Over Security

che cosa succede davvero nei pochi secondi necessari ad autorizzare un pagamentoDai controlli antifrode alle blacklist, fino alla threat intelligence: che cosa succede davvero nei pochi secondi necessari ad autorizzare un pagamento.

Citrix has warned IT administrators to patch systems immediately against a new critical vulnerability affecting NetScaler ADC networking appliances and NetScaler Gateway secure remote access solutions.

An attacker accessed Town systems in the Aug. 13 Andover cyberattack. Officials are still investigating whether personal was taken.

Inside Dark Clark and Bogus Bylines, covert influence operations that used ChatGPT, fake journalist personas and a front think tank to reach media.

Splunk patched 22 vulnerabilities, including a CVSS 9.8 critical Patroni API flaw. See affected Splunk Enterprise versions and how to fix them.

Agentic AI is the breakthrough of the moment, in security as everywhere else: agents that are threat-aware, active, and proactive in investigation. But it is also the technology behind a recent documented autonomous AI intrusion. Both facts are true, and the distance between them is what this article is about.

In August 2026, the food and animal safety organisation Neogen was the target of a ShinyHunters "pay or leak" extortion attempt. The group later published data it claimed had been obtained from Neogen. The data consisted largely of corporate contact records and included 436k unique email addresses from mailing lists, employee records and other contacts.

DOJ and FBI seize Microscan and FishHub, hacking tools linked to Flax Typhoon and China's Integrity Tech.

The Pwn2Own Ireland 2026 hacking contest has concluded, with hackers collecting $1,262,000 in rewards after exploiting 98 zero-day flaws.

The FBI has seized seven domains used by Chinese state-sponsored hackers known as Flax Typhoon to operate two hacking tools, MicroScan and FishHub, used in attacks that breached critical infrastructure and other organizations worldwide.

IDC Frontier, a major Japanese cloud and digital infrastructure company, disclosed that its IDCF Cloud service was targeted in a ransomware attack that caused an outage at a data center cluster serving the eastern part of the country.

International coalition seizes tools used by cyber firm behind Flax Typhoon

A malware campaign dubbed 'Midnight Mimosa' has been discovered on low-cost Android smartphones that ship with malicious software embedded in their firmware, allowing attackers to silently install apps, perform ad fraud, and turn devices into residential proxies.

Explore Flashpoint's analysis of CastleStealer, an emerging infostealer with evolving browser data theft, encryption bypass, and remote command capabilities.

Pierre's debut newsletter explores the messy, real-world side of risk management and how to keep vital systems running when a perfect patch isn't an option.

More than 17,000 fake repositories on GitHub are distributing the SmartLoader malware after the FakeGit campaign reactivated earlier this month to push the StealC infostealer.

La customer advocacy guida la crescita B2B nella sicurezza informatica. Strategie di fiducia e gestione delle relazioni con i clienti.

Il phishing usa falsi servizi AI e login contraffatti per rubare credenziali e codici MFA. Come funziona la trappola del pulsante Connect

Cisco released security advisories for five critical vulnerabilities in its NX-OS data center network operating system that could be exploited to run arbitrary code with root privileges on Nexus switches.

OAuth grants create data highways between SaaS apps, AI agents, and other tools. And, they are multiplying faster than any security team can review them. As the recent Klue breach showed, attackers are taking notice and exploiting forgotten OAuth grants to gain access to corporate data. This article covers why OAuth risks are so hard

A Maryland man was found guilty of stealing more than $53 million after hacking the decentralized crypto exchange Uranium Finance twice in April 2021.

Bitdefender has identified a malware campaign (dubbed Midnight Mimosa) running on low-cost, multi-brand Android devices built on MediaTek platforms.