Over Security

Tre tecniche descritte da Unit 42 colpiscono Google Password Manager in Chrome per Windows. Non rompono la crittografia delle passkey di Google e richiedono un computer già compromesso, ma mostrano che sincronizzazione, recupero e fiducia nel dispositivo possono diventare punti deboli

Cryptocurrency hardware wallet maker Trezor says an August data breach at its shipping and logistics provider, ShipMonk, affects an additional 67,000 U.S. customers.

Attackers exploited MikroTik RouterOS flaws from Sept. 2, a day before patches shipped. CERT Polska details the MikroTrick chain; 122,500 devices exposed.

Hackers are exploiting a chain of two recently disclosed vulnerabilities in MikroTik routers to take control of devices with SSH services exposed to the internet.

OpenAI appears to be testing a new "Writing Style" feature for ChatGPT that can learn how you write by looking at examples from your connected apps.

ConnectWise has shared temporary mitigation measures for a new ScreenConnect Remote Access vulnerability that it plans to patch later this week.

Cybersecurity nelle PMI: come funzionano il fattore umano e la protezione endpoint e come attivare l'offerta di Kaspersky per le aziende.

The Liquid Network security incident saw nearly 4,000 BTC stolen, with hackers offering to return most funds after the exploited bug is fixed.

La compliance diventa una capacità organizzativa continua, documentata e verificabile, fino alla dismissione della tecnologia. Ecco le convergenze e le differenze tra i due regolamenti, il contributo degli standard tecnici e delle linee guida ENISA e le ricadute concrete per gli attori della filiera per tradurre i principi in operatività quotidiana

Gli agenti OpenAI non hanno sviluppato una volontà autonoma di “fuggire”: hanno sfruttato confini deboli, permessi eccessivi e canali di comunicazione non previsti fino a raggiungere sistemi esterni. Il caso Hugging Face mostra perché con l’AI agentica la sicurezza deve essere imposta dall’architettura, non affidata al comportamento del modello

WRAITH combines BeEF-style browser hooks with blind-XSS capture and a credentialed Page Mirror. Tested locally, with its limits examined.

The Mathspace data breach affected 1,079,819 people in Australia and New Zealand. Here’s what data was exposed and what users should know.

G7 nations and CISA call for immediate post-quantum cryptography adoption as quantum computers threaten public-key encryption.

N-able has released an emergency hotfix for a maximum-severity remote code execution (RCE) flaw affecting its N-central remote monitoring and management (RMM) platform.

$10 million reward for Amir Yaryab, an alleged IRGC-CEC cyber leader accused of directing attacks on critical infrastructure and PLCs.

OpenAI is now rolling out ChatGPT Astra, its most powerful model to date, to those with a $20 Plus subscription, but there's no word on when free users will get access..

Threat actors have adopted the ASCII smuggling technique in phishing campaigns, using invisible Unicode characters to evade email security filters.

I navigatori ottimizzano il viaggio del singolo, ma quando tutti seguono la stessa logica l’effetto si ribalta: il traffico si concentra e le emissioni aumentano

A massive cybercriminal operation is leveraging thousands of compromised small-business websites to deliver ClickFix payloads stored in smart contracts on the BNB Smart Chain (BSC).

OpenAI admits it did not disclose an incident where autonomous AI agents hijacked a German wiki, created 18,000 posts, shared answers, and bypassed restrictions, saying it treated the activity as model "misalignment" rather than a security breach.

Learn how WordPress security plugins function. Discover what features are necessary to secure your website effectively.

Multiple lawsuits have been filed against identity verification company IDScan after hackers allegedly breached the service and offered to sell more than 153 million driver's licenses.

Attackers have begun targeting a critical-severity Citrix NetScaler auth bypass flaw (CVE-2026-19490) in the wild, according to vulnerability intelligence company Previdian.

Che la sicurezza cyber debba coinvolgere anche l'IA è vero, ma non è possibile delegarla a questi sistemi o, peggio ancora, considerarli come un focus principale sia d'attacco che di difesa. Perché altrimenti il rischio è quello di perdere quella visione d'insieme necessaria per mantenere una corretta postura di sicurezza cyber