Over Security

Two security vulnerabilities in the PaperCut NG and MF print management software, patched last week after being exploited as zero-days, are now being abused in data theft attacks.

Nei servizi di ascolto e segnalazione per soggetti vulnerabili, il “pulsante di aiuto” sui siti web degli Enti del terzo settore non è una pagina di contatti. Ecco il perimetro giuridico del problema, le 4 posizioni soggettive coinvolte e il rapporto fra anonimato e possibilità concreta di prestare aiuto

Ionos propone la sua offerta E-Commerce Plus, permettendo di aprire un negozio online con IA a 1 € al mese: ecco come funziona e cosa fare.

Kaspersky researchers have discovered new Mirage Kitten attacks using previously undocumented malware families: NodeRabbit in Node.js and PollCat in JavaScript.

Explore major cyber attacks from August 2026 targeting US and EU organizations, including session hijacking, remote access threats and insider risk.

In August 2026, the French intellectual property software and services company Questel was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published an extensive corpus of data they alleged was obtained from the company, largely comprising corporate contact information associated with sales leads, support cases and marketing activities, with 1.2M unique email addresses. The data also included names, employers and job titles, along with physical addresses and phone numbers.

Discover important WordPress vulnerabilities in August 2026 and how to safeguard your site with essential security updates.

The Cronos blockchain network has resumed trading activity after a price-manipulation attack on the Tectonic cryptocurrency lending platform allowed an attacker to borrow $74 million.

A new ClickFix variant dubbed TerminalFix uses fake Cloudflare CAPTCHA prompts on compromised websites to trick victims into running malicious PowerShell commands in Windows Terminal.

ChatGPT Work is experiencing a partial outage, and users across multiple subscription plans may be unable to start or continue tasks.

Microsoft is investigating a widespread service issue causing authentication issues and email delays and failures for Exchange Online customers.

AI is proving effective at finding and exploiting vulnerabilities. Some say this will make it harder for governments to use hacking tools and spyware and could reignite calls to backdoor devices.

Non risultano esposti dati bancari o di pagamento: il cyber attacco possono diventare una fonte preziosa di intelligence non avrebbe compromesso la sicurezza dei voli né le operazioni aeroportuali. Ma proprio questo dimostra come sistemi periferici possano diventare una fonte preziosa di intelligence. Ecco qual è il vero rischio cyber

The researchers discovered Fire Ant's new tactic after finding an active GRE (Generic Routing Encapsulation) tunnel interface on a Cisco IOS XR router that could not be explained by a running configuration or commit history.

File servers remain a critical part of many IT environments, but managing access securely can become complex as permissions accumulate. tenfold Software outlines five best practices for simplifying file server administration and maintaining least-privilege access.

Berlin's city administration has confirmed that cybercriminals are attempting to extort the city after the Rhysida ransomware gang listed it on their data leak site.

PaperCut shipped a second emergency patch for CVE-2026-81578 and CVE-2026-82078 after researchers bypassed the first fix. Attacks began Aug. 26.

The Boston Scientific cyberattack disrupted operations, manufacturing and shipping, while an investigation examines unauthorized activity and device impact.

Nel caso Hugging Face, gli agenti AI hanno trattato il confine dell'ambiente di test come un ostacolo tra loro e il punteggio massimo. Ecco i precedenti e il fenomeno del Reward hacking nell'era degli agenti AI, pronti a trattare ogni confine, tecnico o procedurale, come un elemento dell'ambiente da aggirare per massimizzare il punteggio

Il direttore del PICS, Luigi Martino, spiega quali sono i cinque pilastri su cui si fonda il neonato organismo, come l'Italia può valorizzare quello che già esiste nel settore e i nodi da sciogliere per trasformare questa visione in realtà

Microsoft has confirmed that mouse settings are being reverted on Windows 11 systems after installing the KB5120998 August 2026 non-security preview update.

Anthropic says Vidar, LummaC2, StealC, RedLine, Acreed and AMOS malware are stealing Claude session tokens to hijack accounts and drain paid usage.

La recente sentenza del Tribunale di Udine non riguarda solo l'uso di WhatsApp nei rapporti di lavoro o una controversia disciplinare nata da una comunicazione attraverso un canale improprio, ma la progressiva perdita di coincidenza tra organizzazione formale e quella realmente operante. Ecco cosa mette in luce il provvedimento

Threat actors are distributing the ValleyRAT backdoor disguised as adware. We analyze the infection chain, from the malicious installer to the final payload.

Hostinger propone servizi di hosting web con backup giornalieri a soli 3,99 € al mese: ecco come ottenere lo sconto del 79% della promo.