Over Security

A new hacking campaign is trying to trick Signal users to give up their secret recovery key, which can be used to access online backups containing past messages.

The FBI is warning of fake websites impersonating FIFA ahead of the 2026 World Cup, to steal personal and financial information, sell fake tickets and hospitality packages, and push other fraud related to the event.

In this newsletter, Thor breaks down why you should stop relying solely on CVSS and start using EPSS and GCVE to focus your patching efforts on the threats that actually matter.

Hackers are exploiting an authentication bypass vulnerability (CVE-2026-35616) in FortiClient Enterprise Management Server (EMS) to deliver an undocumented credential stealer called EKZ.

Come operare in India nel rispetto della normativa CERT-In: analisi tecnica delle migliori VPN per aziende.

The following interview, which we publish in full, was conducted in May 2026 by me, fastfire. The pro-Russia hacktivist collective NoName057(16) (often referred to as NoName) emerged in March 2022 following the Russian invasion of Ukraine. The group primarily conducts disruptive Distributed Denial-of-Service (DDoS) campaigns against government and private sector entities in NATO member states

A leggere il nuovo “2026 Cloud Security Report” realizzato da Check Point insieme a Cybersecurity Insiders, sembra proprio che l’adozione dell’intelligenza artificiale nelle aziende stia crescendo più rapidamente della capacità delle organizzazioni di proteggerla. Il report, basato sulle risposte di 1.042 professionisti IT e cybersecurity provenienti da organizzazioni di tutto il mondo, mostra un quadro …

An unpatched zero-day vulnerability in the Gogs self-hosted Git service can allow attackers to gain remote code execution (RCE) on Internet-facing instances.

MSPs don't lack security data. They struggle to separate real threats from alert noise. Kaseya explains how SIEM helps MSPs improve visibility, reduce fatigue, and respond faster.

Il Gruppo di Cooperazione NIS ha approvato template standardizzati per la segnalazione degli incidenti informatici. Un passo concreto verso la semplificazione degli obblighi NIS2, con importanti implicazioni pratiche per i soggetti essenziali e importanti che stanno completando il percorso di conformità

A Romanian national was sentenced this week to 56 months in federal prison for breaking into an Oregon state government computer network and fr cyberattacks targeting dozens of other U.S. victims.

Many organizations can detect network issues quickly, but investigations and coordination often slow incident resolution. This webinar explores how automation and AI-assisted workflows can help IT teams reduce delays and improve response times.

Analisi delle sfide cyber per il settore OT: dai sistemi legacy navali alla sicurezza dell'ingegneria clinica negli ospedali.

Carnival Corporation, the world's largest cruise line operator, has confirmed a data breach affecting nearly 6 million people claimed by the ShinyHunters extortion gang in April 2026.

B1ack's Stash published a new free leak containing 4.6 million payment card records. Our analysis reviews the dataset structure, validation results, affected countries, payment networks, Italy-specific findings, and the broader phishing and social engineering risks created by exposed personal data

This white paper presents a concrete case study demonstrating the creation of a heap overflow vulnerability through the exploitation of the DICOM file format.