Over Security
662 subscribers
31.1K photos
32.6K links
This is a (beta) cybersecurity news aggregator!

https://oversecurity.net
Download Telegram
Akira hackers disable EDR with Safe Mode, steal data but fail to encrypt

An Akira ransomware affiliate disabled the endpoint detection and response (EDR) solution on a compromised system by restarting the machine into Safe Mode with Networking.

🔗️ [Bleepingcomputer] https://link.is.it/BdLCV9
Flock says its new tool will help identify police abuse, but hasn’t explained how it works

The surveillance company announced it's making a tool called "Audit Assistance" mandatory for all customers, claiming it's already helped catch abuse. But the company has yet to explain how the tool works in detail, raising questions about its effectiveness.

🔗️ [Techcrunch] https://link.is.it/dFVcZk
Apple sends new ‘Threat Notification’ alerts over mercenary spyware attacks

You're not alone if you just received an "Apple Threat Notification" saying it detected a "mercenary spyware attack targeted at your iPhone."

🔗️ [Bleepingcomputer] https://link.is.it/JOdAgu
AI Won’t Replace Cybersecurity Jobs, It’ll Replace the Toil – Harsha Reddy Explains What’s Next

As enterprises race to bolt AI onto every business process, security leaders are being forced to answer a harder question

🔗️ [Thecyberexpress] https://link.is.it/0qjK4V
Le due responsabilità del GDPR: la promessa e il vincolo

La responsabilità del GDPR ha due tempi e, in inglese, due nomi: responsibility, la promessa che guarda in avanti; liability, il vincolo che risponde all’indietro. Ecco la differenza fra responsabilità-promessa che guarda in avanti e la responsabilità-vincolo che risponde all’indietro

🔗️ [Cybersecurity360] https://link.is.it/8eNDBA
Agenti AI militari e guerre diffuse: quando non sappiamo più chi ha deciso

Con gli agenti militari basati sull’intelligenza artificiale la catena di comando comincia ad assomigliare a una rete. Ecco i rischi legati ad agenti militari manipolati nelle guerre diffuse dove il vantaggio non appartiene solo a chi colpisce meglio, bensì anche a colui che riesce a dissimulare il colpo con un incidente

🔗️ [Cybersecurity360] https://link.is.it/jhLO7U
Data analyst sent to prison for stealing data, extorting employer

A former data analyst contractor for Brightly Software has been sentenced to two years in prison for targeting his employer in a $2.5 million extortion scheme.

🔗️ [Bleepingcomputer] https://link.is.it/QUNSnT
Un attacco ai trasporti è un problema europeo, ecco i rischi più gravi

Il Cyber Europe 2026 ha visto la simulazione da parte di ENISA di attacchi informatici su larga scala contro operatori dei trasporti ferroviari e marittimi. Ecco perché i trasporti sono tra i settori più complessi da proteggere e qual è il quadro europeo di gestione coordinata delle crisi informatiche di vasta portata, noto come Cyber Blueprint

🔗️ [Cybersecurity360] https://link.is.it/gFX1En
L’evoluzione del SOC agentico

Il futuro della sicurezza informatica tra automazione e controllo umano: ecco come cambia l'efficienza dei sistemi SOC moderni.

🔗️ [Cybersecurity360] https://link.is.it/JB13Qm
Dall’antivirus alla protezione d’area: Norton 360 Deluxe integra VPN, IA anti-truffa e Dark Web Monitoring

La nuova offerta di Norton 360 Deluxe comprende la VPN e tanti altri servizi per garantire la massima sicurezza per 5 dispositivi: i costi.

🔗️ [Cybersecurity360] https://link.is.it/bz5koM
Who’s Tracking You? Use This New Service to Find Out

It can be daunting to determine who's responsible for showing ads on the websites we visit, or who's harvesting data from the mobile apps we use...

🔗️ [Krebsonsecurity] https://link.is.it/WhR936
👍1
The Cyber Express Weekly Roundup: Corporate Cyberattacks, AI Security Risks, Zero-Days, and Data Theft

This weekly roundup highlights the expanding range of threats facing businesses, technology platforms, and individuals. From social engineering attacks against corporate

🔗️ [Thecyberexpress] https://link.is.it/H38GmO
RingCentral data breach exposed info of 1.6 million accounts

The ShinyHunters extortion group stole personal information from 1.6 million RingCentral accounts after hacking the company in July, according to the data breach notification service Have I Been Pwned.

🔗️ [Bleepingcomputer] https://link.is.it/sG4dkA
Max severity SAP Commerce Cloud flaw now targeted in attacks

A maximum-severity SAP Commerce Cloud remote code execution vulnerability patched three days ago is already being targeted in attacks, according to threat intelligence company Defused.

🔗️ [Bleepingcomputer] https://link.is.it/0nEPQE
France investigates tax authority breach after hacker claims 600,000 victims

French authorities confirmed that someone gained unauthorized access to systems at the Directorate General of Public Finances in late June after stealing or misusing someone’s identity.


🔗️ [Therecord] https://link.is.it/FPIatE
Sintesi riepilogativa delle campagne malevole nella settimana del 8 – 14 agosto

In questa settimana, il CERT-AGID ha riscontrato ed analizzato, nello scenario italiano di suo riferimento un totale di 118 campagne malevole, di cui 85 con obiettivi italiani e 33 generiche che hanno comunque interessato l’Italia, mettendo a disposizione dei suoi enti accreditati i relativi 1662 indicatori di compromissione (IoC) individuati.

🔗️ [Cert-agid] https://link.is.it/h9xBK2
Hackers exploit macOS Screen Sharing flaw to deploy Monero miner

The Netherlands' National Cyber Security Centre (NCSC) is warning that hackers are actively exploiting a macOS authentication bypass vulnerability after public exploit code emerged.

🔗️ [Bleepingcomputer] https://link.is.it/rTt9Al
Ransomware Threats in the Americas H1 2026: Dissecting the Regional Attack Patterns and Dominant Actors

The Americas carried the heaviest ransomware burden of any region on the planet in the first half of 2026 with 2,188 attacks.

🔗️ [Cyble] https://link.is.it/cU6gt1
The Modern Attack Chain: Rethinking Google Workspace Security in the Age of AI

Google Workspace attacks do not always begin with phishing. Stolen OAuth tokens can provide another path into Gmail, Drive, and connected systems. Material Security explains why organizations need defenses that cover the entire Workspace attack chain.

🔗️ [Bleepingcomputer] https://link.is.it/LrhHeS
US courts will start publishing how often the government uses spyware

The Administrative Office of the U.S. Courts told TechCrunch that it will start disclosing how many times judges authorized the use of spyware to wiretap suspected criminals.

🔗️ [Techcrunch] https://link.is.it/qYxa3Z
Hackers arrested over €30M bank fraud exploiting service provider flaw

Four cybercriminals were arrested in Brazil, and three others were charged in Europe over allegations that they exploited a vulnerability at a service provider, allowing them to withdraw funds from Commerzbank customers' bank accounts.

🔗️ [Bleepingcomputer] https://link.is.it/5v9L14