Over Security

La normativa europea GSR2 impone i sistemi ADAS obbligatori dal 2024 sulle nostre automobili per rilevare sonnolenza tramite tracciamento oculare tra 20-50 km/h. È vietata la registrazione di dati biometrici, ma gli esperti temono pressioni future per l’accesso info sensibili. Gli USA già raccolgono dati per assicuratori e broker

Trump Mobile is leaking customers’ email and home addresses, but has not responded to people alerting the company of the data exposure, according to two YouTubers who said they verified that their leaked data is authentic.

Una nuova campagna malevola basata sulla tecnica del CalPhishing (Calendar Phishing) sta una campagna che sfruttando gli inviti calendario per distribuire link malevoli e mantenere persistenza anche dopo la rimozione dell’e-mail originale. Ecco tutti i dettagli e come difendersi su questo nuovo fronte per la sicurezza aziendale

The Grafana data breach was caused by a single GitHub workflow token that slipped through the rotation process following the TanStack npm supply-chain attack last week.

Identity checks alone can't stop attackers using stolen session tokens and compromised devices. Specops Software outlines why Zero Trust strategies increasingly depend on continuous device verification.

Learn how ANY.RUN’s Threat Intelligence Feeds , Sandbox, and Threat Intelligence Lookup help MSSP scale by making threat analysts efficient.

Il futuro del cloud sovrano sarà sempre più integrato con sistemi di AI capaci di proteggere dati, infrastrutture e servizi critici in modo adattivo e automatizzato. La combinazione tra sovranità digitale, AI for security e governance europea punta a creare ecosistemi cloud più resilienti, trasparenti e indipendenti da giurisdizioni esterne

Drupal has announced a "core security release" scheduled for later today, warning that threat actors might develop exploits within hours of the update disclosure.

PinTheft, a recently patched Linux privilege escalation vulnerability, now has a publicly available proof-of-concept (PoC) exploit that allows local attackers to gain root privileges on Arch Linux systems.

Technical analysis of CVE-2026-40369, a 12-byte Windows kernel write reachable from browser sandboxes via NtQuerySystemInformation, leading to SYSTEM.

Guida alle VPN per Firefox: scopri le differenze e le suite all-in-one di NordVPN, Surfshark, ProtonvPN e ExpressVPN.

Sempre più stati e organismi regolatori stanno imponendo restrizioni ai servizi online sulla base dell’età. L’obiettivo è proteggere i minori dai contenuti inappropriati. Ma quali sono i rischi per la privacy e la sicurezza degli utenti?

I dati della survey e la voce dei board member: come trasformare la conformità normativa e l’AI in leve strategiche di business.

We explain how a flaw in ExifTool allows attackers to compromise macOS systems via a malicious image (CVE-2026-3102).

ChromaDB FastAPI vulnerability CVE-2026-45829 (ChromaToast) enables pre-auth RCE via HuggingFace models; affects v1.0.0–1.5.8; high exposure risk now.

ChromaDB FastAPI vulnerability CVE-2026-45829 (ChromaToast) enables pre-auth RCE via HuggingFace models; affects v1.0.0–1.5.8; high exposure risk now.

GitHub has confirmed that roughly 3,800 internal repositories were breached after one of its employees installed a malicious VS Code extension.

Microsoft has shared mitigations for YellowKey, a recently disclosed Windows BitLocker zero-day vulnerability that grants access to protected drives.

The Chanhassen Dinner Theatres cyberattack and illness outbreak forced “Guys and Dolls” cancellations and disrupted operations.

Dal classico furto di dati all’uso improprio dell’IA: i dati di Arctic Wolf mostrano perché la sicurezza non è solo una questione tecnologica, ma culturale. C'è una marcata disconnessione tra percezione e realtà del rischio

An increasing number of data brokers active in Chinese-speaking dark web forums and Telegram channels are advertising large volumes of purportedly stolen data from organizations worldwide. But are they credible?

The telecom sector launches a private ISAC to strengthen cyber intelligence sharing against AI-powered cyberattacks and espionage.

Non-consensual intimate images are under scrutiny as Ofcom pushes tougher rules to curb deepfake abuse and force faster content removal online.