Over Security

AI agents can operate through human credentials and take actions that existing SOC 2 controls may not distinguish from human activity. Token Security explains why SOC 2 needs to adapt to address the security gaps created by agent identities.

OpenAI appears to be preparing a new ChatGPT Pro Max subscription that could cost $500 per month, but it's unclear when it'll begin rolling out.

This weekly roundup covers the claims of Shiny Hunters breaching the FBI, the EU KIDS Act, Discord's ban and the $7M Duelbits hack.

Il caso Fideuram mostra come AI, voice cloning e social engineering rendono più credibili le frodi online. Come cambia la verifica dell’identità

La resilienza dei sistemi ICT non è un argomento strettamente normativo ma di gestione, dal momento che impatta fortemente sulla capacità dell'organizzazione di rimanere sul mercato, comportando conseguenze non solo in termini di costi e sanzioni, ma anche di reputazione dell'organizzazione dal momento che è espressione di una corretta governance

Microsoft announced it will deprecate the Windows Deployment Services (WDS) server role starting with the next Windows Server release.

ANY.RUN at RootedCON Valencia 2026, exploring threat analysis, threat intelligence, phishing investigations, and more.

Sam Altman outlined six AI security risks at the UN Security Council, including AI autonomy, vulnerabilities, incident reporting and human control.

A Kosovar national has pleaded guilty to operating Rydox, a large illegal online marketplace that sold stolen personal information, login credentials, credit card details, and cybercrime tools.

Surfshark One è il piano proposto che consente di avere la VPN con dispositivi illimitati e l'85% di sconto per 24 mesi: ecco come attivarlo.

Microsoft has confirmed that some users may experience desktop loading issues, including black screens, after installing the August 2026 preview updates and subsequent updates.

Burnaby School District cyberattack disrupts internal network services and phone lines as officials investigate the incident and potential data leaks.

Duelbits crypto hack drains $7M from hot wallets on four blockchains. The casino is offline.

Learn how nation-state actors exploit SS7, BGP, and telecom routers to stay hidden for years, and how Cyble Vision helps SOCs spot intrusions early.

​Cryptocurrency exchange Bitget disclosed today that suspected North Korean hackers have stolen $351.6 million from its hot and warm wallets.

La telecamera di un sistema di videosorveglianza per la sicurezza urbana può produrre un trattamento per finalità di polizia e altri per mondi giuridici diversi. Ecco come riconoscerli e come distinguere il D.lgs. 51/2018 dal GDPR

AI, supply chain e geopolitica cambiano lo scenario. La sovranità digitale è diventata questione di controllo su un rischio ormai sistemico. Perché i modelli tradizionali non bastano più e serve ripensare resilienza e governance

The ban on Discord in the Philippines was lifted on Sept. 24 after the platform pledged to cooperate with the DICT and CICC.

A new variant of the MacSync malware targeting macOS systems now uses public iCloud calendar events to deliver new native payloads.

Forse in pochi ci avevano pensato, ma dal momento che gli agenti AI navigano sul Web per raccogliere informazioni e compiere operazioni per conto degli utenti, potrebbe essere una buona idea mascherarne le attività per evitare di fornire contesti non voluti a siti web e servizi di cui non sappiamo granché. Bitdefender ha infatti presentato …

A new botnet malware called Carbonato is targeting insecure hosts running Docker daemons to install the Hermes Agent AI framework and take control.

In this week’s newsletter Martin muses over a very suspicious elicitation over social media and the true value of trust within the cyber ecosystem. Hubris might be the real vulnerability that the cyber industry must worry about.

Private GitLab email addresses that allow developers to push issues or tasks to a project are being deliberately exposed in READMEs, contributing guides, and support pages used to collect bug reports.

Il sedicente hacker «IAmNotAVillain» ha pubblicato sample ovvero esempi contenenti informazioni derivanti dal ministero Interno e Giustizia. Ecco cosa mostrano le evidenze

During a recent incident response engagement, we responded to a single-host infection handed over to us by the SOC. The user downloaded a malicious “Remote Desktop Connection Manager”, a legitimate tool developed by Microsoft, but attackers were now misusing the brand. After the infection, the attackers had full access to the infected device. The RAT was ChainScript, as Nicely depicted here. [1] As soon as we took over this case, we began hunting inside the network for traces of lateral movement and/or similar techniques (TTPs, IOCs). Additionally, we found 3 additional infected computers with the same malware, with infections occurring in a short time span.

Introduction Shell startup files are well-known macOS persistence locations. In a recent MacSync Stealer/RAT intrusion documented by Huntress, the malware temporarily modified ~/.zshrc and appended a curl | zsh command. The goal was simple: when the victim opened Terminal again, the malicious code would execute in the new interactive zsh session. So during a macOS investigation, checking files such as these should be standard practice: ~/.zshrc ~/.zprofile ~/.zlogin ~/.zshenv Csaba Fitzl dedicated the first post in his Beyond the good ol' LaunchAgents series to shell startup files. But there is a small zsh feature that makes this slightly more interesting. These files can be compiled. For example: