News
Piergiorgio Venuti
From Secure Online Desktop to Cyberfero: rebranding of the leading cybersecurity company
Dear customers and partners, we are pleased to announce that our company is officially changing its name: from today Secure Online Desktop becomes Cyberfero! In this article we will illustrate in detail all the news and reassurances related to this rebranding, which marks the evolution of our company. What changes at a practical level At a practical level, the change…
Piergiorgio Venuti
Ransomware: a plague that brings companies and institutions to their knees. Should you pay the ransom? Here is the answer.
The devastating impact of ransomware on businesses Ransomware has become one of the most damaging cyber threats to businesses in recent years. Cyber criminals target company networks, encrypt important files, and demand a ransom to provide the decryption key. The dilemma of whether or not to pay the ransom is something every affected company has to face. According to the…
Piergiorgio Venuti
Secure Online Desktop achieves ISO 27001: the security certification for managed services
Secure Online Desktop recently achieved ISO 27001 certification for its information security management system (ISMS). Let’s explore what this important milestone means for customers who rely on the company to protect their data and critical IT systems. What is ISO 27001 certification? ISO 27001 is a certification issued by an accredited third party which attests to the compliance of a…
Piergiorgio Venuti
SOCaaS and Active Defense Deception Webinar – Guide to the next cybersecurity online event
The online webinar “SOCaaS and Active Defense Deception: a winning approach for managed security” organized by Secure Online Desktop will be held on October 20th at 10am. Let’s see why it is interesting to participate in the free event presenting these solutions for corporate cybersecurity. What is SOCaaS with Next Generation SIEM? SOCaaS (Security Operation Center as a Service) is…
Giacomo Lanzi
Quality certificate for the SOCaaS of SOD
The technology we use to deliver our SOCaaS has been awarded a quality certificate . Today we want to talk about this, explaining again what a SOC is and why a SOCaaS is an ideal solution for companies. Of course, we will also explain what it is about when we talk about the quality certificate and how this ensures excellent…
Giacomo Lanzi
Managed Detection and Response: a new preventive approach
The constant use of communications over the network in a corporate context makes it essential to take precautions for computer security. As we have seen on other occasions, the dangers can come from different fronts: phishing , ransomware , data breach , etc. The implementation of new strategies such as Managed Detection and Response allows to mitigate risks and identify…
Giacomo Lanzi
CLUSIT: our collaboration for better services
Cyber security is an important point for all companies that use the network as a communication tool. This is why we have decided to carry out a fundamental operation that allows us to offer a better service to our customers . We have partnered with CLUSIT to make our services even more professional. A fundamental-collaboration to improve and improve The…
Giacomo Lanzi
Secure Online Desktop 10 years later: our corporate anniversary
Ten years ago, on June 16, 2011, Secure Online Desktop was born. Many things have changed in ten years and we have always done our best to keep up with the times and offer cutting-edge solutions to our customers. We want to celebrate our company anniversary by retracing the key milestones of these years by sharing them with you. The…
Procedural Security Analysis – Thank you for contacting us!
Here is some useful information FAQ Knowledge-base Document Support
Giacomo Lanzi
SOAR: what it is and how it can be useful for companies
An increasing number of companies leverage SOAR to improve the effectiveness of their cybersecurity operations. In this article, we explain how harnessing the value of SOAR could be crucial to improving the security of your organization. What is SOAR? Coined by the research firm Gartner, Security Orchestration, Automation and Response (SOAR) is a term used to describe the convergence of…
Giacomo Lanzi
Application programming interface: our User API
In the IT development process, sooner or later we come across API services, which stands for Application Programming Interface. To date it is impossible to imagine IT development without. With the API it is possible to connect a service to an application and integrate it efficiently. Before introducing the specific APIs of the Cloud Server service, it is good to…
Giacomo Lanzi
Secure Online Desktop affiliate program
Joining the Secure Online Desktop affiliate program is an interesting opportunity to make the most of your business and generate extra long-lasting revenue. To put it simply, affiliate marketing is a performance-based business model that rewards partners for generating a certain action, usually a sale. This form of business can be an incredibly beneficial and low-risk way of offering quality…
Giacomo Lanzi
Server hosting for SOD website
Based on what the actual need is, choosing hosting for a website is essential. The resources needed to host a fast and secure portal must be the basis on which to decide which plan to choose. Choosing the right provider for the server hosting plan can be complicated, and it’s easy to get lost in the alternatives that the network…
Giacomo Lanzi
Online hosting for websites
Online hosting is the process of using space on a remote server to host a website. The content of the pages (HTML, CSS, images, etc.) must be loaded into the server space to be reached online. Website hosting service providers have servers, connectivity and associated services for hosting online pages. By offering a variety of plans for online hosting, they…
Alessandro Stesi
Free Cloud Conference for Corona Virus Emergency (COVID-19)
Cloud Conference free for two months for Corona Virus emergency (COVID-19). To cope with the Corona Virus emergency and to help companies with Smart Working tools, the Secure Online Desktop offers the Cloud Conference service free of charge for two months. Cloud Conference is our video conference service that does not require the use of software, no installation is necessary…
Giacomo Lanzi
What is cloud storage? What advantages does it offer?
