Over Security

The Cyber Security Council noted that many cases involving sensitive personal data exposure are the result of simple, preventable mistakes.

Microsoft has released out-of-band (OOB) updates to fix issues affecting Windows Server systems after installing the April 2026 security updates.

Il modello DPIA dell’EDPB, in consultazione pubblica, riapre il dibattito sull’equilibrio tra accountability e standardizzazione nel GDPR. Sarà uno strumento operativo o un nuovo benchmark implicito? Analisi di impatti, criticità e possibili evoluzioni per le organizzazioni

In response to the Vercel security incident, the company has issued a set of security recommendations for users and administrators.

The Cisco ISE vulnerabilities are particularly significant because ISE plays a key role in network access control and policy enforcement.

Cloud development platform Vercel has disclosed a security incident after threat actors claimed to have breached its systems and are attempting to sell stolen data.

CFITSIO Fuzzing: Memory Corruptions and a Codex-Assisted Pipeline

Apple account change notifications are being abused to send fake iPhone purchase phishing scams within legitimate emails sent from Apple's servers, increasing legitimacy and potentially allowing them to bypass spam filters.

The National Institute of Standards and Technology will stop assigning severity scores to lower-priority vulnerabilities due to the growing workload from rising submission volumes.

If you’ve been using a ClockworkPi uConsole as a daily device, chances are you’ve noticed something slightly off about the input experience. The keyboard works, the trackball works—but neither feels as precise or refined as you’d expect from such a well‑designed handheld. If you would like to know more about uConcole, check out my previous

Proof-of-concept exploit code has been published for a critical remote code execution flaw in protobuf.js, a widely used JavaScript implementation of Google's Protocol Buffers.

Microsoft is warning that a recent Microsoft Edge browser update introduced a bug that breaks right-click paste in chats in the Microsoft Teams desktop client.

NAKIVO Inc. announced the general availability of NAKIVO Backup & Replication v11.2, focused on fast, reliable, and proactive data protection.

Nicholas Moore hacked into three U.S. government networks using stolen credentials, and then bragged about it and posted victims' personal data on Instagram under the handle @ihackedthegovernment.

The Payouts King ransomware is using the QEMU emulator as a reverse SSH backdoor to run hidden virtual machines on compromised systems and bypass endpoint security.

A security researcher published details of three security vulnerabilities in Windows Defender, and the code used to exploit them. Now, hackers are taking advantage of the vulnerabilities in real life attacks, according to a cybersecurity firm.

As NVD reduces enrichment coverage, security teams face growing gaps in vulnerability context. Understand the impact and how to adapt.

Il caso dell’ottantenne trentina convinta a investire 200mila euro in Lino Shopping App, mai commercializzata, evidenzia un’evoluzione delle truffe agli anziani, ma le leve rimangono invariate: urgenza emotiva, fiducia tradita, sfruttamento vulnerabilità. Serve consapevolezza su phishing e uso malevolo dell’AI

Il caso dell’ottantenne trentina convinta a investire 200mila euro in Lino Shopping App, mai commercializzata, evidenzia un’evoluzione delle truffe agli anziani, ma le leve rimangono invariate: urgenza emotiva, fiducia tradita, sfruttamento vulnerabilità. Serve consapevolezza su phishing e uso malevolo dell’AI

La nuova app europea per la verifica dell’età, presentata come soluzione privacy-friendly per l’accesso ai servizi online, è finita immediatamente sotto scrutinio e non ne è uscita bene. A poche ore dal lancio, un ricercatore di sicurezza ha dimostrato come sia possibile aggirare i meccanismi di protezione in meno di due minuti, sollevando dubbi sulla …

Il caso dell’ottantenne trentina convinta a investire 200mila euro in Lino Shopping App, mai commercializzata, evidenzia un’evoluzione delle truffe agli anziani, ma le leve rimangono invariate: urgenza emotiva, fiducia tradita, sfruttamento vulnerabilità. Serve consapevolezza su phishing e uso malevolo dell’AI

Kyrgyzstan-based cryptocurrency exchange Grinex has suspended its operations after suffering a $13.7 million hack attributed to Western intelligence agencies.

Nel periodo in cui la politica 0-trust è lo standard, si vive il paradosso di insider threats e vulnerabilità dei modelli di sicurezza che non tengono conto in modo sistematico dei rischi. Probabilmente perché le indicazioni e le buone prassi di sicurezza sono solo parzialmente attuate

In cybercrime markets, trust isn't assumed, it's verified. Flare reveals how underground guides teach actors to evaluate carding shops based on data quality, reputation, and survivability.

UK cyberattacks hit record levels, with NCSC reporting rising incidents, critical infrastructure risks, and evolving cyber resilience challenges nationwide.

Le linee guida 1/2026, appena pubblicate dall’EDPB, si collocano in un momento di progressiva evoluzione del diritto europeo della protezione dati, nel quale emerge con crescente evidenza l’esigenza di coniugare la tutela dei diritti fondamentali con la promozione dell’innovazione scientifica. I punti salienti