Lazarus hackers exploited Windows zero-day to target defense firms
North Korean hackers have been exploiting a Windows zero-day vulnerability (CVE-2026-68820) to target defense-sector companies as part of the Operation Dream Job campaign.
🔗️ [Bleepingcomputer] https://link.is.it/NpjibN
North Korean hackers have been exploiting a Windows zero-day vulnerability (CVE-2026-68820) to target defense-sector companies as part of the Operation Dream Job campaign.
🔗️ [Bleepingcomputer] https://link.is.it/NpjibN
Plug and Pwn attack uses fake USB devices for Windows SYSTEM access
Security researchers have disclosed new "Plug and Pwn" attacks that abuse the Windows Plug and Play feature to trigger Windows into installing vulnerable or insecure vendor software and gain SYSTEM privileges.
🔗️ [Bleepingcomputer] https://link.is.it/ViMMvl
Security researchers have disclosed new "Plug and Pwn" attacks that abuse the Windows Plug and Play feature to trigger Windows into installing vulnerable or insecure vendor software and gain SYSTEM privileges.
🔗️ [Bleepingcomputer] https://link.is.it/ViMMvl
FBI: Hackers using social engineering to breach accounts and steal explicit content
Leaked passwords, social engineering and spoofed social media sites are among the tools hackers are using to gather individuals' private content and sell it online, the FBI said.
🔗️ [Therecord] https://link.is.it/OygJtS
Leaked passwords, social engineering and spoofed social media sites are among the tools hackers are using to gather individuals' private content and sell it online, the FBI said.
🔗️ [Therecord] https://link.is.it/OygJtS
Hundreds of fake Chrome VPN extensions route traffic through a proxy
More than 737 browser extensions published on the Chrome Web Store impersonated well-known VPN and proxy services while routing users' traffic through SOCKS5 proxies operated by a single provider.
🔗️ [Bleepingcomputer] https://link.is.it/zcqjq1
More than 737 browser extensions published on the Chrome Web Store impersonated well-known VPN and proxy services while routing users' traffic through SOCKS5 proxies operated by a single provider.
🔗️ [Bleepingcomputer] https://link.is.it/zcqjq1
Hackers exploit critical Adobe Commerce flaw to hijack customer accounts
Attempts to exploit a critical vulnerability (CVE-2026-71362) in Adobe's Commerce and Magento e-commerce platforms have been detected, potentially allowing attackers to hijack customer accounts.
🔗️ [Bleepingcomputer] https://link.is.it/JJqIH9
Attempts to exploit a critical vulnerability (CVE-2026-71362) in Adobe's Commerce and Magento e-commerce platforms have been detected, potentially allowing attackers to hijack customer accounts.
🔗️ [Bleepingcomputer] https://link.is.it/JJqIH9
Android malware combo takes out loans and relays victims' credit cards
A new Android NFC relay malware called WindRelay is being used alongside the SpyNote remote administration tool (RAT) to steal live card data and send it to attackers in real time.
🔗️ [Bleepingcomputer] https://link.is.it/mn1C80
A new Android NFC relay malware called WindRelay is being used alongside the SpyNote remote administration tool (RAT) to steal live card data and send it to attackers in real time.
🔗️ [Bleepingcomputer] https://link.is.it/mn1C80
"City-Forum" data-theft attacks target Salesforce, ServiceNow portals
An ongoing data theft campaign uses custom tools to steal data exposed to anonymous users through Salesforce Experience Cloud and ServiceNow customer portals.
🔗️ [Bleepingcomputer] https://link.is.it/DF7fVL
An ongoing data theft campaign uses custom tools to steal data exposed to anonymous users through Salesforce Experience Cloud and ServiceNow customer portals.
