Cyberfero
Piergiorgio Venuti
From Cyberfero to Cyberfero: rebranding of the leading cybersecurity company
Dear customers and partners, we are pleased to announce that our company is officially changing its name: from today Cyberfero becomes Cyberfero! In this article we will illustrate in detail all the news and reassurances related to this rebranding, which marks the evolution of our company. What changes at a practical level At a practical level, the change of name…
Piergiorgio Venuti
Free trial of internet services with Demos
The services provided by Cyberfero are many and cover a large variety of needs. We realize that for the layman and the less experienced, this could be intimidating. In the midst of so much choice, how can we be sure that the service we need is exactly what we are about to request? For this reason, we provide our visitors…
Piergiorgio Venuti
Cloud services for small local businesses
Small and medium-sized businesses have little room for maneuver when it comes to investment. Precisely for this reason, every step that involves an expense is weighed and evaluated in every aspect before being carried out. We know the fears that underlie such reasoning, and for this reason we have decided to dedicate an article precisely to the advantages that Cyberfero…
Piergiorgio Venuti
Cloud computing services in Reggio Emilia
Il cloud computing consente alle aziende di accedere a server, archivi, database e servizi aggiuntivi (applicativi), tramite piani di abbonamento flessibili. Ad oggi il cloud e’ onnipresente. Gia’ dal 2009, piu’ del 90% delle aziende utilizza almeno una applicazione basata sul cloud computing per gestire dati aziendali in modo sicuro. Inoltre, un numero sempre maggiore di aziende e organizzazioni non…
Piergiorgio Venuti
Managed Service Provider
When you approach the world of the network in a professional way, whether it is a site, an online app, a storage system or a VPS, it is quite clear that the management of computer systems requires specific skills that are not always available . So how do you make your company competitive on the network without having specific resources…
Piergiorgio Venuti
The history of Cyberfero
Since 2011, Cyberfero is a Cloud Computing services company based in Reggio Emilia (Italy). Founded by a group of engineers experienced in distributed data centers, the first product was a Secure Virtual Desktop, hence the name chosen for the company. The expertise that marked the foundation of the project also includes cyber security, as underlined in the name. Over the…
Piergiorgio Venuti
Cloud Milan
Cloud Milan The Datacenter in Italy of the Cyberfero reside in Caldera street 21 in Milan at the MIX (Milan Internet eXchange). Our Datacenter is a Tier 3 with the following technical features: Cloud Milan – Physical security: The service you purchase includes structural elements and procedures to prevent / deter the physical access of unauthorized personnel to the…
Piergiorgio Venuti
Public Cloud
The public cloud provides the provision of cloud services in a virtualized environment, implemented through shared physical resources and accessible via a public network such as the Internet. It is opposed to the private cloud, which delimits the pool of underlying computing resources, creating a distinct cloud platform that can only be accessed by a single organization. Public couds instead provide…
Piergiorgio Venuti
Server Cloud
server cloud A cloud server or VPS (Virtual Private Server) is a fully-fledged server with its own operating system and well-defined hardware features only that unlike a classic server it shares physical resources with other virtual machines in this way more VPS can be run simultaneously on the same server (hypervisor). This virtualization technique allows significant cost savings and an…
Piergiorgio Venuti
Virtual server
A virtual server or virtual private server (VPS) is a fully-fledged server with its own operating system and well-defined hardware features only that unlike a classic server it shares physical resources with other virtual machines in this way more VPS can be run simultaneously on the same server (hypervisor). This virtualization technique allows significant cost savings and an optimization of…
Piergiorgio Venuti
Cloud services
cloud services The provision of Cloud Services is the core business of Cyberfero, through these services we are able to provide our customers with support to all the company’s ICT processes. Thanks to the adoption of Cloud services, our customers can use a reliable Cloud Provider that, through its Datacenter, is able to implement and maintain the customer’s server pool…
Piergiorgio Venuti
Autoscaling
Autoscaling https://cloud.cyberfero.com/cart/iaas-public-cloud—load-balancer/&step=0 7 GOOD REASONS TO CHOOSE THE AUTOSCALING OPTION 1. The hard disk or one of the server’s hard disks is full ◊ WITHOUT Autoscaling: Services crash and users of applications running on the disk receive a disservice image of the company and risk users do not return. ◊ WITH Autoscaling: The disks are resized according to the…
Piergiorgio Venuti
Public Cloud Reggio Emilia
public cloud reggio emilia Public cloud Reggio Emilia, the offer of the Public Cloud in Reggio Emilia of the Cyberfero. The Public Cloud or Public Cloud is one of the models of cloud computing, where a Service Provider (or Cloud Provider in this case) makes publicly available on the Internet resources such as applications and storage. Public Cloud Reggio Emilia…
Piergiorgio Venuti
Datacenter in Italy
Datacenter Datacenter in Italy (Milan/Reggio Emilia) The Datacenter in Italy of the Cyberfero reside in via Caldera 21 in Milan at the MIX (Milan Internet eXchange). Our Datacenter is a Tier 3 with the following technical features: Physical security: The service you purchase includes structural elements and procedures to prevent / deter the physical access of unauthorized personnel to…
Alessandro Stesi
Cloud Provider Reggio Emilia
cloud provider reggio emilia Cyberfero is a Cloud Provider of Reggio Emilia, a Service Provider able to offer application services and / or disk space through private (private cloud) or public (public cloud or cloud) networks to companies or individuals. This means that software and customer data can be used via the Internet and are made available thanks to our…
Share
RSS
More Articles…
- From Cyberfero to Cyberfero: rebranding of the leading cybersecurity company
- NIS: what it is and how it protects cybersecurity
- Advanced persistent threats (APTs): what they are and how to defend yourself
- Penetration Testing and MFA: A Dual Strategy to Maximize Security
- Penetration Testing: Where to Strike to Protect Your IT Network
- Ransomware: a plague that brings companies and institutions to their knees. Should you pay the ransom? Here is the answer.
