Unlimited Technology Systems breach impacts 3.8 million people
Healthcare software company Unlimited Technology Systems reported that more than 3.8 million people were impacted by a data breach incident that occurred in October 2025.
🔗️ [Bleepingcomputer] https://link.is.it/yPrZRQ
Healthcare software company Unlimited Technology Systems reported that more than 3.8 million people were impacted by a data breach incident that occurred in October 2025.
🔗️ [Bleepingcomputer] https://link.is.it/yPrZRQ
XSS2Shell: nuova vulnerabilità nel core di WordPress può portare all’esecuzione di codice remoto
La compromissione completa non avviene attraverso la sola XSS. La catena dimostrata richiede che un amministratore WordPress già autenticato interagisca con una pagina predisposta dall'attaccante. In tale scenario, l'attaccante può sfruttare la sessione dell'amministratore fino ad ottenere una Application Password e, successivamente, utilizzarne i privilegi per arrivare al caricamento di codice PHP sul sistema.
Il CERT-AGID invita le PA a verificare la versione effettivamente installata e ad applicare tempestivamente gli aggiornamenti di sicurezza disponibili.
🔗️ [Cert-agid] https://link.is.it/i80ZRF
La compromissione completa non avviene attraverso la sola XSS. La catena dimostrata richiede che un amministratore WordPress già autenticato interagisca con una pagina predisposta dall'attaccante. In tale scenario, l'attaccante può sfruttare la sessione dell'amministratore fino ad ottenere una Application Password e, successivamente, utilizzarne i privilegi per arrivare al caricamento di codice PHP sul sistema.
Il CERT-AGID invita le PA a verificare la versione effettivamente installata e ad applicare tempestivamente gli aggiornamenti di sicurezza disponibili.
🔗️ [Cert-agid] https://link.is.it/i80ZRF
Brinks Home - 732,162 breached accounts
In July 2026, Brinks Home was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they alleged was taken from the company, including 732k unique email addresses and other personal information relating to leads, customers and Brinks staff such as name, phone numbers and physical addresses. The data also included purchases from Brinks along with partial credit card data (last 4 digits, card type and expiry). In Brinks' disclosure notice, they acknowledged the incident and risk of disclosure, and advised that they would notify impacted parties "consistent with applicable law".
🔗️ [Haveibeenpwned] https://link.is.it/ypKZVD
In July 2026, Brinks Home was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they alleged was taken from the company, including 732k unique email addresses and other personal information relating to leads, customers and Brinks staff such as name, phone numbers and physical addresses. The data also included purchases from Brinks along with partial credit card data (last 4 digits, card type and expiry). In Brinks' disclosure notice, they acknowledged the incident and risk of disclosure, and advised that they would notify impacted parties "consistent with applicable law".
🔗️ [Haveibeenpwned] https://link.is.it/ypKZVD
Hackers breach TrueConf to trojanize client installers with backdoors
The Head Mare hacktivist group has been exploiting vulnerabilities in unpatched TrueConf video conferencing servers to replace client installers with malicious versions that deliver backdoors.
🔗️ [Bleepingcomputer] https://link.is.it/xyiG7a
The Head Mare hacktivist group has been exploiting vulnerabilities in unpatched TrueConf video conferencing servers to replace client installers with malicious versions that deliver backdoors.
🔗️ [Bleepingcomputer] https://link.is.it/xyiG7a
Google’s top hacker hunter explains why hacking groups get codenames
Google recently changed how it refers and assigns names to hacking groups. TechCrunch spoke with one of the world’s foremost experts on tracking hackers to understand why companies give hackers codenames.
🔗️ [Techcrunch] https://link.is.it/jEjNvY
Google recently changed how it refers and assigns names to hacking groups. TechCrunch spoke with one of the world’s foremost experts on tracking hackers to understand why companies give hackers codenames.
🔗️ [Techcrunch] https://link.is.it/jEjNvY
Alcon - 218,395 breached accounts
In August 2026, the Alcon eye care company was named in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data allegedly sourced from Alcon containing 218k unique email addresses along with other largely corporate B2B contact fields, including name, phone number and physical address.
