Major Cyber Attacks in July 2026: US and EU Organizations Hit by Phishing, RATs, and Stealers
Explore the major cyber attacks of July 2026, the risks they created across the US and Europe, and the steps security leaders can take to reduce exposure.
🔗️ [Any] https://link.is.it/KbtY0Q
Explore the major cyber attacks of July 2026, the risks they created across the US and Europe, and the steps security leaders can take to reduce exposure.
🔗️ [Any] https://link.is.it/KbtY0Q
Categorizzazione NIS 2: da adempimento a strumento di governo della sicurezza
La categorizzazione NIS2, che non è finita il 30 giugno, entra in una nuova fase: infatti apre il percorso, ma non lo conclude. Ecco perché il...
🔗️ [Cybersecurity360] https://link.is.it/DOylvE
La categorizzazione NIS2, che non è finita il 30 giugno, entra in una nuova fase: infatti apre il percorso, ma non lo conclude. Ecco perché il...
🔗️ [Cybersecurity360] https://link.is.it/DOylvE
Fail securely: perché la vera sicurezza si misura quando i sistemi falliscono
Nessun sistema è immune dai guasti. Il principio del fail secure insegna a progettare applicazioni e infrastrutture che, in caso di errore,...
🔗️ [Cybersecurity360] https://link.is.it/H3xqEl
Nessun sistema è immune dai guasti. Il principio del fail secure insegna a progettare applicazioni e infrastrutture che, in caso di errore,...
🔗️ [Cybersecurity360] https://link.is.it/H3xqEl
Phishing a tema “multe” sfrutta il nome della Polizia di Stato e di pagoPA
Il CERT-AGID ha avuto evidenza di una campagna di phishing che sfrutta nome, loghi e grafiche della Polizia di Stato e di pagoPA per indurre le vittime a pagare una sanzione stradale fittizia. I siti malevoli sono ospitati tramite nomi di dominio che contengono la parola "poliziadistato" ma utilizzano estensione differente e che, naturalmente, non appartengono a canali istituzionali.
🔗️ [Cert-agid] https://link.is.it/TkJXdZ
Il CERT-AGID ha avuto evidenza di una campagna di phishing che sfrutta nome, loghi e grafiche della Polizia di Stato e di pagoPA per indurre le vittime a pagare una sanzione stradale fittizia. I siti malevoli sono ospitati tramite nomi di dominio che contengono la parola "poliziadistato" ma utilizzano estensione differente e che, naturalmente, non appartengono a canali istituzionali.
🔗️ [Cert-agid] https://link.is.it/TkJXdZ
PNLD Data Breach Exposes Police and Government Contact Details on Dark Web
The PNLD data breach has exposed contact information belonging to police officers, government partners, criminal justice professionals and customers after data from the Police
🔗️ [Thecyberexpress] https://link.is.it/exWgoL
The PNLD data breach has exposed contact information belonging to police officers, government partners, criminal justice professionals and customers after data from the Police
🔗️ [Thecyberexpress] https://link.is.it/exWgoL
Liechtenstein Cyberattack Exposes Data From Beneficial Ownership Register
The Liechtenstein cyberattack has prompted authorities to investigate a major security breach after copies of sensitive data linked to around 31,000 legal
🔗️ [Thecyberexpress] https://link.is.it/k7D2im
The Liechtenstein cyberattack has prompted authorities to investigate a major security breach after copies of sensitive data linked to around 31,000 legal
🔗️ [Thecyberexpress] https://link.is.it/k7D2im
“Keep going, bro. You’ve got this!” A data-driven look at how adversaries are weaponizing AI
Talos has collected prompt logs from threat actor endpoints running various applications, such as Claude Code, CodeX, Cursor, or Gemini. This blog is an analysis of the ways we've seen bad actors leveraging cloud-based AI.
