Over Security

A new malware implant called EtherRAT, deployed in a recent React2Shell attack, runs five separate Linux persistence mechanisms and leverages Ethereum smart contracts for communication with the attacker.

An initial access broker tracked as Storm-0249 is abusing endpoint detection and response solutions and trusted Microsoft Windows utilities to load malware, establish communication, and persistence in preparation for ransomware attacks.

La mappatura degli elementi di business ai driver del rischio è ormai una necessità operativa per ogni organizzazione che gestisce asset strategici. In questo contesto, il CISO deve trasformarsi da responsabile della sicurezza IT a orchestratore della resilienza organizzativa. Ecco come

Managed Detection & Response services (MDR) 24/7 for network, endpoint, cloud, SaaS and OT, against every type of cyber attack

Cyble tracked 591 vulnerabilities this week, including critical IT and ICS vulnerabilities, some with PoCs, raising risk of real-world attacks.

Intel 471 discovered a new Android trojan, FvncBot, that masquerades as a security application for mBank, a major Polish bank. Our Malware Intelligence team analyzed its code, which is new and not based on other leaked malware code.

Microsoft is working to mitigate an ongoing incident that has been blocking users in Europe from accessing the company's AI-powered Copilot digital assistant.

Kaspersky researchers analyze changes in the lifespan of a shadow Telegram channel, blocks, and migration to other platforms.

Cisco Talos has uncovered a new DeadLock ransomware campaign using a previously unknown BYOVD loader to exploit a Baidu Antivirus driver vulnerability, letting threat actors disable EDR defenses and escalate attacks.

La vicenda della multa a X rappresenta l’inizio di un confronto destinato a durare nel tempo tra la UE e Musk che dovrà decidere se adeguarsi alle regole europee o continuare su una linea di scontro ideologico che potrebbe portare a nuove sanzioni, con influenze anche per le altre piattaforme online. I punti cardine

Prioritize alerts, cut noise, and focus on attacks that matter. Get real-time industry and geo context for any threat or IOC with ANY.RUN.

Quattro aree sottovalutate della NIS 2 sono da rivedere per costruire una postura realmente resiliente. Ecco perché l’articolo 24 impone una revisione radicale della governance interna, integrando gli OT nella postura NIS 2

La quantum safety diventa centrale per il settore finanziario: minacce future, crittografia post-quantistica e sfide di migrazione.

React2Shell, vulnerabilità di React che consente l'esecuzione di codice da remoto, è stata sfruttata dagli attaccanti per colpire oltre 30 organizzazioni.

Several ransomware groups have been spotted using a packer-as-a-service (PaaS) platform named Shanya to assist in EDR (endpoint detection and response) killing operations.

Zuckerman, who used to run the stalkerware apps SpyFone and SpyTrac, claimed the ban is hurting his unrelated business.

Trumbull County (Ohio) was hit by a severe cyberattack in the first days of November 2025, carried out by the ransomware group Anubis. Despite multiple public

Two malicious extensions on Microsoft's Visual Studio Code Marketplace infect developers' machines with information-stealing malware that can take screenshots, steal credentials, and hijack browser sessions.

A new report by the Financial Crimes Enforcement Network (FinCEN) shows that ransomware activity peaked in 2023 before falling in 2024, following a series of law enforcement actions targeting the ALPHV/BlackCat and LockBit ransomware gangs.

The police in Poland arrested three Ukrainian nationals for allegedly attempting to damage IT systems in the country using hacking equipment and for obtaining "computer data of particular importance to national defense."

Google Chrome is introducing a new security architecture designed to protect upcoming agentic AI browsing features powered by Gemini.

We map the global infostealer attack chain step-by-step, from initial infection to enterprise-level account takeover.

Petco said the exposure was due to an error in an application, and that it is notifying victims’ whose data was affected.