Over Security

Kaspersky GERT experts have discovered new backdoors used by the Toy Ghouls group. One version of the backdoor uses the HiveMQ MQTT broker as its command-and-control server; the other uses the Matrix-based Element messenger.

La sicurezza dei server Exchange dipende dalla capacità di ridurne l’esposizione, correggere rapidamente le vulnerabilità e riconoscere un’intrusione già avvenuta. Di cosa tenere conto e quali strumenti sono d’aiuto

Kentucky Appellate Court data was compromised in a Thomson Reuters CMS C-Track breach. The AOC says the investigation is ongoing.

La distinzione tra organizzazioni “buone” - che rispettano le regole già definite da altri - e quelle “brave” - che comprendono i trattamenti, valutano i rischi, trasformando gli adempimenti in strumenti di governo - è messa alla prova sugli strumenti quotidiani. Ecco come le lingue costruiscono il futuro dal dovere (shall) e dalla volontà (will)

Fusion is a capability you mature into, not a team you hire. Here is the honest maturity path, the metrics that fund it, and the on-ramp that costs no headcount, startable this quarter.

Citrix NetScaler vulnerabilities affect ADC and Gateway products, with ASD's ACSC urging organisations to assess and patch affected systems.

SHARE Foundation says 14 Serbian students, activists and opposition figures were hit with Pegasus and a new NoviSpy variant, some during police detention.

France's data protection authority (CNIL) has fined Hôpital privé de la Loire €500,000 ($580,000) for failing to adequately protect patients' and their relatives' data.

Attackers compromised Coder's Cloudflare infrastructure and added unauthorized registry servers that delivered malicious Terraform modules containing credential-stealing code.

Hewlett Packard Enterprise (HPE) has patched a critical vulnerability in the ArubaOS-CX network operating system that could lead to remote code execution.

From engaging with cybercriminals to surviving a live Flamin’ Hot Cheetos taste test, Hazel reflects on the latest Beers with Talos with Azim, where they cover the full spectrum of what it takes to gather threat intel.

Microsoft says a known issue that reverts mouse settings after installing the KB5120998 August 2026 preview update affects only non-English Windows 11 systems.

L'impatto dell'IA sulla cybersecurity: perché la bugpocalypse è in ritardo e come i CISO possono proteggere le reti aziendali.

Claude is experiencing an outage, with users encountering elevated errors when sending requests to multiple Anthropic AI models.

ChatGPT and Codex are experiencing a major outage, with users reporting errors across nearly every major ChatGPT feature.

A recently patched critical vulnerability (CVE-2026-32475) in the Elementor Pro plugin for WordPress is being exploited in attacks that deliver a webshell payload and execute arbitrary commands on the server.

Infostealers can expose far more than passwords, including authenticated sessions that may let attackers bypass MFA. Flare explains how defenders can prioritize compromised identities, determine whether stolen access is still usable, and respond before it leads to account takeover.

Una recente sentenza del tribunale di Pisa offre spunti interpretativi interessanti e una soluzione condivisibile sul piano operativo, anche se soggetta a possibili interventi di riforma nei successivi gradi di giudizio, dovendosi confrontare con regole, giurisprudenza e principi espressi dal Garante Privacy. Quando l'email vale come prova digitale

Un falso CAPTCHA convince la vittima a eseguire PowerShell, ma è solo l’inizio. Con TerminalFix, ClickFix evolve in una catena multistadio che effettua ricognizione dell’ambiente Active Directory e crea un reverse tunnel, trasformando l’endpoint compromesso in un potenziale punto di accesso alla rete aziendale

Microsoft has confirmed that desktop settings are lost or reset on some Windows devices after installing the KB5120998 August 2026 preview update.

L'analisi del codice sorgente client-side di una recente campagna di phishing ha rivelato l'impiego del kit MaoMao, una piattaforma avanzata di Phishing-as-a-Service (PhaaS). Il malware opera come reverse proxy in scenari Adversary-in-the-Middle (AiTM) per bypassare l'MFA.

Plex urged users this week to update their desktop clients and media servers immediately to patch multiple security vulnerabilities.

Zero Trust 2.0 e Identity-First Security, l’identità al centro della cyber: ecco come IAM, IGA, PAM e ITDR rafforzano sicurezza e compliance

CVE-2026-84115 affects Cleo Harmony through 5.8.1.10, exposing a JWT Refresh Token Handler flaw that enables remote privilege escalation.

Explore ANY.RUN’s August 2026 updates: faster investigations with TI Lookup Connections, 656+ threat coverage updates, and new TI Reports.

Microsoft is working to fix a known issue that causes crashes and launch failures for Microsoft Teams and New Outlook users after installing updates released since the August 2026 Patch Tuesday.

OpenAI Astra cyber security: il modello scopre zero-day e exploit autonomi, spingendo l’azienda a rafforzare i controlli