Over Security

Chinese hackers tracked as 'UAT-7810' are actively evolving their malware to expand their Operational Relay Box (ORB) network by compromising internet-facing networking devices, primarily unpatched Ruckus routers.

A hidden authentication backdoor has been found in multiple Tenda router firmware versions, potentially allowing an attacker to gain administrative access to the device's web management panel.

Evoluzioni e clausole di esclusione nelle polizze cyber insurance: impatto NIS2, requisiti minimi, esclusioni supply chain e ransomware e gestione sinistri

Le banche hanno tempo fino al 31 ottobre 2026 per presentare un piano contro le minacce cyber abilitate dall’intelligenza artificiale. La richiesta dà seguito agli allarmi dopo uscita di Mythos

La distillazione, una tecnica messa a punto più di un decennio fa per rendere più efficienti i sistemi di apprendimento automatico, oggi è utilizzata anche per replicare, senza autorizzazione, il comportamento di modelli proprietari altrui. Ecco perché la minaccia sta assumendo proporzioni industriali

16–30 June 2026 — Cyber Attacks Infographic | HACKMAGEDDON Cyber Threat Intelligence · HACKMAGEDDON 16–30 June 2026Cyber Attacks Infographic 96 confirmed incidents across t…

The National Police in Spain have arrested a man who is suspected of being an active member of the CyberArmy of Russia Reborn (CARR) and Z-Pentest, both pro-Russian hacktivist groups.

Gli attacchi rappresentano una minaccia sofisticata che impone di ripensare la sicurezza ben oltre il software. Ecco perché e come difendersi

ANY.RUN solutions are used to compare two Banana RAT branches and analyze the malware's evolution along with defence strategies.

ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't guarantee a secure pipeline, and how organizations can better govern their CI/CD workflows.

JADEPUFFER è la prima operazione ransomware pilotata end-to-end da un agente IA: violazione di un'istanza Langflow, furto massivo di credenziali e attacco automatizzato a database Nacos/MySQL. Tecniche, indicatori di compromissione e contromisure per CISO e aziende

Tomorrow's webinar explores how behavioral AI can help organizations detect sophisticated phishing, business email compromise, and account takeover attacks while reducing alert fatigue through automated investigation and response workflows.

A 16-year-old Linux kernel vulnerability, dubbed Januscape, allows attackers to escape a virtual machine and execute arbitrary code on the host.

This report contains industrial threat statistics for Q1 2026, including industrial threat distribution by type, source, region and industry.

Talos’ latest findings on UAT-7810 indicate that the threat actor continues to develop their custom-made malware.

16–30 June 2026 cyber attacks timeline: 96 incidents — ransomware, supply-chain attacks, and nation-state espionage analyzed.

Microsoft says the Windows settings backup and restore tool will be enabled by default on Microsoft Entra-joined or Microsoft Entra hybrid-joined enterprise systems after upgrading to Windows 11 26H2.

This blog covers Group-IB’s overview of Scattered Spider, backed by Group-IB’s proprietary intelligence, providing additional information to what has already been reported publicly, with added clarification on 0ktapus and how it is related to Scattered Spider.

BeyondTrust warned customers to patch two critical security flaws in its Remote Support (RS) and Privileged Remote Access (PRA) software that could allow attackers to bypass authentication.

Microsoft has begun testing the Cloud Rebuild recovery feature in the latest Windows 11 Insider Preview builds released for users in the Experimental channel.

La resilienza, infatti, non è uno stato stabile ma una capacità dinamica che deve evolvere insieme ad altri fattori. Ecco il ruolo strategico del riesame continuo, degli aggiornamenti periodici, delle esercitazioni e degli audit, per evitare che un piano non aggiornato si trasformi in fattore di rischio

Threat actors are abusing Microsoft Teams voice calls by impersonating corporate IT support staff to trick employees into installing the EtherRAT malware, giving attackers initial access to corporate networks.

A phishing campaign is impersonating more than 30 well-known brands, including Adobe, Netflix, Coca-Cola, and OpenAI, in fake job interviews to steal Google account credentials from marketing professionals.