- Why IT audit and log management are important for Cybersecurity
- Red Team, Blue Team and Purple Team: what are the differences?
Categories …
- Backup as a Service (18)
- Acronis Cloud Backup (11)
- Veeam Cloud Connect (4)
- Cloud Conference (3)
- Cloud CRM (1)
- Cloud Server/VPS (22)
- Conferenza Cloud (4)
- Cyberfero (15)
- ICT Monitoring (5)
- Log Management (2)
- News (25)
- ownCloud (4)
- Privacy (7)
- Security (203)
- Cyber Threat Intelligence (CTI) (8)
- Deception (4)
- Ethical Phishing (11)
- Netwrix Auditor (2)
- Penetration Test (11)
- Posture Guard (3)
- SOCaaS (65)
- Vulnerabilities (84)
- Web Hosting (15)
Tags
Unknown Feed
Full Disclosure
- Apache Struts2 Core Arbitrary Code Execution via OGNL Sandbox Escape November 2, 2026Posted by Daniel Owens via Fulldisclosure on Nov 01Description Apache Struts2 Core version 7.4.0 and below attempt to prevent arbitrary code execution via Object-Graph Navigation Language (OGNL) through several different mechanisms but only in a cursory fashion -- the libraries only guard against immediate calls evaluated by the OGNL engine via `SecurityMemberAccess`, but an allowed […]
- Apache Struts2 Core TokenHelper Token Cryptographic Timing Side-Channel November 2, 2026Posted by Daniel Owens via Fulldisclosure on Nov 01Description The Apache Struts2 Core 7.4.0 and below performs session token comparisons cryptographically insecure early-exit comparison functions (e.g., `!=`, `memcmp`, byte-by-byte loops with `break`) that return as soon as the first mismatched byte is encountered. The execution time of the comparison is therefore proportional to the number […]
- Apache Struts2 Spring Plugin Uses a Previously Closed Resource November 2, 2026Posted by Daniel Owens via Fulldisclosure on Nov 01Description The Apache Struts2 Spring Plugin opens a Spring `ApplicationContex` via a try-with-resources block and, outside of said block, then continues to use the closed resource, resulting in an uncaught `IllegalStateException`. This particular issue prevents proper functionality and indicates poor code quality and code review standards and […]
- Apache Struts2 Core Integer Overflow November 2, 2026Posted by Daniel Owens via Fulldisclosure on Nov 01Description Apache Struts2 Core version 7.4.0 and below fails to properly prevent integer overflows, causing wrap-arounds and other issues on a downstream forced casting into types smaller than `BigInteger`. Importantly, this finding underscores why all applications using Struts and other such platforms should perform their own input […]
- Apache Struts2 Core Cross-Origin Protection Exemption Miskeyed to a Deployment-Wide Path November 2, 2026Posted by Daniel Owens via Fulldisclosure on Nov 01Description Apache Struts2 Core version 7.4.0 and below's `FetchMetadataInterceptor`, `CoepInterceptor`, and `CoopInterceptor` each compare their `exemptedPaths` configuration -- a per-interceptor-reference, administrator-supplied set of paths intended to exempt specific actions from the corresponding cross-origin protection -- against `HttpServletRequest.getContextPath()`. `getContextPath()` is fixed for the entire deployed web...
