Over Security
655 subscribers
31.1K photos
32.6K links
This is a (beta) cybersecurity news aggregator!

https://oversecurity.net
Download Telegram
Hotel nel mirino: perché il settore alberghiero è un cyber-bersaglio facile

Dal furto di documenti d'identità nei check-in italiani alle campagne contro gli hotel di Milano-Cortina, fino alla violazione di Booking.com: tre episodi diversi raccontano la stessa vulnerabilità strutturale, che le regole attuali intercettano solo in parte.

🔗️ [Cybersecurity360] https://link.is.it/afjHik
👍1
Levi Strauss Hit by Cyberattack, Corporate Files Accessed

Levi Strauss cyberattack has exposed certain corporate information after an unauthorized third party gained access to company files through compromised

🔗️ [Thecyberexpress] https://link.is.it/OYrt4S
Ransomware Kingpin Gets 16 Years for Global Cyberattacks

A Ransom Cartel ransomware leader has been sentenced to 16 years in prison after being convicted of conspiracy to commit

🔗️ [Thecyberexpress] https://link.is.it/S8fR4J
AI Agent Exploits Gym System Vulnerability, Cancels Waitlist Booking in Australia

An AI agent assigned to book a gym class in Australia reportedly discovered a gym system vulnerability, used it to

🔗️ [Thecyberexpress] https://link.is.it/xxhvgb
Gestione delle password aziendali: gli standard per azzerare i rischi di intrusione

NordPass offre servizi per la gestione delle password aziendali e dire basta agli accessi abusivi: per l'estate è previsto lo sconto del 50%

🔗️ [Cybersecurity360] https://link.is.it/WUaRfQ
Suisun City Declares Emergency After Cyberattack Disrupts Systems

The Suisun City emergency declared by local officials followed a cyberattack that forced the Northern California municipality to shut down its information

🔗️ [Thecyberexpress] https://link.is.it/pGJQUl
NIS2 e gestione incidenti: dall’impatto operativo al costo del fermo e alle decisioni di business

La gestione degli incidenti non può essere considerata solo una procedura tecnica di risposta. In ottica NIS2, deve diventare un processo decisionale capace di collegare evento cyber, attività impattate, servizi IT coinvolti, fornitori, continuità operativa, comunicazioni e costo del fermo

🔗️ [Cybersecurity360] https://link.is.it/GIX2yO
Cifratura dei dati e reti VPN: le architetture avanzate per la protezione dei flussi

Per chi cerca la massima sicurezza per la sua VPN, ProntoVPN ha un'offerta dedicata: a 2,99 euro al mese sono tanti i servizi da scoprire.

🔗️ [Cybersecurity360] https://link.is.it/dlRwTK
ATED // Cyber Security Day 2026

L’associazione ATED di Lugano mi ha invitato anche quest’anno all’evento Cyber Security Day. È la mia seconda partecipazione (nella pagina dedicata alle conferenze trovate i detta…

🔗️ [Roccosicilia] https://link.is.it/oOqfA7
InPost, mancano dati per la consegna. Ma è phishing!

Nella giornata odierna il team anti-frode D3Lab ha individuato un sito di phishing riproducente la grafica di InPost, note servizio di consegna basato su locker sparsi su tutto il territorio nazionale.







Pagina di phishing principale







Comunicando l'impossibilità di effettuare una consegna

🔗️ [D3lab] https://link.is.it/dtmWPh
IT threat evolution in Q2 2026. Mobile statistics

This report contains mobile threat statistics for Q2 2026, along with noteworthy discoveries and quarterly trends: the Anatsa banker and a transition to droppers.

🔗️ [Securelist] https://link.is.it/IJQsSb
IT threat evolution in Q2 2026. Non-mobile statistics

The report presents key trends and statistics on malware that targeted personal computers running Windows and macOS, as well as internet of things (IoT) devices, during Q2 2026.

🔗️ [Securelist] https://link.is.it/4RL6FB
Critical Progress LoadMaster flaw now actively exploited in attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity Progress Kemp LoadMaster command injection vulnerability.

🔗️ [Bleepingcomputer] https://link.is.it/XjqFSn
Smile, You’re on Camera. Part 2: Hiring Lazarus APT’s IT Workers in a Fake DeFi Startup

See what happened after suspected Lazarus-linked IT workers were hired, from forged identities and AI tools to remote access and supporting infrastructure.

🔗️ [Any] https://link.is.it/L5U6rH
New Zealand sanctions Russian hackers, propaganda groups over Ukraine war

New Zealand announced new sanctions on Russian hackers, technology companies and Kremlin-linked organizations over their roles in supporting Moscow’s war against Ukraine.


🔗️ [Therecord] https://link.is.it/ngrYNd
LexisNexis shuts down services after suspicious activity on servers

LexisNexis took its Diligence, Metabase API, and Newsdesk services offline as part of its response to unusual activity on servers hosted and managed by an unnamed third-party vendor.

🔗️ [Bleepingcomputer] https://link.is.it/uXSonq
Valve notifies Steam hardware customers of a data breach

Video game publisher and digital distribution giant Valve is notifying Steam hardware customers in Europe that hackers stole their data after hacking its shipping partner, CEVA Logistics.

🔗️ [Bleepingcomputer] https://link.is.it/yMAkcS
China-linked hackers turning popular cybersecurity tool into ransomware launchpad, Microsoft warns

A China-linked threat actor is believed to be exploiting a critical vulnerability affecting cybersecurity software from the company N-able.

🔗️ [Therecord] https://link.is.it/pqo7QK
Ransomware Now Shows Up in Nearly Half of All Breaches: A Survival Playbook for Lean Security Teams

A ransomware incident response plan helps teams prepare for rising attacks. Explore 2025-2026 ransomware data, RaaS threats, recovery and prevention.

🔗️ [Cyble] https://link.is.it/URC31Y
Member of The Com sent to prison for blackmail, sextortion

A member of "The Com," a loose-knit online cybercrime collective that targets children and teenagers, has been sentenced to two years in prison for blackmail and sextortion offenses against nearly 120 victims worldwide.

🔗️ [Bleepingcomputer] https://link.is.it/5woKM8
CISA: SonicWall SMA1000 flaws now exploited by ransomware gangs

CISA has confirmed that ransomware gangs have begun exploiting two recently patched SonicWall SMA1000 vulnerabilities, including a maximum-severity server-side request forgery (SSRF) flaw.

🔗️ [Bleepingcomputer] https://link.is.it/4CbCej