Over Security

I cyber attacchi non sono più soltanto “assistiti” dall’AI: negli ultimi mesi abbiamo osservato vere e proprie famiglie di malware AI-driven capaci di riscrivere il proprio codice, generare script malevoli just-in-time, adattarsi al contesto e tentare di eludere gli strumenti di difesa tradizionali. Ecco dettagli e implicazioni tecniche, organizzative e strategiche

Avast is rolling out Scam Guardian, a free AI-powered protection layer that analyzes websites, messages, and links to detect rising scam threats. Powered by Gen Threat Labs data, it reveals hidden dangers in code and adds 24/7 scam guidance through the Avast Assistant.

Google has started rolling out ads in AI mode, which is the company's "answer engine," not a search engine.

La nuova etichetta "in ufficio" di Microsoft Teams verrà integrata con servizi come Microsoft Places e punta ad agevolare l’organizzazione degli spazi e a favorire la collaborazione ibrida. Il rilevamento tramite Wi-Fi non è un problema se utilizzata in modo legittimo, trasparente e non invasivo

Il sillogismo classico è la base della dimostrazione logica, la prima forma di sicurezza. Ecco perché la logica operativa nella protezione digitale si concentra sul sillogismo disgiuntivo, l'architettura del pensiero digitale, l’anello di congiunzione tra il pensiero umano e la logica booleana, con cui si entra nel territorio del ragionamento per esclusione

Kaspersky experts analyze the ToddyCat APT attacks targeting corporate email. We examine the new version of TomBerBil, the TCSectorCopy and XstReader tools, and methods for stealing access tokens from Outlook.

Una nuova variante della campagna di phishing già osservata a novembre riutilizza il numero 0686356057, questa volta impersonando Google per indurre la vittima a chiamare un finto supporto e ottenere l’accesso all’account Gmail. Un attacco che unisce phishing e vishing, mirato al takeover dell’ident

Con Alessio Fasano di Firemon abbiamo approfondito come la compagnia sta aiutando i propri partner nel processo di migrazione da Skybox.

Data from Italy's national railway operator, the FS Italiane Group, has been exposed after a threat actor breached the organization's IT services provider, Almaviva.

In November 2025, the International Kiteboarding Organization suffered a data breach that exposed 340k user records. The data was subsequently listed for sale on a hacking forum and included email addresses, names, usernames and in many cases, the user's city and country.

China-linked APT24 hackers have been using a previously undocumented malware called BadAudio in a three-year espionage campaign that recently switched to more sophisticated attack methods.

Salesforce said it’s investigating an incident where hackers compromised some of its customers' data after breaching customer experience company Gainsight.

In March 2024, Mozilla said it was winding down its collaboration with Onerep -- an identity protection service offered with the Firefox web browser that promises to remove users from hundreds of people-search sites -- after KrebsOnSecurity revealed Onerep's founder…

Martin muses on how agentic AI is bringing efficiency improvements to the business of cyber crime.

Data from Italy's national railway operator, the FS Italiane Group, has been exposed after a threat actor breached the organization's IT services provider, Almaviva.

A major spike in malicious scanning against Palo Alto Networks GlobalProtect portals has been detected, starting on November 14, 2025.

Salesforce says it revoked refresh tokens linked to Gainsight-published applications while investigating a new wave of data theft attacks targeting customers.

American cybersecurity company SonicWall urged customers today to patch a high-severity SonicOS SSLVPN security flaw that can allow attackers to crash vulnerable firewalls.