- Apache Struts2 REST Plugin Fails to Properly Parse Chunked Requests November 2, 2026Posted by Daniel Owens via Fulldisclosure on Nov 01Description The Apache Struts2 REST Plugin's (version 7.4.0 and below) `ContentTypeInterceptor.intercept(ActionInvocation)` only deserialises a request body and enforces the `struts.rest.content.maxLength` bound when `HttpServletRequest#getContentLength()` returns a positive value. `getContentLength()` returns `-1` whenever the `Content-Length` header is absent, which normal and appropriate for any Hypertext Transfer Protocol (HTTP)...
- Apache Struts2 REST Plugin Untrimmed `Accept` Header Tokens Break Content Negation Fallback November 2, 2026Posted by Daniel Owens via Fulldisclosure on Nov 01Description The Apache Struts2 REST Plugin's `DefaultContentTypeHandlerManager.getHandlerForResponse(HttpServletRequest, HttpServletResponse)` splits the `Accept` header on commas and passes each resulting token directly to `findHandler(String)` without trimming leading or trailing whitespace. `findHandler(String)` only retries a trimmed lookup when a token contains a semicolon (`;`), so a token that merely carries […]
- Apache Struts2 JSON Plugin Insecure Deserialisation -- Object Deserialisation Element-Count Limit Bypass November 2, 2026Posted by Daniel Owens via Fulldisclosure on Nov 01As of the current versions of the Apache Struts2 JSON Plugin (e.g., version 7.4.0 and the 7.5.0 snapshot dated 28 October 2026), attackers can bypass the element-count limit purported to protect Object deserialisation added to said code as part of the WW-5618 and S2-072 "hardening controls". Please […]
- [0day-rubbish] NETGEAR RAX120 V1.2.5.18 authenticated SOAP InstallApp OS command injection to root-configured web-stack execution (6.8 Medium; conditionally 7.2 High with management exposure) October 29, 2026Posted by disclosure via Fulldisclosure on Oct 280day Rubbish Research Team is publicly disclosing a vulnerability in NETGEAR RAX120 (Nighthawk AX12) firmware V1.2.5.18, the WiFi 6 consumer router from NETGEAR (United States), built on the Qualcomm IPQ8074 platform. The administrative web plane of this firmware generation is a lighttpd server fronting the vendor's DNI-framework CGI […]
- [0day-rubbish] Raritan PX3 PDU G4 firmware 4.3.14 command injection in the ping and traceroute diagnostics through an inverted hostname-validation return check (8.8) October 29, 2026Posted by disclosure via Fulldisclosure on Oct 280day Rubbish Research Team is publicly disclosing a vulnerability in the Raritan PX3 PDU G4, firmware version 4.3.14, the intelligent rack power distribution unit from Raritan, a Legrand company (United States). A low-privilege authenticated session converts one diagnostics request into operating-system command execution in the product's web-service context, […]
Customers
Twitter FEED
Recent activity
-
SecureOnlineDesktop
Estimated reading time: 6 minutes L'impatto crescente delle minacce informatiche, su sistemi operativi privati op… https://t.co/FimxTS4o9G
-
SecureOnlineDesktop
Estimated reading time: 6 minutes The growing impact of cyber threats, on private or corporate operating systems… https://t.co/y6G6RYA9n1
-
SecureOnlineDesktop
Tempo di lettura stimato: 6 minuti Today we are talking about the CTI update of our services. Data security is… https://t.co/YAZkn7iFqa
-
SecureOnlineDesktop
Estimated reading time: 6 minutes Il tema della sicurezza delle informazioni è di grande attualità in questo peri… https://t.co/tfve5Kzr09
-
SecureOnlineDesktop
Estimated reading time: 6 minutes The issue of information security is very topical in this historical period ch… https://t.co/TP8gvdRcrF
Newsletter
Products and Solutions
Partners
Cloud Models
News
- From Cyberfero to Cyberfero: rebranding of the leading cybersecurity company May 6, 2024
- NIS: what it is and how it protects cybersecurity April 22, 2024
- Advanced persistent threats (APTs): what they are and how to defend yourself April 17, 2024
- Penetration Testing and MFA: A Dual Strategy to Maximize Security April 15, 2024
- Penetration Testing: Where to Strike to Protect Your IT Network March 25, 2024
Google Reviews
Ottima azienda, servizi molto utili, staff qualificato e competente. Raccomandata!read more
Ottimo supportoread more
E'... un piacere poter collaborare con realtà di questo tiporead more
Un ottimo fornitore.
Io personalmente ho parlato con l' Ing. Venuti, valore aggiunto indubbiamente.read more
About
© 2024 Cyberfero s.r.l. All Rights Reserved. Sede Legale: via Statuto 3 - 42121 Reggio Emilia (RE) – PEC [email protected] Cod. fiscale e P.IVA 03058120357 – R.E.A. 356650 Informativa Privacy - Certificazioni ISO