Over Security

Microsoft corregge oltre 1.400 vulnerabilità nel Patch Tuesday di ottobre 2026, tra cui uno zero-day già sfruttato e due falle divulgate pubblicamente. Il numero record di CVE impone alle aziende di ripensare priorità e gestione degli aggiornamenti

Cyble weekly vulnerability report covers attacks on Langflow, n8n, WordPress, and Solr flaws as CISA disclosed 54 ICS vulnerabilities.

A massive cybercriminal ecosystem facilitating more than a billion malicious messages targeting over 75,000 organizations across 150 countries has been disrupted by law enforcement agencies and partners worldwide.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secure (ICS) flaw exploited in zero-day attacks since at least October 1st.

Mars Groves explains the four steps of the OODA Loop model used in intelligence for decision-making, which is very useful for difficult and time-sensitive situations.

The 2019 dork cheat sheet you copied is half wrong now. Google killed cache, AI Overviews are eating your queries, and the real skill is knowing what still resolves.

Maltego is not a search-everything button, it is a link-analysis canvas. The honest 2026 beginner's guide to graph thinking, the free tier, and what still works.

Who is behind an account, whether a company is real, who is using your name and what the internet knows about you. Here is what a cyber investigator can find out.

A new Android malware called Hirudo steals bank account credentials by replacing legitimate banking apps with modified versions that disable security checks.

Microsoft has confirmed that non-admin users may be unable to connect to devices via Remote Desktop after installing recent Windows updates if the "Administrator protection" security feature is enabled.

French supermarket cyberattack pushed fridges to 50C in hundreds of stores. Experts say unpatched Danfoss controllers left online possible.

ANY.RUN researchers break down fake Claude, ChatGPT, and Copilot campaigns: how they reach US companies, what they steal, and how to stop them.

La nuova politica nazionale invita i ricercatori a segnalare le vulnerabilità informatiche, ma non offre tutele legali a chi le scopre attraverso accessi non autorizzati. E le pene possono arrivare fino a dodici anni.

The Ahold Delhaize cyber incident has disrupted IT systems and deliveries, with Albert Heijn distribution centers affected in the Netherlands.

Microsoft’s October 2026 Patch Tuesday fixes a record 1,413 CVEs, with 78 rated Critical and two zero-days, one already exploited.

FBI says North Korean IT workers pay Americans to host laptops and pass interviews, as DOJ seizes 187 devices.

SAP’s October 2026 security patch delivers 22 notes, including four critical flaws led by CVE-2026-89111.

Group-IB researchers analyze KGB RAT, a Windows Remote Access Trojan advertised on underground forums as being fully undetectable, featuring a built-in crypter, HVNC, credential theft, ransomware, and an unusual set of psychological harassment capabilities.

Dario Amodei propone di rallentare lo sviluppo dell'AI. Analisi delle contraddizioni del piano Anthropic, dei controlli indipendenti e dei rischi cyber

In January 2026, the private company intelligence platform Crunchbase was targeted in a ShinyHunters "pay or leak" extortion attempt. Data allegedly obtained from the company was subsequently published publicly and included 560k unique email addresses, largely belonging to leads and business contacts. Other data included names, physical addresses, phone numbers, job titles, employers and LinkedIn profiles. Crunchbase later confirmed that a threat actor had exfiltrated documents from its corporate network.

Anatomy of a Phish · Threat Research How Tech-Support Scams Buy Their Way Onto Your Screen An analysis of how fake Microsoft Support pages are delivered through social, native and programmatic advertising, and why that delivery path evades email security and domain reputation. PIXM Threat ResearchPublished Oct 13, 20267 min read Summary Roughly six in […]

A Saudi OpenAI engineer has been arrested for allegedly planting a hidden recording device in an executive conference room at the company's San Francisco offices to secretly record sensitive conversations.

A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF files.