Every morning, the most relevant news on the topics I follow, selected from leading Italian and international outlets, with a short summary of each article.
Edition of Sunday, 1 November 2026 · updated at 07:29
Threats, vulnerabilities and regulations such as NIS2, GDPR, DORA and the AI Act.
Ransomware group Panzer claims an attack on PQE Group and theft of 200 GB of encrypted backups. The incident highlights a critical risk: storing encryption keys on backup systems can compromise data protection even when archives are encrypted.
Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability allowing unauthenticated attackers to remotely execute commands as root on servers running Multipath TCP (MPTCP) listeners.
Researchers at Parameter discovered that a malicious ChatGPT share link could run attacker code in a logged-in user's session, allowing access to private conversations. OpenAI fixed the flaw within 8 days of the October 18 report and rated it P1, its most serious category.
Cloudflare reported 18.2 million network-layer (L3) DDoS attacks and 14.4 trillion HTTP DDoS requests in Q3 2026, equivalent to approximately 8,226 attacks per hour or 197,400 per day.
A high-severity remote code execution vulnerability in WordPress Core (versions 4.7-7.1.3) with CVSS score 8.1 is being actively exploited by threat actors shortly after patches were released.
Drupal warned administrators to patch a critical access bypass vulnerability in the Commerce Core module that is currently being exploited in active attacks.
As of October 31, ACN closes the late NIS2 filing channel. Determination 314287/2026 simplifies compliance for already-registered companies and introduces 2027 procedures while maintaining update obligations and direct administrator responsibility.
TeamViewer has fixed a vulnerability allowing a controlled machine in a remote session to attack the computer that connected to control it. A malicious or compromised host could crash the viewer's TeamViewer and potentially execute code.
An attack attributed to TraderTraitor, a hacker group linked to North Korea, stole 6.36 billion dollars from Binance. The incident has implications for Italy and requires risk mitigation measures.
Flaws in SS7 and Diameter signaling protocols allow attackers to track phone locations, intercept calls and SMS codes, and impersonate subscribers without compromising devices by exploiting trust between networks.
News stories belong to their respective publishers. Summaries and headline translations are generated automatically with AI: the original article, linked from each headline, is the authoritative source.