Over Security

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered government agencies to patch an actively exploited maximum-severity flaw in the Adobe ColdFusion commercial web app development platform by Friday.

L’Italia, con 251 infrastrutture attive al giugno 2026 e un valore di mercato atteso a 14,97 miliardi di dollari entro il 2031, si posiziona come hub emergente della data economy mediterranea. Stato dell’arte, trend di mercato, quadro normativo e prospettive di sviluppo per operatori, investitori e istituzioni

CVE-2026-53359, or Januscape, is a Linux KVM flaw in the shadow MMU code that enables VM escape and host compromise on Intel and AMD systems.

Mount Royal University cyberattack exposed employee and student data in June. The investigation continues as recovery efforts move forward.

IT services giant Accenture has confirmed it suffered a security breach after a threat actor claimed to have stolen 35 GB of source code and other data from the company.

AI is reshaping cyber threat intelligence and governance, transparency, and trust are becoming increasingly important as organizations rely more heavily on AI-generated insights and autonomous capabilities.

Amazon's Prime Day wrapped on June 26th — and the Amazon phishing wave around it is a case study in how attackers sidestep corporate email security. Leading up to the fourth of July weekend, PIXM observed a surge of post-sale lures — refund, delivery problem, "verify your account" — reaching employees through personal inboxes, text messages, and social feeds opened on corporate devices: channels the secure email gateway never inspects. The hosting is chosen to beat the rest of the stack: Check Point researchers counted 6,843 new Amazon-themed domains in the six months before the sale, but the phishing pages we detected in the days after it never registered a domain at all — they lived on free cPanel preview subdomains: aged, legitimate, valid-TLS infrastructure that no reputation engine will flag.

Chinese hackers tracked as 'UAT-7810' are actively evolving their malware to expand their Operational Relay Box (ORB) network by compromising internet-facing networking devices, primarily unpatched Ruckus routers.

A hidden authentication backdoor has been found in multiple Tenda router firmware versions, potentially allowing an attacker to gain administrative access to the device's web management panel.

Evoluzioni e clausole di esclusione nelle polizze cyber insurance: impatto NIS2, requisiti minimi, esclusioni supply chain e ransomware e gestione sinistri

Le banche hanno tempo fino al 31 ottobre 2026 per presentare un piano contro le minacce cyber abilitate dall’intelligenza artificiale. La richiesta dà seguito agli allarmi dopo uscita di Mythos

La distillazione, una tecnica messa a punto più di un decennio fa per rendere più efficienti i sistemi di apprendimento automatico, oggi è utilizzata anche per replicare, senza autorizzazione, il comportamento di modelli proprietari altrui. Ecco perché la minaccia sta assumendo proporzioni industriali

16–30 June 2026 — Cyber Attacks Infographic | HACKMAGEDDON Cyber Threat Intelligence · HACKMAGEDDON 16–30 June 2026Cyber Attacks Infographic 96 confirmed incidents across t…

The National Police in Spain have arrested a man who is suspected of being an active member of the CyberArmy of Russia Reborn (CARR) and Z-Pentest, both pro-Russian hacktivist groups.

Gli attacchi rappresentano una minaccia sofisticata che impone di ripensare la sicurezza ben oltre il software. Ecco perché e come difendersi

ANY.RUN solutions are used to compare two Banana RAT branches and analyze the malware's evolution along with defence strategies.

ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't guarantee a secure pipeline, and how organizations can better govern their CI/CD workflows.

JADEPUFFER è la prima operazione ransomware pilotata end-to-end da un agente IA: violazione di un'istanza Langflow, furto massivo di credenziali e attacco automatizzato a database Nacos/MySQL. Tecniche, indicatori di compromissione e contromisure per CISO e aziende

Tomorrow's webinar explores how behavioral AI can help organizations detect sophisticated phishing, business email compromise, and account takeover attacks while reducing alert fatigue through automated investigation and response workflows.

A 16-year-old Linux kernel vulnerability, dubbed Januscape, allows attackers to escape a virtual machine and execute arbitrary code on the host.

This report contains industrial threat statistics for Q1 2026, including industrial threat distribution by type, source, region and industry.

Talos’ latest findings on UAT-7810 indicate that the threat actor continues to develop their custom-made malware.

16–30 June 2026 cyber attacks timeline: 96 incidents — ransomware, supply-chain attacks, and nation-state espionage analyzed.

Microsoft says the Windows settings backup and restore tool will be enabled by default on Microsoft Entra-joined or Microsoft Entra hybrid-joined enterprise systems after upgrading to Windows 11 26H2.

This blog covers Group-IB’s overview of Scattered Spider, backed by Group-IB’s proprietary intelligence, providing additional information to what has already been reported publicly, with added clarification on 0ktapus and how it is related to Scattered Spider.

BeyondTrust warned customers to patch two critical security flaws in its Remote Support (RS) and Privileged Remote Access (PRA) software that could allow attackers to bypass authentication.