US and South Korea warn of Gunra ransomware targeting govt agencies
U.S. federal agencies and South Korea's National Policy Agency warned government and critical infrastructure organizations worldwide to secure their systems against Gunra ransomware attacks.
🔗️ [Bleepingcomputer] https://link.is.it/jmclD6
U.S. federal agencies and South Korea's National Policy Agency warned government and critical infrastructure organizations worldwide to secure their systems against Gunra ransomware attacks.
🔗️ [Bleepingcomputer] https://link.is.it/jmclD6
Network Security Policy Management (NSPM): colmare il gap tra normativa UE e adozione in azienda
Normative come NIS2 e DORA stanno innalzando gli standard in termini di resilienza, responsabilità e governance operativa, imponendo alle organizzazioni di dimostrare l'esistenza dei controlli di sicurezza e l'efficacia nel tempo. Ecco cos'è il Network Security Policy Management, l'anello mancante fra la normativa europea e l'implementazione reale
🔗️ [Cybersecurity360] https://link.is.it/nVZtcg
Normative come NIS2 e DORA stanno innalzando gli standard in termini di resilienza, responsabilità e governance operativa, imponendo alle organizzazioni di dimostrare l'esistenza dei controlli di sicurezza e l'efficacia nel tempo. Ecco cos'è il Network Security Policy Management, l'anello mancante fra la normativa europea e l'implementazione reale
🔗️ [Cybersecurity360] https://link.is.it/nVZtcg
Cisco warns of high-severity ClamAV flaws with public exploits
Cisco warned of two high-severity vulnerabilities affecting the Secure Endpoint Connector that allow threat actors to crash the ClamAV scanning process in denial-of-service (DoS) attacks.
🔗️ [Bleepingcomputer] https://link.is.it/nQJg1P
Cisco warned of two high-severity vulnerabilities affecting the Secure Endpoint Connector that allow threat actors to crash the ClamAV scanning process in denial-of-service (DoS) attacks.
🔗️ [Bleepingcomputer] https://link.is.it/nQJg1P
Gunra Ransomware Builds a New Attack Network Through RaaS
Gunra ransomware has expanded its operations through a structured ransomware-as-a-service (RaaS) affiliate program, prompting the FBI, CISA and other agencies
🔗️ [Thecyberexpress] https://link.is.it/GqZRhM
Gunra ransomware has expanded its operations through a structured ransomware-as-a-service (RaaS) affiliate program, prompting the FBI, CISA and other agencies
🔗️ [Thecyberexpress] https://link.is.it/GqZRhM
Kids’ online safety bill faces dim prospects of passage this session despite progress
Proponents of the Kids Online Safety Act are cheering recent progress but acknowledge a long road ahead for legislation that, despite mounting political pressure, may be difficult to pass this session.
🔗️ [Therecord] https://link.is.it/ESrEzh
Proponents of the Kids Online Safety Act are cheering recent progress but acknowledge a long road ahead for legislation that, despite mounting political pressure, may be difficult to pass this session.
🔗️ [Therecord] https://link.is.it/ESrEzh
CISA: Microsoft SharePoint flaw now exploited in ransomware attacks
CISA confirmed today that ransomware gangs have begun abusing a high-severity Microsoft SharePoint remote code execution vulnerability, which has been flagged as actively exploited since early July.
🔗️ [Bleepingcomputer] https://link.is.it/Lw0pHw
CISA confirmed today that ransomware gangs have begun abusing a high-severity Microsoft SharePoint remote code execution vulnerability, which has been flagged as actively exploited since early July.
🔗️ [Bleepingcomputer] https://link.is.it/Lw0pHw
CyberSec di base: pubblicazione dei servizi
Intro Praticamente tutte le reti, salvo alcune eccezioni, devono esporre qualche servizio verso internet. Se riprendiamo il nostro schema “brutto” possiamo riportare visivamente un esempio molto se…
🔗️ [Roccosicilia] https://link.is.it/SMDDt8
Intro Praticamente tutte le reti, salvo alcune eccezioni, devono esporre qualche servizio verso internet. Se riprendiamo il nostro schema “brutto” possiamo riportare visivamente un esempio molto se…
🔗️ [Roccosicilia] https://link.is.it/SMDDt8
Smishing a tema INPS: implementata verifica documentale tramite intelligenza artificiale
Nelle ultime giornate il CERT-AGID ha osservato un consistente incremento delle campagne di smishing che sfruttano il nome, il logo e la grafica di INPS. Ciò che cambia, in questa nuova ondata, è l'introduzione di un ulteriore livello di controllo sui file caricati dalla vittima, basato su un modello di intelligenza artificiale.
