Biotech giant Amgen says patient data stolen from third-party cloud systems
The biotech giant Amgen informed regulators that patient information and proprietary company data were accessed through a breach of third-party cloud systems.
🔗️ [Therecord] https://link.is.it/j8zXnI
The biotech giant Amgen informed regulators that patient information and proprietary company data were accessed through a breach of third-party cloud systems.
🔗️ [Therecord] https://link.is.it/j8zXnI
Hackers steal 31,000 records identifying people behind Liechtenstein companies, foundations
A cyberattack compromised tens of thousands of records related to companies, foundations and trusts in Liechtenstein, prompting the government to to form a “crisis unit” to address the breach.
🔗️ [Therecord] https://link.is.it/H9QEwY
A cyberattack compromised tens of thousands of records related to companies, foundations and trusts in Liechtenstein, prompting the government to to form a “crisis unit” to address the breach.
🔗️ [Therecord] https://link.is.it/H9QEwY
Bitcoin hardware wallet maker destroys some inventory after more than $88 million stolen
The company behind a popular hardware wallet for bitcoin owners was forced to destroy part of its inventory after thieves siphoned more than $88 million from customers through a firmware vulnerability.
🔗️ [Therecord] https://link.is.it/rZSTy6
The company behind a popular hardware wallet for bitcoin owners was forced to destroy part of its inventory after thieves siphoned more than $88 million from customers through a firmware vulnerability.
🔗️ [Therecord] https://link.is.it/rZSTy6
The Assets You Don’t Know You Own: Attack Surface Sprawl Is a Discovery Problem, Not a Tooling Problem
Cyble breaks down why continuous attack surface discovery and asset visibility are essential to reduce cyber risk and protect modern cloud-first environments.
🔗️ [Cyble] https://link.is.it/0lwjm4
Cyble breaks down why continuous attack surface discovery and asset visibility are essential to reduce cyber risk and protect modern cloud-first environments.
🔗️ [Cyble] https://link.is.it/0lwjm4
Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts
Microsoft has linked a global campaign targeting hospitality Wi-Fi networks to the Russian threat actor Midnight Blizzard, also known as APT29.
🔗️ [Bleepingcomputer] https://link.is.it/0LqQd7
Microsoft has linked a global campaign targeting hospitality Wi-Fi networks to the Russian threat actor Midnight Blizzard, also known as APT29.
🔗️ [Bleepingcomputer] https://link.is.it/0LqQd7
❤1
New Pass-ta-key attacks let malware hijack Google-synced passkeys
Security researchers have discovered three attacks that allow malware on already-compromised Windows devices to abuse Google Password Manager's synced passkeys to take over accounts, bypass user verification, and extract passkey private keys.
🔗️ [Bleepingcomputer] https://link.is.it/Thof1d
Security researchers have discovered three attacks that allow malware on already-compromised Windows devices to abuse Google Password Manager's synced passkeys to take over accounts, bypass user verification, and extract passkey private keys.
🔗️ [Bleepingcomputer] https://link.is.it/Thof1d
Proton VPN, Proton taglia il prezzo del 70%: 2 anni a 2,99 euro al mese
Proton VPN con la sua nuova offerta permette di ottenere un risparmio del 70% per 2 anni: ecco come funziona la promo e quali sono i costi.
🔗️ [Cybersecurity360] https://link.is.it/762VMJ
Proton VPN con la sua nuova offerta permette di ottenere un risparmio del 70% per 2 anni: ecco come funziona la promo e quali sono i costi.
🔗️ [Cybersecurity360] https://link.is.it/762VMJ
NIS2, asset e servizi IT: come costruire un inventario realmente utile alla gestione del rischio
L’inventario degli asset non dovrebbe essere una semplice lista tecnica di server, applicazioni, dispositivi e servizi cloud. In ottica NIS2, deve...
🔗️ [Cybersecurity360] https://link.is.it/DGNkR7
L’inventario degli asset non dovrebbe essere una semplice lista tecnica di server, applicazioni, dispositivi e servizi cloud. In ottica NIS2, deve...
🔗️ [Cybersecurity360] https://link.is.it/DGNkR7
When Device Facts meet Behavioural Analytics
This article explains how a multi-model approach to behavioural analytics increase the Value Detection Rate (VDR) for banks.
🔗️ [Threatfabric] https://link.is.it/oEOE1Q
This article explains how a multi-model approach to behavioural analytics increase the Value Detection Rate (VDR) for banks.
🔗️ [Threatfabric] https://link.is.it/oEOE1Q
Major Cyber Attacks in July 2026: US and EU Organizations Hit by Phishing, RATs, and Stealers
Explore the major cyber attacks of July 2026, the risks they created across the US and Europe, and the steps security leaders can take to reduce exposure.
🔗️ [Any] https://link.is.it/KbtY0Q
Explore the major cyber attacks of July 2026, the risks they created across the US and Europe, and the steps security leaders can take to reduce exposure.
🔗️ [Any] https://link.is.it/KbtY0Q
Categorizzazione NIS 2: da adempimento a strumento di governo della sicurezza
La categorizzazione NIS2, che non è finita il 30 giugno, entra in una nuova fase: infatti apre il percorso, ma non lo conclude. Ecco perché il...
🔗️ [Cybersecurity360] https://link.is.it/DOylvE
La categorizzazione NIS2, che non è finita il 30 giugno, entra in una nuova fase: infatti apre il percorso, ma non lo conclude. Ecco perché il...