🔗️ [Haveibeenpwned] https://link.is.it/Gr2r2Z
In August 2026, the Alcon eye care company was named in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data allegedly sourced from Alcon containing 218k unique email addresses along with other largely corporate B2B contact fields, including name, phone number and physical address.
🔗️ [Haveibeenpwned] https://link.is.it/Gr2r2Z
Hotel nel mirino: perché il settore alberghiero è un cyber-bersaglio facile
Dal furto di documenti d'identità nei check-in italiani alle campagne contro gli hotel di Milano-Cortina, fino alla violazione di Booking.com: tre episodi diversi raccontano la stessa vulnerabilità strutturale, che le regole attuali intercettano solo in parte.
🔗️ [Cybersecurity360] https://link.is.it/afjHik
Dal furto di documenti d'identità nei check-in italiani alle campagne contro gli hotel di Milano-Cortina, fino alla violazione di Booking.com: tre episodi diversi raccontano la stessa vulnerabilità strutturale, che le regole attuali intercettano solo in parte.
🔗️ [Cybersecurity360] https://link.is.it/afjHik
👍1
Levi Strauss Hit by Cyberattack, Corporate Files Accessed
Levi Strauss cyberattack has exposed certain corporate information after an unauthorized third party gained access to company files through compromised
🔗️ [Thecyberexpress] https://link.is.it/OYrt4S
Levi Strauss cyberattack has exposed certain corporate information after an unauthorized third party gained access to company files through compromised
🔗️ [Thecyberexpress] https://link.is.it/OYrt4S
Ransomware Kingpin Gets 16 Years for Global Cyberattacks
A Ransom Cartel ransomware leader has been sentenced to 16 years in prison after being convicted of conspiracy to commit
🔗️ [Thecyberexpress] https://link.is.it/S8fR4J
A Ransom Cartel ransomware leader has been sentenced to 16 years in prison after being convicted of conspiracy to commit
🔗️ [Thecyberexpress] https://link.is.it/S8fR4J
AI Agent Exploits Gym System Vulnerability, Cancels Waitlist Booking in Australia
An AI agent assigned to book a gym class in Australia reportedly discovered a gym system vulnerability, used it to
🔗️ [Thecyberexpress] https://link.is.it/xxhvgb
An AI agent assigned to book a gym class in Australia reportedly discovered a gym system vulnerability, used it to
🔗️ [Thecyberexpress] https://link.is.it/xxhvgb
Gestione delle password aziendali: gli standard per azzerare i rischi di intrusione
NordPass offre servizi per la gestione delle password aziendali e dire basta agli accessi abusivi: per l'estate è previsto lo sconto del 50%
🔗️ [Cybersecurity360] https://link.is.it/WUaRfQ
NordPass offre servizi per la gestione delle password aziendali e dire basta agli accessi abusivi: per l'estate è previsto lo sconto del 50%
🔗️ [Cybersecurity360] https://link.is.it/WUaRfQ
Suisun City Declares Emergency After Cyberattack Disrupts Systems
The Suisun City emergency declared by local officials followed a cyberattack that forced the Northern California municipality to shut down its information
🔗️ [Thecyberexpress] https://link.is.it/pGJQUl
The Suisun City emergency declared by local officials followed a cyberattack that forced the Northern California municipality to shut down its information
🔗️ [Thecyberexpress] https://link.is.it/pGJQUl
NIS2 e gestione incidenti: dall’impatto operativo al costo del fermo e alle decisioni di business
La gestione degli incidenti non può essere considerata solo una procedura tecnica di risposta. In ottica NIS2, deve diventare un processo decisionale capace di collegare evento cyber, attività impattate, servizi IT coinvolti, fornitori, continuità operativa, comunicazioni e costo del fermo
🔗️ [Cybersecurity360] https://link.is.it/GIX2yO
La gestione degli incidenti non può essere considerata solo una procedura tecnica di risposta. In ottica NIS2, deve diventare un processo decisionale capace di collegare evento cyber, attività impattate, servizi IT coinvolti, fornitori, continuità operativa, comunicazioni e costo del fermo
🔗️ [Cybersecurity360] https://link.is.it/GIX2yO
Cifratura dei dati e reti VPN: le architetture avanzate per la protezione dei flussi
Per chi cerca la massima sicurezza per la sua VPN, ProntoVPN ha un'offerta dedicata: a 2,99 euro al mese sono tanti i servizi da scoprire.
