CLUSIT e il team Piergiorgio Venuti

CLUSIT: our collaboration for better services

Estimated reading time: 5 minutes

Cyber security is an important point for all companies that use the network as a communication tool. This is why we have decided to carry out a fundamental operation that allows us to offer a better service to our customers . We have partnered with CLUSIT to make our services even more professional.

CLUSIT logo

A fundamental-collaboration to improve and improve

The network, as we know, is a world where evolutions are constant and take little time to become operational and standardize . This is due to the constantly and exponentially evolving technology.

It is easy to deduce that there is, therefore, always an opportunity to make a network, an infrastructure, ever more performing and efficient. However, the same reasoning must be made for the related issues. When we talk about new technology standards, new implementations and strategies, they are also applied to unsafe environments. Here, then, that a novelty that helps the company in managing data or connections, can also become a weak point, the “open side” offered to hackers.

To compensate for this benefit / risk combination, new implementations must be accompanied by a constant search for solutions to potential problems that may arise . In fact, it would be useless to only take security measures against attacks designed some time ago. In fact, they would be easily overcome by attacks based on advanced and modern technologies.

It is therefore necessary to guarantee greater protection, adequately designed, the result of well-considered research and analysis. To succeed in this enterprise we have decided to associate with CLUSIT and collaborate with this body in the field of information technology and online security . We can thus prevent the unpleasant situations that can occur due to lack of security updates.

What is CLUSIT?

CLUSIT is an association that has made IT security its goal for over twenty years.

Awareness, training, continuous professional updating and the exchange of information are the most effective tools for dealing with IT security problems.

from the Clusit

CLUSIT was born on the basis of the experiences of other European associations for information security and has several objectives:

  • Spreading & nbsp; the culture of IT security among Companies, Public Administration and citizens.
  • Participate & nbsp; in the processing of laws, rules and regulations involving IT security, both at EU and Italian level.
  • Contribute & nbsp; to the definition of training courses for the preparation and certification of the various professional figures operating in the ICT security sector.
  • Promote & nbsp; the use of methodologies and technologies that allow to improve the security level of the various realities.

Among the activities of CLUSIT that are particularly useful for us and for our customers, there are training ones. The association organizes training events, promotes the drafting of updating and dissemination documents. In general CLUSIT is an important point of reference for always being updated and trained in the field of IT security.

A collaboration synonymous with constant improvement

There are various reasons why we have decided to join CLUSIT. First of all, to have the opportunity to collaborate with various colleagues operating in the world of information security. Sharing knowledge allows all those working in the field to improve their services.

This creates a relationship in which we receive insights and information that is always up to date, but we can also report problems, new exploits and security risks. The result, for our customers, is a service that is always at the top, geared towards training and constant updating. Our engineers are invited to keep up to date and also achieve certifications to guarantee the quality of the service.

Thanks to the webinars and documentation created by CLUSIT, we can learn more information that allows us to improve our services.

Your company data will always be protected thanks to Cyberfero , which can boast constant training thanks to CLUSIT. This collaboration allows us to distinguish ourselves as a company that offers a safe and detailed service from every point of view like few others.

To guarantee this, those who visit our pages will be able to see the CLUSIT logo, synonymous with professionalism and constant updating. The world of IT security represents a world in constant evolution, we have decided to always be up to date to offer the best in our services.

CLUSIT and the team

Security and the services we offer

Thanks to this collaboration with CLUSIT, we are committed to offering the best possible services. Not being up to date would be synonymous with lack of professionalism for us. We are sure you will agree too.

With this partnership, we aim to guarantee a better service from every point of view.
This entails a series of indirect advantages: accurate advice , risk mitigation increasingly specific, use of cutting-edge tools for the safety of our customers.

You can therefore be sure that for you there is the advantage of relying on a team that works with precision and professionalism and that prevents any potential negative situation in the shortest possible time.

If your company is interested in understanding how we can also offer you superior service, do not hesitate to contact us, we will be happy to answer any questions.

Useful links:

