All Episodes

Agentic SOC: How Companies Defend Against AI-Accelerated Attacks in 29 Minutes

Vibe Coding: How Software Development Speed Challenges Security

Microsoft Introduces MXC: Secure Containment for AI Agents on Windows and WSL

Apple Container 1.0.0: Lightweight VMs for Linux on Apple Silicon, Here are the News

Building Robust ML Systems with a Feature Store: Practical Guide

ESMA: 500 entities subject to AAR, impact on EU clearing and financial risks

AI and Elasticsearch: How to Improve Incident Response with Real-Time Logs

5 Critical Priorities to Maximize AI ROI in 2026

Commercialization of Space: Innovation and Cyber Challenges for the Sector

Guest accounts and OAuth expose 69% of SaaS accounts to critical risks

Flipper Zero: new rules for firmware development and community support

Malwarebytes Mobile Security: How to Detect Scams and Protect Data on iPhone

FBI and Google dismantle NetNut and the Popa botnet: 2 million devices compromised

Critical vulnerabilities exploited: SimpleHelp and Oracle EBS Payments under attack

Challenge overcome: Prisma Browser supports WebAuthn on RDP, beating Microsoft

Phishing with Interpol name: how to defend against targeted ransomware attacks

Airports Under Attack: How IT/OT/IoT Convergence Creates Critical Vulnerabilities

NetNut: dismantled the botnet of 2 million Android devices used for attacks

Cisco Unified CM under active attack: immediate patch for 3 critical vulnerabilities

New infosec products: AI governance, runtime enforcement and network intelligence

Cyber Attack on Jaguar Land Rover: Russian Hackers and Hybrid War

Quantum Computing and Security: The Current Threat and the Quantum-Safe Transition

Fable 5 Returns Online: The Challenge Between AI Innovation and Cybersecurity

FBI and Google dismantle NetNut and Popa Botnet: 2 million devices compromised

UE confirms €4.1 billion fine to Google: Android violates antitrust rules

Critical Cisco Vulnerability Exploited by Threat Actors

Supreme Court Protects Location Data: Warrants Now Required for Law Enforcement

CyberWire: Your Daily Guide to Navigating the Complex World of Cybersecurity

Cloudflare introduces advanced controls to manage AI crawler access

93% of companies struggle to manage cyber risk: here's why

ESMA proposes 'Report Once': €1 billion savings for financial markets

Deep Observability and AI: How Gigamon and Elastic Reduce Threat Detection Time

Advanced training in cybersecurity: certified courses and practical simulations

Vulnerabilities in OAuth Tokens: The Problem of AI Agent Identity

Browser Security: The Growing Threat of Zero-Day and Mediated Attacks in 2026

Phantom Squatting: How Hallucinated Domains Threaten the Software Supply Chain

Hidden Vulnerabilities: The Security Risk of LLM in Software Development

Industrial Cyber Resilience: From Compliance to Operational Protection

CyberGlobal: How to Scale Marketing for 27 Cybersecurity Franchises in 4 Continents

1,596 AI vulnerabilities: the gap between discovery and patching in companies

CTRL+ALT+PWN: The Definitive Guide to Defending Against Cyber Attacks

Endpoint Recovery: Why Backups Aren't Enough and How to Reduce Downtime Costs

Critical Vulnerability in Perforce Helix Core: Possible Attacks via Malicious Configurations

ESMA Simplifies KPI in Taxonomy Disclosures: Consultation Until August 12, 2026

Shadow AI: 48% of companies predict incidents from ungoverned tools

EvilTokens: The New Phishing-as-a-Service Kit that Threatens Microsoft 365

Rainbow Tables: how they work and why they threaten password security

Data Privacy Framework EU-US at Risk: The U.S. Supreme Court Threatens the Independence of the FTC

Microsoft Accelerates the Transition to Post-Quantum Cryptography: PQC by 2029

Geofence Warrants Limited: The Supreme Court Imposes New Privacy Rules

Device Code Phishing: How Hackers Exploit OAuth Authentication

Microsoft Teams Introduces New Protections Against Unauthorized Bots in Meetings

AI-generated code: risks for security, legality and compliance in companies

Nika: Cross-File Analysis to Detect Vulnerabilities in Java Microservices

AI Bots and Web Security: How to Manage the New Threat Landscape

New critical vulnerability in Elasticsearch: how to protect your data

Digital Communications Governance: How to Manage Risks and Compliance with Proofpoint

Data Security Posture Management: How to Protect 393.9 Zettabytes of Data by 2028

Insider Threats: 30% of CISOs Consider Them the Main Threat for 2024

GreyVibe: The Use of AI for Sophisticated Cyber Attacks Against Ukraine

Generative AI in the Enterprise: Governance, Privacy and Cybersecurity for ChatGPT Enterprise

The New Frontier of Information Security with Advanced Cyber Capabilities

SMS Phishing Attack: How Cybercriminals Steal Credentials and OTP Codes

Vulnerability of the space supply chain: risks and solutions for cybersecurity

GitHub Advisory Database: 1,560 vulnerabilities in one month, patch times slow down

