Over Security

The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain attacks, was briefly open-sourced on GitHub.

GitHub has announced that npm v12, expected next month, will introduce several security-focused changes aimed at blocking supply-chain attacks abusing behaviors triggered by the 'npm install' command.

Oracle PeopleSoft servers are being targeted in ongoing data theft attacks by the ShinyHunters extortion gang, which claims to have stolen data from over 100 organizations.

Cybersecurity researchers are complaining that Anthropic's new model Fable has guardrails that are too strict for any cybersecurity work.

Today is Microsoft's June 2026 Patch Tuesday, with security updates for 200 flaws, including five publicly disclosed zero-day vulnerabilities and one actively exploited in attacks.

Today is Microsoft's June 2026 Patch Tuesday, with security updates for 200 flaws, including four publicly disclosed zero-day vulnerabilities and one actively exploited in attacks.

Il Patch Tuesday di giugno 2026 è il più grande della storia di Microsoft: 206 CVE corrette, di cui 33 critiche e una in Exchange Server già sfruttata in rete. Sullo sfondo, il ricercatore Nightmare Eclipse che annuncia un nuovo attacco per il 14 giugno sfruttando due zero-day, YellowKey e GreenPlasma, delle tre corrette questo mese

The JDY botnet, a malware network previously associated with Chinese threat actors like Volt Typhoon, has significantly expanded its targeting scope and reconnaissance efforts.

Attackers are increasingly bypassing weak authentication through phishing, MFA fatigue, and service desk social engineering. Specops Software breaks down five best practices for stronger identity verification and access security.

A cybercrime group known as The Gentlemen has emerged as the second most active ransomware gang by victim count, rapidly attracting a talented pool of hackers through an aggressive recruitment strategy that promises affiliates 90 percent of any ransom paid…

Le due varianti differiscono solo per il perimetro dei controlli: l’apparato di safeguard è l’unico confine tra le capacità ordinarie e quelle offensive. Ecco il modello di minaccia associato alle capacità di agentic hacking di Claude Fable 5 e Mythos 5, le evidenze e i limiti in materia di resistenza agli universal jailbreak

Microsoft has patched an actively exploited Exchange Server vulnerability that allows threat actors to execute arbitrary JavaScript code in cross-site scripting (XSS) attacks targeting Outlook Web Access users.

Learn how threat intelligence helps SOC teams validate hypotheses, enrich hunts, reduce noise, and find threats faster.

FIFA World Cup 2026 scams target fans through fake tickets, job, and streaming sites.

Microsoft warned customers on Tuesday that they may have issues installing the latest monthly updates on some Windows devices that were upgraded to Windows 11 24H2 or 25H2.

L'IT procurement non è più solo una questione di costi e specifiche tecniche: è un presidio strategico di sicurezza. Questa guida illustra come integrare i requisiti di cyber security in ogni fase del processo d'acquisto IT, nel settore privato, regolamentato e nella pubblica amministrazione

On Tuesday, Microsoft patched two zero-day vulnerabilities that let attackers gain SYSTEM privileges on fully patched Windows systems, and a third one that grants access to BitLocker-protected drives.

Dal riconoscimento facciale per finalità di polizia ai nuovi poteri dell’ACN, fino alle regole su lavoro, formazione e responsabilità civile. I decreti attuativi dell’AI Act in discussione al Consiglio dei ministri delineano il modello italiano di governance dell’intelligenza artificiale e aprono nuovi scenari per imprese e professionisti

DINUM and ANSSI are investigating a Tchap breach after attackers used a hijacked account, potentially exposing messages and user data.

Guerre di Rete prosegue mantenendo inalterato il patto con il lettore. Il nostro continuerà a essere un giornalismo rigoroso, approfondito, autonomo e indipendente.

Proton VPN offre uno sconto del 50% e 1 mese di prova della rete privata virtuale: come aderire alla promozione e i vantaggi inclusi.

I Mondiali di calcio 2026 si svolgeranno dall’11 giugno al 19 luglio 2026, ma da uno studio emerge che ben il 36% fra sponsor ufficiali, fornitori, partner e sostenitori associati ha già esposto i dati del pubblico. Ecco come mitigare il rischio cyber

SilabRAT is an advanced Remote Access Trojan (RAT) sold as a Malware-as-a-Service (MaaS) on Darkweb forums. Developed by the threat actor "o1oo1," SilabRAT is heavily focused on financial gain through credential theft. It offers stability and is capable of bypassing existing security measures.

June 2026 Patch Tuesday fixes 200 Microsoft vulnerabilities, including 3 zero-days and 33 critical flaws. Key risks and mitigation steps.

Proteggere utenti, dispositivi e macchine significa mettere al centro la gestione degli accessi, dei privilegi e delle identità digitali, adottando soluzioni integrate e sempre più automatizzate, capaci di sfruttare l’IA in chiave difensiva per individuare e contrastare le minacce

What Happened: On 10 May 2026, the UK-based firm Arup Group was listed as a victim on the Tor data leak site of FulcrumSec.   On their Tor...