Over Security

CVE-2026-63077 affects TeamCity On-Premises over HTTP(S). Learn the impact, affected versions, available patches, and mitigation steps.

Our experts discovered OctLurk and SilkLurk, backdoors operating primarily in memory, targeting Central Asia. They inject plugins to launch shells, scan networks, dump credentials, and keylogging.

Amy looks back at the incredible journeys that brought past guests to the world of threat intelligence.

La diffusione di strumenti di intelligenza artificiale generativa, che provocano un aumento esponenziale di segnalazioni a basso valore aggiunto, e i modelli AI più avanzati, che stanno iniziando a individuare vulnerabilità reali, riproducibili e sfruttabili con rapidità: due tendenze in evoluzione che ridefiniscono il ruolo del bug bounty

È possibile conciliare la crescita delle infrastrutture necessarie all’intelligenza artificiale con la tutela del territorio? Tutte le contraddizioni e le sfide di uno sviluppo ancora privo di regole chiare.

Kaspersky experts dissect GenieLocker: new custom ransomware variants for Windows, Linux, and ESXi systems. We found this family in attacks by Toy Ghouls, a financially motivated extortion group.

Il Senato dà il primo via libera allo schema di decreto sull’uso dell’intelligenza artificiale nelle attività di polizia, mentre il Garante Privacy chiede modifiche profonde su biometria, banche dati, riconoscimento facciale e garanzie di controllo previste dall’AI Act. Ecco i termini dello scontro, che preoccupano

Analisi dei rischi dell'IA tra agenti autonomi e cloud, ridefinendo i parametri della sicurezza informatica aziendale.

The IIT Kanpur Website Hack has taken an unexpected turn as the institute offers a technical assessment to a student who breached.

A new wp2shell vulnerability exposed WordPress to unauthenticated RCE. Read all about the affected versions, patched releases, and mitigation steps.

Managed cyber-fraud protection is the most overlooked growth line in the MSSP playbook, and most of the capability is already sitting in your SOC.

Executive Summary Between October 2025 and March 2026 (Q4 2025 – Q1 2026), the analysis of activities observed within underground forums monitored by Yarix’s Cyber Threat Intelligence Team revealed a significant increase in publications related to alleged data leaks affecting French targets, with a…

Le organizzazioni stanno rivalutando dove collocare i propri workload, riportandone una parte dai public cloud iperscalabili verso infrastrutture on-premises, private cloud o data center in colocation. Ecco cos'è il fenomeno della cloud repatriation e cosa implica

Nordpass Business è in offerta con uno sconto del 40% per 5 utenti: come funziona questa promozione, cosa incluse e i vantaggi.

Il Password manager Proton Pass è in offerta: ecco come ottenere lo sconto del 50%, come attivare il servizio e tutti i vantaggi inclusi.

Dive into a covert Linux XMRig campaign exploiting trusted access, weaponizing PAM to create forensic smokescreens, and deploying self-unlinking payloads.

Explore ANY.RUN’s July threat coverage updates, including TI Reports, fresh malware research, 42 behavior signatures, 11 YARA rules, and 703 Suricata rules.

The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web Access vulnerability in email campaigns to deliver a sophisticated backdoor called OWAReaper.

Cisco is warning that a high-severity Secure Firewall Management Center (FMC) static credential vulnerability, tracked as CVE-2026-20316, was actively exploited in zero-day attacks to gain unauthorized access to vulnerable devices.

Health-ISAC is warning healthcare and medical technology organizations of an observed increase in successful attacks by ShinyHunters, which are using social engineering to compromise single sign-on accounts and steal data from cloud services.

OpenAI says rogue agent behind Hugging Face hack broke into additional services

In a new update, OpenAI says its AI models also used publicly exposed credentials to compromise accounts on four third-party services during the recent attack on Hugging Face, expanding the scope of the four-day security incident to other organizations.

Dagli script manuali all'orchestrazione software-defined: la guida pratica a strumenti, linguaggi e processi per ridurre errori, tempi di deployment e costi operativi della rete

Non sono spariti i titoli di proprietà degli immobili dopo l'attacco ransomware contro il catasto in Romania. Tuttavia il cyber criminale ha bloccato l'infrastruttura per consultare l'elenco delle case e i diritti reali, da usare negli atti amministrativi. Ecco come mitigare il rischio anche nel mercato immobiliare

The Minnesota IT Services (MNIT) agency activated its cybersecurity incident response capabilities across the entire state after hackers targeted more than 30 community water systems in "a coordinated cyberattack."

AI agents are designed to improvise as they complete tasks, making broad permissions a growing security risk. Token Security explains why identity, intent-based access controls, and least privilege are becoming the foundation for securing agentic AI.

​​Microsoft has released the KB5101684 preview cumulative update for Windows 11 24H2 and 25H2, which 42 bug fixes and additional feature improvements for the operating system.