NIS2, la sicurezza passa dalle persone: perché il fattore umano sarà decisivo dal 31 ottobre
Dall'ingresso nella fase operativa della NIS2, per molte organizzazioni europee inizia il passaggio più delicato: trasformare gli obblighi normativi in processi concreti, misurabili e sostenibili. Ecco il ruolo del fattore umano
🔗️ [Cybersecurity360] https://link.is.it/4CLxoC
Dall'ingresso nella fase operativa della NIS2, per molte organizzazioni europee inizia il passaggio più delicato: trasformare gli obblighi normativi in processi concreti, misurabili e sostenibili. Ecco il ruolo del fattore umano
🔗️ [Cybersecurity360] https://link.is.it/4CLxoC
Quando l’AI cambia il modo di decidere: come evolve l’Internal Auditing
L'intelligenza artificiale non modifica solo processi e controlli: trasforma il modo in cui le organizzazioni costruiscono conoscenza e formulano giudizi. Da qui nasce il concetto di rischio epistemico organizzativo, che propone una nuova prospettiva sull'evoluzione dell'assurance e del ruolo dell'Internal Audit
🔗️ [Cybersecurity360] https://link.is.it/9Fl7bl
L'intelligenza artificiale non modifica solo processi e controlli: trasforma il modo in cui le organizzazioni costruiscono conoscenza e formulano giudizi. Da qui nasce il concetto di rischio epistemico organizzativo, che propone una nuova prospettiva sull'evoluzione dell'assurance e del ruolo dell'Internal Audit
🔗️ [Cybersecurity360] https://link.is.it/9Fl7bl
Meta AI model hacked a company during misconfigured cyber test
Meta has become the latest AI company to confirm that one of its models hacked a real organization during cybersecurity testing, as similar incidents continue to emerge following OpenAI'sOpenAI's initial disclosure that its agents breached Hugging Face.
🔗️ [Bleepingcomputer] https://link.is.it/7xRyjI
Meta has become the latest AI company to confirm that one of its models hacked a real organization during cybersecurity testing, as similar incidents continue to emerge following OpenAI'sOpenAI's initial disclosure that its agents breached Hugging Face.
🔗️ [Bleepingcomputer] https://link.is.it/7xRyjI
Dinamiche di potere e gestione del consenso: le sfide per la leadership verso i Cybersecurity360 Awards 2026
Analisi della leadership e del potere aziendale tra consenso, coercizione ed economia. Leve e strategie manageriali.
🔗️ [Cybersecurity360] https://link.is.it/OpgkuD
Analisi della leadership e del potere aziendale tra consenso, coercizione ed economia. Leve e strategie manageriali.
🔗️ [Cybersecurity360] https://link.is.it/OpgkuD
Why metaphor may dictate your security strategy
In this week's newsletter, Martin looks at how the metaphors we use to describe AI "escaping" its sandbox can completely change how we react to the threat.
🔗️ [Talosintelligence] https://link.is.it/4uBzND
In this week's newsletter, Martin looks at how the metaphors we use to describe AI "escaping" its sandbox can completely change how we react to the threat.
🔗️ [Talosintelligence] https://link.is.it/4uBzND
Cyberattack on North Carolina Ports ‘contained’ as Coast Guard, state officials investigate
North Carolina Ports is recovering from a cyberattack after its IT system was “hacked by an outside actor or group,” requiring a switch to manual processing of operations.
🔗️ [Therecord] https://link.is.it/TW611R
North Carolina Ports is recovering from a cyberattack after its IT system was “hacked by an outside actor or group,” requiring a switch to manual processing of operations.
🔗️ [Therecord] https://link.is.it/TW611R
Canadian Man Pleads Guilty in Snowflake Extortions
A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud...
🔗️ [Krebsonsecurity] https://link.is.it/hyF93q
A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud...
🔗️ [Krebsonsecurity] https://link.is.it/hyF93q
Hacker pleads guilty to stealing data from more than 165 Snowflake customers
Connor Moucka pled guilty to hacking and stealing data from more than 165 Snowflake customers, which net him and his accomplices more than $2.5 million in ransom payments.
