Over Security

Microsoft reveals how Storm-2949 exploited MFA resets, Azure RBAC, and cloud tools to steal sensitive Microsoft 365 data.

Operation Ramz focused on tackling cyber threats that continue to cause financial and operational damage across the region.

In April 2026, data allegedly obtained from CTT, Portugal's national postal service, was posted to a public hacking forum. The data included 468k unique email addresses along with names, phone numbers and parcel tracking numbers which can be used to retrieve the tracking history of the parcel.

More than 200 individuals were arrested for cybercrime activities during INTERPOL's Operation Ramz, which focused on the Middle East and North Africa.

A new variant of the 'SHub' macOS infostealer uses AppleScript to show a fake security update message and installs a backdoor.

In March 2026, the Colombian fintech company Addi identified unauthorised activity on its platform and advised customers that "it is possible that your personal information may have been compromised". The "pay or leak" extortion group ShinyHunters subsequently claimed responsibility and published a large trove of personal data allegedly obtained from Addi. The data included 34M unique email addresses from credit scoring requests, credit bureau records, customer identity records and email validation logs. It also contained government issued IDs (Cédula de Ciudadanía), estimated income, socioeconomic levels, purchases and other credit-related data points.

Understand the implications of a data breach for website owners. Strategies for securing your site are essential to prevent breaches.

Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of internal CISA systems. Security experts said…

Many employees already use shadow AI tools at work without security review. Adaptive Security breaks down how teams can build practical AI governance without adding friction for employees.

The Shai-Hulud malware leaked last week is now used in new attacks on the Node Package Manager (npm) index, as infected packages emerged over the weekend.

Da quando Anthropic ha reso disponibile Claude Mythos Preview, sebbene solo a partner selezionati, si è accelerata la scoperta di vulnerabilità nei sistemi opertativi e software. Ecco perché servono salvaguardie specifiche sulla distribuzione

La nuova strategia di Acronis si basa sul connubio tra la volontà di sfruttare le opportunità offerte dall’intelligenza artificiale e l’esigenza di garantire un livello di sicurezza adeguato al nuovo scenario

Grafana Labs disclosed that hackers have downloaded its source code after breaching its GitHub environment using a stolen access token.

Keatrix di Cyberoo rinnova la security awareness con neuroscienze, AI adattiva ed edutainment per ridurre il rischio umano nella cybersecurity

Confronto economico e tecnico delle migliori VPN 2026: piani, tariffe e architetture di rete di NordVPN, Surfshark, Proton e ExpressVPN.

The report presents key trends and statistics on malware that targeted personal computers running Windows and macOS, as well as Internet of Things (IoT) devices, during Q1 2026.

This report contains mobile threat statistics for Q1 2026, along with noteworthy discoveries and quarterly trends: new versions of SparkCat and Triada.

Microsoft has finally brought back the resizable taskbar and Start menu to Windows 11 in the latest preview version rolling out to Insiders in the Experimental channel.

Celebrate 10 years of ANY.RUN with special offers on Interactive Sandbox and Threat Intelligence solutions for faster triage and stronger SOC response.

Cleafy's TIR team identified and analyzed two previously undocumented Android NFC relay malware families, DevilNFC and NFCMultiPay, actively targeting European and LATAM banking customers.

L’AI non è più solo uno strumento di supporto: oggi individua vulnerabilità, reagisce agli attacchi e automatizza operazioni cyber offensive. Un’evoluzione che cambia il ruolo umano nella cyber security e apre nuovi interrogativi su controllo e responsabilità

Una vulnerabilità Windows corretta nel 2020 potrebbe non essere mai stata davvero risolta. Con MiniPlasma, il ricercatore Chaotic Eclipse dimostra che il vecchio PoC di Google Project Zero funziona ancora su sistemi Windows 11 aggiornati. Il caso evidenzia i limiti del patch management e il rischio di falle “riaperte” negli aggiornamenti successivi

Dubai Police warns against viral energy drink videos on social media, citing serious health risks for children and teenagers.

Group-IB introduces Prevyn AI, the cognitive core of the Unified Risk Platform. Rather than an isolated AI assistant or product feature, Prevyn AI is a central intelligence capability that reasons over data, coordinates specialist agents, and prepares insights in Threat Intelligence and actions in Managed XDR.

Microsoft has confirmed that the May 2026 Windows 11 security update (KB5089549) fails to install on some systems and triggers 0x800f0922 errors.

A recently patched local privilege escalation vulnerability in the Linux kernel's rxgk module now has a proof-of-concept exploit that allows attackers to gain root access on some Linux systems.