🔗️ [Cert-agid] https://link.is.it/Zo8CjB
Nelle ultime giornate il CERT-AGID ha osservato un consistente incremento delle campagne di smishing che sfruttano il nome, il logo e la grafica di INPS. Ciò che cambia, in questa nuova ondata, è l'introduzione di un ulteriore livello di controllo sui file caricati dalla vittima, basato su un modello di intelligenza artificiale.
🔗️ [Cert-agid] https://link.is.it/Zo8CjB
Cost of a Data Breach 2026: l’AI fa esplodere costi e velocità degli attacchi
Il report IBM 2026 fotografa una cyber security a due velocità: violazioni a quota 4,99 milioni di dollari (3,55 milioni in Italia), attacchi AI-driven +56% e modelli di AI aziendali sotto attacco. Ecco i numeri chiave e le contromisure per i team di sicurezza e i CISO
🔗️ [Cybersecurity360] https://link.is.it/Ga716L
Il report IBM 2026 fotografa una cyber security a due velocità: violazioni a quota 4,99 milioni di dollari (3,55 milioni in Italia), attacchi AI-driven +56% e modelli di AI aziendali sotto attacco. Ecco i numeri chiave e le contromisure per i team di sicurezza e i CISO
🔗️ [Cybersecurity360] https://link.is.it/Ga716L
Attacco hacker a Levi’s: il dipendente non è l’anello debole, va ripensata la sicurezza
Tre dipendenti colpiti con tecniche di social engineering sono bastati agli attaccanti per accedere ai sistemi Levi's ed esfiltrare dati aziendali. Il caso dimostra perché la formazione non basta: la sicurezza deve partire dall'errore umano e impedirgli di trasformarsi in un incidente
🔗️ [Cybersecurity360] https://link.is.it/8l4uSW
Tre dipendenti colpiti con tecniche di social engineering sono bastati agli attaccanti per accedere ai sistemi Levi's ed esfiltrare dati aziendali. Il caso dimostra perché la formazione non basta: la sicurezza deve partire dall'errore umano e impedirgli di trasformarsi in un incidente
🔗️ [Cybersecurity360] https://link.is.it/8l4uSW
Local governments in four states dealing with cyberattacks that have shut down services
Municipalities in California, Oklahoma, Wisconsin and Texas are all recovering from disruptive cyberattacks that have affected government operations.
🔗️ [Therecord] https://link.is.it/c0BaOZ
Municipalities in California, Oklahoma, Wisconsin and Texas are all recovering from disruptive cyberattacks that have affected government operations.
🔗️ [Therecord] https://link.is.it/c0BaOZ
Vague Task, Total Access: When AI Delegation Becomes a Security Risk
AI agents can improvise beyond the intended scope of a task when they are given broad access to enterprise systems and data. Token Security explains why organizations need to define agent intent and continuously enforce permissions around what each agent was actually created to do.
🔗️ [Bleepingcomputer] https://link.is.it/YgAGa3
AI agents can improvise beyond the intended scope of a task when they are given broad access to enterprise systems and data. Token Security explains why organizations need to define agent intent and continuously enforce permissions around what each agent was actually created to do.
🔗️ [Bleepingcomputer] https://link.is.it/YgAGa3
Mozilla updates GPG signing key for Firefox releases after exposure
Mozilla announced today that it updated the GPG key used to sign Firefox and Thunderbird releases after it was accidentally exposed on GitHub.
🔗️ [Bleepingcomputer] https://link.is.it/UP2hJr
Mozilla announced today that it updated the GPG key used to sign Firefox and Thunderbird releases after it was accidentally exposed on GitHub.