🔗️ [Talosintelligence] https://link.is.it/Crlibe
Talos has collected prompt logs from threat actor endpoints running various applications, such as Claude Code, CodeX, Cursor, or Gemini. This blog is an analysis of the ways we've seen bad actors leveraging cloud-based AI.
🔗️ [Talosintelligence] https://link.is.it/Crlibe
How legitimate cloud platforms enable phishers to bypass MFA
We cover a cloud-based AitM attack scenario leveraging service workers and Ultraviolet, and provide detailed phishing hosting statistics across platforms like Cloudflare Workers, Vercel, Netlify, GitHub Pages, and IPFS.
🔗️ [Securelist] https://link.is.it/usQrto
We cover a cloud-based AitM attack scenario leveraging service workers and Ultraviolet, and provide detailed phishing hosting statistics across platforms like Cloudflare Workers, Vercel, Netlify, GitHub Pages, and IPFS.
🔗️ [Securelist] https://link.is.it/usQrto
Retelit, operatore cloud e di telecomunicazioni, ha subito un attacco informatico. E non lo dice
Tra i suoi clienti ci sono aziende strategiche, gestori di identità digitali e pubbliche amministrazioni. Migliaia i documenti già disponibili online. Dietro l’attacco Qilin, gruppo cybercriminale attivo almeno dal 2022 che ruba password e accessi
🔗️ [Irpi] https://link.is.it/KNGIFC
Tra i suoi clienti ci sono aziende strategiche, gestori di identità digitali e pubbliche amministrazioni. Migliaia i documenti già disponibili online. Dietro l’attacco Qilin, gruppo cybercriminale attivo almeno dal 2022 che ruba password e accessi
🔗️ [Irpi] https://link.is.it/KNGIFC
👍1🔥1
Cybersecurity360 Awards 2026: le sfide della leadership antifragile
Analisi della leadership antifragile: come trasformare crisi, attacchi informatici e incertezza in valore per le aziende.
🔗️ [Cybersecurity360] https://link.is.it/IYH5ng
Analisi della leadership antifragile: come trasformare crisi, attacchi informatici e incertezza in valore per le aziende.
🔗️ [Cybersecurity360] https://link.is.it/IYH5ng
Swiss IT agency hacked, 200 accounts compromised, SharePoint vulns suspected
The Federal Office for Information Technology and Communications (BIT) said specialists detected anomalies in on-premises Microsoft servers. The Swiss agency could not confirm exactly how the hackers got in.
🔗️ [Therecord] https://link.is.it/G7DOp7
The Federal Office for Information Technology and Communications (BIT) said specialists detected anomalies in on-premises Microsoft servers. The Swiss agency could not confirm exactly how the hackers got in.
🔗️ [Therecord] https://link.is.it/G7DOp7
Top Hack e violazioni di dati: ecco la classifica del 2018
L'anno 2018 è ormai un lontano ricordo, eppure ha stabilito un record per quanto riguarda le attività di hacking e di violazioni di dati, le più importanti degli ultimi anni.
🔗️ [Hackerstribe] https://link.is.it/PJirbu
L'anno 2018 è ormai un lontano ricordo, eppure ha stabilito un record per quanto riguarda le attività di hacking e di violazioni di dati, le più importanti degli ultimi anni.
🔗️ [Hackerstribe] https://link.is.it/PJirbu
Revenge Porn, quando i ricatti si fanno in rete
Il Revenge Porn è la pubblicazione sul web di immagini o video che ritraggono le parti intime di una persona, senza il suo consenso, per vendetta.
🔗️ [Hackerstribe] https://link.is.it/lFaBRx
Il Revenge Porn è la pubblicazione sul web di immagini o video che ritraggono le parti intime di una persona, senza il suo consenso, per vendetta.
🔗️ [Hackerstribe] https://link.is.it/lFaBRx
Russian businesses erase Durov-linked products after 'terrorist' designation
The designation, announced last week, came a day after Russia's Federal Security Service (FSB) charged Durov with aiding terrorist activity and said it would seek to place him on an international wanted list. The agency accused Telegram of failing to remove channels and bots allegedly used by Ukrainian intelligence, as well as terrorist and extremist groups.
