Over Security

Is B1ACK STASH's 1 Million card lead real? The Cyberint team analysed the leak and revealed our findings in this blog.

La Relazione annuale al Parlamento dell'Agenzia per la Cybersicurezza Nazionale fotografa un'Italia digitalmente più esposta ma anche più resiliente: 2.729 eventi cyber gestiti, 615 incidenti confermati e un gap crescente tra attacchi tentati e attacchi riusciti. Un'analisi tecnica dei dati, con indicazioni operative per le organizzazioni

The FBI warned on Tuesday that the Silent Ransom Group (SRG) extortion gang is now targeting U.S.-based law firms in in-person data theft attacks.

Read an exclusive interview with CEO Aleksey Lapshin on ANY.RUN’s growth, AI in cybersecurity, and the value of human expertise.

PreCrime Labs tracked 3,188 Anthropic Mythos phishing domains in 6 weeks. Here's how attackers are targeting developers and security teams.

Comparing AI Application Security Testing Platforms

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given U.S. federal agencies four days to secure their servers against a critical vulnerability in the LiteSpeed cPanel user-end plugin, which is actively being exploited in attacks.

EvidenceForge generates high-quality, realistic, and consistent datasets across multiple log formats, enabling teams to effectively train personnel and validate detection models without the need for complex manual simulations.

Come ottenere il maxi sconto per Internxt cloud storage valido per sempre: scopriamo le modalità di attivazione del ribasso dell'85%.

The Dutch National Police arrested a 35-year-old man suspected of hacking the professional football club Ajax Amsterdam (AFC Ajax) earlier this year.

At Sicuranext, we do not evaluate AI with artificial examples. We replay realistic SOC workflows, measure correctness and consistency, verify tool behavior, and put guardrails around automation before it touches our SOC. AI in a SOC should not be judged by whether it can produce a convincing paragraph. It should be judged by whether it behaves correctly inside a real workflow: on noisy alerts, incomplete evidence, repeated executions, structured outputs, tool calls, and operational guardrails.

La presentazione dell’enciclica Magnifica Humanitas di Papa Leone XIV seduto accanto al co-fondatore di Anthropic rivela qualcosa di più profondo di un semplice dialogo tra Chiesa e Silicon Valley: la consapevolezza che l’IA non è più soltanto una questione tecnica o regolatoria. Ecco i punti cardine

L'intelligenza artificiale ha moltiplicato le segnalazioni di vulnerabilità fino a sommergere chi dovrebbe correggerle. E i programmi che premiano chi scova le falle iniziano a cedere.

CERT-In urges firms to patch critical security vulnerabilities within 12 hours as AI and LLMs accelerate cyberattacks.

Microsoft has released the KB5089573 preview cumulative update for Windows 11 versions 25H2 and 24H2, which comes with 30 changes, including performance and reliability improvements.

CypherLoc è la nuova truffa dello schermo bloccato che combina tecniche di intrusione avanzate e una buona capacità di manipolazione psicologica per indurre le vittime a contattare servizi di assistenza tecnica fraudolenti e prendere il pieno controllo dei loro dispositivi. Ecco tutti i dettagli e come difendersi

OverlayPhantom Android banking trojan targets 180+ apps using phishing overlays, screen streaming, and Accessibility abuse.

What Happened On 5 May 2026, new data revealed that British romance scam victims were defrauded of a staggering £102 million last year, re...

API, account di servizio, credenziali IoT, sono elementi critici perché consentono ad applicazioni e servizi di comunicare tra loro senza intervento umano. Proteggere le identità non umane è una necessità. Ecco cosa fare

Il titolo di questo post riprende, volutamente, il documento di MITRE a cui si ispira: 36 pagine di saggezza che, se lavori nel mondo della cyber security, devi leggere, assimilare e comprendere mo…

With the 2026 FIFA World Cup just weeks away, Group-IB researchers have uncovered six distinct fraud schemes, four independent threat actors, and over 4,300 fraudulent domains impersonating FIFA's official web presence — including a sophisticated phishing operation run by the Chinese-speaking threat actor GHOST STADIUM, whose campaign could cause losses reaching billions of dollars.

In April 2026, the luxury fashion e-commerce platform Mytheresa was listed as a victim of the ShinyHunters "pay or leak" extortion group. After the ransom deadline passed, the group publicly released the data which contained 84k unique email addresses. The exposed data also included names, phone numbers, physical addresses, purchases and partial credit card data including card type, last 4 digits and expiry date.

Cyble Research and Intelligence Labs (CRIL) has identified a novel Android banking trojan, dubbed OverlayPhantom, actively distributed in the wild via

In March 2026, the financial services firm Ameriprise Financial was named by the ShinyHunters group in a "pay or leak" extortion campaign. The group claimed possession of more than 200GB of compressed data exfiltrated from Ameriprise's Salesforce environment and internal SharePoint infrastructure, and subsequently published the data after negotiations allegedly failed. The published data contained 500k unique email addresses as well as names, phone numbers, physical addresses and employer information. In their disclosure to state attorneys general, Ameriprise reported 47,876 affected people; the larger email address population represents contacts from Ameriprise's broader operational systems, including internal staff. Ameriprise further advised that they have "implemented heightened monitoring of your account(s) to include enhanced identity verification procedures".

Hackers exploited a critical zero-day vulnerability in a server running the KnowledgeDeliver learning management system (LMS) to deploy the Godzilla web shell.

U.S. telecommunications giant Charter Communications has confirmed it suffered a data breach after the ShinyHunters extortion group threatened to leak stolen data unless a ransom is paid.

Analisi economica e tecnica delle migliori VPN per Smart TV nel 2026: come oisolare la rete LAN tramite VLAN per lo streaming 4K.

We dive into the decentralized architecture of “The Com,” exposing its hybrid ecosystem of hacking, extortion, and real-life violence.

An Israeli cybersecurity firm said Iran’s government is behind Ababil of Minab, a fake hacktivist persona that has claimed a series of data breaches after the start of the war in Iran.