Over Security

The ShinyHunters extortion group stole personal information from 1.6 million RingCentral accounts after hacking the company in July, according to the data breach notification service Have I Been Pwned.

Il Cyber Europe 2026 ha visto la simulazione da parte di ENISA di attacchi informatici su larga scala contro operatori dei trasporti ferroviari e marittimi. Ecco perché i trasporti sono tra i settori più complessi da proteggere e qual è il quadro europeo di gestione coordinata delle crisi informatiche di vasta portata, noto come Cyber Blueprint

Il futuro della sicurezza informatica tra automazione e controllo umano: ecco come cambia l'efficienza dei sistemi SOC moderni.

La nuova offerta di Norton 360 Deluxe comprende la VPN e tanti altri servizi per garantire la massima sicurezza per 5 dispositivi: i costi.

Con gli agenti militari basati sull’intelligenza artificiale la catena di comando comincia ad assomigliare a una rete. Ecco i rischi legati ad agenti militari manipolati nelle guerre diffuse dove il vantaggio non appartiene solo a chi colpisce meglio, bensì anche a colui che riesce a dissimulare il colpo con un incidente

Our experts discovered a new CoolClient backdoor variant with a kernel-mode rootkit driver that hides malicious processes, files, and network connections from security tools and threat analysts.

A former data analyst contractor for Brightly Software has been sentenced to two years in prison for targeting his employer in a $2.5 million extortion scheme.

As enterprises race to bolt AI onto every business process, security leaders are being forced to answer a harder question than "should we adopt it" — it's "who's accountable when it goes wrong."

La responsabilità del GDPR ha due tempi e, in inglese, due nomi: responsibility, la promessa che guarda in avanti; liability, il vincolo che risponde all’indietro. Ecco la differenza fra responsabilità-promessa che guarda in avanti e la responsabilità-vincolo che risponde all’indietro

You're not alone if you just received an "Apple Threat Notification" saying it detected a "mercenary spyware attack targeted at your iPhone."

The surveillance company announced it's making a tool called "Audit Assistance" mandatory for all customers, claiming it's already helped catch abuse. But the company has yet to explain how the tool works in detail, raising questions about its effectiveness.

Authorities in Ukraine shut down 94 fraudulent call centers across the country that lured people into investment scams or tried to obtain access to bank accounts.

An Akira ransomware affiliate disabled the endpoint detection and response (EDR) solution on a compromised system by restarting the machine into Safe Mode with Networking.

In this edition of the Threat Source newsletter, William reflects on the “Make Hazel a Hacker” segment in Beers with Talos, and how cybersecurity is a field where questions can lead to multiple correct answers.

The Jewelbug hacker group has been carrying out espionage operations targeting governments and militaries while also engaging in cryptocurrency fraud.

Microsoft has released security patches to address a Windows zero-day vulnerability known as "LegacyHive," disclosed after the July 2026 Patch Tuesday.

Multiple 'watermark removers' have surfaced days after Anthropic began watermarking text generated by Claude, including an open source project with over 4,500 GitHub stars and paid AI detection evasion services. None of the tools' claims about defeating the text watermark can be verified, as Anthropic has not released a detector.

A recently patched critical vulnerability (CVE-2026-59310) in VMware vCenter Syslog Server is being exploited in an active campaign to deploy a reverse SSH tool for persistence and remote access.

Trump firma un memorandum che consente alle aziende statunitensi di sferrare attacchi informatici. La nuova direttiva autorizza le aziende a condurre operazioni sotto la direzione del governo. Il confronto fra lo scenario Usa e quello italiano ed europeo: occorre distinguere fra Difesa e Giustizia

Hardware wallet manufacturer Trezor disclosed a data breach affecting nearly 14,000 of its customers after ShipMonk, its shipping provider and logistics partner, got hacked.

OpenAI lancia GPT-5.6-Cyber su Daybreak Red: trova zero-day, crea exploit chain e completa il 95% delle richieste avanzate. Accesso riservato ai difensori

AI coding tools can introduce unvetted or hallucinated open source dependencies faster than traditional security reviews can keep pace. ActiveState explains why organizations should govern packages at the point of selection, before they enter the development pipeline.

In this post, we preview the critical findings of Flashpoint’s Global Threat Intelligence Report: 2026 Midyear Edition.

A new White House memo signed by U.S. President Donald Trump instructs the National Coordination Center (NCC) to establish a program that would allow private security companies to apply for approval to hack foreign cybercrime organizations.

Introduzione Sul mondo degli EDR bisogna fare un po’ di premesse e visto che gli interlocutori principali di questa serie sono persone che lavorano per lo più all’interno di un team IT,…