Over Security

Data from Italy's national railway operator, the FS Italiane Group, has been exposed after a threat actor breached the organization's IT services provider, Almaviva.

In November 2025, the International Kiteboarding Organization suffered a data breach that exposed 340k user records. The data was subsequently listed for sale on a hacking forum and included email addresses, names, usernames and in many cases, the user's city and country.

China-linked APT24 hackers have been using a previously undocumented malware called BadAudio in a three-year espionage campaign that recently switched to more sophisticated attack methods.

Salesforce said it’s investigating an incident where hackers compromised some of its customers' data after breaching customer experience company Gainsight.

In March 2024, Mozilla said it was winding down its collaboration with Onerep -- an identity protection service offered with the Firefox web browser that promises to remove users from hundreds of people-search sites -- after KrebsOnSecurity revealed Onerep's founder…

Martin muses on how agentic AI is bringing efficiency improvements to the business of cyber crime.

Data from Italy's national railway operator, the FS Italiane Group, has been exposed after a threat actor breached the organization's IT services provider, Almaviva.

A major spike in malicious scanning against Palo Alto Networks GlobalProtect portals has been detected, starting on November 14, 2025.

Salesforce says it revoked refresh tokens linked to Gainsight-published applications while investigating a new wave of data theft attacks targeting customers.

American cybersecurity company SonicWall urged customers today to patch a high-severity SonicOS SSLVPN security flaw that can allow attackers to crash vulnerable firewalls.

D-Link is warning of three remotely exploitable command execution vulnerabilities that affect all models and hardware revisions of its DIR-878 router, which has reached end-of-service but is still available in several markets.

Windows 11 migration is inevitable as Windows 10 support ends, and unsupported systems create major security and ransomware risks. Acronis explains how to use this migration to review backups, strengthen cybersecurity, and ensure data stays recoverable.

Al momento non c'è alcuna rivendicazione, ma l'attacco ransomware subito da Poltronesofà rappresenta un caso emblematico della minaccia persistente che colpisce il tessuto imprenditoriale italiano. Ecco cosa rischiano le persone coinvolte

Un gruppo di ricerca austriaco ha documentato il comportamento anomalo della struttura di WhatsApp che si occupa di verificare se un numero appartiene o no a un utente dell'applicazione. Per farlo è riuscita ad estrarre oltre 3 miliardi di account con relativi dettagli. Falla chiusa ma il rischio c'è ancora, spieghiamo perché

Un gruppo di ricerca austriaco ha documentato il comportamento anomalo della struttura di Whatsapp che si occupa di verificare se un numero appartiene o no a un utente dell'applicazione. Per farlo è riuscita ad estrarre oltre 3 miliardi di account con relativi dettagli. Falla chiusa ma il rischio c'è ancora, spieghiamo perché

Photocall, a TV piracy streaming platform with over 26 million users annually, has ceased operations following a joint investigation by the Alliance for Creativity and Entertainment (ACE) and DAZN.

I ricercatori di Push Security hanno scoperto che gli autori di Sneaky2FA hanno aggiunto al proprio toolkit una funzionalità di Browser-in-the-Browser.

Il Consiglio d’Europa ha adottato una nuova legge tesa ad accelerare la gestione dei reclami transfrontalieri in materia di protezione dati. Le misure intendono semplificare l’iter procedurale, burocratico e amministrativo, rendendo più efficiente l'applicazione del GDPR nei casi transfrontalieri. Vediamo di che si tratta

This report examines how employment and recruitment function on the dark web, based on over 2,000 job-related posts collected from shadow forums between January 2023 and June 2025.

The founders of the Samourai Wallet (Samourai) cryptocurrency mixing service have been sent to prison for helping criminals launder over $237 million.