Over Security

The European Commission fined Google €890 million ($1 billion) on Thursday after finding the company had violated the European Union's Digital Markets Act (DMA), which ensures fair online competition.

A nine-year-old race condition vulnerability in the Linux kernel's XFS filesystem, tracked as CVE-2026-64600, allows local attackers to overwrite protected files and gain root privileges.

Le sanzioni del Garante privacy a due operatori del settore energetico ridefiniscono le regole del credit scoring automatizzato. Trasparenza, qualità dei dati, governance degli algoritmi e tutela dei diritti diventano i pilastri di un modello destinato a estendersi ben oltre il mercato dell'energia

Explore 10 best threat intelligence feeds for SOCs and MSSPs in 2026, including their data sources, integrations, threat context, and common security use cases.

Here’s some of the ways Talos is showing up at Black Hat, alongside our friends at Cisco and Splunk.

The Chaos ransomware group uses new malware "msaRAT" that hijacks browsers. The malware doesn't communicate directly with C2 but connects through the browser. It enables arbitrary command execution while hiding the attacker's IP from victims via WebRTC over TURN.

The Chaos ransomware gang is using a new backdoor dubbed msaRAT that hides command-and-control (C2) communication by routing it through the Chrome or Edge browsers.

Con Hostinger si possono creare 3 siti web con l'AI a soli 2,99 euro al mese: come funziona l'offerta e quali sono i servizi inclusi.

Total VPN con Antivirus e ADBlock è oggi in sconto a 1,59 € al mese: come funziona l'offerta, quali sono i servizi inclusi e tutti i costi.

Microsoft is working to resolve an ongoing Exchange Online issue that has been mistakenly quarantining customers' mailboxes since Sunday.

National Diplomatic Academy data breach exposed South Korea Ministry of Foreign Affairs employee and diplomat data for nearly 10 months.

India Online Safety Rules are being strengthened with stricter content removal timelines and stronger child privacy safeguards.

Il problema non è soltanto l’agente AI che ha superato una sandbox. Il vero punto è che una valutazione delle capacità cyber ha prodotto effetti su un’infrastruttura reale di un soggetto terzo. Per i modelli più avanzati non bastano benchmark e guardrail: servono regole d’ingaggio, responsabilità e gli stessi controlli di un’operazione offensiva

During ongoing monitoring of malicious infrastructure, Group-IB identified an exposed staging server that uncovered an active China-nexus operation. Subsequent investigation confirmed intrusion attempts across government, healthcare, and education sectors in Vietnam, Malaysia, and Hong Kong to parallel phishing campaigns in LATAM, all connected through a shared loader tracked as TriBack Loader.

Israeli cybersecurity firm Check Point Software has addressed an actively exploited zero-day flaw in the company's SmartConsole graphical user interface (GUI) admin panel.

The Chick-fil-A data security incident may have exposed customer account information after an automated attack targeted Chick-fil-A One accounts.

85 confirmed cyber attacks, July 1-15 2026: cyber crime drove 76% of incidents, malware led at 43%, and IT & communications was the hardest-hit sector.

85 confirmed incidents, July 1-15 2026: Cyber Crime drove 76.5% of attacks, Malware led techniques at 43.5%, and Info & Communication was the top-hit sector.

Oracle's July 2026 Critical Patch Update fixes 1,449 security flaws across 334 products, including 600 remotely exploitable vulnerabilities.

OpenAI and Hugging Face investigate an AI security incident involving advanced models that exploited vulnerabilities.

The Upbound Group fintech company disclosed that threat actors who stole data from its systems leveraged it to create $13 million in Acima leases.

South Korea disclosed that hackers breached the National Diplomatic Academy's online education system for ten months and stole personal information belonging to current and former employees of the Ministry of Foreign Affairs (MFA), including overseas diplomats.

OpenAI made a mistake setting up what it called a “highly isolated” testing environment and sandbox. According to cybersecurity experts, that human mistake is what made the AI-powered attack on Hugging Face possible.

Swiss rail vehicle manufacturer Stadler Rail says the Everest ransomware gang demanded about $12.3 million after breaching a data exchange platform shared with one of its suppliers.