🔗️ [Bleepingcomputer] https://link.is.it/DF7fVL
Hackers Target Social Media Accounts to Steal Explicit Content, FBI Warns
The FBI is warning the public about sexual exploitation actors illegally accessing social media and personal accounts to steal explicit
🔗️ [Thecyberexpress] https://link.is.it/6377g2
The FBI is warning the public about sexual exploitation actors illegally accessing social media and personal accounts to steal explicit
🔗️ [Thecyberexpress] https://link.is.it/6377g2
NIST Moves to Modernize NVD as AI Reshapes Vulnerability Management
The National Institute of Standards and Technology (NIST) is seeking industry and government input on how to modernize the National
🔗️ [Thecyberexpress] https://link.is.it/rQ0KQb
The National Institute of Standards and Technology (NIST) is seeking industry and government input on how to modernize the National
🔗️ [Thecyberexpress] https://link.is.it/rQ0KQb
Internal Auditing e AI: la Cognitive Governance protegge l’autonomia del giudizio
Quando l'AI entra nei processi decisionali, la sfida non è solo governare gli algoritmi, ma preservare autonomia, capacità critica e responsabilità. Cognitive Governance e Decision Assurance offrono all'Internal Audit una nuova chiave per valutare l'affidabilità del sistema decisionale
🔗️ [Cybersecurity360] https://link.is.it/8HEOWs
Quando l'AI entra nei processi decisionali, la sfida non è solo governare gli algoritmi, ma preservare autonomia, capacità critica e responsabilità. Cognitive Governance e Decision Assurance offrono all'Internal Audit una nuova chiave per valutare l'affidabilità del sistema decisionale
🔗️ [Cybersecurity360] https://link.is.it/8HEOWs
Agenti AI contro Taiwan: la guerra cyber entra nell’era degli attacchi autonomi
Gli Agenti AI hanno attaccato Taiwan, mettendo in luce come l’intelligenza artificiale stia trasformando la guerra cibernetica. Ecco come l'attacco autonomo end-to-end ha operato in parallelo, adattando ricognizione e attacco in funzione di ciò che trovavano. Come mitigare il rischio
🔗️ [Cybersecurity360] https://link.is.it/Bkmg8b
Gli Agenti AI hanno attaccato Taiwan, mettendo in luce come l’intelligenza artificiale stia trasformando la guerra cibernetica. Ecco come l'attacco autonomo end-to-end ha operato in parallelo, adattando ricognizione e attacco in funzione di ciò che trovavano. Come mitigare il rischio
🔗️ [Cybersecurity360] https://link.is.it/Bkmg8b
CEVA Logistics Cyberattack Disrupts European Warehouses, Exposes Customer Data
A CEVA Logistics cyberattack disrupted parts of the company's European operations on July 29, halting shipments at eight affected warehouses
🔗️ [Thecyberexpress] https://link.is.it/jyYhfq
A CEVA Logistics cyberattack disrupted parts of the company's European operations on July 29, halting shipments at eight affected warehouses
🔗️ [Thecyberexpress] https://link.is.it/jyYhfq
One Adversary: The Fifteen-Minute Problem
More than a quarter of stolen funds are gone within fifteen minutes of the fraudulent transfer. That number ends the case-file era — and points to where the time can be won back.
🔗️ [Group-ib] https://link.is.it/TzmHIS
More than a quarter of stolen funds are gone within fifteen minutes of the fraudulent transfer. That number ends the case-file era — and points to where the time can be won back.
🔗️ [Group-ib] https://link.is.it/TzmHIS
July 2026 Cyber Attacks Statistics
July 2026 saw 188 confirmed cyber attacks across 69 countries, with financially motivated Cyber Crime driving three in four incidents. Malware remained attackers' weapon of choice, exposed public-facing applications were the most common way in, and Information & Communication infrastructure absorbed the heaviest share of targeting. Here's the full breakdown of who attacked, how, and where.
🔗️ [Hackmageddon] https://link.is.it/JPNRll
July 2026 saw 188 confirmed cyber attacks across 69 countries, with financially motivated Cyber Crime driving three in four incidents. Malware remained attackers' weapon of choice, exposed public-facing applications were the most common way in, and Information & Communication infrastructure absorbed the heaviest share of targeting. Here's the full breakdown of who attacked, how, and where.
🔗️ [Hackmageddon] https://link.is.it/JPNRll
July 2026 Cyber Attacks Statistics Infographic
One page, every number that matters. This infographic distills July 2026's 188 confirmed cyber attacks into a fast visual read — who's behind them, how they broke in, what they targeted, and where in the world it happened.
🔗️ [Hackmageddon] https://link.is.it/6mBpEt
One page, every number that matters. This infographic distills July 2026's 188 confirmed cyber attacks into a fast visual read — who's behind them, how they broke in, what they targeted, and where in the world it happened.
