Over Security

Scadenze NIS2 2026: a gennaio la registrazione, entro ottobre l'implementazione. Roadmap ACN e fasi implementative.

Petróleos de Venezuela (PDVSA), Venezuela's state-owned oil company, was hit by a cyberattack over the weekend that disrupted its export operations.

La trasformazione del CISO da tecnico a figura strategica con responsabilità legali richiede evoluzione parallela delle protezioni professionali per garantire sostenibilità di lungo termine del ruolo. Che c’è da sapere

Ransomware groups are targeting hypervisors to maximize impact, allowing a single breach to encrypt dozens of virtual machines at once. Drawing on real-world incident data, Huntress explains how attackers exploit visibility gaps at the hypervisor layer and outlines steps orgs can take to harden virtualization infrastructure.

Direct navigation -- the act of visiting a website by manually typing a domain name in a web browser -- has never been riskier: A new study finds the vast majority of "parked" domains -- mostly expired or dormant domain…

Microsoft announced on Monday that it will soon block mobile devices running outdated email software from accessing Exchange Online services until they're updated.

European law enforcement authorities dismantled a fraud network operating call centers in Ukraine that scammed victims across Europe out of more than 10 million euros.

Kaspersky researchers describe how they gained access to a vehicle's head unit by exploiting a single vulnerability in its modem.

Discover three practical steps SOC teams use to cut MTTR by 21 minutes, detect threats in seconds, and improve response efficiency.

Cyble tracks the latest IT vulnerabilities this week, including zero-days, active exploits, and dark-web discussions targeting IT and industrial systems.

L’articolo 30 del decreto NIS 2 riguarda un processo strategico di autoconoscenza organizzativa e mostra perché, senza l’attuazione di tale articolo, nessun sistema di sicurezza può dirsi credibile. Più che un adempimento, è una radiografia operativa

Adult video platform PornHub is being extorted by the ShinyHunters extortion gang after the search and watch history of its Premium members was reportedly stolen in a recent Mixpanel data breach.

Audio streaming platform SoundCloud has confirmed that outages and VPN connection issues over the past few days were caused by a security breach in which threat actors stole a database containing user information.

Google is discontinuing its "dark web report" security tool, stating that it wants to focus on other tools it believes are more helpful.

Japanese e-commerce giant Askul Corporation has confirmed that RansomHouse hackers stole around 740,000 customer records in the ransomware attack it suffered in October.

A new malware-as-a-service (MaaS) information stealer named SantaStealer is being advertised on Telegram and hacker forums as operating in memory to avoid file-based detection.

Adult video platform PornHub is being extorted by the ShinyHunters extortion gang after the search and watch history of its Premium members was reportedly stolen in a recent Mixpanel data breach.

Users accessing the SoundCloud audio streaming platform through a virtual private network (VPN) connection are denied access to the service and see a 403 'forbidden' error.

700Credit, a U.S.-based financial services and fintech company, will start notifying more than 5.8 million people that their personal information has been exposed in a data breach incident.

Sacramento compie la scelta dell'intervento normativo sulla scia dell'AI Act europeo. Ecco come la California intende esplora la regolazione dell’IA con il Senate Bill 53 (SB 53)

L'adozione di una Content Delivery Network (CDN) come Cloudflare è prassi standard per la mitigazione dei vettori di attacco di Layer 7 e per l'occultamento dell'indirizzo IP d'origine (origin IP)

L'obbligo della raccolta sistematica di dati personali sui social media rientra nel quadro delle procedure previste dal Paperwork Reduction Act, ai fini delle attività di pre-screening dei turisti prima del loro arrivo sul territorio USA. Ecco perché preoccupa

Phishing attacks in 2025 increasingly moved beyond email, with attackers using social platforms, search ads, and browser-based techniques to bypass MFA and steal sessions. Push Security outlines the key phishing trends and what security teams need to adjust as identity-based attacks continue to evolve in 2026.

La governance dei dati evolve: CDO e CIO convergono per garantire qualità, sicurezza e affidabilità dei modelli di AI.

Il provvedimento del 10 luglio 2025 del Garante Privacy riguarda il ciclo di vita delle caselle di posta elettronica messe a disposizione dal datore di lavoro e finite in un limbo di conservazione ingiustificata. Ecco cosa impariamo dalla sanzione di 8.000 euro a un’Università chiamata in causa su questa tematica

Microsoft says that recent Windows 11 security updates are causing VPN networking failures for enterprise users running Windows Subsystem for Linux.

VStarcam firmware comes in lots of varieties and occasional proprietary formats that binwalk cannot handle. This article documents the formats and unpacking methods.