Contact Details on Dark Web
The PNLD data breach has exposed contact information belonging to police officers, government partners, criminal justice professionals and customers after data from the Police
🔗️ [Thecyberexpress] https://link.is.it/exWgoL
The PNLD data breach has exposed contact information belonging to police officers, government partners, criminal justice professionals and customers after data from the Police
🔗️ [Thecyberexpress] https://link.is.it/exWgoL
Liechtenstein Cyberattack Exposes Data From Beneficial Ownership Register
The Liechtenstein cyberattack has prompted authorities to investigate a major security breach after copies of sensitive data linked to around 31,000 legal
🔗️ [Thecyberexpress] https://link.is.it/k7D2im
The Liechtenstein cyberattack has prompted authorities to investigate a major security breach after copies of sensitive data linked to around 31,000 legal
🔗️ [Thecyberexpress] https://link.is.it/k7D2im
“Keep going, bro. You’ve got this!” A data-driven look at how adversaries are weaponizing AI
Talos has collected prompt logs from threat actor endpoints running various applications, such as Claude Code, CodeX, Cursor, or Gemini. This blog is an analysis of the ways we've seen bad actors leveraging cloud-based AI.
🔗️ [Talosintelligence] https://link.is.it/Crlibe
Talos has collected prompt logs from threat actor endpoints running various applications, such as Claude Code, CodeX, Cursor, or Gemini. This blog is an analysis of the ways we've seen bad actors leveraging cloud-based AI.
🔗️ [Talosintelligence] https://link.is.it/Crlibe