The threat

Cyber security: alerts regarding attacks on businesses have doubled, with the spotlight on LinkedIn and job interviews

An overview from the National Cybersecurity Agency covering the first six months of this year: 43,675 preventive notifications were sent to public and private entities (+20,000 compared with the first half of 2025)

2' min read

Translated by AI
Versione italiana

2' min read

Translated by AI
Versione italiana

Cyberattacks are on the rise, whilst the number of preventive alerts issued by the National Cybersecurity Agency has doubled. In the first six months of this year, the ACN sent 43,675 preventative alerts to public and private entities (+20,000 compared with the first half of 2025), around 250 every day.

At the same time, the Agency also draws attention to other threats, such as fake job interviews on LinkedIn designed to infiltrate companies via software developers. The human factor, in fact, remains the Achilles’ heel of security: almost two-thirds of breaches stem from user errors, ranging from phishing campaigns to poor credential management. The ACN has therefore shone a spotlight on an insidious attack campaign designed to exploit fake recruitment processes to trick victims into installing malware on their computers without realising it.

Loading...

From January to June, around 250 preventative alerts per day

The figures give an idea of the scale of the problem. The total number of preventive alerts from January to June 2026 – around 250 per day – is almost double that of last year (+20,532): the increase in vulnerabilities has led to a steady and growing expansion of Acn’s monitoring operations.

Quacivi: ‘Support for local authorities and businesses based on a participatory regulatory model’

“We intend to continue and strengthen our support for public administrations and businesses in meeting the obligations set out in cyber legislation,” emphasises Director-General Andrea Quacivi, “through a participatory regulatory model and a cooperative approach to compliance. With this shared vision, we must and can ensure the digital protection of the national economy.”

The Agency’s capacity has been enhanced

Monitoring and prevention efforts are being stepped up in response to the proliferation of digital threats. With the notification obligations now in force under the NIS2 Directive (EU 2022/2555), the National Cybersecurity Agency’s capacity to monitor, detect and manage cyber incidents has been strengthened. In the first half of 2026, CSIRT Italia handled 2,171 cyber incidents (+47 per cent), but according to ACN experts, this increase is primarily due to the expansion of the regulatory monitoring scope rather than an escalation of the threat.

How the attack unfolds on LinkedIn

As far as LinkedIn is concerned, the attack begins in a seemingly harmless, unsuspecting manner: the potential candidate is contacted on the social network by a self-styled recruiter offering a job opportunity and inviting them to sit a technical test. To lend credibility to the contact, tools commonly used in recruitment processes are employed, such as platforms for booking appointments and organising online interviews.

The next step is to send a link asking the recipient simply to open a project and analyse it. Hidden within the project, however, are files that exploit legitimate features of the development software to automatically execute malicious code. Attackers are thus able to take control of the victim’s computer, not only with the aim of compromising it but also to gain access to login credentials, cloud platforms and other sensitive corporate systems. A simple job interview can thus become a point of entry into complex infrastructures that can then be attacked.

How to protect yourself

ACN experts urge people to exercise the utmost caution when dealing with job offers received online, particularly when these involve downloading and running links from unknown sources. You should always verify the recruiter’s identity; analyse the contents of any files received beforehand; and use isolated environments to run unrecognised software.

Copyright reserved ©
Loading...

Brand connect

Loading...

Newsletter

Notizie e approfondimenti sugli avvenimenti politici, economici e finanziari.

Iscriviti