🔗️ [Techcrunch] https://link.is.it/t1JvNu
Connor Moucka pled guilty to hacking and stealing data from more than 165 Snowflake customers, which net him and his accomplices more than $2.5 million in ransom payments.
🔗️ [Techcrunch] https://link.is.it/t1JvNu
Swiss government SharePoint breach compromised 200 accounts
Switzerland's federal IT office says hackers exploited vulnerabilities to breach its Microsoft SharePoint servers and compromised approximately 200 accounts.
🔗️ [Bleepingcomputer] https://link.is.it/PEIe6d
Switzerland's federal IT office says hackers exploited vulnerabilities to breach its Microsoft SharePoint servers and compromised approximately 200 accounts.
🔗️ [Bleepingcomputer] https://link.is.it/PEIe6d
New TONTOU CPU attack bypasses Spectre v2 fixes, leaks Linux password hashes
Researchers found a way to bypass recent mitigations for Spectre v2 speculative execution side-channel attacks and developed an exploit to leak secrets from Linux machines.
🔗️ [Bleepingcomputer] https://link.is.it/15PfhK
Researchers found a way to bypass recent mitigations for Spectre v2 speculative execution side-channel attacks and developed an exploit to leak secrets from Linux machines.
🔗️ [Bleepingcomputer] https://link.is.it/15PfhK
Hedge fund cyberattacks tied to BlackFile-linked UNC6671 extortion group
A recent wave of cyberattacks targeting hedge funds, private-equity firms, and other financial organizations has been linked to UNC6671, an extortion group reportedly associated with the BlackFile campaign extortion group.
🔗️ [Bleepingcomputer] https://link.is.it/8DH75j
A recent wave of cyberattacks targeting hedge funds, private-equity firms, and other financial organizations has been linked to UNC6671, an extortion group reportedly associated with the BlackFile campaign extortion group.
🔗️ [Bleepingcomputer] https://link.is.it/8DH75j
Google says hackers are calling financial firm employees to hack and extort victims
Groups of hackers are breaking into large U.S. financial firms to steal sensitive data and extort victims, Google’s security researchers report.
🔗️ [Techcrunch] https://link.is.it/AI3JGd
Groups of hackers are breaking into large U.S. financial firms to steal sensitive data and extort victims, Google’s security researchers report.
🔗️ [Techcrunch] https://link.is.it/AI3JGd
State Department says Trump raised cyber scam compound issue with Xi
President Donald Trump has talked with Chinese President Xi Jinping about Southeast Asian scam compounds, a State Department official told senators at a hearing on the transnational issue.
🔗️ [Therecord] https://link.is.it/qgrfLo
President Donald Trump has talked with Chinese President Xi Jinping about Southeast Asian scam compounds, a State Department official told senators at a hearing on the transnational issue.
🔗️ [Therecord] https://link.is.it/qgrfLo
Beyond Cyber: How CTI Teams Are Solving Converged Threat Use Cases
In this post we explain how cyber threat intelligence teams are being expected to take on physical risk, how tradecraft overlaps, and how Flashpoint bridges the gap.
🔗️ [Flashpoint] https://link.is.it/dlfGNU
In this post we explain how cyber threat intelligence teams are being expected to take on physical risk, how tradecraft overlaps, and how Flashpoint bridges the gap.
🔗️ [Flashpoint] https://link.is.it/dlfGNU
OpenAI rolls out a major ChatGPT upgrade, even if you don’t pay for it
OpenAI is rolling out a more reliable version of ChatGPT GPT-5.6 Sol for Plus and Pro users, while Free users are getting unlimited text chats with GPT-5.6 Luna.
🔗️ [Bleepingcomputer] https://link.is.it/TAZUPv
OpenAI is rolling out a more reliable version of ChatGPT GPT-5.6 Sol for Plus and Pro users, while Free users are getting unlimited text chats with GPT-5.6 Luna.
🔗️ [Bleepingcomputer] https://link.is.it/TAZUPv
ClickFix attack pushes macOS infostealer for crypto theft attacks
A Go-based malware delivered in ClickFix attacks targeting macOS users is stealing cryptocurrency assets, browser-stored passwords, Apple Keychain data, and cached credentials.
