Over Security

JetBrains is warning of a critical authentication bypass vulnerability affecting TeamCity On-Premises that could be exploited to achieve remote code execution.

As experts have warned for the last two years, some companies — like Microsoft and now Google — are finding and patching an exponential number of bugs in their products, thanks to the use of LLMs and AI tools.

La segnalazione arriva da un nostro lettore che ha ricevuto la segnalazione direttamente da Postel. Le richieste? Non aprire le mail, cancellarle e rispondere dicendo di averlo fatto. Peccato che siano passate sei settimane

Amazon linked multiple high-profile open-source software supply chain attacks targeting the Node Package Manager (npm) ecosystem to North Korean hackers.

Amy hikes Virginia’s most difficult trail and muses on the persistent challenges of cybersecurity. The two aren't dissimilar.

Broadcom has released security updates to fix five vulnerabilities in VMware vCenter, ESX, Workstation, and Fusion, including three critical flaws that allow attackers to bypass authentication, execute arbitrary code, or escape from a virtual machine to the host.

Google says artificial intelligence is dramatically increasing the number of security vulnerabilities it can find and fix in Chrome, with more than 1,000 security bugs patched across the browser's two most recent releases as it expands its use of AI.

Residential security company Brinks Home has disclosed that hackers breached some of its systems and are threatening to leak allegedly stolen data.

Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited content streaming for a one-time fee, warning that they secretly rent the user's Internet connection out to strangers. But a…

Threat actors are impersonating IT support staff in Microsoft Teams calls to gain remote access to corporate devices and deploy Chaos ransomware in attacks targeting North American organizations.

Come la telemetria dei flussi offre visibilità completa sull'infrastruttura, aiuta a individuare colli di bottiglia e minacce, oltre a diventare la base dati per l'automazione della rete

American semiconductor company Analog Devices announced that an unauthorized party accessed some of its systems and exfiltrated certain files.

Cybersecurity experts told TechCrunch that one of the biggest lessons to be taken from the OpenAI hack against HuggingFace has nothing to do with AI, but traditional cybersecurity defense.

Attackers rarely stop after gaining initial access. Huntress analyzes a real-world intrusion to show how threat actors establish persistence, disable defenses, and reshape compromised systems, and why defenders must investigate the original entry point rather than simply remove the malware.

CVE-2026-63077 affects TeamCity On-Premises over HTTP(S). Learn the impact, affected versions, available patches, and mitigation steps.

Our experts discovered OctLurk and SilkLurk, backdoors operating primarily in memory, targeting Central Asia. They inject plugins to launch shells, scan networks, dump credentials, and keylogging.

Amy looks back at the incredible journeys that brought past guests to the world of threat intelligence.

La diffusione di strumenti di intelligenza artificiale generativa, che provocano un aumento esponenziale di segnalazioni a basso valore aggiunto, e i modelli AI più avanzati, che stanno iniziando a individuare vulnerabilità reali, riproducibili e sfruttabili con rapidità: due tendenze in evoluzione che ridefiniscono il ruolo del bug bounty

È possibile conciliare la crescita delle infrastrutture necessarie all’intelligenza artificiale con la tutela del territorio? Tutte le contraddizioni e le sfide di uno sviluppo ancora privo di regole chiare.

Kaspersky experts dissect GenieLocker: new custom ransomware variants for Windows, Linux, and ESXi systems. We found this family in attacks by Toy Ghouls, a financially motivated extortion group.

Il Senato dà il primo via libera allo schema di decreto sull’uso dell’intelligenza artificiale nelle attività di polizia, mentre il Garante Privacy chiede modifiche profonde su biometria, banche dati, riconoscimento facciale e garanzie di controllo previste dall’AI Act. Ecco i termini dello scontro, che preoccupano

Analisi dei rischi dell'IA tra agenti autonomi e cloud, ridefinendo i parametri della sicurezza informatica aziendale.

The IIT Kanpur Website Hack has taken an unexpected turn as the institute offers a technical assessment to a student who breached.

A new wp2shell vulnerability exposed WordPress to unauthenticated RCE. Read all about the affected versions, patched releases, and mitigation steps.

Managed cyber-fraud protection is the most overlooked growth line in the MSSP playbook, and most of the capability is already sitting in your SOC.

Executive Summary Between October 2025 and March 2026 (Q4 2025 – Q1 2026), the analysis of activities observed within underground forums monitored by Yarix’s Cyber Threat Intelligence Team revealed a significant increase in publications related to alleged data leaks affecting French targets, with a…