AVG Mobile Security: Protection Against Call Scams, Phishing, and Data Breach

6 critical vulnerabilities in AirDrop and Quick Share: 5 billion devices at risk

Elastic Observability: 75% reduction in TSDS metrics costs

5 Critical Vulnerabilities on ClawHub: Infostealers, Evasion, and Agentic Threats in 2026

New TinyRCT Backdoor: Attacks on Critical Infrastructures in Southeast Asia in 2025

Preventing Email Data Loss: Proofpoint Adaptive Email DLP Reduces Risks and Costs

Corporate DLP: How to Protect Sensitive Data from Leaks and Attacks

Protecting Sensitive Data with AI Security Controls: Reducing Exposure and Governing Usage

Attacks on the Supply Chain: How Suppliers Become the Weak Point of Corporate Security

TX-NFC: the malware that clones credit cards via NFC and steals thousands of euros

FBI and CISA: phishing on Signal steals backup keys to access historical messages

Zero-day vulnerability in GitHub: invisible attack via cloned repositories

CISA warns: PTC vulnerabilities actively exploited in targeted attacks

Automation and Scalability: How to Test 250+ Web Vulnerabilities in Real-Time

Burnyard: Local Malware Analysis Without Revealing Campaigns to Cybercriminals

Compliance Normativa: From Documentation to Proactive Governance

Western Cybercriminals and Extortion Groups: The Hidden Threat Behind the Las Vegas Casino Attacks

New ClickFix campaign infects Macs with Atomic macOS Stealer via Terminal

CVE-2026-20245: Hackers exploit Cisco SD-WAN vulnerability for illegitimate root accounts

Microsoft Extends Windows 10 Security Updates Until 2027: What It Means for Businesses

Court USA approves social media restrictions for minors: impacts and cybersecurity risks

Amadey and StealC: international operation dismantles malware infrastructures

HR1: 1.5 billion for USA tech security. Here are the impacts on cybersecurity and compliance

Web Security Academy: Free Training to Become an Expert in Web Security

SIM Swapping: gang arrested in international operation, millions in crypto stolen

SharkLoader: attack on governments and software houses exploits 15 known vulnerabilities

Ransomware 2026: third-party vendors become the weak point for 70% of attacks in Europe

API Security: How to Protect Your Interfaces with a Layered Approach

New Approach to Compliance: Operational Telemetry and Intelligent Agents

Vulnerabilità Critica in Laravel Livewire: 6.167 Applicazioni Colpite in Attacco su Scala Globale

Cloud Vulnerabilities: 73% of Companies Do Not Detect Intrusions in Time

Vulnerability Bucket Hijacking: How Attackers Reroute Sensitive Data in the Cloud

AI and Cybersecurity: The New Asymmetric Threat and the Defense of Strategic Assets

USA Government Orders Anthropic to Withdraw Fable 5 and Mythos 5: The Impact of Cognitive Customs

Data Manipulation: The Silent Threat to Industrial Cyber Security

PixelSmash: FFmpeg Vulnerability Threatens Jellyfin Servers and DoS on Kodi, Emby

Klue: supply-chain attack hits cybersecurity firms, Icarus claims

Who Pays the Price of Security?

34% of LG and Samsung Smart TV apps use proxy SDK: risk for home networks

EVOHUNT: AI Auditing System Surpasses OpenAI's Codex Security

AI and QA: How Automation is Revolutionizing Software Testing

API Security On-Premises: Why Deployment Location Matters

How to tackle cyber violations with advanced defense strategies

Systemd 261: New features for cloud, TPM software and operational resilience

Avira Security for iOS: Protection, Privacy and Optimization in One App

282 iOS apps with AI exposed to credential leaks: 26% of analyzed apps vulnerable

ClickOnce Abuse: New Threats and Defense Strategies for Companies

3/4 of attacks on UK critical infrastructure by state actors: NCSC

Cybercrime in Asia and the South Pacific: 30% of crimes, 6.5 billion threats in 2024

DragonForce ransomware: Hidden attack in Microsoft Teams for 2 months

Bug Windows: Incorrect File Names in Trash Deletion Confirmation

Android: Developer Verification Expiry on September 30, 2026

FortiBleed: Password Spraying Campaign and Credential Theft on Fortinet, Sophos and MSSQL

NIS2 and Cloud: Obligations and Adjustments for Critical Infrastructures

Cyber attack on Novo Nordisk: 1.3 TB of health data stolen and ransoms from 25-50 million

Fable 5 of Anthropic: vulnerabilities and US block, what changes for European companies

ITDR: Why Identity Security Requires a Dedicated Approach

AI Agents: The New Threat to Corporate Identity Security

Data Breach in Texas: 3,087,721 Users Exposed to Phishing Risk

CVE-2026-20253: Critical Vulnerability in Splunk Enterprise Under Active Attack

Crypto-clipper: malware steals cryptocurrencies with fake reputation on GitHub and YouTube

Breach of Klue: Salesforce Data Theft and Impact on Huntress

WAAP 2026: How to Protect Your APIs from Attacks and Vulnerabilities

Global Exercise 2025: 38 CCPs Test Joint Default Scenarios

ClickOnce: the Microsoft technology that simplifies malware deployment

AI Act: European Parliament approves amendments to simplify obligations and ban 'nudifier' apps

NIS2: How Security Audits Transform Compliance into Business Resilience

Governance by Design: Why Organizational Shortcuts Cost More Than Preventive Solutions

