Over Security

L'Operational summary di Acn registra a maggio 2026 ben 158 incidenti, in calo del 10% rispetto ad aprile, mentre la NIS2 fa emergere gli eventi. Ecco il report nei dettagli: ma non deve diventare il bollettino meteo della minaccia, perché è l'ora di costruire il tetto

Service desks have become a favored target for attackers seeking password resets, MFA changes, and access to corporate accounts. Specops Software breaks down how service desk social engineering attacks work and how organizations can defend against them.

In June 2026, the sports and entertainment company Madison Square Garden Sports was the target of a ShinyHunters "pay or leak" extortion campaign. The group later published the alleged data, which included almost 10M unique email addresses spanning staff and customers, along with extensive personal, employment and customer relationship information.

Quanto sareste disposti a pagare per usare Claude e ChatGPT? Il passaggio dalle tariffe fisse a quelle a consumo ha fatto esplodere i budget aziendali e sta mostrando la fragilità del sistema AI (modificato)

Quanto sareste disposti a pagare per usare Claude e ChatGPT? Il passaggio dalle tariffe fisse a quelle a consumo ha fatto esplodere i budget aziendali e sta mostrando la fragilità del sistema AI (modificato)

Quanto sareste disposti a pagare per usare Claude e ChatGPT? Il passaggio dalle tariffe fisse a quelle a consumo ha fatto esplodere i budget aziendali e sta mostrando la fragilità del sistema AI (modificato)

Le agenzie di cyber sicurezza dei Five Eyes avvertono governi e imprese: l’AI sta accelerando la minaccia cyber. Ecco cosa cambia per aziende, governance e resilienza digitale

A new backdoor dubbed Mistic has been observed in financially motivated attacks targeting organizations in the insurance, education, IT, and professional services sectors.

Kaspersky researchers analyze a new global campaign dubbed StrikeShark that delivers Cobalt Strike Beacon via custom SharkLoader malware.

Per chi cerca una VPN con connessione a internet veloce l'offerta di Surfshark: ecco come attivarla e quali sono i vantaggi imperdibili.

Il rischio non è solo il furto di credenziali: il Digital Identity Shadowing descrive uno scenario in cui un attaccante crea un’identità digitale SPID parallela, formalmente valida e intestata alla vittima. Una minaccia che mette alla prova governance, antifrode e fiducia digitale

KDDI data breach exposes up to 14.22M emails and passwords via ISP systems after threat actor exploited third-party software flaws.

What Happened Over the course of September 2025 to May 2026, Hargreaves Lansdown the UK-based investment platform has been the subject of IT...

Hanno le allucinazioni perché non possono percepire i limiti di ciò che sanno e sono addestrate a non rispondere mai "non lo so". Ma quando questo avviene in ambiti critici come la sicurezza informatica, gli effetti e danni possono essere rovinosi. Parla Enrico Frumento, Cybersecurity Research Lead del Cefriel

The National Health Care Fraud Takedown led to charges against 455 defendants tied to over $6.5 billion in alleged health care fraud.

Vulnerabilities in QNAP NAS, including CVE-2025-59382, could enable code execution, data theft, privilege escalation, and DoS attacks.

Two alleged Scattered Spider members pleaded guilty to the Transport for London cyberattack that exposed customer data.

Two alleged Scattered Spider members pleaded guilty to the Transport for London cyberattack that exposed customer data.

Learn about PCI Compliance and its crucial role in securing your checkout page and protecting customer payment information.

Between June 16 and June 22, we detected phishing campaigns spanning tech support scams delivered via Facebook ads on Azure infrastructure, Microsoft credential harvesting hosted on Heroku and promoted through Google Ads, Paperless Post invitation lures targeting multiple email providers. What ties them together: these campaign abused trusted infrastructure both to host and deliver their attacks.

A high-severity SSRF vulnerability, tracked as CVE-2026-20230, in Cisco Unified Communications Manager Server is now being exploited in attacks.

Tata Electronics has confirmed in a statement to BleepingComputer that it was the target of a cyberattack that impacted parts of its IT infrastructure.

​​Microsoft has released the KB5095093 preview cumulative update for Windows 11 24H2 and 25H2, which fixes numerous bugs and begins rolling out new features, including the new Point-in-Time restore feature.

Healthcare technology company Xsolis says that sensitive data belonging to nearly 1.4 million individuals was compromised in a phishing attack that gave attackers access to its network.

A new macOS ClickFix campaign is using Terminal commands to silently download, mount, and launch info-stealing malware from malicious disk image (DMG) files.