Over Security

In July 2026, Exact Sciences (now owned by Abbott Laboratories) was the target of a ShinyHunters "pay or leak" extortion campaign. The group claimed to have obtained data from the company's cancer diagnostics business, which they later published publicly. The breach contained 10.9M unique email addresses belonging to customers, patients and healthcare providers, along with names, addresses, phone numbers and health records. Abbott subsequently published a public notice advising that "some of the impacted files contain personal information and/or personal health information" and that more specific information would follow once their review of the incident was complete. For context, Exact Sciences is the maker of the Cologuard at-home colorectal cancer screening test.

Learn how phishing attacks evolved from early online scams to AI-powered threats, key milestones, common techniques, and practical ways to reduce risk.

OpenAI is rolling out a more reliable version of ChatGPT GPT-5.6 Sol for Plus and Pro users, while Free users are getting unlimited text chats with GPT-5.6 Luna.

A Go-based malware delivered in ClickFix attacks targeting macOS users is stealing cryptocurrency assets, browser-stored passwords, Apple Keychain data, and cached credentials.

In this post we explain how cyber threat intelligence teams are being expected to take on physical risk, how tradecraft overlaps, and how Flashpoint bridges the gap.

A recent wave of cyberattacks targeting hedge funds, private-equity firms, and other financial organizations has been linked to UNC6671, an extortion group reportedly associated with the BlackFile campaign extortion group.

Groups of hackers are breaking into large U.S. financial firms to steal sensitive data and extort victims, Google’s security researchers report.

Switzerland's federal IT office says hackers exploited vulnerabilities to breach its Microsoft SharePoint servers and compromised approximately 200 accounts.

Researchers found a way to bypass recent mitigations for Spectre v2 speculative execution side-channel attacks and developed an exploit to leak secrets from Linux machines.

In this week's newsletter, Martin looks at how the metaphors we use to describe AI "escaping" its sandbox can completely change how we react to the threat.

A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort more than 165 organizations that used the cloud data storage provider…

Connor Moucka pled guilty to hacking and stealing data from more than 165 Snowflake customers, which net him and his accomplices more than $2.5 million in ransom payments.

Meta has become the latest AI company to confirm that one of its models hacked a real organization during cybersecurity testing, as similar incidents continue to emerge following OpenAI'sOpenAI's initial disclosure that its agents breached Hugging Face.

Analisi della leadership e del potere aziendale tra consenso, coercizione ed economia. Leve e strategie manageriali.

Dall'ingresso nella fase operativa della NIS2, per molte organizzazioni europee inizia il passaggio più delicato: trasformare gli obblighi normativi in processi concreti, misurabili e sostenibili. Ecco il ruolo del fattore umano

L'intelligenza artificiale non modifica solo processi e controlli: trasforma il modo in cui le organizzazioni costruiscono conoscenza e formulano giudizi. Da qui nasce il concetto di rischio epistemico organizzativo, che propone una nuova prospettiva sull'evoluzione dell'assurance e del ruolo dell'Internal Audit

AI did not create a new browser security problem. It exposed one that enterprises have long been able to ignore. Skyhigh Security explains why browsers have become a critical control point for governing data movement, AI interactions, and modern work.

La valutazione del rischio non dovrebbe essere un esercizio formale o una matrice compilata per obbligo. In ottica NIS2, deve diventare il punto di collegamento tra attività aziendali, servizi IT, asset, fornitori, vulnerabilità, impatti e misure di sicurezza proporzionate

Il Consiglio dei ministri ha approvato il DDL Crosetto sulla capacità di difesa nazionale: nuovo Comando Cyber Intel, autorità cyber al Capo di Stato Maggiore, specialisti militari dedicati. ACN e DIS restano invariati. Analisi degli impatti per imprese e consulenti

103 incidents tracked from 15–31 July 2026. See attack motivations, techniques, initial access vectors, targeted sectors and countries in one timeline.

103 incidents tracked from 15–31 July 2026. See attack motivations, techniques, initial access vectors, targeted sectors and countries in one timeline.

Un test dell’AI Security Institute britannico ha mostrato agenti AI capaci di agire senza autorizzazione sulla rete pubblica, creare identità false e tentare di inserire malware in un progetto open source, sollevando nuovi dubbi sui controlli necessari quando i modelli dispongono di accesso a Internet

Kaspersky propone il suo antivirus con una VPN integrata a partire da 29,99 € all'anno: ecco come funziona l'offerta e tutti i vantaggi.

OpenAI models accessed the public internet during third-party cyber evaluations due to testing configurations to strengthen evaluation safeguards.

De Bijenkorf cyberattack at a third-party logistics provider delays orders, and refunds while a probe examines potential customer data exposure.

In June 2026, Inter-Con Security was targeted in a ShinyHunters “pay or leak” extortion campaign. The group subsequently published data it alleged was taken from the company, including 276k unique email addresses along with names, physical addresses, job titles and phone numbers. The data encompassed a combination of contacts, internal users and leads.