Netcrook
17 Luglio 2026
Europe’s AI Security Playbook Is Really About Dependence
Brussels is tying cybersecurity and artificial intelligence to the same strategic problem: how to protect innovation without relying too heavily on outside systems, suppliers, or infrastructure.
Brussels Moves the Rules of the Platform Game - and Security Teams Should Notice
New EU obligations around Google’s Android and Search, plus a narrower liability shield for YouTube, show how platform governance can reshape risk even when no breach is involved.
Brussels Is Turning Copyright Into Code for AI Training
An EU-level registry for TDM opt-outs could make reserved rights easier to spot, but the final design and impact remain unsettled.
When Trusted Access Becomes the Real Breach: Italy’s Espionage Alarm
The arrest-linked investigation in Italy points less to a flashy hack than to a harder problem: how insiders, privileges, and sensitive repositories can be turned into a quiet intelligence channel.
Ransomware Mention Lands TKMS in a Wider Cyber Roundup
A cyber-intelligence roundup tied TKMS to a reported ransomware case, but the public record here still leaves the technical picture incomplete.
Public PoCs Put Notepad++ on the Watch List, Even After the Fix
Three patched vulnerabilities are now accompanied by public proof-of-concept material, a reminder that remediation does not end when the vendor ships an update.
Italy’s Privacy Watchdog Puts Outsourced Debt Recovery on Notice
Two closely linked rulings sharpen a simple rule: naming a processor is not enough unless the controller also checks how that processor works.
When the Helpdesk Turns Hostile: EY's Vendor Ticket System Breach Exposes a Quiet Attack Surface
A compromise in a third-party support platform used by internal IT staff shows how everyday service tooling can become a high-value entry point for sensitive business data.
Qilin Listing Leaves Acosol in a Cloud of Unconfirmed Risk
A new victim listing can create urgency, but it does not by itself prove a breach, data theft, or encryption event.
Routers as Ghost Infrastructure: The Hidden Power of a Compromised Edge
A long-running campaign tied to weakly managed network gear shows how routers can be turned into stealth relay points, not just broken devices.
€1.7 Million, One Breach, and a Narrow Question: How Far Did Access Really Go?
Italy’s privacy authority has closed its inquiry into Wind Tre with a seven-figure sanction, but the most interesting part is what remains unconfirmed: whether a human compromise, an API path, or both helped turn a localized incident into a personal-data case.
Acosol Enters the Ransomware Ledger, but the Proof Stops at a Claim
Qilin is named in an unverified attack claim, the event is tagged with a hash code, and the victim website field is left as N/D.
Italy’s Clinical Data Gambit: Turning Emergency Notes Into AI Fuel Without Losing Patient Trust
A new Italian health-data project is trying to do what Europe has struggled to achieve for years: make clinical records usable for AI research while keeping privacy risk under control.
When Security Vendors Sell the SOC of the Future, the Real Test Is Control
Sophos Fusion is being framed as an AI-native defense system, but the deeper story is how much trust organizations are willing to place in unified automation, human oversight, and product claims.
Ukraine Places a Special-Operations Veteran at the Center of Wartime Defense
Yevhenii Khmara's move into the acting defense minister role signals a wartime preference for leaders who understand intelligence, counterterrorism, and long-range pressure, not just conventional command.
Akira Claims an Attack on Westcoast-Communication-Services
A named ransomware claim and an incident hash are visible, but the public record does not confirm a breach, data theft, or impact.
When a Telecom Fine Becomes a Security Signal, Not Just a Penalty
A 1.7 million euro sanction tied to Wind Tre shows how privacy enforcement now hinges on breach readiness, not only on the incident itself.
Inside the Factory Workflow Turn: Why Document Automation Now Sits on the Business Critical Path
The Sacmi case, developed with Siav, shows how document automation can move from storage to operations by connecting accounting data, workflows, ERP, and compliance-heavy processes.
UK Convictions Hit Scattered Spider in a London Transport Case
Two young men were convicted in connection with a cyberattack on London public transport, and police called the outcome a significant blow to Scattered Spider.
Brussels Draws a New Line Around Android: Rival AI Assistants Are Headed for the Same Doors
The European Commission has ordered Google to give competing AI assistants Android access comparable to Gemini’s, turning assistant features into a high-stakes question of permissions, privacy, and control.