🔗️ [Cybersecurity360] https://link.is.it/DOylvE
Fail securely: perché la vera sicurezza si misura quando i sistemi falliscono
Nessun sistema è immune dai guasti. Il principio del fail secure insegna a progettare applicazioni e infrastrutture che, in caso di errore,...
🔗️ [Cybersecurity360] https://link.is.it/H3xqEl
Nessun sistema è immune dai guasti. Il principio del fail secure insegna a progettare applicazioni e infrastrutture che, in caso di errore,...
🔗️ [Cybersecurity360] https://link.is.it/H3xqEl
Phishing a tema “multe” sfrutta il nome della Polizia di Stato e di pagoPA
Il CERT-AGID ha avuto evidenza di una campagna di phishing che sfrutta nome, loghi e grafiche della Polizia di Stato e di pagoPA per indurre le vittime a pagare una sanzione stradale fittizia. I siti malevoli sono ospitati tramite nomi di dominio che contengono la parola "poliziadistato" ma utilizzano estensione differente e che, naturalmente, non appartengono a canali istituzionali.
🔗️ [Cert-agid] https://link.is.it/TkJXdZ
Il CERT-AGID ha avuto evidenza di una campagna di phishing che sfrutta nome, loghi e grafiche della Polizia di Stato e di pagoPA per indurre le vittime a pagare una sanzione stradale fittizia. I siti malevoli sono ospitati tramite nomi di dominio che contengono la parola "poliziadistato" ma utilizzano estensione differente e che, naturalmente, non appartengono a canali istituzionali.
🔗️ [Cert-agid] https://link.is.it/TkJXdZ
PNLD Data Breach Exposes Police and Government Contact Details on Dark Web
The PNLD data breach has exposed contact information belonging to police officers, government partners, criminal justice professionals and customers after data from the Police
🔗️ [Thecyberexpress] https://link.is.it/exWgoL
The PNLD data breach has exposed contact information belonging to police officers, government partners, criminal justice professionals and customers after data from the Police
🔗️ [Thecyberexpress] https://link.is.it/exWgoL
Liechtenstein Cyberattack Exposes Data From Beneficial Ownership Register
The Liechtenstein cyberattack has prompted authorities to investigate a major security breach after copies of sensitive data linked to around 31,000 legal
🔗️ [Thecyberexpress] https://link.is.it/k7D2im
The Liechtenstein cyberattack has prompted authorities to investigate a major security breach after copies of sensitive data linked to around 31,000 legal
🔗️ [Thecyberexpress] https://link.is.it/k7D2im
“Keep going, bro. You’ve got this!” A data-driven look at how adversaries are weaponizing AI
Talos has collected prompt logs from threat actor endpoints running various applications, such as Claude Code, CodeX, Cursor, or Gemini. This blog is an analysis of the ways we've seen bad actors leveraging cloud-based AI.
🔗️ [Talosintelligence] https://link.is.it/Crlibe
Talos has collected prompt logs from threat actor endpoints running various applications, such as Claude Code, CodeX, Cursor, or Gemini. This blog is an analysis of the ways we've seen bad actors leveraging cloud-based AI.
🔗️ [Talosintelligence] https://link.is.it/Crlibe
How legitimate cloud platforms enable phishers to bypass MFA
We cover a cloud-based AitM attack scenario leveraging service workers and Ultraviolet, and provide detailed phishing hosting statistics across platforms like Cloudflare Workers, Vercel, Netlify, GitHub Pages, and IPFS.
🔗️ [Securelist] https://link.is.it/usQrto
We cover a cloud-based AitM attack scenario leveraging service workers and Ultraviolet, and provide detailed phishing hosting statistics across platforms like Cloudflare Workers, Vercel, Netlify, GitHub Pages, and IPFS.
🔗️ [Securelist] https://link.is.it/usQrto
Retelit, operatore cloud e di telecomunicazioni, ha subito un attacco informatico. E non lo dice
Tra i suoi clienti ci sono aziende strategiche, gestori di identità digitali e pubbliche amministrazioni. Migliaia i documenti già disponibili online. Dietro l’attacco Qilin, gruppo cybercriminale attivo almeno dal 2022 che ruba password e accessi
🔗️ [Irpi] https://link.is.it/KNGIFC
Tra i suoi clienti ci sono aziende strategiche, gestori di identità digitali e pubbliche amministrazioni. Migliaia i documenti già disponibili online. Dietro l’attacco Qilin, gruppo cybercriminale attivo almeno dal 2022 che ruba password e accessi
🔗️ [Irpi] https://link.is.it/KNGIFC
👍1🔥1
Cybersecurity360 Awards 2026: le sfide della leadership antifragile
Analisi della leadership antifragile: come trasformare crisi, attacchi informatici e incertezza in valore per le aziende.
🔗️ [Cybersecurity360] https://link.is.it/IYH5ng
Analisi della leadership antifragile: come trasformare crisi, attacchi informatici e incertezza in valore per le aziende.
🔗️ [Cybersecurity360] https://link.is.it/IYH5ng
Swiss IT agency hacked, 200 accounts compromised, SharePoint vulns suspected
The Federal Office for Information Technology and Communications (BIT) said specialists detected anomalies in on-premises Microsoft servers. The Swiss agency could not confirm exactly how the hackers got in.
🔗️ [Therecord] https://link.is.it/G7DOp7
The Federal Office for Information Technology and Communications (BIT) said specialists detected anomalies in on-premises Microsoft servers. The Swiss agency could not confirm exactly how the hackers got in.
🔗️ [Therecord] https://link.is.it/G7DOp7