Superbox: Streaming Devices at Risk of Cybercrime and Copyright Infringement

Botnet Popa: Android TV Boxes Used for Fraud and Industrial-Scale Attacks

International Operation Cleans 15,000 Infected WordPress Sites from SocGholish

Cybercrime in Asia-Pacific: $40 billion a year and growing threats to businesses and governments

86% of corporate logs deleted: the hidden cost of cybersecurity

Safecloud: Browser Tabs as Secure Encrypted Data Archives

Elastic Security 8.18 and 9.0: Intelligent SIEM Rule Update

Agentic SOC: The New Frontier of Cyber Defense for Financial Services

AI Attacks Surge: How to Protect Critical Infrastructures with Executive Order 14409

Update of cryptographic guidelines: Italy prepares for the quantum threat

FBI builds fake city to train agents against cyber attacks: digital security becomes tangible

Google Will Use IP Addresses for Personalized Advertising in the EU and UK Starting 2026: Impacts on GDPR and Fingerprinting

GitGuardian Launches Developer Endpoint Protection: Credential Scanning on Developer Machines

Agentic Resource Discovery: Google Standardizes the Discovery and Verification of AI Tools

Digital Key v4: Security and Interoperability in Digital Car Keys

ESMA 2025: MiCA, DORA and digital innovation for resilient financial markets

Unifying Observability and Security to Strengthen Your Company

Elastic Security Leader in SIEM with Native AI and Automation

Frontier AI Accelerates Vulnerabilities: How to Manage the Exponential Increase in Risks

Vulnerabilities in the Google Cloud Vertex AI SDK: how to defend against model poisoning

Imaging IT: how to reduce vulnerabilities and attack surface with secure baselines

NIS2: The list of critical suppliers reveals the true organizational fragility

Norton 360 Deluxe: complete protection from phishing and unsecured Wi-Fi

Microsoft AntiSSRF: the open-source library to block SSRF in .NET and Node.js

SOC: Visibility is the Critical Gap Dividing Leadership and Operations

Elastic Recognized as Strong Performer in The Forrester Wave™: XDR Platforms, Q2 2026

Why Metrics, Logs, and Traces Are Not Enough: The Crucial Role of Continuous Profiling

How to Protect AI Identities with Continuous Identity: 3 Key Innovations

Speed of Attacks: How Modern SOCs Address the Time Gap with Aggressors

How to Structure an SLA for Secure IT Supplies: Metrics, KPIs, and Essential Clauses

Pink Extortion: the vishing that bypasses multi-factor authentication and hits Microsoft 365

AI Generative and Regulatory Compliance: Tools for Analysis and Management of ICT Regulations

AI Data Governance: 2 Trillion Dollars at Stake for Personalization

Machine Identities and AI Agentic: How to Ensure Security in the Era of Digital Autonomy

EU Cybersecurity Act 2.0: €368 billion risk and SMEs in danger

AI Assistant by Imperva: Accelerate Security Investigations with Natural Language Questions

Fable 5 by Antropic: Jailbreak in 24 hours and the vulnerability of HACCA

FileJump: 2TB of Lifetime Cloud Storage with Zero-Knowledge Encryption at $59

Critical Cybersecurity Threats and Innovations: A Weekly Review

AI-Generated Code: Apparent Quality vs. Production Issues

AI military: the problem of verifying actions and the risks of escalation

European Commission vs Meta: WhatsApp and access to AI chatbots, a case that redefines digital competition

The Birth of Cognitive Customs: When Access Becomes Frontier

The Hidden Cost of Unmade Decisions: Organizational Debt

Operational Continuity vs Recovery: How to Build an Effective Resilience Plan

Ex IT Employee Sentenced to 21 Months for Cyberattack on Iowa School

Windows 11 and Server 2025 Updates: Fixed the ERROR_BAD_PATHNAME Bug

Europe’s Digital Identity Wallet: first technical specifications for the unified digital identity

Crypto Laundering Service AudiA6 Dismantled: €336M in Illicit Activities

Optimizing Financial Fraud Investigations with Elastic: Reducing Time and Costs

AI Enterprise: How to Govern Innovation Without Stifling Growth

New Artificato App.MenuItem in macOS Tahoe 26: Reconstructing User Intent

Claude Mythos: The Revolution in Cybersecurity and Geopolitical Risks

400 infected AUR packages: rootkits and infostealers target credentials and tokens

Critical vulnerability in phpBB: authentication bypass for administrative access

Phishing 2026: targeted attacks, AI and HTTPS, here are the trends changing cybersecurity

Vulnerability CVE-2026-50751: Check Point VPN at risk of authentication bypass

Google Sues Chinese Network for Abusing Gemini AI in Online Fraud

WP Engine and Google Cloud: 300 million searches per month with unified architecture

Monitoring and Protecting Claude's Activity with Elastic Security

CrowdStrike Leader in Cloud Detection and Response: How to Defend Cloud Infrastructures

Vulnerabilities in AI agent skills: how to protect companies from multi-stage attacks

Autonomous AI Agents: How to Protect OpenClaw, Nanobot, and Picoclaw with OneClaw

SBOM 2026: 72% of EU companies increase investments for software supply chain security

Unveiled Identity of The Gentlemen Ransomware Group Leader: Who is Hastalamuerte?

