Over Security

Italian invoice-themed phishing campaign targeting users since February 2026. The infection chain abuses HTML attachments, fake download pages, JavaScript, PowerShell, and UpCrypter to deploy a final NeptuneRAT/MasonRAT payload.

Microsoft is investigating a new issue preventing third-party applications from launching Microsoft Office applications or opening documents on up-to-date Windows systems.

PreCrime Labs identified 1,352 suspicious domains staged before active campaigns launched, spanning gambling networks, credential harvesting, counterfeit card sales, and cryptocurrency fraud.

PreCrime Labs identified 1,352 suspicious domains staged before active campaigns launched, spanning gambling networks, credential harvesting, counterfeit card sales, and cryptocurrency fraud.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch a maximum-severity flaw in the Widget Factory Joomla Content Editor (JCE) plugin that is being actively exploited in the wild.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch a maximum-severity flaw in the Widget Factory Joomla Content Editor (JCE) plugin that is being actively exploited in the wild.

Novo Nordisk IT Security Incident led to unauthorized access to internal systems, exposing limited patient and healthcare professional data.

Materie prime rare, filiere fragili e pochissimi talenti: gli ostacoli sulla strada del quantum computing non sono solo scientifici, ma anche industriali e umani

Introducing Session Switcher. Swap Burp Sessions with One Click!

Telegram Ban in India remains in effect until June 22 as authorities act against exam fraud ahead of the NEET UG 2026 Re-examination.

Microsoft confirmed that it's working on a security patch for a Defender zero-day vulnerability named "RoguePlanet," disclosed one week ago.

What Happened Throughout May 2026, affiliates of the DragonForce ransomware-as-a-service (RaaS) platform claimed seven UK-based companies ...

Kodak has confirmed that it's working with external cybersecurity experts to investigate a security breach after hackers gained access to some of the company's data.

A modular phishing infrastructure targeting multiple Mexican banks has been uncovered, abusing GitHub-hosted Pages, employing obfuscated scripts, and featuring a centralized credential exfiltration via SheetBest API, indicating a scalable and persistent multi-brand phishing operation.

At least 15 malicious plugins found on the JetBrains Marketplace were designed to steal AI API keys from developers.

A new Android banking trojan named Rokarolla is targeting 217 banking and cryptocurrency applications using an extensive set of 137 commands.

A security researcher said a flaw in FIFA’s online platforms allowed her to access several internal systems, including one that could have allowed her to take control of the TV stream of every World Cup match.

Learn about the WordPress PBN Plugin infection that employs fake plugins and hidden techniques to exploit your site.

Threat actors are abusing Steam Workshop, Valve's community hub for downloading game-related content, to push various malware hidden in wallpaper packages.

Sebbene il numero di casi d’uso nel nostro Paese sia ancora molto basso, le previsioni di tutti gli esperti dicono che gli agenti AI diventeranno i veri “operati” dell’automazione dei processi in azienda. Il problema è che chi dovrà gestirne la sicurezza non ha ancora l’esperienza necessaria per farsi un quadro chiaro di come questi …

Opening a new social media account in the UK will soon mean proving you're over 16 with an ID upload or a facial age scan, under a government ban on under-16s taking effect in spring 2027. Security experts warn the age checks are easy to circumvent and create new data-breach risks.

In uno scenario normativo sempre più complesso, la sovranità dei dati non è più soltanto tema tecnico, ma diventa una reale scelta operativa. Ecco perché le Pmi devo essere consapevoli su dove avviene l'archiviazione dei dati

GhostTree uses recursive NTFS junctions to generate vast numbers of valid Windows file paths. Varonis explains how the technique could cause Microsoft Defender folder scans to never complete, leaving malware undetected.

L’imaging di sicurezza è una pratica spesso sottovalutata, ma fondamentale per ridurre vulnerabilità, errori di configurazione e costi operativi. Standardizzare sistemi e baseline consente di rafforzare la cybersecurity, semplificare la gestione degli endpoint e migliorare la governance del rischio

L'IT Security Audit dei sistemi partner è lo strumento operativo con cui le organizzazioni verificano sul campo ciò che i contratti SLA e i questionari di assessment dichiarano sulla carta. Questa guida fornisce metodologie, checklist strutturate per dominio e standard di riferimento per condurlo in modo efficace e conforme a NIS2