Over Security

Ottimizzare i costi degli LLM può ampliare la superficie d'attacco. I rischi di caching, RAG, routing e MCP e le misure per proteggere i sistemi AI

Sextortion scheme suspects extradited to Puerto Rico face cyberstalking and interstate threats charges.

Tabung Haji cyberattack update: key TH systems and services have resumed after the Oct 8 incident, and depositors’ savings are confirmed safe.

SNU cyberattack data shows Seoul National University faced 28 hacking incidents since 2021, leaking 1,132 pieces of personal info.

Daiichi Kosho, a major Japanese entertainment system maker, disclosed that a malware infection at its contractor, Nippon Columbia, exposed more than 8.7 million customer and employee records.

Dai controlli antifrode alle blacklist, fino alla threat intelligence: che cosa succede davvero nei pochi secondi necessari ad autorizzare un pagamento.

Canadian cybersecurity executive Edward Dubrovsky has been arrested in Pennsylvania in connection with alleged extortion activity that multiple reports have linked to the FBI's ongoing crackdown on the ShinyHunters hacking group.

The cyberattacks that shook the South Korean financial sector earlier this month were launched by a Chinese hacker using the ARTEX AI penetration testing suite and Claude agents.

Traditional attack surface management helps organizations discover exposed assets, but visibility alone is not enough to address threats. Criminal IP introduces AITEM, an AI-powered approach that connects exposure discovery with investigation, risk prioritization, and response.

The FBI has arrested another suspected member of the ShinyHunters extortion group believed to be involved in the recent breach of FBI systems, Director Kash Patel announced Friday.

Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup management platform to deploy webshells and cryptocurrency miners.

L'AI agentica cambia le regole della guerra cyber: l'incertezza non riguarda più soltanto chi difende, ma anche chi attacca. Gli agenti autonomi possono rendere imprevedibili intenzioni e conseguenze delle operazioni, complicando attribuzione, deterrenza e controllo dell'escalation. Il rischio è una crisi che nessuno riesce più a governare

Germany has arrested a Russian national suspected of being a leading member of the Qilin ransomware group following extradition from Japan earlier this month.

L'attacco al fornitore della cassa pensioni svizzera Publica evidenzia i rischi supply chain e le responsabilità previste dalla NIS2 in Italia

Il Garante privacy sanziona un piccolo Comune valdostano. Nel mirino basi giuridiche generiche, riprese indebite di abitazioni private, informative inadeguate e DPIA ridotta a una riga di Excel. Il provvedimento richiama gli enti locali a distinguere rigorosamente le finalità e a costruire una governance documentata prima di attivare le telecamere

AI agents can use valid credentials to perform actions beyond their assigned permissions, creating risks that traditional access controls may not prevent. Token Security explains how organizations can enforce agent-specific policies without sacrificing autonomy.

The Cyber Express weekly roundup covers the data of 8.8M exposed in Denmark, US offers $10M for Chinese hacker, and the second Nikkei breach.

È stato ribattezzato Midnight Mimosa il malware per Android che, a differenza delle comuni infezioni che richiedono il download o l’installazione di un’app malevola, arriva direttamente preinstallato nel firmware di alcuni smartphone economici basati su piattaforme MediaTek. Anche l’Italia è nel mirino. Ecco come difendersi

Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago.

In this interview, Cyril Simonnet, Sekoia’s Chief Revenue Officer, explains how context, data, runbooks, and human judgment will shape AI-powered cybersecurity.