Over Security

Threat actors are impersonating IT support staff in Microsoft Teams calls to gain remote access to corporate devices and deploy Chaos ransomware in attacks targeting North American organizations.

Come la telemetria dei flussi offre visibilità completa sull'infrastruttura, aiuta a individuare colli di bottiglia e minacce, oltre a diventare la base dati per l'automazione della rete

American semiconductor company Analog Devices announced that an unauthorized party accessed some of its systems and exfiltrated certain files.

Cybersecurity experts told TechCrunch that one of the biggest lessons to be taken from the OpenAI hack against HuggingFace has nothing to do with AI, but traditional cybersecurity defense.

Attackers rarely stop after gaining initial access. Huntress analyzes a real-world intrusion to show how threat actors establish persistence, disable defenses, and reshape compromised systems, and why defenders must investigate the original entry point rather than simply remove the malware.

CVE-2026-63077 affects TeamCity On-Premises over HTTP(S). Learn the impact, affected versions, available patches, and mitigation steps.

Our experts discovered OctLurk and SilkLurk, backdoors operating primarily in memory, targeting Central Asia. They inject plugins to launch shells, scan networks, dump credentials, and keylogging.

Amy looks back at the incredible journeys that brought past guests to the world of threat intelligence.

La diffusione di strumenti di intelligenza artificiale generativa, che provocano un aumento esponenziale di segnalazioni a basso valore aggiunto, e i modelli AI più avanzati, che stanno iniziando a individuare vulnerabilità reali, riproducibili e sfruttabili con rapidità: due tendenze in evoluzione che ridefiniscono il ruolo del bug bounty

È possibile conciliare la crescita delle infrastrutture necessarie all’intelligenza artificiale con la tutela del territorio? Tutte le contraddizioni e le sfide di uno sviluppo ancora privo di regole chiare.

Kaspersky experts dissect GenieLocker: new custom ransomware variants for Windows, Linux, and ESXi systems. We found this family in attacks by Toy Ghouls, a financially motivated extortion group.

Il Senato dà il primo via libera allo schema di decreto sull’uso dell’intelligenza artificiale nelle attività di polizia, mentre il Garante Privacy chiede modifiche profonde su biometria, banche dati, riconoscimento facciale e garanzie di controllo previste dall’AI Act. Ecco i termini dello scontro, che preoccupano

Analisi dei rischi dell'IA tra agenti autonomi e cloud, ridefinendo i parametri della sicurezza informatica aziendale.

The IIT Kanpur Website Hack has taken an unexpected turn as the institute offers a technical assessment to a student who breached.

A new wp2shell vulnerability exposed WordPress to unauthenticated RCE. Read all about the affected versions, patched releases, and mitigation steps.

Managed cyber-fraud protection is the most overlooked growth line in the MSSP playbook, and most of the capability is already sitting in your SOC.

Executive Summary Between October 2025 and March 2026 (Q4 2025 – Q1 2026), the analysis of activities observed within underground forums monitored by Yarix’s Cyber Threat Intelligence Team revealed a significant increase in publications related to alleged data leaks affecting French targets, with a…

Le organizzazioni stanno rivalutando dove collocare i propri workload, riportandone una parte dai public cloud iperscalabili verso infrastrutture on-premises, private cloud o data center in colocation. Ecco cos'è il fenomeno della cloud repatriation e cosa implica

Nordpass Business è in offerta con uno sconto del 40% per 5 utenti: come funziona questa promozione, cosa incluse e i vantaggi.

Il Password manager Proton Pass è in offerta: ecco come ottenere lo sconto del 50%, come attivare il servizio e tutti i vantaggi inclusi.

Dive into a covert Linux XMRig campaign exploiting trusted access, weaponizing PAM to create forensic smokescreens, and deploying self-unlinking payloads.

Explore ANY.RUN’s July threat coverage updates, including TI Reports, fresh malware research, 42 behavior signatures, 11 YARA rules, and 703 Suricata rules.

The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web Access vulnerability in email campaigns to deliver a sophisticated backdoor called OWAReaper.

Cisco is warning that a high-severity Secure Firewall Management Center (FMC) static credential vulnerability, tracked as CVE-2026-20316, was actively exploited in zero-day attacks to gain unauthorized access to vulnerable devices.

Health-ISAC is warning healthcare and medical technology organizations of an observed increase in successful attacks by ShinyHunters, which are using social engineering to compromise single sign-on accounts and steal data from cloud services.