Over Security

Quanto sareste disposti a pagare per usare Claude e ChatGPT? Il passaggio dalle tariffe fisse a quelle a consumo ha fatto esplodere i budget aziendali e sta mostrando la fragilità del sistema AI (modificato)

Quanto sareste disposti a pagare per usare Claude e ChatGPT? Il passaggio dalle tariffe fisse a quelle a consumo ha fatto esplodere i budget aziendali e sta mostrando la fragilità del sistema AI (modificato)

Le agenzie di cyber sicurezza dei Five Eyes avvertono governi e imprese: l’AI sta accelerando la minaccia cyber. Ecco cosa cambia per aziende, governance e resilienza digitale

A new backdoor dubbed Mistic has been observed in financially motivated attacks targeting organizations in the insurance, education, IT, and professional services sectors.

Kaspersky researchers analyze a new global campaign dubbed StrikeShark that delivers Cobalt Strike Beacon via custom SharkLoader malware.

Per chi cerca una VPN con connessione a internet veloce l'offerta di Surfshark: ecco come attivarla e quali sono i vantaggi imperdibili.

Il rischio non è solo il furto di credenziali: il Digital Identity Shadowing descrive uno scenario in cui un attaccante crea un’identità digitale SPID parallela, formalmente valida e intestata alla vittima. Una minaccia che mette alla prova governance, antifrode e fiducia digitale

KDDI data breach exposes up to 14.22M emails and passwords via ISP systems after threat actor exploited third-party software flaws.

What Happened Over the course of September 2025 to May 2026, Hargreaves Lansdown the UK-based investment platform has been the subject of IT...

Hanno le allucinazioni perché non possono percepire i limiti di ciò che sanno e sono addestrate a non rispondere mai "non lo so". Ma quando questo avviene in ambiti critici come la sicurezza informatica, gli effetti e danni possono essere rovinosi. Parla Enrico Frumento, Cybersecurity Research Lead del Cefriel

The National Health Care Fraud Takedown led to charges against 455 defendants tied to over $6.5 billion in alleged health care fraud.

Vulnerabilities in QNAP NAS, including CVE-2025-59382, could enable code execution, data theft, privilege escalation, and DoS attacks.

Two alleged Scattered Spider members pleaded guilty to the Transport for London cyberattack that exposed customer data.

Two alleged Scattered Spider members pleaded guilty to the Transport for London cyberattack that exposed customer data.

Learn about PCI Compliance and its crucial role in securing your checkout page and protecting customer payment information.

Between June 16 and June 22, we detected phishing campaigns spanning tech support scams delivered via Facebook ads on Azure infrastructure, Microsoft credential harvesting hosted on Heroku and promoted through Google Ads, Paperless Post invitation lures targeting multiple email providers. What ties them together: these campaign abused trusted infrastructure both to host and deliver their attacks.

A high-severity SSRF vulnerability, tracked as CVE-2026-20230, in Cisco Unified Communications Manager Server is now being exploited in attacks.

Tata Electronics has confirmed in a statement to BleepingComputer that it was the target of a cyberattack that impacted parts of its IT infrastructure.

​​Microsoft has released the KB5095093 preview cumulative update for Windows 11 24H2 and 25H2, which fixes numerous bugs and begins rolling out new features, including the new Point-in-Time restore feature.

Healthcare technology company Xsolis says that sensitive data belonging to nearly 1.4 million individuals was compromised in a phishing attack that gave attackers access to its network.

A new macOS ClickFix campaign is using Terminal commands to silently download, mount, and launch info-stealing malware from malicious disk image (DMG) files.

Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled Transport for London, the entity responsible for the public transport network in the Greater London area. The duo were…

Sicurezza fisica e logica dei data center per l'outsourcing di risorse hardware: classificazione, convergenza IT/OT e checklist operativa per il sopralluogo

Two members of the 'Scattered Spider' cybercrime group pleaded guilty to hacking the Transport for London (TfL) systems in 2024.

LastPass announced that hackers accessed customer data from its Salesforce environment after stealing the company's OAuth tokens in the Klue supply chain attack earlier this month.