678,000 People Hit in French Tax Authority Data Breach
A DGFiP cyberattack has exposed sensitive tax and cadastral information after attackers allegedly used stolen credentials to access systems belonging
🔗️ [Thecyberexpress] https://link.is.it/r1Stdy
A DGFiP cyberattack has exposed sensitive tax and cadastral information after attackers allegedly used stolen credentials to access systems belonging
🔗️ [Thecyberexpress] https://link.is.it/r1Stdy
La monetizzazione dei dati personali nell’era dei data broker: l’efficacia dei servizi automatizzati di cancellazione
Rimozione dati personali da 5,99 €: ecco come funziona l'offerta di Incogni per la sicurezza e la privacy online, i costi e i servizi inclusi
🔗️ [Cybersecurity360] https://link.is.it/VKZKbw
Rimozione dati personali da 5,99 €: ecco come funziona l'offerta di Incogni per la sicurezza e la privacy online, i costi e i servizi inclusi
🔗️ [Cybersecurity360] https://link.is.it/VKZKbw
Falso “rimborso farmaci” sfruttato per un phishing a tema Fascicolo Sanitario Elettronico
Il CERT-AGID ha individuato una nuova campagna di pshihing che sfrutta grafiche e loghi istituzionali del Fascicolo Sanitario Elettronico (FSE), del Ministero della Salute, del Dipartimento per la trasformazione digitale e del Ministero dell'Economia e delle Finanze, con l'obiettivo di sottrarre dati personali e dettagli delle carte di pagamento delle vittime. La leva psicologica è la promessa di un presunto rimborso del 19% per l'acquisto di medicinali in farmacia (per un importo esatto di €20,73).
🔗️ [Cert-agid] https://link.is.it/xJ4Ew3
Il CERT-AGID ha individuato una nuova campagna di pshihing che sfrutta grafiche e loghi istituzionali del Fascicolo Sanitario Elettronico (FSE), del Ministero della Salute, del Dipartimento per la trasformazione digitale e del Ministero dell'Economia e delle Finanze, con l'obiettivo di sottrarre dati personali e dettagli delle carte di pagamento delle vittime. La leva psicologica è la promessa di un presunto rimborso del 19% per l'acquisto di medicinali in farmacia (per un importo esatto di €20,73).
🔗️ [Cert-agid] https://link.is.it/xJ4Ew3
Mirage2FA Hijacks Companies’ Microsoft 365 Sessions, with Over 4K Victims in the US
Read about Mirage2FA, a new phishing threat to US enterprises with over 4K compromised companies to date. Collect IOCs for your SOC.
🔗️ [Any] https://link.is.it/DE67Gr
Read about Mirage2FA, a new phishing threat to US enterprises with over 4K compromised companies to date. Collect IOCs for your SOC.
🔗️ [Any] https://link.is.it/DE67Gr
Microsoft confirms outage affecting search in Microsoft 365 apps
Microsoft says some users are experiencing issues searching in Microsoft 365 apps, including Outlook on the web, Outlook desktop, SharePoint Online, and OneDrive.
🔗️ [Bleepingcomputer] https://link.is.it/1zL0pH
Microsoft says some users are experiencing issues searching in Microsoft 365 apps, including Outlook on the web, Outlook desktop, SharePoint Online, and OneDrive.
🔗️ [Bleepingcomputer] https://link.is.it/1zL0pH
CISA: Windows Task Host flaw now exploited by ransomware gangs
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a high-severity Windows Task Host vulnerability that was flagged as actively exploited in April.
🔗️ [Bleepingcomputer] https://link.is.it/yYA979
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a high-severity Windows Task Host vulnerability that was flagged as actively exploited in April.
🔗️ [Bleepingcomputer] https://link.is.it/yYA979
Behavioural AI: FAQ & Myths
This article explains how banks can increase their Value Detection Rate (VDR) using ThreatFabric's Behavioural SDK
🔗️ [Threatfabric] https://link.is.it/qGXVma
This article explains how banks can increase their Value Detection Rate (VDR) using ThreatFabric's Behavioural SDK
🔗️ [Threatfabric] https://link.is.it/qGXVma
Ukrainian software developer faces 12 years in Swiss ransomware trial
The unnamed 52-year-old is accused of attacking Swiss train manufacturer Stadler Rail alongside other enterprises as part of an international ransomware operation.
