Over Security
656 subscribers
31.1K photos
32.6K links
This is a (beta) cybersecurity news aggregator!

https://oversecurity.net
Download Telegram
Member of The Com sent to prison for blackmail, sextortion

A member of "The Com," a loose-knit online cybercrime collective that targets children and teenagers, has been sentenced to two years in prison for blackmail and sextortion offenses against nearly 120 victims worldwide.

🔗️ [Bleepingcomputer] https://link.is.it/5woKM8
CISA: SonicWall SMA1000 flaws now exploited by ransomware gangs

CISA has confirmed that ransomware gangs have begun exploiting two recently patched SonicWall SMA1000 vulnerabilities, including a maximum-severity server-side request forgery (SSRF) flaw.

🔗️ [Bleepingcomputer] https://link.is.it/4CbCej
When Credentials Are No Longer Enough: Device Trust in the AI Era

AI is making phishing, credential theft, and social engineering faster and more efficient, while traditional trust signals such as passwords, MFA, IP reputation, and geolocation become easier to bypass. Specops explains why organizations are increasingly adding device trust to their Zero Trust strategies.

🔗️ [Bleepingcomputer] https://link.is.it/vVnhkt
British ‘Com’ member who abused more than 100 girls worldwide jailed for two years

Justin Swaddle, of Leeds in northern England, targeted 117 female victims aged 13 to 17, according to the National Crime Agency.

🔗️ [Therecord] https://link.is.it/EYfXc7
Senate Democrats introduce bill to distribute $300 million annually to shore up water system cybersecurity

Two Democratic senators introduced legislation that would allocate $300 million each year to fund cybersecurity improvements for the water and wastewater sector.


🔗️ [Therecord] https://link.is.it/jhlncU
Poland uncovers second heat plant cyberattack that went hidden for months

The incident occurred on the same day as coordinated cyberattacks struck more than 30 other renewable energy installations and a larger heat plant, as Poland publicly disclosed in January.

🔗️ [Therecord] https://link.is.it/OpsqBw
Russian military hackers pose as recruiters to target Ukrainian IT workers

Ukraine’s computer emergency response team, CERT-UA, said Saturday that the campaign has been running since at least May and is linked to Sandworm, the notorious hacking unit associated with Russia’s GRU military intelligence agency.

🔗️ [Therecord] https://link.is.it/6cchrZ
AI, ora controlli preventivi sui modelli: il blocco di Astra, le regole di Trump

Gli Usa procedono con cautela contro il rischio incontrollato dell'AI. OpenAI ha sospeso parte delle attività interne sul nuovo modello Astra, per pericoli cybersecurity. Il Governo Trump sperimenta un patto volontario per la sicurezza AI. Si cerca un difficile equilibrio tra sicurezza e innovazione, con conseguenze globali

🔗️ [Cybersecurity360] https://link.is.it/W5nfzm
New StormEncryptor ransomware used by former Medusa affiliate

A financially motivated threat actor previously associated with the Medusa ransomware operation is now deploying a new ransomware strain called StormEncryptor.

🔗️ [Bleepingcomputer] https://link.is.it/Is8NmY
Data Center Physical Security: Mitigating FPV Drone Threats

We explore how shifting online sentiment and low-cost FPV technology are creating an unprecedented airborne threat vector.

🔗️ [Flashpoint] https://link.is.it/jDk15g
FBI, South Korea warn of Gunra ransomware gang targeting critical infrastructure

The Gunra ransomware gang is breaching critical infrastructure organizations through vulnerabilities in popular brands of firewalls, the FBI and South Korea’s government warned.

🔗️ [Therecord] https://link.is.it/iGlhAe
OpenAI releases ChatGPT 5.6 Cyber, but it's only for approved users

OpenAI has developed a new model called "GPT 5.6 Cyber," designed for vulnerability research, penetration testing, incident response, and remediation.

🔗️ [Bleepingcomputer] https://link.is.it/3UBKxB
BdThemes plugins supply-chain hack creates rogue WordPress admins

A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators' browsers to create rogue admin accounts.

🔗️ [Bleepingcomputer] https://link.is.it/OHaOoK
Hackers breached a small Polish energy plant via private APN last year

Hackers breached a heat-and-power plant facility in Poland, which supplies heat to about 50,000 residents, using a private APN (Access Point Name) to access an OT (Operational Technology) network.

🔗️ [Bleepingcomputer] https://link.is.it/gQ23us
Sicurezza delle reti e Wi-Fi pubblici: la cifratura del traffico è diventata la prima linea di difesa per la privacy

La cifratura della rete Wi-Fi e la tutela della privacy sono fondamentali quando si naviga: ecco un servizio VPN a costi ridotti da attivare.

🔗️ [Cybersecurity360] https://link.is.it/xLkmNi
New Zealand Targets Russian Cyber Actors With Fresh Sanctions

New Zealand has announced a new round of sanctions against Russia, targeting 33 individuals and entities accused of supporting Moscow’s

🔗️ [Thecyberexpress] https://link.is.it/KT0uj2
Input validation: perché la sicurezza applicativa comincia dai dati che lasciamo entrare

Ogni dato proveniente dall'esterno può diventare un vettore di attacco. Per questo l'input validation non dovrebbe essere un controllo aggiunto a valle, ma un requisito di progettazione: un approccio multilivello che riduce la superficie di attacco senza sacrificare l'usabilità

🔗️ [Cybersecurity360] https://link.is.it/TkSFnU
Gestione dei rischi NIS 2: la scelta del metodo determina la qualità del sistema

La scelta del metodo non è una decisione tecnica di secondo piano, ma stabilisce il modo in cui l’organizzazione comprenderà i propri rischi, selezionerà le misure e dimostrerà la coerenza del proprio sistema. Ecco perché la gestione dei rischi occupa il centro esatto della NIS 2

🔗️ [Cybersecurity360] https://link.is.it/Ax6sBs
Supply Chain Security: How ANY.RUN Helps US and EU Enterprises Prevent Incidents

See actionable steps for CISOs on how to build stronger supply chain security and reduce risk of third-party attacks.

🔗️ [Any] https://link.is.it/ufEOGM
From Detection Gaps to Fraud & Scam Leadership

This article explains how banks can increase their Value Detection Rate (VDR) using ThreatFabric's Behavioural SDK

🔗️ [Threatfabric] https://link.is.it/H5lPfo
US and South Korea warn of Gunra ransomware targeting govt agencies

U.S. federal agencies and South Korea's National Policy Agency warned government and critical infrastructure organizations worldwide to secure their systems against Gunra ransomware attacks.

🔗️ [Bleepingcomputer] https://link.is.it/jmclD6