Cloud storage is a method of storing data that is placed in a place accessible through the network. This place is referred to by the term Cloud. Once the data is transferred to the remote location, it becomes the responsibility of the Cloud Storage Service Provider. The main role of the provider is to ensure a functioning infrastructure and guarantee…
Giacomo Lanzi
ownCloud – simple and secure cloud storage
Through the ownCloud cloud storage service you can collaborate with your colleagues on securely stored content, both locally and remotely. The platform is the # 1 open source collaboration solution and boasts over 50 million users. What is a cloud storage? A cloud storage service, such as ownCloud, allows you to store your files on a remote server, so you…
Black Friday and Cyber Monday 2019
Black Friday 2019 – Black Friday and Cyber Monday 2019 Like every year, in celebration of Black Friday and Cyber Monday, Secure Online Desktop is pleased to offer its amazing discounts on all products Cloud. Get your Cloud service at half the price for a year! With long billing cycles like that will be semi-annual or annual exploit this incredible offer…
Black Friday and Cyber Monday 2017
Black Friday and Cyber Monday 2017 Like every year, in celebration of Black Friday and Cyber Monday, Secure Online Desktop is pleased to offer its amazing discounts on all products Cloud. Get your Cloud service at half the price for a year! With long billing cycles like that will be semi-annual or annual exploit this incredible offer for longer You have…
Piergiorgio Venuti
ownCloud free for our clients
owncloud free for our clients! We are very proud to announce that our new ownCloud service is available with new features and with the demo section as well. You can test, send additional questions to support team and then you can buy directly on-line. We dedicated a special offer for our customers, in fact all our customers may request ownCloud Pro…
Updates IaaS Infrastructure – version 5.0
New IaaS Architecture was released February 3th! The following section list all the features, improvements, and fixed included in IaaS Service 5.0 release: Type Summary Improvement Now Redis is used to lock LVM operations. Improvement RHEL/CentOS 5.x Ruby packages compiled with OpenSSL 1.0.1e. Improvement Erlang upgraded to 18.3 version. Improvement Improved reliability and cloud engine. Fix Fixed the issue when after…
Piergiorgio Venuti
ICT consulting & body rental
Develop your ICT projects immediately without acquiring new resources, outsources your IT expertise with ICT consulting services and body rental! Read more
CloudCRM sul Wiki
Cloud CRM wiki is now online, Cloud CRM for Call Center, this is the link: http://wiki.cloudcomputing-crm.com/index.php/CloudCRM Supervisors and administrators of CRM can access to the wiki by click on “?” icon on top right corner of admin panel.
Alessandro Stesi
Newsletter
It is now availability our newsletter with news and events regarding our services. Register for free at the following address: http://www.cyberfero.com/user/modify.html or see archive at http://www.cyberfero.com/acymailing.html
Share
RSS
More Articles…
- From Secure Online Desktop to Cyberfero: rebranding of the leading cybersecurity company
- NIS: what it is and how it protects cybersecurity
- Advanced persistent threats (APTs): what they are and how to defend yourself
- Penetration Testing and MFA: A Dual Strategy to Maximize Security
- Penetration Testing: Where to Strike to Protect Your IT Network
- Ransomware: a plague that brings companies and institutions to their knees. Should you pay the ransom? Here is the answer.
