Over Security

A Maryland man was found guilty of stealing more than $53 million after hacking the decentralized crypto exchange Uranium Finance twice in April 2021.

Bitdefender has identified a malware campaign (dubbed Midnight Mimosa) running on low-cost, multi-brand Android devices built on MediaTek platforms.

Microsoft will soon introduce support for third-party deepfake detection solutions and impersonation protection in Teams meetings.

ASOS is sending updates to affected customers about the cybersecurity incident it suffered earlier this week, confirming that hackers accessed some personal data.

Anthropic unifica Glasswing e Cyber Verification Program: tre livelli di accesso ai modelli AI per la cyber. Le implicazioni per SOC e imprese

The co-creator of Empire Market, one of the largest dark web marketplaces before its shutdown, has been sentenced to 40 years in prison for facilitating $430 million in illegal transactions from 2018 to 2020.

Live dashboard of incidents where AI agents went rogue: an interactive timeline plus charts by AI company, agent, technique and initial access.

Sconti sulla VPN di Proton: come ottenere il piano di 2 anni a soli 2,99 al mese, ecco l'analisi di tutti i costi che dobbiamo conoscere.

“AI-analysis evasion” encapsulates the real-world techniques malware authors are developing in attempt to obstruct or defeat any layers of automated AI analysis.

Cisco Talos identified an APT spear-phishing campaign against individuals affiliated with Taiwan research organizations. The operation leveraged legitimate public event themes and impersonated reputable academic and policy institutions.

The FBI and French authorities seized two CSAM domains tied to NudeLeaksTeens, a site selling hacked explicit images.

Con gli agenti AI, il costo della cybersecurity dipende sempre più dai token consumati durante analisi e investigazioni. Un budget esaurito può interrompere un'indagine proprio quando serve. Per questo capacity planning, controllo dei consumi e misurazione dei risultati diventano nuovi strumenti di governance dei SOC

The US is offering up to $10 million for information on Zhang Yu, accused of hacking COVID-19 research and HAFNIUM attacks.

Explore key insights from ANY.RUN and Elastic on making threat intelligence actionable across daily SOC workflows.

La privacy by design non può basarsi sull'infallibilità delle persone. L'errore umano deve diventare un requisito di progettazione, attraverso sistemi capaci di prevenire le condotte rischiose, limitarne le conseguenze e rilevare le anomalie. Perché la protezione dei dati non dipenda soltanto dalla diligenza degli operatori

​​​On the second day of Pwn2Own Ireland 2026, security researchers collected $232,500 in cash awards after exploiting 45 unique zero-day vulnerabilities.

In August 2026, data centre operator CyrusOne was the target of a ShinyHunters "pay or leak" extortion attempt. The group subsequently published data allegedly obtained from the company, which included 373k unique email addresses across records relating to users, sales leads and CyrusOne employees. The data largely consisted of corporate contact information, including names, physical addresses, phone numbers and job titles. It also included support tickets and other information related to the organisation's operations.

The owner of ransomware remediation company MonsterCloud has been charged with allegedly defrauding ransomware victims by secretly paying their attackers for decryptors while claiming to use proprietary technology to recover encrypted data.

The FBI is warning that FortiBleed attacks are still ongoing, targeting exposed Fortinet FortiGate firewalls and SSL VPN gateways and locking out legitimate administrators.

Hackers obtained unauthorized HTTPS certificates for several Google domains and hijacked domains in the country-code top-level domains (ccTLDs) for Ghana, American Samoa, and Sierra Leone after compromising third-party operators and modifying authoritative DNS records.

Flashpoint Customer Success & Support (CS) consistently delivers industry-leading responsiveness and resolution speed.

Cisco Talos’ Vulnerability Discovery & Research team recently disclosed vulnerabilities in Adobe, Apple, Foxit Reader, and Microsoft. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, in adherence to Cisco’s third-party vulnerability disclosure policy.  For Snort coverage that can detect the exploitation of these vulnerabilities, download the latest rule sets from Snort.org, and our latest Vulnerability Advisories are always posted on Talos Intellig

Microsoft announced that it will add .msix and .msixbundle attachments to the list of blocked attachments in Outlook Web and the new Outlook Windows client starting next month.