🔗️ [Therecord] https://link.is.it/tPuZ1d
The designation, announced last week, came a day after Russia's Federal Security Service (FSB) charged Durov with aiding terrorist activity and said it would seek to place him on an international wanted list. The agency accused Telegram of failing to remove channels and bots allegedly used by Ukrainian intelligence, as well as terrorist and extremist groups.
🔗️ [Therecord] https://link.is.it/tPuZ1d
Varonis Agent IBAC keeps AI agents within their intended boundaries
AI agents need broad access to be useful, but traditional access controls cannot determine whether an action aligns with a user's intent. Varonis explains how Agent IBAC detects intent drift and enforces real-time guardrails to keep agents within their intended boundaries.
🔗️ [Bleepingcomputer] https://link.is.it/jfIT27
AI agents need broad access to be useful, but traditional access controls cannot determine whether an action aligns with a user's intent. Varonis explains how Agent IBAC detects intent drift and enforces real-time guardrails to keep agents within their intended boundaries.
🔗️ [Bleepingcomputer] https://link.is.it/jfIT27
Apple launches new legal challenge against UK over iCloud access
Seeking to protect users' iCloud accounts, Apple is reportedly mounting a new challenge to British legal demands for ways around the company's Advanced Data Protection feature.
🔗️ [Therecord] https://link.is.it/GqkN0V
Seeking to protect users' iCloud accounts, Apple is reportedly mounting a new challenge to British legal demands for ways around the company's Advanced Data Protection feature.
🔗️ [Therecord] https://link.is.it/GqkN0V
Polish convenience store chain Żabka hacked through third-party account
Reports said intruders appeared to gain access to the Jira environment and other sensitive data of the Żabka retail chain. The company confirmed an intrusion occurred in late July.
🔗️ [Therecord] https://link.is.it/fqZVf8
Reports said intruders appeared to gain access to the Jira environment and other sensitive data of the Żabka retail chain. The company confirmed an intrusion occurred in late July.
🔗️ [Therecord] https://link.is.it/fqZVf8
Massive ChainDrop npm supply-chain attack infects hundreds of packages
Self-propagating malware named 'ChainDrop' has compromised more than 1,300 packages with a combined 2 billion monthly downloads on the Node Package Manager (npm) registry.
🔗️ [Bleepingcomputer] https://link.is.it/nvWM4b
Self-propagating malware named 'ChainDrop' has compromised more than 1,300 packages with a combined 2 billion monthly downloads on the Node Package Manager (npm) registry.
🔗️ [Bleepingcomputer] https://link.is.it/nvWM4b
Hackers steal over $130 million by exploiting bug in offline hardware wallets
A security vulnerability in the cryptocurrency hardware wallet Coldcard is allowing hackers to drain the crypto from victims’ wallets. The total losses amount to more than $130 million, according to blockchain-monitoring firms.
🔗️ [Techcrunch] https://link.is.it/2xLz0a
A security vulnerability in the cryptocurrency hardware wallet Coldcard is allowing hackers to drain the crypto from victims’ wallets. The total losses amount to more than $130 million, according to blockchain-monitoring firms.
🔗️ [Techcrunch] https://link.is.it/2xLz0a
Britain’s next war won’t be an away game: Q&A with former head of Defence Intelligence
As Chief of Defence Intelligence, General Sir Jim Hockenhull decided to declassify and publish what London knew of Russia’s plans to invade Ukraine, down to a map of the routes its forces would take.
🔗️ [Therecord] https://link.is.it/dgyo68
As Chief of Defence Intelligence, General Sir Jim Hockenhull decided to declassify and publish what London knew of Russia’s plans to invade Ukraine, down to a map of the routes its forces would take.
🔗️ [Therecord] https://link.is.it/dgyo68