Kyushu Electric Power: 10.9 million customers exposed due to hard drive theft

Avast One Free: how to turn scam screenshots into concrete security tips

Strategic data centers: how AI sovereignty transforms them into objectives for cyber operations

How to Govern AI Agents with NIST and ISO: Identity, Risks, and Compliance

KBC Bank enters the Euribor panel: robustness and representativeness of the benchmark strengthened

Quantum Computing and AI: The Next Revolution in Financial Services Infrastructure

M-26-14: New Guidelines for Log Security in US Federal Agencies

Elastic: Scalability and Innovation in a Distributed Company

CrowdStrike Strengthens Identity-First Security with OpenID and IDPro

June 2026 Patch Tuesday: Record of Vulnerabilities and Critical Zero-Days

AI Act: Italy towards normative adequacy with two legislative decrees

Digital Identity Security: The Key to Protecting Organizations in 2026

Vulnerability Veeam CVE-2026-44963: Critical RCE in backup servers, urgent patch

Patch Tuesday 2026: Microsoft Fixes 200 Vulnerabilities, Including 3 Zero-Days

Who is Hastalamuerte? The face of the leader of the ransomware group The Gentlemen revealed

New RoguePlanet zero-day vulnerability in Microsoft Defender: attack on Windows 10 and 11

ShinyHunters attacks Oracle PeopleSoft server: 100 organizations affected

XRZero-G0: the open-source framework for training robots with human data

Prompt Injection: The Critical Threat to the Security of AI Agents in Production in 2026

Cloud Security: 3 Types of Insider Threats and How to Defend Against Them in 2026

Vulnerabilities of Prompt Injection in OpenClaw: Risks and Solutions

Frontier AI and Cybersecurity: Rapid7 Explores the Use of Claude Mythos Preview for Defense

Patch Tuesday 2026: Microsoft Releases 200 Vulnerabilities, Including a Critical One in Defender

Technology sector under siege: 58% of attacks from adversaries linked to China in 2026

Vulnerabilities in Cloud Logging Services: Attack Techniques and Defense Strategies

Vendor Risk Management: The Key to IT Supply Chain Cyber Resilience

New digital skimming campaign exploits GTM and Stripe to steal credit cards

Critical Suppliers in Legislative Decree 138/2024: How to Identify and Manage Essential Dependencies

Microsoft Patch Tuesday: 200 critical vulnerabilities, including zero-days and public exploits

Chrome fixes the fifth zero-day of 2026: vulnerability CVE-2026-11645 exploited in attacks

Patch Tuesday: 15 Critical Vulnerabilities in Microsoft Products

Aunoo: Strategic Business Intelligence to Anticipate Cyber Threats

NOVA Microhypervisor: AMD DMA Isolation for Shared AI Infrastructures

5.3 billion smartphones become e-waste in 2022: security blocks reuse

Critical Vulnerability CVE-2026-50751: Check Point VPN Authentication Bypass Attack

CrowdStrike and Zscaler Combine Zero Trust and AI to Stop Cross-Domain Attacks

Attacks via Microsoft Teams: how to defend against new phishing threats

Cyber attack on Eataly: personal data exposed and risks of targeted phishing

Vatican Encyclical and AI: Urgent Implications for Threat Intelligence

NIS2 in Italy: active incident notification, basic measures by October and imminent inspections

Apple Introduces AI Password Manager: Automatic Updates for iOS 27

Vulnerabilities in Chinese AI models: risks to US software security

Managing the Security of AI Agents in Federated Query Environments

Cybersecurity: Why Eliminate Vulnerabilities, Not Just Map Attacks

52% of direct-to-IP attacks evade intelligence feeds: how to defend

GitHub Copilot App: The new desktop platform for AI coding agents

Google Colab CLI: How to Integrate AI Agents in Remote Runtimes

Post-Quantum Cryptography: The 'Harvest Now, Decrypt Later' Threat and Strategic Defense

ChatOn AI: a multi-model assistant to optimize artificial intelligence costs

AI Enables Low-Skilled Hackers in Advanced Attacks: 13,873 Actions Mapped on MITRE ATT&CK

MDR Solutions: How They Differ and How to Choose the Best for Your Company

New vulnerabilities and improvements in Metasploit: how to protect your systems

Autonomous AI Agents: How to Protect the Enterprise from New Attack Vectors

Vulnerability PAN-OS CVE-2026-0257: Active Attack on GlobalProtect

Systemic Cyber Risk in the Era of Artificial Intelligence: A Critical and Underestimated Challenge

AI and National Security: The US Executive Order Splits the West

Governance by Design: The Key to Effective Business Decisions

26 years in prison for drug trafficking on Nemesis Market: the fatal mistake of the dark web

CISA warns: active attacks exploit SolarWinds Serv-U vulnerabilities

Vulnerability 0-day in Cisco SD-WAN: privilege escalation attack without patch

Let’s Encrypt towards post-quantum certificates: MTCs for secure authentication

Brute-force attack on Dashlane: 20 accounts compromised and encrypted vaults stolen

Agentic SOCs: AI Defense for Public Sector Cybersecurity

Vulnerabilities in AI Data Flows: How to Ensure Security with ISO 42001:2023

Crisis Management and Cyber Security: How to Communicate Effectively During a Data Breach

