Over Security

Norton 360 Advanced offre il servizio anti-truffa Pro con IA per proteggere fino a 10 dispositivi: ecco come funziona e quali sono i costi.

Arista Networks has released security patches for a zero-day flaw that is being actively exploited and affects VeloCloud Orchestrator (VCO) On-Prem deployments.

Microsoft warned that the September 2026 security updates may also break Always On VPN connections on some Windows 11 systems.

Explore phishing risk across 5 key US industries and learn how faster detection and threat visibility help mitigate attacks.

Il Garante privacy ha 120 giorni per notificare la contestazione, non per concludere il procedimento sanzionatorio. La Cassazione chiarisce la distinzione, ma lascia emergere un problema irrisolto: manca un termine finale certo. Una lacuna che incide sulla difesa delle imprese e che l’Autorità potrebbe colmare con il proprio regolamento

EU KIDS Act proposes new age limits, parental controls and safety requirements for children using social media and online platforms in the EU.

CVE-2026-65660 is a SharePoint RCE flaw rated 8.8 that Microsoft first called a 6.5 spoofing bug.

The FBI is investigating after Shiny Hunters claimed it stole thousands of agents' personal data via FBIjobs.go.

The Cyber Express talks to Harness' Rahul Sood about AI-speed development, faster remediation, runtime visibility and limits on AI agents.

L’intelligenza artificiale sta abbattendo drasticamente il costo necessario per produrre codice, documenti, analisi e informazioni. Verificarli, però, continua a richiedere tempo, competenza e responsabilità. Il rischio è trasformare la produttività individuale in un debito di verifica collettivo

Sekoia TDR analysts conduct an assessment of threats regarding the major elections that will occur in 2024.

Learn about the techniques used by the Mallox ransomware affiliate to compromise an MS-SQL server. Dive into our detailed technical analysis.

The Sekoia's AI SOC platform, designed for MSSP, centralizes management, integrates with any infrastructure, and automates tasks with pre-built playbooks. It supports MSSPs' transformation into MDRs, offering an intuitive XDR approach and multi-tenant mod

Uncover the details of the DoppelGänger campaign, a Russian influence operation aimed at undermining support for Ukraine.

This time, we're not revealing a new cyber threat investigation or analysis, but I want to share some insights about the team behind all Sekoia Threat Intelligence and Detection Engineering reports. Let me introduce you to the Sekoia TDR…

This blog post provides an in-depth analysis of PikaBot, focusing on its anti-analysis techniques implemented in the different malware stages.

The Filigran x Sekoia.io partnership announcement is an opportunity to put the spotlight back on the benefits of the integration between OpenCTI and Sekoia Threat Intelligence.

The cybersecurity market is undergoing significant transformation marked by major acquisitions and mergers among key players. Traditional on-premise solutions are being replaced by comprehensive, SaaS-based platforms that offer faster deployment.

Discover how new cybersecurity tools can revolutionize SOC operations. Boost efficiency and stay ahead of cyber threats with integrated solutions.

At Sekoia, the integration of the MITRE ATT&CK framework into our Security Operations Center (SOC) platform is a cornerstone of our approach to cybersecurity. The ATT&CK framework serves as a comprehensive knowledge base of cyber adversary behaviours.

Find out how MuddyWater have changed their infection chain and employed a new implant dubbed "MuddyRot" by Sekoia TDR analysts.

In today's digital age, small and medium enterprises (SMEs) are facing unprecedented cybersecurity challenges. The threat landscape has evolved dramatically, with malicious actors constantly seeking out the weakest links.

Discover 7777 botnet (aka Quad7) and its activity, targets, and use of TP-Link routers in Microsoft 365 attacks in our latest investigation.

Explore a use-case scenario demonstrating how to detect scattered spider attacks in AWS environments and enhance your cloud security.

Discover how SSDP are transforming SOCs and boosts MSSP activities into MDR and now MXDR services, transforming security service delivery.

Uncover the secrets of the Quad7 botnet and its ever-evolving toolset. Learn about the new backdoors and protocols used by these operators.

Discover how Sekoia.io proactively hunts for typosquatted domains related to the Paris 2024 Olympics to detect and prevent cyber threats.

This blogpost examines the use of WebDAV technology in hosting malicious files related to the Emmenhtal loader, then analyses the various final payloads delivered through this infrastructure.