Over Security

Kaspersky researchers have discovered a new Android banking Trojan targeting Turkish users and posing as an app for accessing court case files via an official government webpage. The malware is being actively developed and may become MaaS in the future.

17 out of 20 popular VPNs exit traffic from different countries than they claim. Dig into what that means and why it matters in our VPN report.

When a ransomware attack hits a hospital, an educational institution, or a government agency, official narratives often describe it as an “IT incident.” It is

The pro-Russia hacktivist group CyberVolk launched a ransomware-as-a-service (RaaS) called VolkLocker that suffered from serious implementation flaws, allowing victims to potentially decrypt files for free.

An email scam is abusing abusing PayPal's "Subscriptions" billing feature to send legitimate PayPal emails that contain fake purchase notifications embedded in the Customer service URL field.

In a corporate environment, the natural evolution of network automation is to plug itself directly into business processes, speeding them up and making them more cost-effective. Over the past few years, I’ve often come across Camunda .

One of the most repetitive and resource-intensive operational tasks for IT teams is managing users, groups, and roles. This process is almost always triggered by HR following an organizational change. HR submits a service request ticket to IT for each individual operation.

Stay safe online by learning about phishing tactics and how attackers gain access to your accounts and sensitive information.

Apple ha rilasciato degli aggiornamenti di sicurezza straordinari per correggere due vulnerabilità zero-day che, secondo quanto confermato dall’azienda, risultano essere state sfruttate in attacchi reali ad elevata sofisticazione. Il fatto che Apple parli esplicitamente di attacchi mirati contro individui specifici è particolarmente significativa in quanto già in passato si è dimostrata coerente con campagne di …

Apple has released emergency updates to patch two zero-day vulnerabilities that were exploited in an "extremely sophisticated attack" targeting specific individuals.

Apple released patches for all of its flagship devices to fix security flaws under attack. Google also updated Chrome to remediate one vulnerabilty exploited in the attacks.

A data breach at Coupang that exposed the information of 33.7 million customers has been tied to a former employee who retained access to internal systems after leaving the company.

A fake torrent for Leonardo DiCaprio's 'One Battle After Another' hides malicious PowerShell malware loaders inside subtitle files that ultimately infect devices with the Agent Tesla RAT malware.

Hama Film makes photo booths that upload pictures and videos online. But their backend systems have a simple flaw that allows anyone to download customer pictures.

AI e cybersecurity sono ormai inseparabili: l’intelligenza artificiale potenzia sia le difese sia le minacce del cybercrime.

La privacy aziendale tutela dati e reputazione. Violazioni GDPR costano miliardi, formazione e strategie proattive garantiscono continuità.

Nel prossimo anno il cybercrime continuerà a trasformarsi in un’industria organizzata, basata su automazione, specializzazione e intelligenza artificiale (AI). Per difendersi occorrerà trasformare la sicurezza da funzione reattiva a motore di resilienza, fiducia e crescita

When official systems can't support everyday workflows, employees turn to spreadsheets — creating "shadow spreadsheets" that circulate unchecked. Grist shows how these spreadsheets expose sensitive data, create version sprawl, and remove the audit trails security teams depend on.

Kali Linux has released version 2025.4, its final update of the year, introducing three new tools, desktop environment improvements, and enhanced Wayland support.

La scelta di non guardare ad alcuni rischi cyber, per inadeguatezza degli assetti organizzativi o per scelta, emerge in modo chiaro all'interno di quelle valutazioni svolte come esercizio di stile che possono compromettere in modo significativo le strategie delle organizzazioni

Trump annuncia un ordine esecutivo per limitare le leggi statali sull'IA, promettendo uno standard federale che non esiste. Stati come Florida e Minnesota si oppongono. Ecco che c’è da sapere, tra criticità costituzionali e sospetti di favoritismo verso Big Tech

Say hello to Kali Linux 2025.4! Expect updated tools, performance tweaks, and improved support - no fluff, just the essentials. The summary of the changelog since the 2025.3 release from September is: Desktop Environments - Changes to all! GNOME, KDE & Xfce Wayland - VM Guest Utils Support Halloween Mode - dresses the desktop for the occasion 3 New Tools - As always, new packages added and upgraded! Desktop Environments GNOME 49 As with previous GNOME updates in Kali, we’ve given all our themes a fresh coat of paint - everything has been tuned to look sharp and feel smooth.

Free unofficial patches are available for a new Windows zero-day vulnerability that allows attackers to crash the Remote Access Connection Manager (RasMan) service.