Over Security

Hacktive Security - Advanced Cyber Security Services

Hacktive Security - Advanced Cyber Security Services

Hacktive Security - Advanced Cyber Security Services

Hacktive Security - Advanced Cyber Security Services

Microsoft is expanding data loss prevention (DLP) controls to block the Microsoft 365 Copilot AI assistant from processing confidential Word, Excel, and PowerPoint documents, regardless of their location.

Un attacco che riprende la logica Shai-Hulud, ma sposta l’asticella sul toolchain moderno Una recente analisi dei  ricercatori di Socket, un’azienda specializzata in sicurezza informatica, ha svelato una nuova campagna d’attacco alla supply chain dello sviluppo software colpendo NPM, l’ecosistema dove risiedono migliaia di librerie Javascript largamente usate dai programmatori di tutto il mondo. L’attacco …

AI agents now provision infrastructure and approve actions, but many inherit over-scoped privileges without proper governance. Token Security explains why CISOs must treat agents as identities and add intent-based controls so access is granted only when purpose and context align.

The UK Information Commissioner's Office (ICO) has fined Reddit £14.47 million (over $19.5 million) for collecting and using the personal information of children under 13 without adequate safeguards.

What NightBeacon Is NightBeacon is Binary Defense’s AI-powered threat analysis platform built to take real-world security inputs—logs, files, and emails—and turn them into clear, explainable risk signals that analysts can act on fast. Less than 24 hours later, the detection techniques described in that research were live in production inside NightBeacon, Binary Defense’s AI-powered threat analysis platform. This post breaks down exactly how that happened, focusing on the architecture, the detection logic, and the implementation details that allowed new threat research to become operational almost immediately.

PromptSpy è la prima minaccia Android a integrare l’AI generativa nel proprio flusso di attacco, impiegando direttamente il modello durante l’esecuzione del malware sul dispositivo della vittima e introducendo capacità di adattamento dinamico finora assenti negli strumenti tradizionali basati su script statici

SolarWinds has patched four critical Serv-U remote code execution vulnerabilities that could grant attackers root access to unpatched servers.

The ShinyHunters extortion gang has claimed responsibility for breaching Dutch telecommunications provider Odido and stealing millions of user records from its compromised systems.

North Korean state hackers seen using Medusa ransomware in attacks on US, Middle East

North Korean state-backed hackers associated with the Lazarus threat group are targeting U.S. healthcare organizations in extortion attack using the Medusa ransomware.

2026 Commercial Airline Threat Report: Uncover sustained security threats. Details on 11,600+ malicious domains, key phishing tactics, crypto abuse, and vital brand protection strategies.

Moonrise RAT is a Go-based remote trojan that maintains active C2 without early detection. Learn how to detect it before costly consequences.

Il C-Level è il bersaglio più facile, più esposto e tecnicamente più vulnerabile dell'organigramma aziendale. È dunque necessario fornire strategie di difesa specifiche, attraverso la combinazione di tecniche di controspionaggio digitale e procedure operative che blindano i processi decisionali critici senza rallentare il business

Con la NIS 2, la sicurezza informatica diventa materia di governo societario. Ecco perché il rischio digitale deve essere assunto, deliberato e tracciato dal vertice organizzativo

The regulators emphasized that AI content generation systems capable of producing realistic images, videos pose serious risks if used irresponsibly.

Cyble uncovers SURXRAT’s evolution across versions, built on ArsinkRAT code, and now downloading large LLM modules signaling an expansion of its operational capabilities.

The New Zealand law firm Langley Twigg Law has confirmed that it was the victim of a cyberattack detected on 11 January 2026, announcing the incident through

Several mental health mobile apps with millions of downloads on Google Play contain security vulnerabilities that could expose users' sensitive medical information.

Spanish authorities have arrested four alleged members of a hacktivist group believed to have carried out cyberattacks targeting government ministries, political parties, and various public institutions.

Microsoft is investigating a known issue that causes the mouse pointer to disappear in the classic Outlook desktop email client for some users.