- Why IT audit and log management are important for Cybersecurity
- Red Team, Blue Team and Purple Team: what are the differences?
Categories …
- Backup as a Service (18)
- Acronis Cloud Backup (11)
- Veeam Cloud Connect (4)
- Cloud Conference (3)
- Cloud CRM (1)
- Cloud Server/VPS (22)
- Conferenza Cloud (4)
- Cyberfero (15)
- ICT Monitoring (5)
- Log Management (2)
- News (25)
- ownCloud (4)
- Privacy (7)
- Security (203)
- Cyber Threat Intelligence (CTI) (8)
- Deception (4)
- Ethical Phishing (11)
- Netwrix Auditor (2)
- Penetration Test (11)
- Posture Guard (3)
- SOCaaS (65)
- Vulnerabilities (84)
- Web Hosting (15)
Tags
Unknown Feed
Full Disclosure
- SEC Consult SA-20250604-0 :: Local Privilege Escalation and Default Credentials in INDAMED - MEDICAL OFFICE (Medical practice management) Demo version June 10, 2025Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Jun 09SEC Consult Vulnerability Lab Security Advisory < 20250604-0 > ======================================================================= title: Local Privilege Escalation and Default Credentials product: INDAMED - MEDICAL OFFICE (Medical practice management) Demo version vulnerable version: Revision 18544 (II/2024) fixed version: Q2/2025 (Privilege Escalation, Default Password)...
- Full Disclosure: CVE-2025-31200 & CVE-2025-31201 – 0-Click iMessage Chain → Secure Enclave Key Theft, Wormable RCE, Crypto Theft June 10, 2025Posted by josephgoyd via Fulldisclosure on Jun 09Hello Full Disclosure, This is a strategic public disclosure of a zero-click iMessage exploit chain that was discovered live on iOS 18.2 and remained unpatched through iOS 18.4. It enabled Secure Enclave key theft, wormable remote code execution, and undetectable crypto wallet exfiltration. Despite responsible disclosure, the research […]
- Defense in depth -- the Microsoft way (part 89): user group policies don't deserve tamper protection June 3, 2025Posted by Stefan Kanthak on Jun 03Hi @ll, user group policies are stored in DACL-protected registry keys [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies] respectively [HKEY_CURRENT_USER\Software\Policies] and below, where only the SYSTEM account and members of the "Administrators" user group are granted write access. At logon the user's registry hive "%USERPROFILE%\ntuser.dat" is loaded with exclusive (read, write and...
- CVE-2025-45542: Time-Based Blind SQL Injection in CloudClassroom PHP Project v1.0 June 3, 2025Posted by Sanjay Singh on Jun 03Hello Full Disclosure list, I am sharing details of a newly assigned CVE affecting an open-source educational software project: ------------------------------------------------------------------------ CVE-2025-45542: Time-Based Blind SQL Injection in CloudClassroom PHP Project v1.0 ------------------------------------------------------------------------ Product: CloudClassroom PHP Project Vendor:...
- ERPNext v15.53.1 Stored XSS in bio Field Allows Arbitrary Script Execution in Profile Page June 3, 2025Posted by Ron E on Jun 03An authenticated attacker can inject JavaScript into the bio field of their user profile. When the profile is viewed by another user, the injected script executes. *Proof of Concept:* POST /api/method/frappe.desk.page.user_profile.user_profile.update_profile_info HTTP/2 Host: --host-- profile_info={"bio":"\">"}
- ERPNext v15.53.1 Stored XSS in user_image Field Allows Script Execution via Injected Image Path June 3, 2025Posted by Ron E on Jun 03An authenticated user can inject malicious JavaScript into the user_image field of the profile page using an XSS payload within the file path or HTML context. This field is rendered without sufficient sanitization, allowing stored script execution in the context of other authenticated users. *Proof of Concept:*POST /api/method/frappe.desk.page.user_profile.user_profile.update_profile_info HTTP/2 […]
- Local information disclosure in apport and systemd-coredump June 3, 2025Posted by Qualys Security Advisory via Fulldisclosure on Jun 03Qualys Security Advisory Local information disclosure in apport and systemd-coredump (CVE-2025-5054 and CVE-2025-4598) ======================================================================== Contents ======================================================================== Summary Mitigation Local information disclosure in apport (CVE-2025-5054) - Background - Analysis - Proof of concept Local information disclosure in systemd-coredump...
