Decoded offers a human point of view on cybersecurity and security trends, unpacking complex topics through analysis, context, and real-world implications.
Prima che arrivi una richiesta credibile, qualcuno può averci già studiati. Il nostro primo evento nasce per mostrare quel lavoro e parlare di una formazione vicina alla vita reale.
RedACT counted 148 confirmed ransomware claims against Italian organizations in six months. Almost none of them required sophistication to pull off. What they required was a set of human behaviors so consistent (before the breach and especially after it) that thirty different gangs can price them into a business model.
The WhatsApp-versus-Signal-versus-Telegram debate assumes scammers pick a side. They don’t. This Decoded walks through why the app is never the perimeter, why Telegram’s default isn’t what people think it is, and what actually stops the con.
Phishing is the single most common way into a breached company right now, and it has never been cheaper to run against you. So how did breached organizations respond? By cutting their planned security spend. Same cost-cutting instinct on both sides of the table, opposite blast radius, and only one side collects.
France built Tchap as the secure alternative to WhatsApp for 825.000 civil servants. Mandatory since September 2025, sovereign infrastructure, end-to-end encryption on private messages. On June 7, ANSSI detected a breach. The entry point was not a zero-day. It was one public servant account, social-engineered into yielding access.
DragonForce spent two weeks inside a major US services firm, routing command-and-control traffic through Microsoft Teams relay servers. No alert fired. The monitoring stack saw legitimate Microsoft infrastructure and moved on. This is what happens when attackers stop breaking things and start borrowing them instead.
At the Tuscany Lightning Summit 2026 in Viareggio, our CTO Francesco Baccaro stood in front of some of the most paranoid engineers in the Bitcoin ecosystem and told them their cryptography wasn’t the problem. The $1.46B Bybit heist, the rise of Permit and EIP-7702 phishing, and a hard truth the crypto industry keeps ignoring.
Mandiant’s M-Trends 2025 confirms it. Voice phishing surged. Email phishing collapsed. Your stack is not the problem. The person who picked up the phone is. And nobody tested them.
Before a phishing email is written, attackers already understand your company. Using OSINT sources like LinkedIn, GitHub, and public infrastructure data, they map employees, tools, and internal patterns to craft believable attacks. This PacketHunters analysis explores how exposure fuels modern phishing reconnaissance.
March is about exposure. Not the embarrassing kind — the dangerous kind. Before any attacker sends a single phishing email, they already know your org inside out. OSINT, attack surface recon, open data trails.. this month we pull back the curtain on what’s visible, what’s exploitable, and why the scariest hacks start with a Google search.
