Over Security

Anthropic has just extended access to Claude Fable 5 for paid subscribers until July 19, giving you another week to keep using the most powerful model.

A new version of the RedHook Android malware abuses the Android Wireless Debugging (Wireless ADB) mechanism in a novel way to gain shell-level privileges without requiring a computer connection.

Organizzazioni e collettivi non occidentali vogliono sfruttare le potenzialità delle intelligenze artificiali generative svincolandosi però da Big Tech. Ma devono scontrarsi con la disparità di potere

New PIXM data: roughly 60% of the phishing pages users actually click in 2026 arrived outside corporate email — led by ad networks, not inboxes. Why the AI era moved phishing past the mail gateway.

The Australian Cyber Security Centre (ACSC) issued an alert about a global exploitation campaign targeting vulnerable content management systems (CMS) and plugins.

In June 2026, Glendale Community College was the target of a ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from Glendale was later published online and included almost 800k unique email addresses along with various other data fields, including names, addresses, phone numbers, Social Security numbers and other information relating to student enrolments. In its disclosure notice, the college advised that "the potentially impacted information may vary for each individual and may include all or just one of the above-listed types of information".

A PNG hiding a prompt injection could steal your repo's secrets, researchers demonstrate. The technique, dubbed 'Ghostcommit,' slipped past AI code reviewers CodeRabbit and Bugbot, which never open image files at all, then convinced a coding agent to read a repo's .env and write every secret into the code as a list of numbers.

Six vulnerabilities in the widely used U-Boot bootloader have been discovered that could allow attackers to execute malicious code during device boot, potentially enabling stealthy firmware attacks that compromise security protections and install persistent malware.

A 34-year-old Armenian man has pleaded guilty to hacking U.S. companies and deploying the infamous Ryuk ransomware to encrypt their systems.

The Dutch National Police (Politie) says it has found "strong indications" that Dutch hackers have been involved in a February breach at the telecommunications provider Odido.

Progress Software is emailing ShareFile customers who use Storage Zone Controllers to immediately shut down their servers after identifying what it describes as a "credible external security threat" targeting the on-premises secure file-sharing software.

Hackers are actively exploiting a critical vulnerability in the official Docker image for the Gitea self-hosted Git service that allows attackers to impersonate any user, including administrators.

A Bulgarian national has been charged with stealing $290,000 in government-seized cryptocurrency while serving 121 months in prison for helping launder millions stolen from American fraud victims.

Una rete digitale coprirà quasi 2.600 chilometri, per collegare satelliti, droni, radar, sensori terrestri e sistemi di tecno sorveglianza lungo l'intero fianco orientale europeo. Ecco i dettagli della difesa della NATO per rilevare e bloccare un attacco prima che penetri in profondità nel territorio alleato

La Corte di Cassazione con una recente sentenza torna sulla questione concernente la natura dei termini entro i quali l’Autorità Garante per la protezione dei dati deve rispondere. Se il Garante non risponde, per le organizzazioni è un problema. Ecco le regole

AI agents are accelerating the growth of non-human identities, making it harder for organizations to understand what exists, who owns it, and what it can access. Netwrix explains why stronger visibility and identity governance are essential as AI expands the enterprise attack surface.

Il phishing si evolve, soprattutto nell'era dell'Intelligenza Artificiale e con l'impiego degli agenti, ma sta solo cambiando le vesti di una tecnica d'attacco che è e rimane fondamentalmente umana

Enterprise infrastructure is increasingly under pressure as attackers and researchers alike expose weaknesses across the technology stack. This week, a

La guerra in Ucraina non si combatte solo sul terreno, nel mare o nello spazio aereo. Il cyberspazio è uno degli scenari più attivi, dove vengono perpetrati quotidianamente decine di attacchi mirati alle infrastrutture civili e militari. Il continuo bersagliamento di infrastrutture energetiche, reti di comunicazione e servizi pubblici ha praticamente trasformato l’intero Paese in …

The Zimbra security team urged customers to patch a critical vulnerability affecting the Classic Web Client used to access the Zimbra Collaboration suite.

Le nuove Guidelines 02/2026 dell’EDPB trasformano l’anonimizzazione da tecnica a processo di assessment continuo. Tra rischio di re-identificazione, AI e accountability, l’obiettivo non è solo uscire dall’ambito del GDPR, ma rafforzare la tutela dei diritti fondamentali

Bisogna smettere di progettare faldoni di documenti e, finalmente, iniziare a progettare le decisioni. Ecco i pilastri della governance by design come modello integrato di direzione aziendale

Aruba Hosting Prestashop è la soluzione per avere l'e-commerce a soli 9,90 euro: come funziona l'offerta, cosa comprende, vantaggi inclusi.