A pro-Russian threat group, Noname057(16), targeted Italy’s Foreign Ministry and sites linked to the 2026 Winter Olympics in a wave of cyberattacks, as authorities confirmed. The cyber campaign, which included denial-of-service attacks on hotels in Cortina d’Ampezzo and Olympic-related websites, highlights growing concerns as Noname057(16) targets Cortina Olympics infrastructure. Italian Foreign Minister Antonio Tajani disclosed […]
The Spain Science Ministry has shut down portions of its IT systems following claims of a security breach, disrupting access to digital services used by both citizens and businesses. The move comes as authorities investigate the scope and origin of the alleged intrusion, which reportedly affected several platforms under the ministry’s control. Officials did not […]
Italy’s largest university, La Sapienza in Rome, has temporarily shut down several IT services after suffering a cyberattack that forced the institution offline. As La Sapienza goes offline, campus operations have seen widespread disruptions, affecting students, faculty, and administrative functions. The university reported the breach on February 5, acknowledging interruptions across its digital infrastructure. Following […]
Anthropic’s Claude finds flaws in more than 500 high-severity vulnerabilities across widely used open-source libraries, the company said Thursday. The artificial intelligence firm unveiled Claude Opus 4.6, its latest large language model, which includes enhanced capabilities for code review and debugging. The newly identified flaws span libraries such as Ghostscript, OpenSC, and CGIF — all […]
Zscaler buys browser security startup SquareX in a move aimed at enhancing web protection without adding software bloat. The acquisition allows users to embed lightweight security extensions directly into any browser, removing the dependence on standalone secure browsers or third-party tools. Zscaler positions this as a streamlined alternative that improves both endpoint security and user […]
F5 patches DoS flaws across its BIG-IP, NGINX, and container platforms in its latest February 2026 security notification. The company addressed several medium to low-severity vulnerabilities, mainly tied to denial-of-service risks and configuration weaknesses. These flaws threaten services such as web application firewalls and Kubernetes ingress controllers, especially in high-traffic environments. While F5 reported no […]
A security researcher has demonstrated how a threat actor breached an AWS admin account in under 10 minutes using generative AI, accelerating each step of the intrusion. By leveraging large language models (LLMs), the attacker automated reconnaissance, exploit development, privilege escalation, and lateral movement, leaving minimal traces behind. The finding underscores growing concerns over the […]
WatchGuard has rolled out critical security updates after identifying two vulnerabilities that could be exploited by attackers to elevate privileges on Windows systems or extract sensitive credentials. The company’s latest advisory comes as part of broader efforts to strengthen its network defenses, with the fixes addressing flaws discovered in its VPN and Firebox appliances. The […]
A new cyber campaign is leveraging the facebook ads feed to deceive users and funnel them into a convincing tech support scam. Researchers at Gen Threat Labs have uncovered a three-step malvertising chain that begins when a user clicks a sponsored ad on Facebook. Instead of reaching a legitimate site, they’re rerouted to a fake […]
Threat actors are exploiting NGINX server configurations to redirect web traffic to attacker-controlled destinations in a new, covert campaign. The attackers, linked to previous React2Shell exploits, are now focusing on servers using the Baota panel, a popular management tool in Asian markets. Rather than deploying traditional malware, they inject malicious directives into NGINX location blocks. […]
Cybersecurity firm Truesec flags the OpDenmark campaign as a growing digital threat after a Russian-linked group, the Russian Legion, warned of a large-scale cyberattack targeting Denmark. The warning surfaced as regional tensions continue to escalate across Europe, raising concerns among public and private sector entities. Truesec identified coordinated activity that appears to be part of […]
A new investigation into the Moltbook network exposes data vulnerabilities and raises alarm over prompt injection risks between AI agents. Researchers from Wiz and Permiso analyzed the AI-driven social platform and discovered multiple security flaws. These include bot-to-bot prompt injection attacks, where one agent can manipulate another’s behavior using crafted text prompts, and unintentional data […]