Over Security

Controlli di filiera inadeguati o mancanti comportano una serie di rischi per l'organizzazione, nonché in alcuni casi una violazione di obblighi normativi cogenti. Considerate le minacce diffuse, però, la gestione dei fornitori è un elemento imprescindibile per la governance di sicurezza cyber

Gen's H1 2026 Threat Report examines two separate attack chains. One used compromised business inboxes and browser manipulation in a banking-malware campaign, while the other used clipboard hijacking to redirect cryptocurrency payments.

The North Carolina Ports Authority has confirmed that a cyberattack disrupted IT systems and slowed operations at Port of Wilmington, Port of Morehead City, and Charlotte Inland Port.

The Cyber Express latest weekly roundup covers this week's top cyber threats, including Qilin ransomware and third-party supply chain cyberattacks.

The Cyber Express latest weekly roundup covers this week's top cyber threats, including Qilin ransomware and third-party supply chain cyberattacks.

Ransomware threats in Europe have escalated in 2026. Know the patterns and dominant actors behind it through Cyble's Research and Intelligences Labs' findings.

Analisi sulla career evolution di CIO e CISO: dati, competenze, intelligenza artificiale e governance dei leader tecnologici.

Grazie a Norton e all'offerta dedicata all'antivirus Small Business si può risparmiare fino a 70 euro all'anno: ecco come fare.

La continuità operativa non può essere ridotta alla presenza di backup o a un piano di ripristino tecnico. In ottica NIS2, resilienza significa sapere quali attività devono ripartire prima, quali asset le supportano, quali tempi di fermo sono accettabili e quanta perdita dati può essere tollerata

Point72, Millennium, Citadel and Two Sigma were targeted in a cyberattack on Wall Street using voice phishing, though no client data was stolen.

Dietro il verbo "shall” del GDPR c'è l'idea antica del dovere come debito. Un debito di protezione che la norma impone al titolare senza prescrivere una soluzione predefinita: spetta a lui tradurre principi e risultati obbligatori in misure adeguate, assumendosi la responsabilità di progettare il futuro

Updoc data breach exposed customer contact details via a third-party system. No health, payment, or financial information was compromised.

ciaops is Group-IB's open-source Python library for integrating Threat Intelligence, Digital Risk Protection, and Attack Surface Management APIs. Zero event loss, guarantee

In July 2026, Exact Sciences (now owned by Abbott Laboratories) was the target of a ShinyHunters "pay or leak" extortion campaign. The group claimed to have obtained data from the company's cancer diagnostics business, which they later published publicly. The breach contained 10.9M unique email addresses belonging to customers, patients and healthcare providers, along with names, addresses, phone numbers and health records. Abbott subsequently published a public notice advising that "some of the impacted files contain personal information and/or personal health information" and that more specific information would follow once their review of the incident was complete. For context, Exact Sciences is the maker of the Cologuard at-home colorectal cancer screening test.

Learn how phishing attacks evolved from early online scams to AI-powered threats, key milestones, common techniques, and practical ways to reduce risk.

OpenAI is rolling out a more reliable version of ChatGPT GPT-5.6 Sol for Plus and Pro users, while Free users are getting unlimited text chats with GPT-5.6 Luna.

A Go-based malware delivered in ClickFix attacks targeting macOS users is stealing cryptocurrency assets, browser-stored passwords, Apple Keychain data, and cached credentials.

In this post we explain how cyber threat intelligence teams are being expected to take on physical risk, how tradecraft overlaps, and how Flashpoint bridges the gap.

A recent wave of cyberattacks targeting hedge funds, private-equity firms, and other financial organizations has been linked to UNC6671, an extortion group reportedly associated with the BlackFile campaign extortion group.

Groups of hackers are breaking into large U.S. financial firms to steal sensitive data and extort victims, Google’s security researchers report.

Switzerland's federal IT office says hackers exploited vulnerabilities to breach its Microsoft SharePoint servers and compromised approximately 200 accounts.

Researchers found a way to bypass recent mitigations for Spectre v2 speculative execution side-channel attacks and developed an exploit to leak secrets from Linux machines.

In this week's newsletter, Martin looks at how the metaphors we use to describe AI "escaping" its sandbox can completely change how we react to the threat.

A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort more than 165 organizations that used the cloud data storage provider…