Over Security

Threat actors often signal their intentions before launching attacks, from dark web chatter to access-broker listings and credential requests. Join our upcoming webinar with Flare Systems to learn how to turn those early warning signs into proactive defensive action before an intrusion begins.

SOHO router compromise by Forest Blizzard enables DNS hijacking, traffic interception, and AiTM attacks on enterprises and governments.

Real phishing attacks targeting German finance, healthcare, IT, telecom, and manufacturing with actionable threat intelligence insights.

Eurail B.V., a European travel operator that provides digital passes covering 33 national railways, says attackers stole the personal information of over 300,000 individuals in a December 2025 data breach.

The Year in Review distills Talos IR's observations into structured intelligence, but defenders should also be feeding this report back into their own preparation cycles. Here's how.

Threat actors are distributing a Trojan disguised as Proxifier software; through a multi-stage infection chain, it delivers ClipBanker – malware that replaces cryptocurrency wallet addresses in the clipboard.

Attackers have been exploiting a zero-day vulnerability in Adobe Reader using maliciously crafted PDF documents since at least December.

The Signature Healthcare cyberattack disrupted patient care, lab work, and pharmacies.

Cyble weekly vulnerability report tracked 1,960 vulnerabilities and 10 ICS flaws this week, with 248 PoCs and KEV additions.

Solo affrontando congiuntamente i tre pilastri - hardware, persone e standard - sarà possibile passare dall'era sperimentale a quella del robusto vantaggio quantistico resistente agli errori. Ecco cos'è e le prospettive future del calcolo quantistico

Bitcoin Depot, which operates one of the largest Bitcoin ATM networks, says attackers stole $3.665 million worth of Bitcoin from its crypto wallets after breaching its systems last month.

Bitcoin Depot cyberattack remains under investigation, with third-party cybersecurity specialists continuing to analyze the scope of the intrusion.

Microsoft has suspended developer accounts used to maintain multiple high-profile open-source projects without proper notification and no way to quickly reinstate them, effectively blocking them from publishing new software builds and security patches for Windows users.

A ClickFix-style macOS attack uses Script Editor and an Apple-themed webpage to bypass Terminal protections and deliver malware.

The Eurail data breach highlights the risks associated with large-scale travel platforms that handle sensitive identity and financial information.

A massive campaign impacting nearly 100 online stores using the Magento e-commerce platform hides credit card-stealing code in a pixel-sized Scalable Vector Graphics (SVG) image.

A threat actor tracked as UNC6783 is compromising business process outsourcing (BPO) providers to gain access to high-value companies across multiple sectors.

Security researchers exposed a spying campaign by a hack-for-hire group that used Android spyware and phishing to steal iCloud credentials and hack victims’ devices.

A new campaign delivering the Atomic Stealer malware to macOS users abuses the Script Editor in a variation of the ClickFix attack that tricked users into executing commands in Terminal.

CISA has given U.S. government agencies four days to secure their systems against a critical-severity vulnerability in Ivanti Endpoint Manager Mobile (EPMM) that has been exploited in attacks since January.

Security researchers discovered a remote code execution (RCE) vulnerability in Apache ActiveMQ Classic that has gone undetected for 13 years and could be exploited to execute arbitrary commands.

È stata ribattezzata Operation NoVoice la campagna malevola per la distruzione di malware Android che prende di mira smartphone non aggiornati sfruttando vulnerabilità già note e corrette nei dispositivi più recenti. L’obiettivo è il controllo completo del sistema colpito. Ecco tutti i dettagli