Over Security

Kaspersky expert describes the Zigbee wireless protocol and presents two application-level attack vectors that allow Zigbee endpoints to be turned on and off.

An anti-piracy coalition has dismantled one of India's most popular streaming piracy services, which has provided free access to movies and TV shows to millions over the past two years.

Brave has introduced a new AI browsing feature that leverages Leo, its privacy-respecting AI assistant, to perform automated tasks for the user.

Hackers are exploiting a new, undocumented vulnerability in the implementation of the cryptographic algorithm present in Gladinet's CentreStack and Triofox products for secure remote file access and sharing.

Notepad++ version 8.8.9 was released to fix a security weakness in its WinGUp update tool after researchers and users reported incidents in which the updater retrieved malicious executables instead of legitimate update packages.

BforeAI is partnering with Munich Re to provide our customers with ten times the peace of mind.

A stealthy campaign with 19 extensions on the VSCode Marketplace has been active since February, targeting developers with malware hidden inside dependency folders.

Hazel embarks on a creative fitness journey, virtually crossing Middle-earth via The Conqueror app while sharing key cybersecurity insights.

The UK Information Commissioner's Office (ICO) fined the LastPass password management firm £1.2 million for failing to implement security measures that allowed an attacker to steal personal information and encrypted password vaults belonging to up to 1.6 million UK users in a 2022 breach.

Microsoft now pays security researchers for finding critical vulnerabilities in any of its online services, regardless of whether the code was written by Microsoft or a third party.

Google ha rilasciato un aggiornamento urgente per Chrome, risolvendo una grave zero-day sfruttata in attacchi mirati. Gli impatti e come proteggersi

Nel Patch Tuesday di dicembre Microsoft ha riportato di aver risolto 57 vulnerabilità, di cui una sfruttata attivamente e due zero-day già rese note.

AI-driven attacks now automate reconnaissance, generate malware variants, and evade detection at a speed that overwhelms traditional defenses. Corelight explains how network detection and response (NDR) provides the visibility and behavioral insights SOC teams need to spot and stop these fast-moving threats.

A new variation of the ClickFix attack dubbed 'ConsentFix' abuses the Azure CLI OAuth app to hijack Microsoft accounts without the need for a password or to bypass multi-factor authentication (MFA) verifications.

Gli operatori che gestiscono le farm (ossia le fabbriche) in cui vengono generati i messaggi malevoli possono trovarsi in Paesi diversi rispetto ai promotori della frode. Ecco gli indicatori principali per individuare l'origine delle frodi via SMS e come proteggersi

This article provides an inside look into the leaked BTMOB ecosystem, a highly capable Android RAT marketed to cybercriminals as a commercial surveillance platform. By examining the leaked development files, server components, and operator tools, we uncover how BTMOB centralizes authentication, cont

Germany enacts NIS-2 Implementation Act, expanding cybersecurity oversight, executive accountability, and penalties.

An unpatched zero-day vulnerability in Gogs, a popular self-hosted Git service, has enabled attackers to gain remote code execution on Internet-facing instances and compromise hundreds of servers.

La figura specialistica del Social media e digital manager (Smdm) prevede una gestione specialistica dei canali digitali, coerente con gli obiettivi istituzionali, il rispetto della normativa e l’ottimizzazione del rapporto con cittadini e imprese. In questo ambito, il ruolo del DPO è fondamentale. Facciamo chiarezza

true

We analyze the network activity of the Mythic framework, focusing on agent-to-C2 communication, and use signature and behavioral analysis to create detection rules for Network Detection and Response (NDR) solutions.

See how AI Sigma Rules help SOC teams turn sandbox detections into reusable Sigma rules, cut MTTR, and strengthen SIEM and EDR coverage.

Ransomware, AI e cloud segnano i trend di cybersecurity per il 2026: numeri, settori colpiti e priorità di budget per aziende e PMI.

Microsoft has fixed a known issue that caused bright white flashes when launching File Explorer in dark mode on Windows 11 systems after installing the KB5070311 optional update.