Over Security

Il gruppo World Leaks colpisce la supply chain globale dell'elettronica, esponendo documenti confidenziali di due dei brand più potenti al mondo. L'attacco ransomware ci ricorda, ancora una volta, quanto siamo tutti interconnessi e vulnerabili

Managed Detection & Response services (MDR) 24/7 for network, endpoint, cloud, SaaS and OT, against every type of cyber attack

Il gruppo World Leaks colpisce la supply chain globale dell'elettronica, esponendo documenti confidenziali di due dei brand più potenti al mondo. L'attacco ransomware ci ricorda, ancora una volta, quanto siamo tutti interconnessi e vulnerabili

Bridge the gap between alerts and confident response in your SOC by integrating ANY.RUN's sandbox and threat intelligence in Torq.

Bridge the gap between alerts and confident response in your SOC by integrating ANY.RUN's sandbox and threat intelligence in Torq.

La scadenza per l’elencazione e categorizzazione delle attività e dei servizi non dovrebbe essere letta come un mero adempimento formale, ma come il primo vero esercizio di collegamento tra business, servizi IT, asset critici, continuità operativa e proporzionalità delle misure di sicurezza

Account takeover attacks continue to challenge security teams because attackers often operate through legitimate accounts and trusted services. This webinar explores how behavioral AI can help organizations identify compromised accounts faster and automate response workflows.

Security researchers found evidence that Russian authorities hacked the iPhone of a political opponent using a phone-unlocking device made by Cellebrite, even after the company said it would stop selling to Putin’s government.

Europol together with partners from across the globe today announces a landmark blow to cybercriminal networks as part of Operation Endgame, a sweeping international operation targeting the criminal infrastructure behind ransomware and malware like SocGholish, Amadey, and StealC. In coordinated actions over the past two weeks, key components of these malicious toolkits were dismantled as part of a public-private effort.

Security vendor vulnerabilities exploited in H1 2026: 55 incidents, 66 CVEs, timeline, charts and full data.

Kaspersky researchers analyze the threat landscape for SMBs in 2026: the rise of attacks involving fake AI tools, phishing schemes, and data sold on the dark web.

Component Object Model (COM) is a fundamental Windows technology used by legitimate applications for object activation, inter-process communication, automation and language-independent component reuse. Those same qualities make it useful to threat actors.

AI-powered law firm Garfield AI secures a landmark victory at Wandsworth County Court, highlighting the potential of legal AI services.

The Stryker cyberattack lawsuit faces a dismissal bid as the company argues there is no evidence employee data was compromised.

Group-IB analyzes Millenium RAT version 4.*, a remote access trojan that has undergone an architectural shift from .NET to native C++, while continuing to leverage the Telegram Bot API for command and control, requiring no dedicated server infrastructure. This blog also profiles the developer “ShinyEnigma”, and threat actor cluster “Y2K Operators” responsible for active Millenium RAT exploitation campaigns. Over 62,000 compromised endpoints across more than 160 countries have been identified, with infections accelerating sharply in Q1 2026.

Il progetto europeo Vantage incorpora due idee che, insieme, descrivono la direzione in cui si sta muovendo la cyber security europea: il passaggio da una logica difensiva e reattiva a un approccio offensivo e proattivo; la necessità di costruire infrastrutture che non dipendano da fornitori extra-UE. Ecco la postura strategica dell’intera Ue

Da maggio 2026 le campagne di phishing che impersonano GLS hanno registrato una crescita senza precedenti. L’analisi di D3Lab racconta il fenomeno, le modalità operative e le principali contromisure.

Il Garante Privacy chiarisce che una formula di autorizzazione al trattamento non esime il titolare dall’applicare i principi del GDPR e,nel procedimento di accesso civico generalizzato, la pubblica amministrazione non può trasmettere ai controinteressati l’istanza inversione integrale se contiene dati personali non necessari

La convergenza tra ingegneria della sicurezza, ingegneria del software e disciplina giuridica della responsabilità costituirà il terreno di elaborazione anche per il dominio degli LLM. Le principali vulnerabilità sono note. La loro mappatura su un'architettura di responsabilità giuridicamente sostenibile rimane un compito aperto

Google is rolling out new privacy controls for Search services and Google Play, giving you more control over saved history and personalized recommendations.

A 21-year-old using the alias "Snoopy" was sentenced to 18 months in prison for his role in hacking DraftKings accounts in the November 2022 cyberattack.

According to a new site, 24% of the most popular websites in the world don't offer support for passkeys, which are considered the most secure way to log into apps and services.

New details have been revealed on how hackers exploited a Cisco Catalyst SD-WAN vulnerability tracked as CVE-2026-20245 in zero-day attacks to create rogue root accounts on targeted devices.

A malicious Microsoft Edge extension dubbed 'Edgecution' has been used in a ransomware attack to escape the browser sandbox and deploy a Python-based backdoor.

Definizione, misurazione e automazione dei KPI di sicurezza per il monitoraggio continuo dei partner commerciali: catalogo operativo, vendor scorecard e dashboard per il management

Microsoft, Europol, and international partners have disrupted infrastructure used by the Amadey and StealC malware operations as part of Operation Endgame, which targets cybercriminal services and ransomware gangs.