Whistleblowing: when the report exceeds the end of the employment relationship

Brave Origin: The Minimalist Paid Browser for Uncompromising Privacy

29 arrests in international operation against illegal streaming platforms

Keyless car thefts: how to defend against attacks in less than a minute

AgentGG: AI-driven SAST with open-source agents for more accurate scans

June 2026: Patch Tuesday and New Vulnerabilities, What to Expect

CVE-2026-49975: HTTP/2 Bomb threatens 880,000 sites, urgent patches for NGINX and Apache

Incident Response: How SOCs Handle Real-Time Attacks

Android Security Bulletin June 2026: Critical Vulnerabilities and Active Zero-Day Exploits

ChatGPhish: how Markdown manipulates AI assistants for advanced phishing

Trump signs executive order: government oversight of advanced AI models

Handling a Critical Vulnerability in an Industrial Production Environment

Perfect Compliance Hides Ineffective Controls: How to Avoid Critical Errors in CMMC and FedRAMP 2.0

Vulnerability and Defense: Risk Management Lessons from Mega Events of 2026

DORA: 1/3 of ICT incidents in the EU financial sector have cross-border impact

How Partners Can Leverage the Platform Cycle with Elastic

Overcoming the gravity of data and accelerating AI security in the SOC

CrowdStrike Falcon® for IT: AI Governance to Reduce Shadow AI Risk

AI in the company: how to prevent data loss with modern solutions

NIS360 2026: Uneven Progress in European Cybersecurity

The Cyber Knowledge Gap in Italian Managers: A Systematic Problem

HACCAS: AI Agents Conducting Autonomous Cyber Attacks and Defenses Against Them

80% of companies affected by known vulnerabilities: the patch gap is costly

Agent Threat Rules: 98% Detection for AI Agent Attacks

Slovenia's SI-CERT manages 6,000 computer incidents per year: how it works

Elastic 2026: 4 Key Innovations for Azure Developers and Cybersecurity

Protecting Critical Infrastructures in the AI Era: It All Starts with Data

How LivePerson Optimized Logstash and Kafka on GCP: Benchmarking and Savings

New Cybersecurity Alliance: Rapid7 and Exclusive Networks Strengthen Security in the Nordic Countries

Critical Vulnerability in Polycom VVX 4500 Series Phones: Stack-Based Buffer Overflow

New macOS threat: FlutterShell, the backdoor malware that exploits malvertising

TOAD: phone attacks that exploit fraudulent call centers

AI Act and Watermarking: Technical and Legal Challenges in Detecting AI-Generated Content

KDE Linux removes unsafe kernel modules and packages after audit

Why BAS and autonomous penetration testing are indispensable together for cybersecurity

Zero Trust for Physical Security: Trust Decisions at the Edge

AI Vulnerabilities in Financial Services: 7 Steps for Secure and Efficient Scalability

Cyber Vulnerabilities: How to Defend with AI at Machine Speed

Cyber Attacks and Geopolitics: When the Digital Reflects Global Tensions

Ethical Hacking Course at $14.99: 29 hours of live lab to defend networks and systems

Web Security Test Automation: How to Reduce Risks and Costs with Burp Suite

Automated Scanning with Burp Suite DAST to Reduce Attack Surface

Burp Scanner: 70,000 users and 16,000 companies choose this web security tool

Leader in the 2026 Gartner Magic Quadrant for Endpoint Protection

NIS2 and Cyber Resilience Act: How to Manage Compliance in an Integrated Way

Vulnerability CIFSwitch: how to gain root privileges in Linux

Microsoft 365 Copilot: new interface unifies actions and context in a single workspace

Claude Opus 4.8: Improvements in Honesty and Judgment for Agentic Tasks

Critical Authentication Bypass in Palo Alto GlobalProtect VPN: Urgent Patch Required

New Linux LPE Vulnerabilities: Dirty Frag and Other Critical Threats

Shadow AI: How to Protect New Attack Vectors in Companies

Digital Sovereignty: Between Material Infrastructures and Geopolitics

BCE warns banks: quantum threat and offensive AI create systemic risk

DDoS Attacks: From Scattered Tools to Packaged Services

Charter Communications: 4.9 million accounts breached by ShinyHunters

23andMe Found Guilty of Violating 7 Million Genetic Data: The Gaps That Triggered the Breach

Phishing LinkedIn: scam exploits Adobe to steal professional credentials

Botnet of 17 million devices dismantled by the Dutch police

CVE-2026-35616: Infostealer targets companies through FortiClient EMS vulnerability

CVE-2026-45247: Critical Vulnerability in Mirasvit Full Page Cache Warmer for Magento

ESMA: Regulatory Data Improvements Strengthen EU Supervision

Critical RCE Vulnerability in Gogs: Remote Code Execution via Malicious Pull Requests

Cyber Threats to the 2026 FIFA World Cup: A Comprehensive Risk Assessment

NIS2: New Common Models for Cyber Incident Reporting

Architectural Risks in Agile Software: How AARM Reduces Vulnerabilities

Zero Trust 2026: NSA, CISA OT, and AGID Framework Updates. The Challenges of Legacy and Adoption in Italy

Zero Trust 2026: NSA, CISA OT, and AGID framework. The challenges of legacy and adoption numbers