🔗️ [Cybersecurity360] https://link.is.it/dlRwTK
Per chi cerca la massima sicurezza per la sua VPN, ProntoVPN ha un'offerta dedicata: a 2,99 euro al mese sono tanti i servizi da scoprire.
🔗️ [Cybersecurity360] https://link.is.it/dlRwTK
ATED // Cyber Security Day 2026
L’associazione ATED di Lugano mi ha invitato anche quest’anno all’evento Cyber Security Day. È la mia seconda partecipazione (nella pagina dedicata alle conferenze trovate i detta…
🔗️ [Roccosicilia] https://link.is.it/oOqfA7
L’associazione ATED di Lugano mi ha invitato anche quest’anno all’evento Cyber Security Day. È la mia seconda partecipazione (nella pagina dedicata alle conferenze trovate i detta…
🔗️ [Roccosicilia] https://link.is.it/oOqfA7
InPost, mancano dati per la consegna. Ma è phishing!
Nella giornata odierna il team anti-frode D3Lab ha individuato un sito di phishing riproducente la grafica di InPost, note servizio di consegna basato su locker sparsi su tutto il territorio nazionale.
Pagina di phishing principale
Comunicando l'impossibilità di effettuare una consegna
🔗️ [D3lab] https://link.is.it/dtmWPh
Nella giornata odierna il team anti-frode D3Lab ha individuato un sito di phishing riproducente la grafica di InPost, note servizio di consegna basato su locker sparsi su tutto il territorio nazionale.
Pagina di phishing principale
Comunicando l'impossibilità di effettuare una consegna
🔗️ [D3lab] https://link.is.it/dtmWPh
IT threat evolution in Q2 2026. Mobile statistics
This report contains mobile threat statistics for Q2 2026, along with noteworthy discoveries and quarterly trends: the Anatsa banker and a transition to droppers.
🔗️ [Securelist] https://link.is.it/IJQsSb
This report contains mobile threat statistics for Q2 2026, along with noteworthy discoveries and quarterly trends: the Anatsa banker and a transition to droppers.
🔗️ [Securelist] https://link.is.it/IJQsSb
IT threat evolution in Q2 2026. Non-mobile statistics
The report presents key trends and statistics on malware that targeted personal computers running Windows and macOS, as well as internet of things (IoT) devices, during Q2 2026.
🔗️ [Securelist] https://link.is.it/4RL6FB
The report presents key trends and statistics on malware that targeted personal computers running Windows and macOS, as well as internet of things (IoT) devices, during Q2 2026.
🔗️ [Securelist] https://link.is.it/4RL6FB
Critical Progress LoadMaster flaw now actively exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity Progress Kemp LoadMaster command injection vulnerability.
🔗️ [Bleepingcomputer] https://link.is.it/XjqFSn
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity Progress Kemp LoadMaster command injection vulnerability.
🔗️ [Bleepingcomputer] https://link.is.it/XjqFSn
Smile, You’re on Camera. Part 2: Hiring Lazarus APT’s IT Workers in a Fake DeFi Startup
See what happened after suspected Lazarus-linked IT workers were hired, from forged identities and AI tools to remote access and supporting infrastructure.
🔗️ [Any] https://link.is.it/L5U6rH
See what happened after suspected Lazarus-linked IT workers were hired, from forged identities and AI tools to remote access and supporting infrastructure.
🔗️ [Any] https://link.is.it/L5U6rH
New Zealand sanctions Russian hackers, propaganda groups over Ukraine war
New Zealand announced new sanctions on Russian hackers, technology companies and Kremlin-linked organizations over their roles in supporting Moscow’s war against Ukraine.
🔗️ [Therecord] https://link.is.it/ngrYNd
New Zealand announced new sanctions on Russian hackers, technology companies and Kremlin-linked organizations over their roles in supporting Moscow’s war against Ukraine.
🔗️ [Therecord] https://link.is.it/ngrYNd