Over Security

An in-depth Bug Bounty guide to performing reconnaissance on Android apps – from extracting APKs to mapping endpoints, secrets and vulnerable components.

Learn how AI tools can support security researchers in investigating vulnerabilities and designing security checks to detect them.

U.S. digital investment advisor Betterment confirmed that hackers breached its systems and sent fake crypto-related messages to some customers.

Europa, Regno Unito e Medio Oriente stanno entrando in una nuova fase in cui la teoria normativa diventerà realtà operativa. Il tempo della compliance “di carta” è finito. Le politiche cyber diventano vincoli operativi: audit, enforcement e assicurazioni metteranno alla prova la maturità di sicurezza, governance e resilienza delle organizzazioni

Molte aziende fanno affidamento sull'accesso sempre attivo, na gli ambienti operativi attuali sono più dinamici di quelli di ieri. Invece oggi l’AI amplia velocemente la superficie di attacco focalizzata sulle identità. Ecco quali rischi cyber sono legati agli accessi privilegiati e come mitigarli

Gli utenti aziendali usano ancora password deboli, tanto che il 40% di esse è violabile in meno di un'ora: è quanto emerge dati condivisi da Errevi System.

Scammers are flooding LinkedIn posts with fake "reply" comments that appear to come from the platform, warning of bogus policy violations and urging users to click external links. Some even abuse LinkedIn's official lnkd.in shortener, making the phishing attempts harder to spot.

L'asset management efficace trasforma l'inventario da semplice adempimento tecnico a strumento strategico che ottimizza investimenti di protezione e massimizza il valore degli asset organizzativi. Per questo motivo è importante farlo bene. Ecco un’utile guida operativa

Multiple current and former Target employees confirmed that leaked source code samples posted by a threat actor match real internal systems. The company also rolled out an "accelerated" lockdown of its Git server, requiring VPN access, a day after being contacted by BleepingComputer.

82% of domains have no DMARC. Of those that do, most set p=none—which tells receivers not to enforce. An interactive deep-dive into email authentication.

Il Report annuale 2025 della Polizia Postale fotografa l’evoluzione del cybercrime in Italia: frodi da 269 milioni, 9.250 eventi di computer crime e nuove sfide su minori e violenza digitale. Ecco dati chiave e best practice per imprese e Paese

Il nuovo paradigma introdotto dalla NIS 2 spiega perché l’incidente significativo non è più un fatto “interno”. Ecco quale ruolo assume il CSIRT Italia e perché la sicurezza informatica diventa oggi una responsabilità che travalica l’organizzazione colpita

Read full-cycle technical analysis of CastleLoader malware, covering its entire multi-stage execution by ANY.RUN.

Cyble analyzed deVixor, an advanced Android banking RAT with ransomware features actively targeting Iranian users.

One of the clearest examples of this pattern is the alleged seven-group ransomware alliance announced by Stormous in October 2025—an initiative that, in

The Amsterdam Court of Appeal sentenced a 44-year-old Dutch national to seven years in prison for multiple crimes, including computer hacking and attempted extortion.

Hackers over the past six months have relied increasingly more on the browser-in-the-browser (BitB) method to trick users into providing Facebook account credentials.

L’assemblea annuale dei soci di Berghem-in-the-Middle ETS si terrà lunedì 16 febbraio 2026, dalle 19:00 alle 22:00, presso la saletta …

CISA has ordered government agencies to secure their systems against a high-severity Gogs vulnerability that was exploited in zero-day attacks.

Apex Legends players over the weekend experienced disruptions during live matches as threat actors hijacked their characters, disconnected them, and changed their nicknames.

​University of Hawaii says a ransomware gang breached its Cancer Center in August 2025, stealing data of study participants, including documents from the 1990s containing Social Security numbers.

Hackers gained access to some Betterment customers’ personal information through a social engineering attack, then targeted some of them with a crypto-related phishing message.

Hackers are claiming to be selling internal source code belonging to Target Corporation, after publishing what appears to be a sample of stolen code repositories on a public software development platform. After BleepingComputer notified Target, the files were taken offline and the retailer's developer Git server was inaccessible.