Zero Trust 2026: NSA, CISA OT, and AGID Framework Updates. The Challenges of Legacy and Adoption

GreyVibe: AI-Generated Malware Attack on Military and Government Entities

New infosec products for May 2026: solutions for AI agent security and beyond

TotalAV Mobile Security: Complete Protection for iOS and Beyond

Extortion without encryption: the new threat to companies

Cybersecurity in Italy: ACN 2025 Report

Artificial Intelligence: the Encyclical Magnifica Humanitas and the AI Act between Ethics and Regulation

NIS2 and cybersecurity: April 2026 marks a 39% drop in incidents, but threats remain high

Cyber Risk Quantification: FAIR vs Bayesian Networks in NIS2, DORA and AI Act

Charter Communications: 40 million records stolen in vishing attack on Salesforce

Windows 11 KB5089573: 30 preview improvements, but beware of vulnerabilities

5 Open-Source Tools for Cybersecurity That Revolutionize Corporate Defense

Critical Vulnerabilities in AI Models: Multi-Turn Attacks Bypass Defenses, Cisco Study

CISO: AI and automated agents change the corporate security model

5 critical gaps in technology and data that slow down AI agents

CISOs and Technology Leaders Tackle the Complexity of Cybersecurity: Practical Strategies

Glassworm Botnet Takedown: How Companies Can Defend Themselves Against Software Supply Chain Attacks

Identity Vulnerabilities: CrowdStrike Leader in 2026 with Advanced ITDR Solutions

GitHub breached by VS Code extension: 3,800 internal repositories at risk

WhatsApp Vulnerability on iOS 16: Attacks Without User Interaction

Protecting Non-Human Identities: A Critical Priority for Cybersecurity

Stark Industries Solutions Ltd.: Comeback after EU sanctions with new names and strategies

Varonis integrates Claude: Advanced Monitoring for AI Enterprise and Platform

5 critical vulnerabilities in UniFi OS: urgently patch exposed systems

AI Adoption in Europe: 99% of Companies at Risk for Violations of Regulated Data

Vigolium: the new open-source scanner that combines deterministic scanning and AI auditing

Crypto Payment Security: How Companies Address APT Threats and the Patching Gap

ESMA updates post-trade communication guidelines for T+1: what changes

Ransomware 2025-2026: record costs, AI and autonomous threats for businesses

Stark Industries: The Global Proxy Network for Pro-Russia DDoS Attacks and Disinformation

Netherlands arrests co-owners of hosting company for infrastructure used in Russian cyberattacks

CISSP 2023: Complete Course at $19.99 to Master All 8 Domains

Job Opportunities in Cybersecurity: Key Roles in 2026

Machine Identity Management: The Hidden Layer of Privileged Access to Control

F-Secure Internet Security: Complete Protection from Phishing, Fake Stores, and SMS Scams

Grafana Labs victim of ransomware attack: source code stolen and release threatened

Cyber-attacks on mobile apps: 87% of apps affected in 2026, AI accelerates threats

DDoS 2023: Attacks Double in Power, Specific Sectors in the Crosshairs

Ghost CMS Vulnerability: 700 Sites Hit by ClickFix Attack via SQL Injection

N2K Networks: How CyberWire and CyberVista Lead Cyber Training and Information

Shadow AI: 65% of C-suite uses unapproved tools despite risks

Verizon 2026 DBIR: Vulnerabilities and Ransomware Dominate the Data Breach Landscape

Webhook-based Notifications: Bridging the Gap Between Attack Detection and Resolution

Cybersecurity 2026: how to defend against attacks on identity, cloud, and social engineering

New critical vulnerabilities: authentication bypass and RCE in popular systems

Protecting Identities and Sessions from Infostealers: Key Strategies and Best Practices

Cyber Security: A Strategic Priority for Boards of Directors

AI at High Risk: EU Guidelines for Classification and Regulatory Compliance

Netherlands Arrests Two Men for Cyber Attacks and Disinformation Linked to Russia

Proton Pass introduces monitored credential sharing for AI agents

Fractal OS reveals hidden vulnerabilities in the Apple M1 branch predictor

New phishing threat for Microsoft 365: how to bypass MFA and steal access tokens

New dashboards for attack management: reducing complexity with filter-based widgets

Zero-click vulnerabilities: the new primary vector for initial access

Infostealers: How They Work and How to Defend Against These Silent Malware

Claude Compliance API and CrowdStrike Falcon: real-time visibility into AI activity

3 Essential KPIs to Measure Speed and Safety in AI Adoption

ROADtools: The open-source tool that threatens the security of Microsoft Entra ID

Screening Serpens: 6 New Trojans Used in Targeted Attacks in 2026

Garante Privacy fines The European House – Ambrosetti: 85,000 euros for GDPR violations

CISA Vulnerability: AWS GovCloud Keys and Sensitive Credentials Exposed on GitHub

Drupal warns: ongoing attack on critical SQL vulnerability CVE-2026-9082

Arrested KimWolf botnet administrator: 1 million infected devices and 30 Tbps DDoS

Vulnerabilities Google API keys: up to 23 minutes of access after deletion

WordPress: 300 zero-day in 72 hours, the cost per vulnerability drops to 20€

Why Your SOC Must Evolve Now: The AI Arms Race in Cybersecurity

The Defense of Information in the Digital Age: Risks and Strategies in a Dispersive System