Share


RSS

More Articles…

Categories …

Tags

RSS feed: Unknown Feed Unknown Feed

RSS feed: Full Disclosure Full Disclosure

  • Apache Struts2 Core Arbitrary Code Execution via OGNL Sandbox Escape November 2, 2026
    Posted by Daniel Owens via Fulldisclosure on Nov 01Description Apache Struts2 Core version 7.4.0 and below attempt to prevent arbitrary code execution via Object-Graph Navigation Language (OGNL) through several different mechanisms but only in a cursory fashion -- the libraries only guard against immediate calls evaluated by the OGNL engine via `SecurityMemberAccess`, but an allowed […]
  • Apache Struts2 Core TokenHelper Token Cryptographic Timing Side-Channel November 2, 2026
    Posted by Daniel Owens via Fulldisclosure on Nov 01Description The Apache Struts2 Core 7.4.0 and below performs session token comparisons cryptographically insecure early-exit comparison functions (e.g., `!=`, `memcmp`, byte-by-byte loops with `break`) that return as soon as the first mismatched byte is encountered. The execution time of the comparison is therefore proportional to the number […]
  • Apache Struts2 Spring Plugin Uses a Previously Closed Resource November 2, 2026
    Posted by Daniel Owens via Fulldisclosure on Nov 01Description The Apache Struts2 Spring Plugin opens a Spring `ApplicationContex` via a try-with-resources block and, outside of said block, then continues to use the closed resource, resulting in an uncaught `IllegalStateException`. This particular issue prevents proper functionality and indicates poor code quality and code review standards and […]
  • Apache Struts2 Core Integer Overflow November 2, 2026
    Posted by Daniel Owens via Fulldisclosure on Nov 01Description Apache Struts2 Core version 7.4.0 and below fails to properly prevent integer overflows, causing wrap-arounds and other issues on a downstream forced casting into types smaller than `BigInteger`. Importantly, this finding underscores why all applications using Struts and other such platforms should perform their own input […]
  • Apache Struts2 Core Cross-Origin Protection Exemption Miskeyed to a Deployment-Wide Path November 2, 2026
    Posted by Daniel Owens via Fulldisclosure on Nov 01Description Apache Struts2 Core version 7.4.0 and below's `FetchMetadataInterceptor`, `CoepInterceptor`, and `CoopInterceptor` each compare their `exemptedPaths` configuration -- a per-interceptor-reference, administrator-supplied set of paths intended to exempt specific actions from the corresponding cross-origin protection -- against `HttpServletRequest.getContextPath()`. `getContextPath()` is fixed for the entire deployed web...
  • Apache Struts2 REST Plugin Fails to Properly Parse Chunked Requests November 2, 2026
    Posted by Daniel Owens via Fulldisclosure on Nov 01Description The Apache Struts2 REST Plugin's (version 7.4.0 and below) `ContentTypeInterceptor.intercept(ActionInvocation)` only deserialises a request body and enforces the `struts.rest.content.maxLength` bound when `HttpServletRequest#getContentLength()` returns a positive value. `getContentLength()` returns `-1` whenever the `Content-Length` header is absent, which normal and appropriate for any Hypertext Transfer Protocol (HTTP)...
  • Apache Struts2 REST Plugin Untrimmed `Accept` Header Tokens Break Content Negation Fallback November 2, 2026
    Posted by Daniel Owens via Fulldisclosure on Nov 01Description The Apache Struts2 REST Plugin's `DefaultContentTypeHandlerManager.getHandlerForResponse(HttpServletRequest, HttpServletResponse)` splits the `Accept` header on commas and passes each resulting token directly to `findHandler(String)` without trimming leading or trailing whitespace. `findHandler(String)` only retries a trimmed lookup when a token contains a semicolon (`;`), so a token that merely carries […]
  • Apache Struts2 JSON Plugin Insecure Deserialisation -- Object Deserialisation Element-Count Limit Bypass November 2, 2026
    Posted by Daniel Owens via Fulldisclosure on Nov 01As of the current versions of the Apache Struts2 JSON Plugin (e.g., version 7.4.0 and the 7.5.0 snapshot dated 28 October 2026), attackers can bypass the element-count limit purported to protect Object deserialisation added to said code as part of the WW-5618 and S2-072 "hardening controls". Please […]
  • [0day-rubbish] NETGEAR RAX120 V1.2.5.18 authenticated SOAP InstallApp OS command injection to root-configured web-stack execution (6.8 Medium; conditionally 7.2 High with management exposure) October 29, 2026
    Posted by disclosure via Fulldisclosure on Oct 280day Rubbish Research Team is publicly disclosing a vulnerability in NETGEAR RAX120 (Nighthawk AX12) firmware V1.2.5.18, the WiFi 6 consumer router from NETGEAR (United States), built on the Qualcomm IPQ8074 platform. The administrative web plane of this firmware generation is a lighttpd server fronting the vendor's DNI-framework CGI […]
  • [0day-rubbish] Raritan PX3 PDU G4 firmware 4.3.14 command injection in the ping and traceroute diagnostics through an inverted hostname-validation return check (8.8) October 29, 2026
    Posted by disclosure via Fulldisclosure on Oct 280day Rubbish Research Team is publicly disclosing a vulnerability in the Raritan PX3 PDU G4, firmware version 4.3.14, the intelligent rack power distribution unit from Raritan, a Legrand company (United States). A low-privilege authenticated session converts one diagnostics request into operating-system command execution in the product's web-service context, […]

Customers