🔗️ [Hackmageddon] https://link.is.it/6mBpEt
Identificazione biometrica in tempo reale: la sfida è impedire che l’eccezione diventi la regola
L'Italia apre all'uso dell'identificazione biometrica remota in tempo reale da parte delle forze di polizia nei casi ammessi dall'AI Act. Autorizzazioni, controllo umano e valutazioni d'impatto dovranno trasformare le garanzie normative in presidi effettivi, prevenendo derive verso forme di sorveglianza biometrica generalizzata
🔗️ [Cybersecurity360] https://link.is.it/4Fjs2Y
L'Italia apre all'uso dell'identificazione biometrica remota in tempo reale da parte delle forze di polizia nei casi ammessi dall'AI Act. Autorizzazioni, controllo umano e valutazioni d'impatto dovranno trasformare le garanzie normative in presidi effettivi, prevenendo derive verso forme di sorveglianza biometrica generalizzata
🔗️ [Cybersecurity360] https://link.is.it/4Fjs2Y
👍1
Smishing INPS, l’AI entra nella catena d’attacco per rendere la truffa più credibile
Il CERT-AgID ha scoperto scopre una campagna di smishing a tema INPS che integra l'intelligenza artificiale per analizzare i documenti caricati dalle vittime. L'AI filtra i dati sottratti e rafforza la credibilità della falsa procedura: un'evoluzione che rende phishing e furto d'identità più efficienti e insidiosi
🔗️ [Cybersecurity360] https://link.is.it/KRg1rl
Il CERT-AgID ha scoperto scopre una campagna di smishing a tema INPS che integra l'intelligenza artificiale per analizzare i documenti caricati dalle vittime. L'AI filtra i dati sottratti e rafforza la credibilità della falsa procedura: un'evoluzione che rende phishing e furto d'identità più efficienti e insidiosi
🔗️ [Cybersecurity360] https://link.is.it/KRg1rl
Dissecting the JWR phishing framework
Cisco Talos recently identified an undocumented phishing framework, internally branded "JWR" by its developer, built to convincingly impersonate checkout and login pages across major payment and shopping platforms.
🔗️ [Talosintelligence] https://link.is.it/Dzrkqr
Cisco Talos recently identified an undocumented phishing framework, internally branded "JWR" by its developer, built to convincingly impersonate checkout and login pages across major payment and shopping platforms.
🔗️ [Talosintelligence] https://link.is.it/Dzrkqr
Trasparenza VPN e giurisdizione: la sfida di Proton tra codice Open Source e audit pubblici
Proton VPN con codice Open Source, audit pubblici e sconto del 70% propone un'offerta interessante: ecco come attivarla e i requisiti.
🔗️ [Cybersecurity360] https://link.is.it/vG7wlZ
Proton VPN con codice Open Source, audit pubblici e sconto del 70% propone un'offerta interessante: ecco come attivarla e i requisiti.
🔗️ [Cybersecurity360] https://link.is.it/vG7wlZ
RingCentral - 1,596,490 breached accounts
In July 2026, the cloud-based business communications platform RingCentral was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they claimed was obtained from the platform, which included 1.6M unique email addresses along with names, physical addresses and phone numbers. In their disclosure notice, RingCentral advised that the incident affected "a limited portion of RingCentral customers" and that it was communicating directly with those affected.
🔗️ [Haveibeenpwned] https://link.is.it/Py1Iur
In July 2026, the cloud-based business communications platform RingCentral was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they claimed was obtained from the platform, which included 1.6M unique email addresses along with names, physical addresses and phone numbers. In their disclosure notice, RingCentral advised that the incident affected "a limited portion of RingCentral customers" and that it was communicating directly with those affected.
🔗️ [Haveibeenpwned] https://link.is.it/Py1Iur
FIRST e incident response: la resilienza cyber si costruisce facendo rete
Contro minacce globali e supply chain interconnesse, nessuna organizzazione può gestire gli incidenti in isolamento. FIRST mette in rete oltre 800 team di incident response nel mondo, creando un ecosistema di fiducia e condivisione. Il percorso del CERT della Regione Campania mostra come funziona anche in Italia
🔗️ [Cybersecurity360] https://link.is.it/enDW1o
Contro minacce globali e supply chain interconnesse, nessuna organizzazione può gestire gli incidenti in isolamento. FIRST mette in rete oltre 800 team di incident response nel mondo, creando un ecosistema di fiducia e condivisione. Il percorso del CERT della Regione Campania mostra come funziona anche in Italia
🔗️ [Cybersecurity360] https://link.is.it/enDW1o