Over Security

La sicurezza cyber deve coinvolgere anche l'IA: è vero, ma non è possibile delegarla a questi sistemi. O, peggio ancora, considerarli come un focus principale sia d'attacco che di difesa. Altrimenti il rischio è quello di perdere quella visione d'insieme necessaria per mantenere una corretta postura di sicurezza cyber

Intro Di ClickFix è molto probabile che se ne sia sentito parlare: l’attaccante crea pagine che propongono dei finti CAPTCHA con cui si induce l’utente ad eseguire un’azione sul p…

Ormai è un po’ che mi interesso alle tecniche di attacco basate su fileless malware, sia per rendere i miei security test più realistici sia, lo ammetto, perché il tema mi affascina molto. In…

Group-IB expone una operación mexicana de PhaaS dirigida a más de 20 instituciones financieras, con capacidades de phishing en tiempo real, vishing con IA y RAT para dispositivos móviles.

Group-IB Threat Intelligence performed enrichment and APT hunting based on recent public data about the Tortoiseshell APT group, leading to the discovery of new samples sharing similarities with known Tortoiseshell malware and additional operational infrastructure.

One malware campaign, 11,000 compromised devices, two banks with very different outcomes. At the bank with fused defence, fraud succeeded on just 0.027% of compromised devices; nine times less than the market average. Regulators are taking notice too.

Learn how cyber risk quantification helps CFOs measure financial exposure, prioritize security investments, and turn cyber threats into business insight.

Free Flow è un recente sistema di gestione dei pedaggi autostradali che ha portato all'abolizione dei classici caselli. Attraverso un sistema di sensori e telecamere viene registrato l'ingresso e l'uscita dei singoli veicoli dalle tratte austradali, valutata la classe del veicolo ed conseguentemente

D3Lab ha sempre cercato di evidenziare quanto il phishing rappresenti ancora oggi una minaccia concreta e attuale, nonostante venga talvolta percepito come un attacco banale, quasi elementare. Le simulazioni di phishing che svolgiamo per i nostri clienti, finalizzate a valutare il livello di espo

Microsoft has started rolling out a permanent fix for a known issue that causes system crashes and gaming issues on Windows 11 devices.

Australian authorities have arrested and charged two young men accused of belonging to TeamPCP, a hacking group linked to a string of far-reaching developer supply chain attacks.

Google is introducing new network security protections in Android 17 to strengthen connection privacy, address cellular vulnerabilities, and protect the privacy of users' home networks.

Threat research gives security teams insight into how attackers operate, while MDR turns that intelligence into faster detection and response. ESET explains how combining threat intelligence, continuous monitoring, and human expertise can help SMBs strengthen their defenses.

The Manchester Airports Group (MAG) disclosed that hackers breached its systems and stole customer data, including Wi-Fi sign-ups from Manchester, Stansted, and East Midlands airports.

PaperCut is warning that hackers are actively exploiting a vulnerability in all versions of its PaperCut NG and PaperCut MF print management software in zero-day attacks.

New details about the July attack on Hugging Face reveal that hundreds of AI agents driven by OpenAI's internal IM1 model coordinated the compromise through an unauthorized message board.

Microsoft released the KB5120998 preview cumulative update for Windows 11 versions 25H2 and 24H2, which comes with 35 changes, including improvements to the Start menu, taskbar, and Windows search.

ServiceNow released security patches for three new maximum-severity AI Platform vulnerabilities that can be exploited in code injection, SQL injection, and privilege escalation attacks.

Hasbro, one of the world's largest toy and game companies, has disclosed that attackers have accessed the personal and financial information of an undisclosed number of employees.

Over 8,300 Internet-exposed Gitea instances are still unpatched against a critical security flaw exploited in ongoing remote code execution attacks, according to cybersecurity watchdog Shadowserver.

AI is accelerating vulnerability discovery, putting pressure on systems built to enrich, prioritize, and remediate flaws at a slower pace. Action1 explains why defenders increasingly need to correlate multiple intelligence sources and turn vulnerability data into faster remediation.