Over Security
661 subscribers
31.1K photos
32.6K links
This is a (beta) cybersecurity news aggregator!

https://oversecurity.net
Download Telegram
NSA installs DHS lawyer as new general counsel

Kerianne Tobitsch, who most recently served as a senior lawyer at the Homeland Security Department, is the NSA's new general counsel, sources told Recorded Future News.

🔗️ [Therecord] https://link.is.it/lhenag
Cisco warns of ASA and FTD VPN flaw exploited to crash devices

Cisco is warning that a high-severity denial-of-service vulnerability in Secure Firewall ASA and Threat Defense (FTD) software is being actively exploited in attacks to remotely crash affected devices.

🔗️ [Bleepingcomputer] https://link.is.it/WYqnD5
Microsoft Plugs Nearly 400 Security Holes

Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including...

🔗️ [Krebsonsecurity] https://link.is.it/ej84Gl
Sandworm hackers target IT pros with trojanized WireGuard VPN client

Hackers associated with the Russian threat group Sandworm have been targeting system administrators and IT professionals through fake job offers since at least May.

🔗️ [Bleepingcomputer] https://link.is.it/1fTlg4
Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for August 2026, which includes 421 vulnerabilities affecting a range of products, including 62 that Microsoft marked as "critical."

🔗️ [Talosintelligence] https://link.is.it/GqAVS0
DeadLock ransomware uses blockchain to resist infrastructure takedown

The DeadLock ransomware operation is using a decentralized infrastructure that relies on blockchain-backed services to protect its communication with victims and data-leak activity.

🔗️ [Bleepingcomputer] https://link.is.it/SQGvui
Google says Chrome cuts 7 billion unwanted Android notifications a day to fight abuse

Google says Chrome's anti-abuse systems reduced unwanted notifications on Android by more than 7 billion per day during the first quarter of 2026.

🔗️ [Bleepingcomputer] https://link.is.it/AkeXRg
6G, infrastruttura di sorveglianza pervasiva: rischi cyber, minaccia cinese e Golden power

Integrated Sensing and Communication (ISAC), consenso informato e resilienza delle reti mobili di sesta generazione: un'analisi tecnico-scientifica del 6G come infrastruttura di sorveglianza pervasiva

🔗️ [Cybersecurity360] https://link.is.it/JZVwub
NIS2, ACN chiarisce come funzionerà la vigilanza: ora bisogna dimostrare la compliance

Le nuove FAQ di ACN chiariscono come funzioneranno monitoraggio e vigilanza NIS2. Per le imprese non basterà avere procedure e documenti: serviranno evidenze capaci di dimostrare l'effettiva applicazione delle misure e una governance che colleghi rischi, decisioni, responsabilità e controlli

🔗️ [Cybersecurity360] https://link.is.it/zFYI0z
Gone with the WindRelay: A New Malware Combo Behind a Growing Fraud Scheme

A new NFC relay malware designated as WindRelay, paired with SpyNote RAT enables live-call fraud, combining social engineering with dual digital and physical cash-out.

🔗️ [Group-ib] https://link.is.it/Ehq9oo
Mythos e Chronos, la corsa contro il tempo di Anthropic e le domande senza risposta

Un modello troppo capace per essere rilasciato al pubblico. Questo è Mythos, del quale si sa quel poco che basta per alimentare dubbi, legati anche alla corsa contro il tempo di Anthropic per sbarcare in borsa. Anche unendo i punti, i quesiti rimangono irrisolti

🔗️ [Cybersecurity360] https://link.is.it/cjYsJZ
Patch Tuesday agosto 2026: un driver Windows, il gruppo Lazarus e 400 vulnerabilità sullo sfondo

Il Patch Tuesday di agosto 2026 interviene per correggere 421 vulnerabilità tra cui una zero-day nel driver WinSock già sfruttata da Lazarus e quattro RCE unauthenticated con CVSS 9.8. E conferma che con l’adozione l'AI-driven discovery il triage per contesto batte il triage per punteggio

🔗️ [Cybersecurity360] https://link.is.it/jejOfx
UK Cybercrime Journal: Evolution of Courier Fraud Campaigns

CTI, threat intelligence, OSINT, malware, APT, threat hunting, threat analysis, CTF, cybersecurity, security

🔗️ [Bushidotoken] https://link.is.it/FVJI2z
Microsoft August 2026 Patch Tuesday Fixes 400 Flaws, Including Three Zero-days

Microsoft’s August 2026 Patch Tuesday release addresses roughly 400 security flaws across its products, including three Zero-days. One of the

🔗️ [Thecyberexpress] https://link.is.it/K9dAIg
VPN e fino a 10 Gb per viaggiare in sicurezza in tutto il mondo: la nuova offerta estiva di NordVPN

NordVPN è in sconto del 73% e offre fino a 10 GB per navigare con la eSIM Saily in regalo: ecco come funziona l'offerta e come attivarla.

🔗️ [Cybersecurity360] https://link.is.it/6ovPSP
Penetration test e AI: non serve un’AI più potente, ma un pentester più strategico

La competenza distintiva di un tester offensivo cambia ai tempi dell'intelligenza artificiale. Ecco come effettuare penetration test efficaci nell'era dell'AI

🔗️ [Cybersecurity360] https://link.is.it/3q5Lmq
New Microsoft Defender 'ShieldBreak' zero-day grants SYSTEM privileges

Nightmare Eclipse has released a new Microsoft Defender zero-day exploit named "ShieldBreak" after Microsoft released the August 2026 Patch Tuesday security updates.

🔗️ [Bleepingcomputer] https://link.is.it/GqoOFm
Signal adds new security feature to thwart man-in-the-middle attacks

​Signal has introduced Automatic Key Verification, a new security feature that gives users a new way to ensure their encrypted chats haven't been intercepted.

🔗️ [Bleepingcomputer] https://link.is.it/BvPveZ
👍1
Microsoft’s massive Patch Tuesday releases continue as AI reshapes bug discovery

This month’s update features about five times the volume of patches Microsoft was shipping in a typical month before AI-assisted vulnerability discovery took hold.

🔗️ [Therecord] https://link.is.it/cYZBRn
Hackers leverage new Microsoft SharePoint exploit in attacks

Hackers have already begun using a proof-of-concept (PoC) exploit for a critical Microsoft SharePoint vulnerability, published by cybersecurity company Rapid7 on Tuesday.

🔗️ [Bleepingcomputer] https://link.is.it/FIYd3Y
Flipper OS — the operating system for Flipper One

TL;DR: Flipper OS is an additional layer on top of a standard Debian-based Linux system. It lets you switch between multiple preconfigured system profiles for different tasks, so you can experiment freely without worrying about breaking your setup or turning it into a mess.




Why build Flipper OS, yet

🔗️ [Flipper] https://link.is.it/ou3HQa
👍1