🔗️ [Bleepingcomputer] https://link.is.it/UP2hJr
DDoS attacks over 1 Tbps surged fivefold in the second quarter
Cloudflare says it mitigated more than 800 network-layer distributed denial-of-service (DDoS) attacks exceeding 1 Tbps in the second quarter of the year.
🔗️ [Bleepingcomputer] https://link.is.it/2fRwIq
Cloudflare says it mitigated more than 800 network-layer distributed denial-of-service (DDoS) attacks exceeding 1 Tbps in the second quarter of the year.
🔗️ [Bleepingcomputer] https://link.is.it/2fRwIq
Cyberattack on logistics giant Ceva hits retailers and Steam customers across Europe
Operations at eight European warehouses belonging to France's CEVA Logistics have reportedly been disrupted by a cyberattack, and several other companies are feeling the effects.
🔗️ [Therecord] https://link.is.it/DKifov
Operations at eight European warehouses belonging to France's CEVA Logistics have reportedly been disrupted by a cyberattack, and several other companies are feeling the effects.
🔗️ [Therecord] https://link.is.it/DKifov
Wesco confirms security incident after ExfilSquad claims data theft
Global supply chain and distribution giant Wesco has confirmed in a statement for BleepingComputer that it is investigating a cybersecurity incident.
🔗️ [Bleepingcomputer] https://link.is.it/zSAWnt
Global supply chain and distribution giant Wesco has confirmed in a statement for BleepingComputer that it is investigating a cybersecurity incident.
🔗️ [Bleepingcomputer] https://link.is.it/zSAWnt
Delta investigating after someone set up fake Wi-Fi network mid-flight
The Delta flight crew switched off the aircraft's legitimate Wi-Fi network for around 30 minutes due to the incident, according to a spokesperson.
🔗️ [Techcrunch] https://link.is.it/dQ1UVw
The Delta flight crew switched off the aircraft's legitimate Wi-Fi network for around 30 minutes due to the incident, according to a spokesperson.
🔗️ [Techcrunch] https://link.is.it/dQ1UVw
Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days
Today is Microsoft's August 2026 Patch Tuesday, and with it comes security updates for a massive 400 flaws, including one actively exploited and two publicly disclosed zero-day vulnerabilities.
🔗️ [Bleepingcomputer] https://link.is.it/JtLumj
Today is Microsoft's August 2026 Patch Tuesday, and with it comes security updates for a massive 400 flaws, including one actively exploited and two publicly disclosed zero-day vulnerabilities.
🔗️ [Bleepingcomputer] https://link.is.it/JtLumj
How to Create a Secure WordPress Staging Site: Beginner’s Guide
Learn how to create and secure a WordPress staging site, safely test updates and changes, and deploy them to your live website with less risk.
🔗️ [Sucuri] https://link.is.it/nZS1B6
Learn how to create and secure a WordPress staging site, safely test updates and changes, and deploy them to your live website with less risk.
🔗️ [Sucuri] https://link.is.it/nZS1B6
Windows 11 KB5121003 & KB5120240 cumulative updates released
Microsoft has released Windows 11 KB5121003 and KB5120240 cumulative updates for versions 25H2/24H2 and 23H2 to fix security vulnerabilities, bugs, and add new features.
🔗️ [Bleepingcomputer] https://link.is.it/90kQ1A
Microsoft has released Windows 11 KB5121003 and KB5120240 cumulative updates for versions 25H2/24H2 and 23H2 to fix security vulnerabilities, bugs, and add new features.
🔗️ [Bleepingcomputer] https://link.is.it/90kQ1A
Ransomware group hijacks hospital system’s Facebook page amid ongoing cyberattack fallout
The hackers claimed to have exfiltrated 6 terabytes of data, including highly sensitive health information like records related to sexual assault, mental health, abortions and sexual harassment incidents.
🔗️ [Therecord] https://link.is.it/gJyavI
The hackers claimed to have exfiltrated 6 terabytes of data, including highly sensitive health information like records related to sexual assault, mental health, abortions and sexual harassment incidents.
🔗️ [Therecord] https://link.is.it/gJyavI