Netcrook
#Cyber Threats
Italy’s June Cyber Briefing Reads Like a Warning Shot, Not a Footnote
A monthly CSIRT update may look routine, but it is often where defenders first see which weaknesses now deserve immediate attention.
ECB Puts Eurozone Banks on the Clock for AI-Driven Cyber Risk
A July supervisory letter gives banks until 31 October 2026 to file an action plan on AI-enabled cyber threats, tying the request to DORA-style operational resilience.
France Draws a Line to Turla in a Long Game of Invisible Intrusions
A public attribution to the Russia-linked Turla intrusion set points to a campaign built for patience, stealth, and infrastructure abuse, not loud disruption.
When Factories Become Targets: The Quiet Expansion of OT Risk
A warning about growing nation-state attention on manufacturing control systems points to a deeper problem: the modern plant floor now carries cyber risk that can affect physical output, not just data.
Pakistan’s Security Files Become a Magnet in a Quiet Espionage War
A recent study points to rising cyber incursions against Pakistani security agencies, but the real story is how sensitive information, not loud disruption, is the prize.
Australia’s CISC Pushes SOCI Reforms Into the AI Era
A consultation on 21 proposed changes points to a narrower compliance debate with a wider goal: keeping critical infrastructure rules relevant as AI changes how cyber risk is measured.
Europe’s Banks Get a Clock Ticking on AI Risk
The ECB has asked lenders to deliver a plan by 31 October 2026, turning AI-driven cyber risk into a supervisory deadline rather than a distant warning.
Trusted Paths, Hidden Relays: The Cyber Puzzle Behind a Modular C2 Intrusion
A reported campaign tied to an Iran-linked actor shows how a modular command-and-control stack and a foothold in IT service providers can turn trust into an attack path.
Schools Keep Showing Up as the Softest Hard Target
Education networks are being framed as easier to attack and harder to defend, a reminder that security pressure does not always track public attention.
When Generative AI Becomes a Cloak for Cyber Operations
A reported GreyVibe campaign shows how AI can be used less as a super-weapon and more as a camouflage layer, making hostile activity harder to read while pressure stays focused on Ukraine.
AI and the Shrinking Patch Window: Five Eyes Warn on Accelerated Zero-Day Risk
A coordinated warning from Five Eyes agencies frames artificial intelligence as a force that can compress defender reaction time and intensify the race around zero-day exploitation.
When AI Becomes a Geopolitical Weapon: The Cyber Risk Roberto Baldoni Puts in Focus
The sharp edge of the story is not a single breach, but a broader warning: artificial intelligence is already changing how attacks scale, how models are controlled, and how critical energy systems must be defended.
Why Civil Society Is Sliding Into the Cyber Crosshairs
Cloudflare-linked data points to rising attacks on civil society organisations, with Australian groups included in a pattern that looks broader than the usual government-or-enterprise target set.
UK Critical Sites Face a Geopolitical Cyber Squeeze
A warning from Britain's cyber leadership points to a harder reality for essential services: the most consequential incidents may be tied to state-sponsored adversaries, not ordinary crime.
Washington Pushes CISA to Rewrite the Playbook for AI-Era Grid Risk
A Senate proposal would require federal cyber planning for critical infrastructure to be updated with AI-driven threats in mind, turning policy refresh into the frontline issue.
The World Cup’s Hidden Arena: Malicious Domains Ahead of the Spotlight
Researchers warn that the tournament is already surrounded by thousands of malicious domains, turning a global sports moment into a high-value impersonation target.
When Critical Infrastructure Becomes the Preferred Hunting Ground
A new threat-intelligence snapshot points to sustained pressure on energy and utilities, with three familiar state-linked groups still showing up in the mix.
When Identity Becomes the Target, AI Turns Into Both Radar and Weapon
The real security contest is shifting from the perimeter to access control, where users, devices, services and machine identities now decide who gets in.
Financial Crime Is Going Interactive: Why the New Hunt Targets Identity, Not Just Endpoints
CrowdStrike’s latest financial-services threat landscape shows a sector under pressure from hands-on intrusions, leak-site extortion, cloud trust abuse, and proxy infrastructure that makes defenders chase behavior instead of a single bad file.
AI Is Not the Break-In, But It Can Make the Intrusion Faster
A new CERT-In blueprint treats artificial intelligence as a force multiplier for attackers, with the biggest concern being faster lateral movement, exploitation, and data theft inside critical environments.