Over Security

Cloud assets change hourly, but most attack surface management run quarterly. See why continuous ASM with Cyble Odin closes the months-long exposure gaps.

Proton VPN offre ben 168 € di risparmio sul piano biennale che ha un costo di 2,99€ al mese: ecco come attivarla e i servizi che sono inclusi

Cleafy's TIR team analyzed the operator infrastructure behind RATHat, an Android banking trojan that abuses Accessibility Services to enable wireless debugging on the victim's phone, obtain a shell, and deploy a hidden native service outside the app. The investigation recovered three generations of the Chinese-language control panel, consistent with a Malware-as-a-Service model.

The Renfe cyberattack exposed customer names and emails via Adif's systems. Reports say AI was used and 500GB of data was stolen.

Cryptocurrency exchange Bitget has resumed Bitcoin withdrawals suspended after suspected North Korean hackers breached its systems last week and stole over $350 million.

Una nuova ricerca evidenzia la possibilità che gli attaccanti utilizzino tecniche che permettono di confondere gli agenti AI di cyber security

Citrix patched NetScaler flaws CVE-2026-88771 and CVE-2026-88772 after confirming active exploitation.

Sistemi agentici, durante i test di valutazione condotti dalle stesse aziende, sono usciti dagli ambienti chiusi in cui erano confinati e hanno toccato infrastrutture reali, appartenenti a terzi ignari. Ecco cosa succede quando un algoritmo esce dalla gabbia e svanisce la soglia tra simulazione controllata ed esecuzione ostile

A former U.S. Army soldier has been sentenced to 70 months in prison for hacking and extorting at least 10 U.S. technology and telecommunications companies between April 2023 and December 2024.

Kiteworks shutdown advisory lifted after federal threat intelligence prompted a precautionary system shutdown. No compromise has been identified.

http-terminator is PortSwigger's AI pipeline for discovering HTTP request-smuggling bugs. Which stages run, its dependencies, and its testing limits.

Dyfed-Powys Police cyberattack disrupted non-emergency systems, while an investigation examines whether staff information was accessed.

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies over the weekend to secure their systems against attacks exploiting two critical Citrix NetScaler vulnerabilities.

OpenAI is testing a new always-on assistant called "o", and references to the unannounced feature briefly showed up on the company's website.

Intro Devo un po’ accelerare con lo studio anche perché mi si è sovrapposta un’altra certificazione :-) Chiuso il giro su questa parte con il Threat Modeling, argomento che ricorre in d…

Two unpatched Citrix NetScaler zero-day vulnerabilities are reportedly being exploited in attacks, with cybersecurity agencies, security researchers, and IT providers privately warning organizations about the flaws ahead of patches expected next week.

Cloudflare has fixed a vulnerability in Containers and Sandboxes that allowed customers with a Workers Paid account to recover residual data from other customers' containers on the same physical host.

Anthropic has just announced a new Claude Marketplace, and it brings all AI-related tools into one place, including plugins, connectors, agents, and more.

Dall’Estonia a Singapore, fino all’India: in un’epoca di attacchi informatici, guerre e crisi geopolitiche, ecco come gli Stati mettono al sicuro i propri dati.

The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of a flaw on vulnerable servers.

Anthropic's Claude Opus 5.5 appears to be changing how it writes, with new analysis showing fewer obvious AI writing patterns, shorter sentences, and simpler wording compared with Opus 5.

Microsoft has paused the rollout of the KB5002907 Microsoft 365 update after users report that it deactivated, or in some cases completely removed, perpetual Office 2016 and Office 2019 installations.

Two third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer and remained accessible for more than a week despite still pointing to malicious code.

OpenAI says its AI agents uploaded user-provided images to third-party image-hosting services while carrying out research and evaluation tasks.

Secure file-sharing software company Kiteworks is urging customers worldwide to temporarily shut down their servers on Saturday for a six-hour window after receiving threat intelligence warning of a potentially imminent cyberattack.

The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised and defaced through an unpatched Grav CMS flaw that BleepingComputer has learned is an unauthenticated path traversal vulnerability.