Latest news
Culture
Active Defense and Hackback: The Legal Labyrinth of Cybersecurity
In our previous article, we explored how the cybersecurity professional's role as guarantor clashes with classic scenarios such as unauthorized...
Paolo Galdieri - January 27, 2026
Cyber News
And let the phishing begin! Microsoft is taking action against a zero-day exploit already exploited in Office
Once again, Microsoft was forced to quickly fix some flaws. The company has released unscheduled patches for Microsoft Office, addressing...
Pietro Melillo - January 27, 2026
Cyber News
ServiceNow Under Attack: How an Email Can Open the Doors to Your Business
The recent discovery of a vulnerability in ServiceNow’s AI platform has shaken the cybersecurity industry. This flaw, characterized by an...
Redazione RHC - January 27, 2026
Cyberpolitics
33,000 tons of iron… and an investigation where AIS and logs are cyber intelligence traps
A recent operation in the port of Brindisi, conducted by the Guardia di Finanza in collaboration with the Customs and...
Roberto Villani - January 27, 2026
Cyber News
Email Security Under Pressure: Phishing Kits to Double in 2025
According to Barracuda’s Phishing Report 2025 , the number of phishing-as-a-service (PhaaS) kits is expected to double by 2025, placing...
Redazione RHC - January 26, 2026
Cyber News
How a simple Visual Studio Code file can become a backdoor for state-run hackers
Security researchers have recently observed a worrying evolution in the offensive tactics attributed to North Korean-linked actors as part of...
Redazione RHC - January 26, 2026
OpenAI API Logs Vulnerability Exposed: Data Exfiltration Risk
Imagine your chatbot worked properly and didn't display a malicious response to the user. But a leak still occurred later, in the most unexpected place, when the developer opened the...
PurpleBravo’s Contagious Interview: Malware Campaign Targets Global Firms
For over a year, the North Korean group PurpleBravo has been running a targeted malware campaign called “Contagious Interview,” using fake job interviews to attack companies in Europe, Asia, the...
KONNI Malware Targets Crypto Developers with AI-Powered Attacks
Check Point Research recently discovered a sophisticated phishing campaign orchestrated by KONNI , a threat group linked to North Korea . Historically focused on diplomatic targets in South Korea, the...
Zoom Security Alert: Critical Vulnerability in Node MMR Devices
Zoom Video Communications has issued an urgent security advisory for a critical vulnerability (identified as CVE-2026-22844 ) affecting its enterprise infrastructure. The issue involves a command injection flaw in Zoom...
LockBit 5.0 Ransomware: New Threats and Advanced Tactics
The LockBit group, which many had quickly dismissed after high-profile failures and leaks, unexpectedly returned to the scene. In the fall of 2025, it unveiled a new version of its...
Cisco Zero-Day Vulnerability CVE-2026-20045 Actively Exploited
A critical zero-day remote code execution (RCE) vulnerability, identified as CVE-2026-20045, has been discovered by Cisco and is being actively exploited in active attacks. Cisco has urged immediate patching, and...
Cybersecurity in Local Administrations: The Hidden Risk
There's a convenient misconception in Italy: thinking that cybersecurity is a matter for ministries or large strategic players. It's reassuring. And it's wrong. In the real design of public connectivity,...
UK Organizations Hit by Russia-Backed DDoS Attacks
The UK's National Cyber Security Centre has issued a strong warning regarding a series of denial-of-service (DDoS) attacks targeting British organizations. This phenomenon has not gone unnoticed by authorities, who...
GitLab Security Update Fixes Critical Vulnerabilities CVE-2026-0723
An urgent security update has been released by GitLab for the Community (CE) and Enterprise (EE) editions to address several high-severity vulnerabilities. These vulnerabilities expose installations to potential denial-of-service (DoS)...
Critical Telnetd Vulnerability in GNU InetUtils Allows Root Access
A critical security flaw has been discovered in the telnetd server component of GNU InetUtils, involving remote authentication bypass . A security researcher reported the vulnerability on January 19, 2026....
Discover the latest critical CVEs issued and stay updated on the most recent vulnerabilities. Or search for a specific CVE