Over Security

A critical vulnerability in Google's Fast Pair protocol can allow attackers to hijack Bluetooth audio accessories like wireless headphones and earbuds, track users, and eavesdrop on their conversations.

Google has confirmed that it's now possible to change your @gmail.com address. This means that if your current email is [email protected], you can now change it to [email protected].

OpenAI is rolling out a big upgrade for ChatGPT with support for advanced chat history search, but the feature is rolling out to Plus and Pro subscribers only.

The Gootloader malware, typically used for initial access, is now using a malformed ZIP archive designed to evade detection by concatenating up to 1,000 archives.

Food delivery platform Grubhub has confirmed a recent data breach after hackers accessed its systems, with sources telling BleepingComputer the company is now facing extortion demands.

Hackers are actively exploiting a maximum severity flaw in the Modular DS WordPress plugin that allows them to bypass authentication remotely and access the vulnerable sites with admin-level privileges.

Verizon has confirmed that yesterday's nationwide wireless outage was caused by a software issue, though the company has not shared additional details about what went wrong.

A practical walkthrough for running Rust inside Windows VBS secure enclaves (VTL1) - including the CallEnclave linking issue, no_std DLL setup, and signing.

Iran’s government-imposed internet shutdown enters its second week as authorities continue their violent crackdown on protesters.

We break down the 91,321 instances of insider activity observed by Flashpoint in 2025, examine the top five cases that defined the year, and provide the technical and behavioral red flags your team needs to monitor for in 2026.

Microsoft announced that the Copilot Studio extension for the Visual Studio Code (VS Code) integrated development environment is now available to all users.

In this week’s newsletter, Martin examines the evolving landscape for 2026, highlighting key threats, emerging trends like AI-driven risks, and the continued importance of addressing familiar vulnerabilities.

Il Global Innovation Forum nasce come risposta a una trasformazione profonda del modo in cui l’innovazione tecnologica viene raccontata e sostenuta all’interno delle grandi fiere internazionali. Ospitato all’interno di CES, la più grande manifestazione mondiale dedicata all’elettronica e all’innovazione, il forum si è progressivamente affermato come uno spazio pensato non per il singolo prodotto o …

La crescita degli attacchi cyber spinge governi e imprese a rafforzare le misure di sicurezza. Le normative europee e nazionali definiscono una cornice più severa per resilienza, cooperazione e tutela dei dati

A critical vulnerability in Google's Fast Pair protocol can allow attackers to hijack Bluetooth audio accessories like wireless headphones and earbuds, track users, and eavesdrop on their conversations.

Managing just-in-time access at scale is a growing IAM challenge as speed and auditability collide daily. Tines shows how automated workflows can grant, track, and revoke temporary app access without manual effort.

Il blackout imposto da Teheran e l’interferenza sulle comunicazioni Starlink mostrano che anche le reti satellitari globali possono essere indebolite. Una lezione che riguarda la libertà di informazione, il ruolo delle infrastrutture private e la nuova geopolitica delle comunicazioni

Cisco Talos is closely tracking UAT-8837, a threat actor we assess with medium confidence is a China-nexus advanced persistent threat (APT) actor.

La trasformazione profonda dell'ecosistema cyber criminale russo vede affinarsi il Dark covenant in Russia. Ecco come si riconfigura il patto fra le autorità russe e la criminalità informatica

Referente CSIRT NIS2: ruolo, designazione e le responsabilità entro il 31 dicembre 2025. La guida operativa.

The FTC has finalized an order with General Motors, settling charges that it collected and sold the location and driving data of millions of drivers without consent.

Learn how the ANY.RUN and Tines automate SOC triage with sandbox to reduce MTTR and improve response.

Microsoft ha annunciato di aver smantellato RedVDS, una rete cybercrime-as-a-service che ha alimentato frodi multimilionarie in tutto il mondo.