Over Security

A deep Windows internals walkthrough: detecting Vectored Exception Handling Squared (VEH²) by reading DR0-DR3 from thread context in kernel mode, resolving target modules, and raising high-fidelity alerts in Sanctum EDR (Rust).

Microsoft is retiring a feature that allowed you to send your documents to Kindle straight from Microsoft Word.

The latest incarnation of the notorious BreachForums hacking forum has suffered a data breach, with its user database table leaked online.

Authorities in Spain have arrested 34 individuals allegedly part of a criminal network involved in cyber fraud and believed to be connected to the Black Axe group responsible for illicit activities across Europe.

California’s DROP lets consumers delete data from 1,600+ brokers in one click—but behind the scenes it raises serious security, compliance, and transparency risks.

In October 2025, a reincarnation of the hacking forum BreachForums, which had previously been shut down multiple times, was taken offline by a coalition of law enforcement agencies. In the months leading up to the takedown, the site itself suffered a data breach that exposed 324k unique email addresses, usernames, and Argon2 password hashes.

Ireland's Department of Foreign Affairs has recalled nearly 13,000 passports after a software update caused a printing defect. The printing error makes the documents non-compliant with international travel standards and potentially unreadable at automated border gates.

Anthropic has denied reports of banning legitimate accounts, after a viral post on X claimed the creator of Claude had banned a user.

OpenAI is testing "Jobs," a new feature that could help you explore roles, improve your resume, and plan your career. This feature is being tested after ChatGPT gained support for the Health dashboard.

Microsoft is testing a new policy that allows IT administrators to uninstall the AI-powered Copilot digital assistant on managed devices.

Threat actors are systematically hunting for misconfigured proxy servers that could provide access to commercial large language model (LLM) services.

La CNIL chiarisce che la raccolta di dati accessibili online tramite web scraping è legittima se accompagnata da misure a salvaguardia dei diritti degli interessati. Con un interessante focus sheet sul punto, la base giuridica del legittimo interesse prende forza. Vediamo meglio

Grok su X è molto usato per “spogliare” donne e minori senza consenso, creando immagini sexualizzate. Il Garante italiano avverte: generare e diffondere questi contenuti (deepfake) può integrare reati e gravi violazioni dei diritti, con conseguenze anche privacy. Ecco cosa si rischia e come difendersi

Il ritiro degli Stati Uniti da iniziative cyber multilaterali ha implicazioni globali. Scopri come l'Europa reagisce a questo cambiamento strategico in un dominio critico

L’incident response è una funzione vitale dell'organizzazione, ma adottare una corretta strategia a riguardo implica il compiere scelte condivise e coordinate, per non disperdere risorse e mantenere strategie coerenti ed efficaci. Motivo per cui non è da sottovalutare l'aspetto della comunicazione interna

Il ritiro degli Stati Uniti da iniziative cyber multilaterali ha implicazioni globali. Scopri come l'Europa reagisce a questo cambiamento strategico in un dominio critico

Managed Detection & Response services (MDR) 24/7 for network, endpoint, cloud, SaaS and OT, against every type of cyber attack

Click rate misses the real email security risk: what attackers can do after they access a mailbox. Material Security explains why containment and post-compromise impact matter more than phishing metrics.

The Illinois Department of Human Services (IDHS), one of Illinois' largest state agencies, accidentally exposed the personal and health data of nearly 700,000 residents due to incorrect privacy settings.

La Cassazione boccia l'automatismo Cartabia: archiviazione penale non significa diritto all'oblio. Google mantiene la discrezionalità sul delisting. Per le piattaforme un presidio di bilanciamento, per l'interessato una pena reputazionale potenzialmente senza fine. Ecco tutti i punti critici

Il team di Group-IB ha individuato Ghost Tap, frodi a opera di attaccanti cinesi che usano app Android per abilitare transazioni tap-to-pay da remoto.

U.S. prosecutors have charged an Illinois man with orchestrating a phishing operation that allowed him to hack the Snapchat accounts of nearly 600 women to steal private photos and sell them online.

È stata individuata una nuova campagna malware, ribattezzata PHALT#BLYX, che segna un cambio di paradigma nelle tecniche di social engineering, sfruttando false schermate di errore di Windows per spingere gli utenti a compilare ed eseguire manualmente codice malevolo. Tutti i dettagli

Cyble tracked 678 vulnerabilities last week, with nearly 100 PoCs and dozens of critical CVEs across IT and ICS, increasing real-world attack risk.

Japanese cybersecurity software firm Trend Micro has patched a critical security flaw in Apex Central (on-premise) that could allow attackers to execute arbitrary code with SYSTEM privileges.