Data Poisoning: How 0.1% of Altered Data Can Compromise AI Models

CISA Vulnerability: AWS Credentials and Internal Systems Exposed in GitHub

Kimwolf: The vulnerability that threatens 2 million devices and internal networks

Arrested in Canada the creator of the Kimwolf botnet: DDoS attacks up to 30 Tbps

Lucifer DaaS: How Drainer-as-a-Service Professionally Steal Cryptocurrencies

Flipper One: the new open-source Linux platform for connected devices

GitHub: 3,800 repos compromised by malicious VS Code extension

Microsoft Releases Open-Source Tools to Test AI Agents: RAMPART and Clarity

New Cybersecurity Tools 2026: 5 Innovations for Corporate Defense

Digital Fraud 2026: AI Accelerates Scams and Ransomware, Visa Warns of New Risks

CVE-2026-9082: Critical SQL Injection Vulnerability in Drupal Core, 15,000 Attacks in 65 Countries

AI in Financial Services: Opportunities and Threats in 2026

AI financial: why projects get stuck and how to scale with a unified data platform

138 Critical Vulnerabilities in Microsoft: Immediate Patch for Windows Server, DNS Client, and JIRA/Confluence

Rapid7 Partner Academy Wins Gold Stevie Award: How Certifications Improve Corporate Security

26 Vulnerabilities Discovered in 130 Products, Patches Available

MiniPlasma: Unpatched Windows Vulnerability from 2020 Still Exploitable

AI and Cybersecurity: The New War Between Defense and Attack with Exploits in 5 Days

Procedure vs Guidelines: How to Manage Information Security in the Company

Vulnerability CISA: AWS Credentials and Internal Systems Exposed on GitHub

Shadow AI: How Companies Can Manage the Risks of Unauthorized AI Tools

74 fraudsters identified thanks to Dutch campaign with faces on billboards

AI Sovereignty: 35% of Companies Slow Adoption Due to Infrastructure Constraints

Phishing AI: 5 Instagram posts are enough to create personalized fraudulent emails

Critical Vulnerabilities in Dify: Account Takeover and Leakage of Sensitive Information

Rapid7 2026: How Security Teams Address the Evolution of Attacks

Critical Vulnerabilities Double: How Cyber GRC Links Defense, Risk, and Compliance

Urgent Patches and Critical Vulnerabilities: Key Updates of the Week

Ransomware Attacks: Endpoint Resilience and Recovery Times in Business

McAfee + ChatGPT: Real-time scam detection for messages and links

Attack on Microsoft Teams: how criminals exploit collaboration platforms to violate companies

Critical Vulnerability in Cisco Catalyst SD-WAN Controller: CVE-2026-20182

Critical Vulnerability in Palo Alto Networks PAN-OS: Authentication Bypass and VPN Risk

Foxconn hit by ransomware: 8TB of sensitive data from Apple, Nvidia, and Intel at risk

The Invisible War: Russia and China Rewrite the Rules of Digital Sovereignty

Vulnerability Azure Backup for AKS: Microsoft denies the issue but applies silent patches

Fragnesia: New LPE Vulnerability in Linux Kernel Activated by Dirty Frag

New cybersecurity solutions: TPRM, AI governance and cloud protection

Rocky Linux introduces security repository for urgent patches: how it works

Advanced SIEM: New Features for Cloud Threat Detection and Defense

4 New Critical Vulnerabilities: From Vim to ERP, How to Protect Your Infrastructures

CrowdStrike reveals new AI models to detect sophisticated attacks before the breach

Prompt Injection: The New Hidden Threat in AI Systems

43% More Cyber Attacks: 2026 Threatens the Financial Sector with Ransomware and Cryptocurrency Thefts

Vulnerabilities AD CS: How Attackers Exploit Certification Services for Privilege Escalation

Gremlin Stealer: New Obfuscation Techniques to Steal Sensitive Data

Building Trust in AI: An Integrated Approach to Cyber Risk

Data Manipulation: The Silent Threat Affecting Italian OT Systems

Exploit on macOS 26.4.1: Myths and the Evolution of Cyber Threats

AI 2026: 62% of companies under pressure but only 38% see concrete benefits

Vulnerability XSS in Exchange Server: attack via email, Microsoft warns

7.35 million iPhones stolen per year: the black market for unlocking tools

Silent Attack on Exposed Redis Servers: 1,200 Attempts in a Month

CVE-2026-42945: Critical Vulnerability in NGINX Opens to RCE and DoS

Cisco patches actively exploited zero-day vulnerability in SD-WAN (CVE-2026-20182)

DevOps in 2026: How AI Transforms IT Management and Security

IBM Bob: The Revolution of Agentic AI in Business Transformation

AI and Hybrid Infrastructure: The Strategic Challenge for Companies in 2026

Vulnerability CVE-2026-23870: DoS Attack on React Server Components and Next.js

APIs and AI: How to Manage the Growing Risk for Companies

Vulnerabilities in AWS Bedrock: How to Protect AWS Credentials with Claude Code

Vulnerabilities in internal controls: ESMA identifies critical issues in the management of EU funds