- Stored XSS via File Upload - adaptcmsv3.0.3 June 3, 2025Posted by Andrey Stoykov on Jun 03# Exploit Title: Stored XSS via File Upload - adaptcmsv3.0.3 # Date: 06/2025 # Exploit Author: Andrey Stoykov # Version: 3.0.3 # Tested on: Debian 12 # Blog: https://msecureltd.blogspot.com/ Stored XSS via File Upload #1: Steps to Reproduce: 1. Login with low privilege user and visit "Profile" > "Edit […]
- IDOR "Change Password" Functionality - adaptcmsv3.0.3 June 3, 2025Posted by Andrey Stoykov on Jun 03# Exploit Title: IDOR "Change Password" Functionality - adaptcmsv3.0.3 # Date: 06/2025 # Exploit Author: Andrey Stoykov # Version: 3.0.3 # Tested on: Debian 12 # Blog: https://msecureltd.blogspot.com/ IDOR "Change Password" Functionality #1: Steps to Reproduce: 1. Login as user with low privilege and visit profile page 2. Select […]
- Stored XSS "Send Message" Functionality - adaptcmsv3.0.3 June 3, 2025Posted by Andrey Stoykov on Jun 03# Exploit Title: Stored XSS "Send Message" Functionality - adaptcmsv3.0.3 # Date: 06/2025 # Exploit Author: Andrey Stoykov # Version: 3.0.3 # Tested on: Debian 12 # Blog: https://msecureltd.blogspot.com/ Stored XSS "Send Message" Functionality #1: Steps to Reproduce: 1. Login as normal user and visit "Profile" > "Message" > […]
Customers
Twitter FEED
Recent activity
-
SecureOnlineDesktop
Estimated reading time: 6 minutes L'impatto crescente delle minacce informatiche, su sistemi operativi privati op… https://t.co/FimxTS4o9G
-
SecureOnlineDesktop
Estimated reading time: 6 minutes The growing impact of cyber threats, on private or corporate operating systems… https://t.co/y6G6RYA9n1
-
SecureOnlineDesktop
Tempo di lettura stimato: 6 minuti Today we are talking about the CTI update of our services. Data security is… https://t.co/YAZkn7iFqa
-
SecureOnlineDesktop
Estimated reading time: 6 minutes Il tema della sicurezza delle informazioni è di grande attualità in questo peri… https://t.co/tfve5Kzr09
-
SecureOnlineDesktop
Estimated reading time: 6 minutes The issue of information security is very topical in this historical period ch… https://t.co/TP8gvdRcrF
Newsletter
{subscription_form_1}Products and Solutions
Partners
Cloud Models
News
- From Secure Online Desktop to Cyberfero: rebranding of the leading cybersecurity company May 6, 2024
- NIS: what it is and how it protects cybersecurity April 22, 2024
- Advanced persistent threats (APTs): what they are and how to defend yourself April 17, 2024
- Penetration Testing and MFA: A Dual Strategy to Maximize Security April 15, 2024
- Penetration Testing: Where to Strike to Protect Your IT Network March 25, 2024
Google Reviews
Ottima azienda, servizi molto utili, staff qualificato e competente. Raccomandata!read more
Ottimo supportoread more
E' un piacere poter collaborare con realtà di questo tiporead more
Un ottimo fornitore.
Io personalmente ho parlato con l' Ing. Venuti, valore aggiunto indubbiamente.read more
About
© 2024 Cyberfero s.r.l. All Rights Reserved. Sede Legale: via Statuto 3 - 42121 Reggio Emilia (RE) – PEC [email protected] Cod. fiscale e P.IVA 03058120357 – R.E.A. 356650 Informativa Privacy - Certificazioni ISO