🔗️ [Bleepingcomputer] https://link.is.it/swC5nT
A Go-based malware delivered in ClickFix attacks targeting macOS users is stealing cryptocurrency assets, browser-stored passwords, Apple Keychain data, and cached credentials.
🔗️ [Bleepingcomputer] https://link.is.it/swC5nT
Building Scalable Bridges Between Systems Using The Latest Release of Our Ciaops Library
ciaops is Group-IB's open-source Python library for integrating Threat Intelligence, Digital Risk Protection, and Attack Surface Management APIs. Zero event loss, guarantee
🔗️ [Group-ib] https://link.is.it/N7gOSa
ciaops is Group-IB's open-source Python library for integrating Threat Intelligence, Digital Risk Protection, and Attack Surface Management APIs. Zero event loss, guarantee
🔗️ [Group-ib] https://link.is.it/N7gOSa
Exact Sciences - 10,869,543 breached accounts
In July 2026, Exact Sciences (now owned by Abbott Laboratories) was the target of a ShinyHunters "pay or leak" extortion campaign. The group claimed to have obtained data from the company's cancer diagnostics business, which they later published publicly. The breach contained 10.9M unique email addresses belonging to customers, patients and healthcare providers, along with names, addresses, phone numbers and health records. Abbott subsequently published a public notice advising that "some of the impacted files contain personal information and/or personal health information" and that more specific information would follow once their review of the incident was complete. For context, Exact Sciences is the maker of the Cologuard at-home colorectal cancer screening test.
🔗️ [Haveibeenpwned] https://link.is.it/9twxxg
In July 2026, Exact Sciences (now owned by Abbott Laboratories) was the target of a ShinyHunters "pay or leak" extortion campaign. The group claimed to have obtained data from the company's cancer diagnostics business, which they later published publicly. The breach contained 10.9M unique email addresses belonging to customers, patients and healthcare providers, along with names, addresses, phone numbers and health records. Abbott subsequently published a public notice advising that "some of the impacted files contain personal information and/or personal health information" and that more specific information would follow once their review of the incident was complete. For context, Exact Sciences is the maker of the Cologuard at-home colorectal cancer screening test.
🔗️ [Haveibeenpwned] https://link.is.it/9twxxg
The Evolution of Phishing: A Brief History
Learn how phishing attacks evolved from early online scams to AI-powered threats, key milestones, common techniques, and practical ways to reduce risk.
🔗️ [Bfore] https://link.is.it/xRbr7b
Learn how phishing attacks evolved from early online scams to AI-powered threats, key milestones, common techniques, and practical ways to reduce risk.
🔗️ [Bfore] https://link.is.it/xRbr7b
Lo “shall” del GDPR: il dovere di protezione che obbliga a progettare il futuro
Dietro il verbo "shall” del GDPR c'è l'idea antica del dovere come debito. Un debito di protezione che la norma impone al titolare senza prescrivere una soluzione predefinita: spetta a lui tradurre principi e risultati obbligatori in misure adeguate, assumendosi la responsabilità di progettare il futuro
🔗️ [Cybersecurity360] https://link.is.it/KKSzA6
Dietro il verbo "shall” del GDPR c'è l'idea antica del dovere come debito. Un debito di protezione che la norma impone al titolare senza prescrivere una soluzione predefinita: spetta a lui tradurre principi e risultati obbligatori in misure adeguate, assumendosi la responsabilità di progettare il futuro
🔗️ [Cybersecurity360] https://link.is.it/KKSzA6
Updoc Data Breach Exposes Patient Contact Information Following Third-Party Security Incident
The Updoc data breach has raised fresh concerns about cybersecurity in Australia's healthcare sector after the telehealth provider confirmed that an unauthorized third party may
🔗️ [Thecyberexpress] https://link.is.it/W9fHAV
The Updoc data breach has raised fresh concerns about cybersecurity in Australia's healthcare sector after the telehealth provider confirmed that an unauthorized third party may
🔗️ [Thecyberexpress] https://link.is.it/W9fHAV