Over Security

La Commissione europea pubblica le linee guida attuative del Cyber Resilience Act: chiarimenti su ambito applicativo, software open source, modifiche sostanziali e obblighi di segnalazione. Una guida non vincolante, ma strategica in vista delle scadenze di settembre 2026 e dicembre 2027

More than 24,000 internet-exposed servers are leaking authentication password hashes due to a 20-year-old vulnerability in their Baseboard Management Controller (BMC) interface.

Cyble researchers break down why Tanaka became H1 2026's most active data leak broker, targeting BFSI, government, and technology sectors worldwide.

Employment scams are targeting job seekers, with the FBI and LinkedIn warning about money mule schemes, stolen PII, and forced labor.

Open source o sistemi proprietari? Il dibattito tra architetture aperte e chiuse rischia di semplificare eccessivamente il problema. La sicurezza informatica nasce da progettazione, governance e strategie di difesa multilivello, non dalla sola trasparenza o segretezza del codice

A Hermes AI agent was used in an attack targeting Thailand's Ministry of Finance, where researchers also identified a Hades implant.

Stop alle telefonate spam con Incogni: ecco come ottenere uno sconto del 50% e tutti i vantaggi inclusi nell'offerta del gruppo.

Talos IR's Q2 report highlights a significant surge in phishing-based initial access and the weaponization of legitimate remote management tools. Learn how to sharpen your defenses.

Per chi cerca un'offerta vantaggiosa per la VPN, TotalAV propone la VPN con antivirus integrato a soli 1,59 euro al mese per 1 anno.

Healthcare billing company Medical Computer Business Services (MCBS) has disclosed that a 2025 network breach exposed the sensitive information of more than 1.2 million people.

Origin Energy data breach exposes details of 900,000 customers after unauthorized access. Frank Calabria warns of scams as investigations continue.

Learn how SOC teams can detect, investigate, and respond to modern AiTM phishing with browser-level visibility and threat intelligence.

Il modello della sicurezza del cantiere navale dimostra che l'intelligenza artificiale può rafforzare in modo decisivo la prevenzione degli infortuni. Però la tecnologia non è mai neutra quando osserva le persone. Ecco la sequenza per le organizzazioni volte a proteggere i lavoratori dagli infortuni e i loro diritti fondamentali

L'Agenzia per la Cybersicurezza europea ha pubblicato le linee guida per gli appalti in ambito sanitario, un settore particolarmente vulnerabile alle minacce informatiche e uno dei più colpiti, specie di questi tempi. Da questo report bene si evince che l’esposizione elevata sia dovuta a budget limitati per la cyber sicurezza. Vediamo meglio

Lo schema di decreto che recepisce la direttiva UE sul lavoro mediante piattaforme digitali introduce nuove regole su trasparenza algoritmica, supervisione umana e tutela dei dati personali. Ma resta aperta la sfida di trasformare le nuove garanzie in tutele davvero efficaci

Kaspersky researchers reveal previously undocumented malware attributed to Mirage Kitten (UNC1549, Smoke Sandstorm, Nimbus Manticore): NightLedger backdoor, ArcBridge, and BridgeHead tunneling tools.

In June 2026, Houston City College was the target of a ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from the college was later published publicly and included 832k unique email addresses along with names, addresses, phone numbers, academic records, and other personal information relating to both current students and alumni.

ZTNA is emerging as an alternative to VPN as federal agencies weigh security risks, zero trust requirements, costs, and technical limitations.

Hackers are actively exploiting a vulnerability in the FastJson open-source Java library, allowing remote code execution without user interaction or elevated privileges.

Arista has patched a maximum-severity command injection vulnerability in on-premises VeloCloud Orchestrator deployments that is being actively exploited in attacks.

A botnet called Dysphoria has compromised around 200,000 devices across the world and is using them for distributed denial of service (DDoS) attacks and traffic relay operations.

A proof-of-concept exploit for "Certighost," a Windows Active Directory Certificate Services vulnerability, has been released that can allow authenticated attackers to potentially compromise a Windows domain.

An untold number of Claude chats and Artifacts — the interactive mini apps and documents users can build inside Claude — were found publicly searchable on

Apple is being sued by three people who claim approximately $1.8 million in Bitcoin was stolen after downloading and using a fraudulent Sparrow Wallet application from the App Store.