Over Security

Attackers still abuse Microsoft’s legacy MSHTA utility on Windows to execute malicious VBScript and JavaScript payloads.

IT teams are increasingly overwhelmed by alerts from disconnected systems, forcing responders to manually coordinate investigations during network incidents. This webinar explores how automation and AI-assisted workflows can help reduce response delays and improve operational coordination.

Microsoft says customers in restricted network environments may encounter Windows Update failures after installing the January 2026 optional non-security preview updates.

Explore 5 phishing-driven social engineering attacks targeting companies in 2026 and learn how CISOs can close SOC visibility gaps with ANY.RUN.

When Filenames Become Attack Surfaces: Weaponizing NASA's CFITSIO Extended Filename Syntax

Cisco Talos has uncovered a BadIIS variant — identifiable by its embedded "demo.pdb" strings — that functions as commodity malware, likely sold or shared among multiple Chinese-speaking cyber crime groups operating under a malware-as-a-service (MaaS) model for continuous monetization.

I cavi sottomarini rappresentano la spina dorsale dell'economia digitale. La minaccia dell'Iran a mettere dazi sui cavi sottomarini che attraversano lo Stretto di Hormuz significa mettere in pericolo l'integrità di infrastrutture critiche per la connettività digitale mondiale

We sat with Sarah Psaila (Group-IB Europe) to discuss why iGaming operators are measuring the wrong fraud signals and seeing bloated success metrics and what intelligence-driven protection against fraud looks like in 2026.

We are proud to announce that Cyble has been named a Challenger in the first-ever Gartner® Magic Quadrant™ for Cyberthreat Intelligence Technologies.

Austria stopped 500 Eurovision cyberattack attempts targeting the Song Contest in Vienna amid protests and heightened security.

Banks rush to tackle AI-driven cyber risks as new vulnerabilities raise concerns across the global financial sector.

Attackers are exploiting NGINX vulnerability CVE-2026-42945, also called NGINX Rift, exposing millions of servers to attacks.

Le nuove FAQ ACN sui fornitori rilevanti NIS (FRN.8 e FRN.9) chiariscono i casi di subfornitore e fornitore infragruppo. Ecco come cambiano le regole e cosa devono fare concretamente le aziende per la compliance NIS2 entro il 31 maggio 2026

Banks rush to tackle AI-driven cyber risks as new vulnerabilities raise concerns across the global financial sector.

Attackers are exploiting NGINX vulnerability CVE-2026-42945, also called NGINX Rift, exposing millions of servers to attacks.

Given the scale of the retailer’s franchise operations, the full impact of the 7-Eleven data breach remains unclear.

La differenza fra procedure e linee guida ha peso strategico, capace di influenzare il modo in cui si lavora, il grado di adattabilità concesso a chi opera e la coerenza complessiva del sistema. Ecco la doppia natura di due strumenti diversi per tradurre obiettivi in azioni concrete

Microsoft reveals how Storm-2949 exploited MFA resets, Azure RBAC, and cloud tools to steal sensitive Microsoft 365 data.

Operation Ramz focused on tackling cyber threats that continue to cause financial and operational damage across the region.

In April 2026, data allegedly obtained from CTT, Portugal's national postal service, was posted to a public hacking forum. The data included 468k unique email addresses along with names, phone numbers and parcel tracking numbers which can be used to retrieve the tracking history of the parcel.

More than 200 individuals were arrested for cybercrime activities during INTERPOL's Operation Ramz, which focused on the Middle East and North Africa.

A new variant of the 'SHub' macOS infostealer uses AppleScript to show a fake security update message and installs a backdoor.

In March 2026, the Colombian fintech company Addi identified unauthorised activity on its platform and advised customers that "it is possible that your personal information may have been compromised". The "pay or leak" extortion group ShinyHunters subsequently claimed responsibility and published a large trove of personal data allegedly obtained from Addi. The data included 34M unique email addresses from credit scoring requests, credit bureau records, customer identity records and email validation logs. It also contained government issued IDs (Cédula de Ciudadanía), estimated income, socioeconomic levels, purchases and other credit-related data points.

Understand the implications of a data breach for website owners. Strategies for securing your site are essential to prevent breaches.

Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of internal CISA systems. Security experts said…

Many employees already use shadow AI tools at work without security review. Adaptive Security breaks down how teams can build practical AI governance without adding friction for employees.

The Shai-Hulud malware leaked last week is now used in new attacks on the Node Package Manager (npm) index, as infected packages emerged over the weekend.