🔗️ [Therecord] https://link.is.it/E690d2
The unnamed 52-year-old is accused of attacking Swiss train manufacturer Stadler Rail alongside other enterprises as part of an international ransomware operation.
🔗️ [Therecord] https://link.is.it/E690d2
Microsoft tests faster Windows File Explorer, new context menu
Microsoft has started testing a faster File Explorer and a less cluttered and more customizable context menu in Windows 11 preview builds rolling out to Insiders this week.
🔗️ [Bleepingcomputer] https://link.is.it/5Sf7dK
Microsoft has started testing a faster File Explorer and a less cluttered and more customizable context menu in Windows 11 preview builds rolling out to Insiders this week.
🔗️ [Bleepingcomputer] https://link.is.it/5Sf7dK
Pulire github
Negli anni ho preso l’abitudine di creare subito un progetto su git (private o public, dipende dal progetto) appena mi viene una mezza idea e spesso nelle ore successive butto giù appunti, te…
🔗️ [Roccosicilia] https://link.is.it/h2nV6b
Negli anni ho preso l’abitudine di creare subito un progetto su git (private o public, dipende dal progetto) appena mi viene una mezza idea e spesso nelle ore successive butto giù appunti, te…
🔗️ [Roccosicilia] https://link.is.it/h2nV6b
Furto di identità via phishing Wise
Nella giornata odierna il team anti-frode D3Lab ha rilevato la settima campagna di phishing dell'anno a danno dei clienti italiani di Wise, servizio per il trasferimento di denaro a livello globale, con bassi costi di trasferimento e di cambio.
Campagne di phishing a danno degli utenti italiani W
🔗️ [D3lab] https://link.is.it/nYNCCn
Nella giornata odierna il team anti-frode D3Lab ha rilevato la settima campagna di phishing dell'anno a danno dei clienti italiani di Wise, servizio per il trasferimento di denaro a livello globale, con bassi costi di trasferimento e di cambio.
Campagne di phishing a danno degli utenti italiani W
🔗️ [D3lab] https://link.is.it/nYNCCn
Your Controls Block Known Attacks. What About the Behavior?
Security controls can block a familiar attack method while missing quieter ways to achieve the same objective. Picus Security's Blue Report 2026 shows how prevention rates can vary dramatically by technique and why behavioral testing is needed to uncover those gaps.
🔗️ [Bleepingcomputer] https://link.is.it/OnqgIu
Security controls can block a familiar attack method while missing quieter ways to achieve the same objective. Picus Security's Blue Report 2026 shows how prevention rates can vary dramatically by technique and why behavioral testing is needed to uncover those gaps.
🔗️ [Bleepingcomputer] https://link.is.it/OnqgIu
Hackers target Ukrainian agency managing assets seized from sanctioned Russians
The agency said the latest attack came amid preparations to select a manager for seized corporate rights in IDS Ukraine, one of the country’s largest producers of bottled mineral water and beverages.
🔗️ [Therecord] https://link.is.it/GbHqAO
The agency said the latest attack came amid preparations to select a manager for seized corporate rights in IDS Ukraine, one of the country’s largest producers of bottled mineral water and beverages.
🔗️ [Therecord] https://link.is.it/GbHqAO
Berlin cuts two state ministries off government network after security breach
The affected ministries — one responsible for urban development, construction and housing, and the other for mobility, transport, climate protection and the environment — have been isolated from government networks since Friday as a precaution.
🔗️ [Therecord] https://link.is.it/btBwIb
The affected ministries — one responsible for urban development, construction and housing, and the other for mobility, transport, climate protection and the environment — have been isolated from government networks since Friday as a precaution.
🔗️ [Therecord] https://link.is.it/btBwIb
❤1
University of Texas forced to take systems offline in San Antonio after cyberattack
The University of Texas at San Antonio, which serves 40,000 students across six campuses, said its IT team identified threat activity on its academic campus over the weekend and took some systems, including phones, offline in response.
