Over Security

ANY.RUN won in two categories for innovative malware analysis and market-leading threat intelligence. More details inside.

In June 2015, custom gaming controller maker Scuf Gaming suffered a data breach. The incident exposed 129k unique email addresses along with usernames, display names, IP addresses and password hashes.

Kali Linux 2026.1 adds BackTrack mode, MetasploitMCP, 8 tools, kernel 6.18, NetHunter updates, and fixes with improved UI experience.

In March 2026, the audio production tools company Sound Radix disclosed a data breach that they subsequently self-submitted to HIBP. Attributed to unauthorised access to a customer support platform, the incident impacted 293k unique email addresses and names of users who had interacted with their support team. Sound Radix advised that whilst there is no evidence their broader user database was accessed, it is possible that additional data including hashed passwords may have been exposed. No financial or credit card information was impacted.

La vulnerabilità “PolyShell” in Magento Open Source e Adobe Commerce è passata dalla disclosure alla compromissione su larga scala in tempi estremamente rapidi: secondo Sansec, azienda specializzata in sicurezza informatica, lo sfruttamento di massa è iniziato il 19 marzo 2026, appena due giorni dopo la divulgazione pubblica, e oggi le tracce di attacco risultano presenti …

GitHub is adopting AI-based scanning for its Code Security tool to expand vulnerability detections beyond the CodeQL static analysis and cover more languages and frameworks.

Attacks leveraging the 'PolyShell' vulnerability in version 2 of Magento Open Source and Adobe Commerce installations are underway, targeting more than half of all vulnerable stores.

Threat actors are evading phishing detection in campaigns targeting Microsoft accounts by abusing the no-code app-building platform Bubble to generate and host malicious web apps.

A new info-stealing malware called Torg Grabber is stealing sensitive data from 850 browser extensions, more than 700 of them for cryptocurrency wallets.

Il cuore della questione è di natura tecnica prima ancora che geopolitica. Ecco cosa impone il divieto della FCC Usa di import di router consumer e apparati considerati non abbastanza sicuri prodotti all'estero

Russian state-owned media reported that police in Russia arrested the administrator of LeakBase, a large hacking forum.

Citrix has patched two NetScaler ADC and NetScaler Gateway vulnerabilities, one of which is very similar to the CitrixBleed and CitrixBleed2 flaws exploited in zero-day attacks in recent years.

LiSA, il framework di Ca’ Foscari per la verifica del software, conquista il terzo posto a SVCOMP 2026 nella categoria Java. Progetto co-finanziato da SERICS, si basa su interpretazione astratta. Integrato dalla NSA in Ghidra, si candida come tecnologia italiana per l’analisi statica del codice

AI accounts are becoming part of the cybercrime supply chain, sold like email accounts or VPS access. Flare Systems shows how underground markets bundle and resell premium AI access at scale.

Learn how prompt injection attacks expose agentic AI systems to risk, alongside memory poisoning, and how to secure autonomous decision-making.

Kali Linux 2026.1, the first release of the year, is now available for download, featuring 8 new tools, a theme refresh, and a new BackTrack mode for Kali-Undercover.

FlexPLM vulnerability and Windchill flaw (CVE-2026-4681) allow Remote Code Execution. Learn impacted versions, risks, and fixes now.

Le commissioni IMCO e LIBE del Parlamento UE hanno adottato il mandato negoziale sul cosiddetto “omnibus digitale” che modifica l’AI Act: tra le proposte il rinvio delle scadenze per i sistemi ad alto rischio, più flessibilità per le imprese e un nuovo divieto per le applicazioni di “nudificazione”. Voto in plenaria atteso il 26 marzo

TP-Link has patched several vulnerabilities in its Archer NX router series, including a critical-severity flaw that may allow attackers to bypass authentication and upload new firmware.

The Kaspersky Security Services report describes cyberattack trends and statistics revealed by the Managed Detection and Response service. The report also includes Incident Response findings based on real-world cases identified and mitigated in 2025.

As of March 23, no new model of router can receive U.S. market authorization unless it clears a security review by the Department of War or the Department of Homeland Security first, the FCC said.

See how the Kamasers botnet can disrupt business operations through multi-vector DDoS attacks, resilient infrastructure, and broad attack capabilities.

MSSQLand enables red teams to interact with MS-SQL servers and linked instances in restricted environments without complex T-SQL queries. Assembly-ready tool for lateral movement.