Over Security

A major software supply chain attack has compromised hundreds of widely used npm packages tied to the AntV ecosystem, exposing developers and organizations to

Microsoft plans to raise the quality bar of Windows 11 drivers, as drivers "sit at the heart of every Windows experience" and connect the OS to the "silicon, components, and peripherals."

The attacks are part of a wider campaign known as Mini Shai-Hulud, which has already compromised several open source projects and, in turn, developers and companies that use them.

Andrej Karpathy has joined Anthropic to work on pre-training. He previously co-founded and worked at OpenAI and led computer vision and AI at Tesla.

Microsoft has confirmed user reports that the Teams team collaboration app is displaying non-dismissible location prompts on some macOS systems.

Cisco Talos’ Vulnerability Discovery & Research team recently disclosed eight vulnerabilities in TP-Link, and one each in Adobe Photoshop, OpenVPN, and Gen Digital's Norton VPN. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, in adherence to Cisco’s third-party vulnerability disclosure policy, except the Norton VPN vulnerability, which was discovered in-use before a patch was available.  For Snort coverage that can detect the exploitation of these

È stata identificata una nuova campagna malware che sta prendendo di mira sia utenti macOS sia utenti Windows con il trojan JobStealer nascosto in piattaforme fraudolente che imitano servizi professionali utilizzati per colloqui di lavoro da remoto. L’obiettivo è rubare dati personali. Tutti i dettagli

Microsoft ha annunciato il takedown di Fox Tempest, gruppo di cyber criminali che offriva un servizio malware signing as a service capace di fare apparire come legittimi dei software malevoli

Threat actors earlier today published more than 600 malicious packages to the Node Package Manager (npm) index as part of a new Shai-Hulud supply-chain campaign.

Microsoft's total vulnerability count stayed steady in 2025, but critical flaws surged year over year. BeyondTrust breaks down why attackers are increasingly focused on privilege escalation and identity abuse.

Convenience store chain giant 7-Eleven confirmed that its systems were breached in a cyberattack claimed by the ShinyHunters extortion group last month.

VPN integrata nel browser o software dedicato? Scopri i limiti dei proxy web, i pericoli di WebRTC leak e come validare la sicurezza.

VPN integrata nel browser o software dedicato? Scopri i limiti dei proxy web, i pericoli di WebRTC leak e come validare la sicurezza.

We are proud to announce that Cyble has been named a Challenger in the first-ever Gartner® Magic Quadrant™ for Cyberthreat Intelligence Technologies.

Attackers still abuse Microsoft’s legacy MSHTA utility on Windows to execute malicious VBScript and JavaScript payloads.

IT teams are increasingly overwhelmed by alerts from disconnected systems, forcing responders to manually coordinate investigations during network incidents. This webinar explores how automation and AI-assisted workflows can help reduce response delays and improve operational coordination.

Microsoft says customers in restricted network environments may encounter Windows Update failures after installing the January 2026 optional non-security preview updates.

Explore 5 phishing-driven social engineering attacks targeting companies in 2026 and learn how CISOs can close SOC visibility gaps with ANY.RUN.

When Filenames Become Attack Surfaces: Weaponizing NASA's CFITSIO Extended Filename Syntax

Cisco Talos has uncovered a BadIIS variant — identifiable by its embedded "demo.pdb" strings — that functions as commodity malware, likely sold or shared among multiple Chinese-speaking cyber crime groups operating under a malware-as-a-service (MaaS) model for continuous monetization.

I cavi sottomarini rappresentano la spina dorsale dell'economia digitale. La minaccia dell'Iran a mettere dazi sui cavi sottomarini che attraversano lo Stretto di Hormuz significa mettere in pericolo l'integrità di infrastrutture critiche per la connettività digitale mondiale

We sat with Sarah Psaila (Group-IB Europe) to discuss why iGaming operators are measuring the wrong fraud signals and seeing bloated success metrics and what intelligence-driven protection against fraud looks like in 2026.

We are proud to announce that Cyble has been named a Challenger in the first-ever Gartner® Magic Quadrant™ for Cyberthreat Intelligence Technologies.

Austria stopped 500 Eurovision cyberattack attempts targeting the Song Contest in Vienna amid protests and heightened security.

Banks rush to tackle AI-driven cyber risks as new vulnerabilities raise concerns across the global financial sector.

Attackers are exploiting NGINX vulnerability CVE-2026-42945, also called NGINX Rift, exposing millions of servers to attacks.

Le nuove FAQ ACN sui fornitori rilevanti NIS (FRN.8 e FRN.9) chiariscono i casi di subfornitore e fornitore infragruppo. Ecco come cambiano le regole e cosa devono fare concretamente le aziende per la compliance NIS2 entro il 31 maggio 2026