Over Security

I ricercatori di watchTowr Labs hanno individuato migliaia di secret esposti, chiavi di autenticazione, e credenziali su tool di formattazione online.

Passwork 7 unifies enterprise password and secrets management in a self-hosted platform. Organizations can automate credential workflows and test the full system with a free trial and up to 50% Black Friday savings.

Microsoft warned users on Tuesday that FIDO2 security keys may prompt them to enter a PIN when signing in after installing Windows updates released since the September 2025 preview update.

Starting in mid-to-late October 2026, Microsoft will enhance the security of the Entra ID authentication system against external script injection attacks.

Polizia postale, Antitrust, associazioni dei consumatori hanno diffuso vademecum e decaloghi con consigli molto concreti su come difendersi da truffe che aumentano tanto in questi giorni di shopping online, con gli sconti black friday. Facciamo una sintesi ragionata dei consigli

A deep dive into 15 high-priority IT and ICS vulnerabilities, including seven discussed on the dark web, plus critical CVEs requiring urgent security action.

ASUS has released new firmware to patch nine security vulnerabilities, including a critical authentication bypass flaw in routers with AiCloud enabled.

This article covers NTLM relay, credential forwarding, and other NTLM-related vulnerabilities and cyberattacks discovered in 2025.

See November’s top cyber attacks, from XWorm and JSGuLdr to new TI Report findings, and learn what SOC teams can use to improve detection.

Perché è così difficile fermare i deepnude

L’AI Act non pone nessun tipo di limite dimensionale o settoriale. Ma il percorso di compliance sarà proporzionato all'impatto dell’AI nel business aziendale di PMI e microimprese

Da dove ripartire per una vera ed efficace sicurezza dei sistemi industriali e più in generale dei sistemi di esercizio superando una volta per tutte le passate e inadatte abitudini di approccio ai sistemi e tecnologie operative (Operational Technology)

Poltronesofà S.p.A., one of Italy’s most well-known furniture retailers, was recently targeted by a ransomware attack that led to the compromise of customer data, with files encrypted on the company’s systems; any potential exfiltration of information has not yet been confirmed. In the days following the incident, the company sent email notifications to affected users, confirming unauthorized access to its systems.

Risk management company Crisis24 has confirmed its OnSolve CodeRED platform suffered a cyberattack that disrupted emergency notification systems used by state and local governments, police departments, and fire agencies across the United States.

Black Friday 2025 is almost here, and early deals are already live across security software, online courses, system administration tools, antivirus products, and VPN services. These discounts are limited-time offers and vary by provider, so if you see something that fits your needs, it's best to act while it's available.

La comunicazione con top management e Board richiede linguaggio e approcci specifici che traducano rischi tecnici in impatti business misurabili. Il CISO deve quindi trasformare la percezione della sicurezza da costo inevitabile a investimento strategico, da freno operativo a abilitatore di crescita sostenibile. Ecco come

Le PMI bersaglio di crescenti attacchi informatici con l'AI: voice cloning, phishing e ransomware minacciano bilanci e reputazione aziendale.

I ricercatori di Wiz e Aikido hanno segnalato il ritorno di una massiccia campagna di attacchi supply-chain soprannominata "Shalai Ulud 2.0".

The FBI warns of a surge in account takeover (ATO) fraud schemes and says that cybercriminals impersonating various financial institutions have stolen over $262 million in ATO attacks since the start of the year.

Tor has announced improved encryption and security for the circuit traffic by replacing the old tor1 relay encryption algorithm with a new design called Counter Galois Onion (CGO).

Microsoft is investigating an Exchange Online service outage that is preventing customers from accessing their mailboxes using the classic Outlook desktop client.

L'Italia si colloca oggi al terzo posto in Europa per attacchi DDoS e al primo nell'Unione Europea per ransomware con richiesta di riscatto. Un triste primato che evidenzia l'esposizione del nostro tessuto economico. Ecco i tre pilastri su cui le PMI italiane devono contruire la loro postura cyber per non soccombere