🔗️ [Therecord] https://link.is.it/xHO23Y
The University of Texas at San Antonio, which serves 40,000 students across six campuses, said its IT team identified threat activity on its academic campus over the weekend and took some systems, including phones, offline in response.
🔗️ [Therecord] https://link.is.it/xHO23Y
Clop created custom web shell for Windchill data theft attacks
A custom Java web shell likely linked to the Clop ransomware gang was designed specifically for PTC Windchill and FlexPLM servers, with built-in features to decrypt credentials, enumerate file repositories, and steal files.
🔗️ [Bleepingcomputer] https://link.is.it/7UL3LZ
A custom Java web shell likely linked to the Clop ransomware gang was designed specifically for PTC Windchill and FlexPLM servers, with built-in features to decrypt credentials, enumerate file repositories, and steal files.
🔗️ [Bleepingcomputer] https://link.is.it/7UL3LZ
More than 200 victims of Medusa ransomware identified over the last year, CISA says
The Cybersecurity and Infrastructure Security Agency (CISA) and FBI updated an advisory on the group initially released in March 2025 — writing that as of April 2026, Medusa actors have hit more than 500 victims. CISA previously said 300 victims, many of which are in critical infrastructure sectors, were attacked as of 2025.
🔗️ [Therecord] https://link.is.it/mWe7QC
The Cybersecurity and Infrastructure Security Agency (CISA) and FBI updated an advisory on the group initially released in March 2025 — writing that as of April 2026, Medusa actors have hit more than 500 victims. CISA previously said 300 victims, many of which are in critical infrastructure sectors, were attacked as of 2025.
🔗️ [Therecord] https://link.is.it/mWe7QC
Comcast turns your Xfinity WiFi into a home motion detector
Comcast is promoting WiFi-based motion detection as a part of its new Xfinity Shield home protection platform, allowing routers and wireless devices to detect people moving through a home without cameras or motion sensors.
🔗️ [Bleepingcomputer] https://link.is.it/XXH7Bo
Comcast is promoting WiFi-based motion detection as a part of its new Xfinity Shield home protection platform, allowing routers and wireless devices to detect people moving through a home without cameras or motion sensors.
🔗️ [Bleepingcomputer] https://link.is.it/XXH7Bo
Fanlore - 144,520 breached accounts
In August 2026, the Organization for Transformative Works (OTW) identified unauthorised access to the Fanlore wiki it operates. The breach resulted in the exposure of 145k unique email addresses along with usernames and passwords stored as either MD5 or PBKDF2 hashes. OTW self-submitted the exposed data to HIBP.
🔗️ [Haveibeenpwned] https://link.is.it/vMtXHR
In August 2026, the Organization for Transformative Works (OTW) identified unauthorised access to the Fanlore wiki it operates. The breach resulted in the exposure of 145k unique email addresses along with usernames and passwords stored as either MD5 or PBKDF2 hashes. OTW self-submitted the exposed data to HIBP.
🔗️ [Haveibeenpwned] https://link.is.it/vMtXHR
Oz Hair and Beauty - 1,988,331 breached accounts
In August 2026, Australian beauty retailer Oz Hair and Beauty was the target of an xpl0itrs extortion attack. The group subsequently published data allegedly obtained from the company, which included 2M unique email addresses along with names, phone numbers, geographic locations (suburb and postcode) and purchases.
🔗️ [Haveibeenpwned] https://link.is.it/eUueY3
In August 2026, Australian beauty retailer Oz Hair and Beauty was the target of an xpl0itrs extortion attack. The group subsequently published data allegedly obtained from the company, which included 2M unique email addresses along with names, phone numbers, geographic locations (suburb and postcode) and purchases.
🔗️ [Haveibeenpwned] https://link.is.it/eUueY3
Cyberattack Hits Ukraine Agency Ahead of Major Asset Tender
A suspected ARMA cyberattack has targeted Ukraine's Asset Recovery and Management Agency as it prepares to select a manager for
🔗️ [Thecyberexpress] https://link.is.it/wHhAoi
A suspected ARMA cyberattack has targeted Ukraine's Asset Recovery and Management Agency as it prepares to select a manager for
🔗️ [Thecyberexpress] https://link.is.it/wHhAoi