Commission seeks experts for the Board of Appeal of the Supervisory Authorities

Gauntlet: When the Agents' Tools Fight Each Other

Agentic AI at Hackathon 2026: 3 Innovative Solutions for Industry

AI in Cybersecurity: Top Use Cases and Mistakes to Avoid

Discoveries 900+ React2Shell Vulnerabilities: Large-Scale Attack on Financial and Cryptographic Sectors

New EtherRAT Campaign: Advanced Attacks with TukTuk and The Gentlemen Ransomware

Patch Tuesday: 118 Microsoft vulnerabilities, Apple fixes 52 at once

Critical Update for Windows 11: May 2026 Patch Fixes 120 Vulnerabilities

Shai-Hulud Supply-Chain Attack: 400+ Malicious Packages Target Developer Credentials

Patch Tuesday: 49 Critical Vulnerabilities in Microsoft Office and SharePoint

Agentic AI and IAM: The Challenge of Non-Human Identity Security

Android 2026: New Anti-Fraud, Theft, and AI Protections for Mobile Devices

Wi-Fi Vulnerabilities: Open-Source Cyber Range for Security Training

Sandyaa: the autonomous open-source bug hunter that generates exploits

AI and real-time data: the key to business transformation

GM Convicted of $12.75 Million for CCPA Violation: Sale of Driving Data Without Consent

Fine of 963,900 pounds for security flaw in water company: data of 633,887 users on the dark web

Smart refrigerators: 3 hidden risks that emerge years after purchase

HEIDI: Free IDE plugin that detects vulnerabilities in real-time in open source dependencies

Crimenetwork: arrest of darknet administrator, 3.6 million euros seized

Malvertising Campaign Abuses Google Ads and Claude.ai to Target macOS Users

AI reduces breach costs by $1.9 million: how companies use artificial intelligence for cybersecurity

Cybersecurity: Practical Guide for IT Beginners and Professionals

Rustinel: Unified Endpoint Detection for Windows and Linux

NIS2 and DORA: AI for Security and Digital Operational Resilience

Malware in Hugging Face's trending repository: 244,000 downloads before removal

JDownloader: supply chain attack distributes RAT on Windows and Linux

GPT-5.5-Cyber: OpenAI expands access for advanced cybersecurity workflows

Laptop farming for North Korean IT workers: 18 months in prison for two Americans

Week of Cyberattacks: Exploited cPanel Vulnerabilities, DigiCert Breach, and LinkedIn Scams

Detection as Code: How to Fill the Process Gap in Information Security

Metasploit Updates Modules: New Vulnerabilities and Security Improvements

Italy 2026: National Digital Security Strategy for Cyber Attacks and Hybrid Threats

AI Act: EU Agreement on Simplification and New Deadlines for Artificial Intelligence

Balancing Rights and Competitiveness: EU Bans 'Undressing' AI but Eases AI Act

Ransomware attack on Canvas: 275 million users at risk and exams disrupted

SOC Efficiency: Why Hiring More Analysts Won't Bridge the Gap

GeForce NOW: Data Breach in Armenia Exponential to $100,000 in Crypto

Ivanti EPMM Vulnerability: Urgent Patch for CVE-2026-6973 and 4 Other Critical Flaws

Google Enhances Android Studio: New Features for Security and Compliance

Zero-day vulnerabilities in Ivanti EPMM: 5 critical flaws, one already exploited (CVE-2026-6973)

Dirty Frag: Two Linux vulnerabilities allow root access, one still unpatched

CTEM: How to manage continuous exposure to threats with Rapid7

OpenAI and Rapid7 Join Forces to Accelerate Cyber Defense with AI

Hardware Security: Misplaced Trust in Silicon is the New Critical Risk

Ransomware Chaos: False Flag Operation Attributed to MuddyWater

Informational Responsibility: How to Properly Manage Content Distribution

Ransomware attack on Canvas: 275 million users at risk and lessons interrupted

TCLBanker: the new trojan attacking 59 financial and crypto platforms

Dirty Frag: new Linux zero-day allows privilege escalation with a command

DoS Vulnerability in Cisco CNC and NSO: Urgent Patches to Avoid System Crashes

NetGuard: open-source firewall for Android, blocks access and protects data

Vulnerabilities in Roblox chat filters: grooming and inappropriate content evade moderation

May 2026 Patch Tuesday: AI-Driven Changes Reshape Cybersecurity Landscape

False Flag Attack: MuddyWater Hides Behind Chaos Ransomware in 2026

Critical Vulnerability CVE-2026-0300 in PAN-OS: Buffer Overflow in Captive Portal

Critica Vulnerabilità CVE-2026-0300 in PAN-OS: Attacchi con Esecuzione Remota di Codice

World Password Day 2026: Towards a Passwordless Future

DORA: How to manage operational resilience with ICT suppliers in the financial sector

DAEMON Tools Lite hit by supply chain attack: 100 countries involved

Data Breach Instructure: 280 million records stolen from 8,809 educational institutions

Hacker arrests 4 high-speed trains in Taiwan with TETRA attack: critical vulnerability after 19 years

Daemon Tools compromised: backdoor and QUIC RAT in versions 12.5.0.2421-2434

Multi-model AI: the routing challenge for companies in 2026

MCP Python Hooks: Open-Source Monitoring for Python Applications

The Technical Debt: A Critical Obstacle for Companies