Over Security

Kaspersky propone il suo antivirus con una VPN integrata a partire da 29,99 € all'anno: ecco come funziona l'offerta e tutti i vantaggi.

OpenAI models accessed the public internet during third-party cyber evaluations due to testing configurations to strengthen evaluation safeguards.

De Bijenkorf cyberattack at a third-party logistics provider delays orders, and refunds while a probe examines potential customer data exposure.

In June 2026, Inter-Con Security was targeted in a ShinyHunters “pay or leak” extortion campaign. The group subsequently published data it alleged was taken from the company, including 276k unique email addresses along with names, physical addresses, job titles and phone numbers. The data encompassed a combination of contacts, internal users and leads.

Maksim Silnikau, the creator and administrator of the Ransom Cartel ransomware operation, was sentenced to 16 years in prison for his role in ransomware attacks against at least 18 companies worldwide.

A Canadian man pleaded guilty today to his role in accessing company accounts at cloud storage provider Snowflake and stealing data from at least 165 organizations in a scheme to extort millions of dollars from victims.

Hackers exploited a SQL injection vulnerability to install a post-exploitation toolkit directly inside an Oracle database that was used to breach a corporate network.

A phishing campaign is exploiting fears surrounding the recently disclosed COLDCARD wallet vulnerability and suspected $88.6 million Bitcoin theft to trick users into installing ScreenConnect remote access software.

A bug in how Apple implements its Private Relay feature, which in theory masks users’ IP addresses from the sites they visit, can reveal users’ real IP addresses.

La sovranità digitale tra sfide geopolitiche e intelligenza artificiale: dati e analisi sulla leadership IT nelle aziende.

The U.S. Cybersecurity and Infrastructure Security Agency is giving federal agencies three days to mitigate vulnerabilities in IBM Langflow, N-central, and Apache Tomcat, all actively exploited.

Lo ammetto, è stato un anno difficile. Uno di quelli dove le volte che hai ingioiato il rospo, sono in pari con quelle in cui ti sei rialzato.

Follow the 72-hour Timeline of a credential attack, from stolen passwords and initial access to lateral movement, data theft, and breach response.

Google has locked hundreds of Blogger websites after a false positive claimed they violated its "Malware and Similar Malicious Content" policy, with some sites deleted from the platform.

In due episodi Amazon ha analizzato gli attaccanti far leva su tecniche di ingegneria sociale per conquistare la fiducia degli amministratori dei pacchetti e ottenere così i privilegi. Ecco come gruppi legati alla Corea del Nord hanno sferrato gli attacchi ai pacchetti NPM e come difendersi da una minaccia strutturale sull'ecosistema di dipendenze

AI is helping attackers create disposable phishing infrastructure and rapidly evolving toolkits that blocklists cannot track fast enough. Push Security explains why browser-level, technique-based detection offers a more durable defense than relying on domains, signatures, and other known-bad indicators.