Over Security

Cisco Talos’ Vulnerability Discovery & Research team recently disclosed vulnerabilities in Biosig Project Libbiosig, Grassroot DiCoM, and Smallstep step-ca. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, all in adherence to Cisco’s third-party vulnerability disclosure policy, except for Grassroot, as the DiCoM vulnerabilities are zero-days. For Snort coverage that can detect the exploitation of these vulnerabilities, download the latest rule sets

Cisco said it discovered a Chinese hacking campaign targeting its customers by exploiting a zero-day in some of the company's most popular products.

Threat actors are abusing the legitimate device-linking feature to hijack WhatsApp accounts via pairing codes in a campaign dubbed GhostPairing.

​Cisco warned customers today of an unpatched, maximum-severity Cisco AsyncOS zero-day actively exploited in attacks targeting Secure Email Gateway (SEG) and Secure Email and Web Manager (SEWM) appliances.

SonicWall warned customers today to patch a vulnerability in the SonicWall SMA1000 Appliance Management Console (AMC) that was chained in zero-day attacks to escalate privileges.

Cisco Talos is tracking the active targeting of Cisco AsyncOS Software for Cisco Secure Email Gateway, formerly known as Cisco Email Security Appliance (ESA), and Cisco Secure Email and Web Manager, formerly known as Cisco Content Security Management Appliance (SMA).

A ransomware gang exploited the critical React2Shell vulnerability (CVE-2025-55182) to gain initial access to corporate networks and deployed the file-encrypting malware less than a minute later.

Passwords and app-based MFA add hidden costs through lost productivity, frequent resets, and risk of phishing and social engineering attacks. Token explains how wireless biometric, passwordless authentication eliminates credential-based attacks and delivers measurable financial returns by reducing login time across the enterprise.

ACSC’s Technology Primer explains Quantum Technology, quantum cybersecurity risks, and how organizations can prepare for a quantum-enabled future.

Secondo Kaspersky, nel 2025 un quarto degli attacchi europei alle piccole e medie imprese ha colpito aziende italiane. E il malware cresce a ritmo industriale.

Il report di ESET relativo al secondo semestre del 2025 evidenzia un'impennata di malware IA e una significativa evoluzione delle minacce tradizionali.

Microsoft has asked businesses to reach out for advice on how to temporarily mitigate a Message Queuing (MSMQ) issue causing enterprise apps and Internet Information Services (IIS) sites to fail.

PreCrime Labs' 2025 advisory details a mass fake-shop campaign leveraging 244 domains, Chinese infrastructure, and retail brand mimicry to facilitate fraud and malware.

Il Rapporto Clusit 2025 rivela che l’Italia subisce il 10% degli attacchi globali: l’analisi delle vulnerabilità e delle minacce.

The Gartner report identifies BforeAI for its Predictive Attack Intelligence service that "proactively alerts users to digital threats and orchestrates infrastructure takedowns."

Lexi DiScola shares how her unconventional path led her to global cyber threat analysis and highlights the power of diverse backgrounds on an international team

The Gartner report identifies BforeAI for its Predictive Attack Intelligence service that "proactively alerts users to digital threats and orchestrates infrastructure takedowns."

Lexi DiScola shares how her unconventional path led her to global cyber threat analysis and highlights the power of diverse backgrounds on an international team

The Gartner report identifies BforeAI for its Predictive Attack Intelligence service that "proactively alerts users to digital threats and orchestrates infrastructure takedowns."

Kaspersky’s GReAT experts have uncovered a new wave of cyberattacks by the ForumTroll APT group, targeting Russian political scientists and delivering the Tuoni framework to their devices.

La truffa da 1,7 milioni di euro di cui è stata vittima l’onlus Opera di Santa Maria del Fiore si sarebbe potuta evitare con una procedura interna analogica. Cosa è successo, come è successo e cosa fare in casi simili

Si prevede che l'anno prossimo accelererà lo sviluppo di agenti AI sempre più autonomi e del calcolo quantistico, mentre le normative entrano nel vivo, anche per aumentare la resilienza. Ecco i consigli degli esperti per non farsi cogliere impreparati dalle nuove tendenze cyber che plasmeranno il 2026