Over Security

Microsoft has fixed a known issue that was causing the password sign-in option to disappear from the lock screen options after installing Windows 11 updates released since August 2025.

La circolare Assonime 23/2025 analizza il nuovo quadro di governance della cyber sicurezza, sottolineando come gli obblighi introdotti dalla normativa NIS 2 abbiano un impatto diretto sull’organizzazione interna delle aziende e sul ruolo degli amministratori

L’EDPB ha pubblicato la versione 2.0 delle FAQ sul Data Privacy Framework, chiarendo responsabilità, obblighi e verifiche necessarie per i trasferimenti di dati personali verso aziende USA. Il DPF resta uno strumento utile, ma non sostituisce la compliance GDPR e i controlli sulla supply chain digitale

Our CI/CD process is defined in GitLab through the .gitlab-ci.yml file, which resides in the root of our repository. As mentioned earlier, a pipeline is triggered on every commit to validate the code.

NationStates, a multiplayer browser-based game, has confirmed a data breach after taking its website offline earlier this week to investigate a security incident.

L'IIoT ha ridisegnato il panorama industriale, ma ha anche ampliato la superficie di attacco, introducendo rischi fisici senza precedenti. Ecco le sfide e le opportunità della digital forensics applicata ai dispositivi dell'Industrial Internet of Things, uno dei pilastri della quarta rivoluzione industriale

Qualche giorno fa ho parlato di traffic sniffing, argomento che mi avrebbe portato a parlare di Intrusion Detection/Prevention System e ad una ulteriore evoluzione del lab e dei test che potrò/potr…

A threat actor is targeting exposed MongoDB instances in automated data extortion attacks demanding low ransoms from owners to restore the data.

Apple is introducing a new privacy feature that lets users limit the precision of location data shared with cellular networks on some iPhone and iPad models.

Learn about the latest WordPress vulnerabilities and essential updates to protect your website from automated attacks.

OpenAI previously confirmed that it's testing ads in ChatGPT for free and $8 Go accounts, and now we're seeing early signs of that rollout, at least on Android.

OpenAI has confirmed that it's retiring ChatGPT's most popular model called GPT-4o and several other models, including GPT-5 Instant, GPT-5 Thinking, GPT-4.1, GPT-4.1 mini, and o4-mini.

A U.S. federal jury has convicted Linwei Ding, a former software engineer at Google, for stealing AI supercomputer data from his employer and secretly sharing it with Chinese tech firms.

Over the past few months, a large-scale cloud storage subscription scam campaign has been targeting users worldwide with repeated emails falsely warning recipients that their photos, files, and accounts are about to be blocked or deleted due to an alleged payment failure.

Mandiant says a wave of recent ShinyHunters SaaS data-theft attacks is being fueled by targeted voice phishing (vishing) attacks and company-branded phishing sites that steal single sign-on (SSO) credentials and multi-factor authentication (MFA) codes.

A researcher has released detailed evidence showing some Instagram private accounts exposed photo links to unauthenticated visitors. The issue was later fixed, but Meta closed the report as not applicable and did not respond to multiple requests for comment.

A researcher has released detailed evidence showing some Instagram private accounts exposed photo links to unauthenticated visitors. The issue was later fixed, but Meta closed the report as not applicable and did not respond to multiple requests for comment.

In January 2026, Panera Bread suffered a data breach that exposed 14M records. After an attempted extortion failed, the attackers published the data publicly, which included 5.1M unique email addresses along with associated account information such as names, phone numbers and physical addresses. Panera Bread subsequently confirmed that "the data involved is contact information" and that authorities were notified.

A new WordPress malware technique uses fake directories to override permalinks and serve spam to search engines. Learn the signs and fixes.

A document published by the Justice Department quotes an FBI informant in 2017 that alleged Jeffrey Epstein had a “personal hacker.”

In our latest webinar, Flashpoint unpacks the architecture of Chinese threat actor cyber ecosystem—a parallel offensive stack fueled by government mandates and commercialized hacker-for-hire industry.

Illegal cryptocurrency flows hit a record $158 billion in 2025, reversing a three-year trend of declining amounts from $86B in 2021 to $64B in 2024.

The Polish government accused a Russian government hacking group of hacking into energy facilities taking advantage of default usernames and passwords.

Microsoft announced that it will disable the 30-year-old NTLM authentication protocol by default in upcoming Windows releases due to security vulnerabilities that expose organizations to cyberattacks.

CdA e NIS2: un'analisi sulle responsabilità, governance e formazione. Fondamenti del D.Lgs 138.

The latest phase of the global law enforcement action resulted in seizing three industrial-scale illegal IPTV services.

I ricercatori di BitDefender hanno scoperto una campagna che sfrutta l'infrastruttura di Hugging Face per distribuire un trojan.