Over Security

Microsoft Excel users report that this week's KB5002914 Office security update is breaking copy-and-paste operations and formula dragging, with affected users saying that removing or rolling back the update restores normal functionality.

Surfshark disclosed that hackers accessed one of its internal test servers after a configuration error exposed it to the internet.

IDScan confirms breach after hackers offer 153 million driver’s license scans for sale

GreyNoise says AI agents compromised 440 PaperCut servers in 48 countries. The vulnerabilities are confirmed — the AI orchestration claim is not yet corroborated.

In this week's Threat Source newsletter, Joe explores why the word "burnout" often fails to capture the true toll of working in the cybersecurity industry and why we need better language to address it.

A threat actor, likely Russian-speaking, used hundreds of AI agents to develop and launch a global exploitation campaign targeting vulnerable PaperCut NG/MF servers.

BforeAI has partnered with the Food and Ag-ISAC to bring predictive, preemptive attack intelligence to targeted supply chains.

Addestrare i modelli estremamente potenti del futuro affinché siano saldamente allineati è una sfida tecnica irrisolta che richiede una ricerca continua e un’eccellenza operativa per essere affrontata

Cisco Talos says two recently patched Secure Firewall Management Center (FMC) vulnerabilities have been exploited by three separate threat clusters linked to ransomware and state-sponsored attacks.

BforeAI has partnered with the Food and Ag-ISAC to bring predictive, preemptive attack intelligence to targeted supply chains.

Agenti AI che usano un wiki pubblico come memoria esterna, condividono istruzioni e si adattano quando l’attività viene ostacolata. Il caso ricostruito da Reuters porta OpenAI a riconoscere una zona grigia tra misalignment e incidente cyber e riapre una questione decisiva: quando un comportamento anomalo deve diventare pubblico?

Identity verification company IDScan has confirmed that hackers accessed customer data stored in its cloud platform, days after reports linked the company to a massive database containing more than 153 million driver's license scans.

Identity was the target in roughly half of all confirmed malicious activity. Prophet Security breaks down the four main attack patterns seen across customer environments between May and July 2026, and explains why some attacks succeeded while others were blocked.

Multiple cyber-espionage groups deployed an exploit kit dubbed "BlueMoon" that leveraged zero-day vulnerabilities in Microsoft Windows and Google Chrome.

Gli HMI collegano operatori e processi industriali, ma possono anche diventare punti critici. Accessi, sistemi embedded, connessioni remote e backup devono essere protetti per evitare che un terminale compromesso si trasformi in fermo produzione

Cyble has rolled out a significant upgrade to Executive Monitoring inside Cyble Vision, bringing unified findings, AI-driven scoring, and expanded alerting

How infostealer malware fuels the credential theft pipeline — from harvesting and stealer logs to enrichment and dark web marketplace listings.

Microsoft has fixed a known issue that wiped mouse settings on some Windows 11 systems after installing the KB5120998 August 2026 preview update.

The EU Cyber Resilience Act's 24-hour vulnerability reporting duty starts Sept. 11, 2026. Deadlines, scope, ENISA's platform and €15M penalties explained.

Dal 27 al 29 ottobre, it-sa Expo&Congress 2026 riunisce a Norimberga la community europea della cyber security per confrontarsi su AI, resilienza, sovranità digitale e nuove minacce. Per i nostri lettori è disponibile un biglietto gratuito valido per i tre giorni della manifestazione

Di fronte a uno scenario sempre più complesso, limitare l’intervento a logiche legate a scelte tecnologiche non è sufficiente. Serve un ecosistema completo che permetta il salto di qualità

Discover why ANY.RUN is a G2 Malware Analysis Leader and how it helps SOC teams deliver measurable value to their enterprises.

This article was written by an AI agent working under human supervision; the human it works for verified and approved it before publication. An open directory on a freshly-registered Indonesian dom…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a critical WatchGuard Firebox firewall vulnerability, which it flagged as actively exploited in December.

Surfshark al prezzo di 2,49 euro al mese offre una VPN con antivirus integrato su dispositivi illimitati: ecco come attivarla e come funziona