Condividi

RSS

Piu’ articoli…

• Da Secure Online Desktop a Cyberfero: il rebranding dell’azienda leader nella cybersecurity
• NIS2 – Come il nuovo regolamento cyber potenzia la sicurezza dell’Europa
• Advanced persistent threat (APT): cosa sono e come difendersi
• Penetration Testing e MFA: Una Strategia Duplice per Massimizzare la Sicurezza
• SOAR e l’automazione della sicurezza informatica
• Penetration Testing: Dove Colpire per Proteggere la Tua Rete Informatica
• Ransomware: una piaga che mette in ginocchio aziende e istituzioni. Pagare o non pagare? Ecco la risposta.
• Perché l’audit IT e il log management sono importanti per la Cybersecurity

Categorie …

• Backup as a Service (25)
  • Acronis Cloud Backup (18)
  • Veeam Cloud Connect (3)
• Cloud CRM (1)
• Cloud Server/VPS (23)
• Conferenza Cloud (4)
• Cyberfero (15)
• Log Management (2)
• Monitoraggio ICT (4)
• Novita' (21)
• ownCloud (7)
• Privacy (8)
• Security (215)
  • Cyber Threat Intelligence (CTI) (9)
  • Deception (4)
  • Ethical Phishing (10)
  • Netwrix Auditor (2)
  • Penetration Test (18)
  • Posture Guard (4)
  • SOCaaS (66)
    • EDR (6)
    • SIEM (12)
    • SOAR (5)
    • UEBA (9)
  • Vulnerabilita' (83)
• Web Hosting (16)

Tags

CSIRT

• Phishing: campagna a tema “Sondaggio Generali” (AL01/241213/CSIRT-ITA) Dicembre 13, 2024
  Questo CSIRT ha recentemente rilevato il riacutizzarsi di una campagna di phishing a tema “sondaggio” – come già trattato da questo CSIRT nell’ambito dell’AL01/240613/CSIRT-ITA – che ripropone loghi e riferimenti inerenti la nota compagnia assicurativa Generali e volta a carpire le informazioni personali delle potenziali vittime, compresi gli estremi delle carte di credito.
• Rilevato sfruttamento di prodotti Cleo (AL04/241210/CSIRT-ITA) - Aggiornamento Dicembre 13, 2024
  Rilevato lo sfruttamento attivo in rete di una vulnerabilità di tipo “Remote Code Execution” presente nei prodotti Harmony, VLTrader e LexiCom della suite Cleo, soluzioni software utilizzate principalmente per la gestione dei trasferimenti di file.
• Aggiornamenti di sicurezza Apple (AL01/241212/CSIRT-ITA) Dicembre 12, 2024
  Apple ha rilasciato aggiornamenti di sicurezza per sanare molteplici vulnerabilità presenti nei propri prodotti.
• Aggiornamenti Mensili Microsoft (AL01/241211/CSIRT-ITA) Dicembre 11, 2024
  Microsoft ha rilasciato gli aggiornamenti di sicurezza mensili che risolvono un totale di 71 nuove vulnerabilità, di cui una di tipo 0-day.
• Sanate vulnerabilità su GitLab CE/EE (AL06/241211/CSIRT-ITA) Dicembre 11, 2024
  Rilasciati aggiornamenti di sicurezza che risolvono 12 vulnerabilità, di cui due con gravità “alta”, in GitLab Community Edition (CE) ed Enterprise Edition (EE).
• Adobe rilascia aggiornamenti per sanare molteplici vulnerabilità (AL04/241211/CSIRT-ITA) Dicembre 11, 2024
  Adobe ha rilasciato aggiornamenti di sicurezza per risolvere molteplici vulnerabilità, di cui 2 con gravità “critica” e 39 con gravità “alta”, in molteplici prodotti.
• Ivanti December Security Update (AL05/241211/CSIRT-ITA) Dicembre 11, 2024
  Ivanti rilascia aggiornamenti di sicurezza che risolvono 11 vulnerabilità, di cui 5 con gravità “critica” e 6 con gravità “alta”, nei prodotti CSA (Cloud Services Application), DSM (Desktop and Server Management), ICS (Ivanti Connect Secure), IPS (Ivanti Policy Secure), Ivanti Sentry, EPM (Endpoint Manager), iSec (Ivanti Security Controls), Patch for Configuration Manager, Neurons for Patch […]
• Rilevate vulnerabilità in prodotti Splunk (AL03/241211/CSIRT-ITA) Dicembre 11, 2024
  Splunk ha rilasciato aggiornamenti di sicurezza per correggere alcune vulnerabilità, di cui una con gravità “alta” nel prodotto Splunk Secure Gateway.
• Risolte vulnerabilità in Google Chrome (AL02/241211/CSIRT-ITA) Dicembre 11, 2024
  Google ha rilasciato un aggiornamento per il browser Chrome al fine di correggere 3 vulnerabilità di sicurezza, di cui 2 con gravità “alta”.
• Aggiornamenti per prodotti Siemens (AL03/241210/CSIRT-ITA) Dicembre 10, 2024
  Siemens ha rilasciato aggiornamenti di sicurezza per correggere molteplici vulnerabilità nei propri prodotti, di cui 34 con gravità “alta”.

darkreading

• Zerto Introduces Cloud Vault Solution for Enhanced Cyber Resilience Through MSPs Dicembre 13, 2024
• Versa Introduces Integrated Endpoint Data Loss Prevention in SASE Solution Dicembre 13, 2024
• Cleo MFT Zero-Day Exploits Are About Escalate, Analysts Warn Dicembre 13, 2024
  Defenders running the Cleo managed file transfer are urged to be on the lookout for the Cleopatra backdoor and other indicators of an ongoing ransomware campaign, as patching details remain foggy, and no CVE has been issued.
• Generative AI Security Tools Go Open Source Dicembre 13, 2024
  Businesses deploying large language models and other GenAI systems have a growing collection of open source tools for testing AI security.
• With 'TPUXtract,' Attackers Can Steal Orgs' AI Models Dicembre 13, 2024
  A new side-channel attack method is a computationally practical way to infer the structure of a convolutional neural network — meaning that cyberattackers or rival companies can plagiarize AI models and take their data for themselves.
• Test Your Cyber Skills With the SANS Holiday Hack Challenge Dicembre 13, 2024
  Open to players of all skill levels, the "Snow-mageddon" cybersecurity competition takes place in the world of Santa, elves, and Christmas mayhem.
• OData Injection Risk in Low-Code/No-Code Environments Dicembre 13, 2024
  As the adoption of LCNC grows, so will the complexity of the threats organizations face.
• 'Dubai Police' Lures Anchor Wave of UAE Mobile Attacks Dicembre 13, 2024
  A sophisticated social engineering cybercrime campaign bent on financial gain was observed being run from Tencent servers in Singapore.
• Lloyd's of London Launches New Cyber Insurance Consortium Dicembre 12, 2024
  Under the program, HITRUST-certified organizations gain access to exclusive coverage and rates.
• 336K Prometheus Instances Exposed to DoS, 'Repojacking' Dicembre 12, 2024
  Open source Prometheus servers and exporters are leaking plaintext passwords and tokens, along with API addresses of internal locations.

Full Disclosure

• APPLE-SA-12-11-2024-9 Safari 18.2 Dicembre 12, 2024
  Posted by Apple Product Security via Fulldisclosure on Dec 12APPLE-SA-12-11-2024-9 Safari 18.2 Safari 18.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/121846. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Safari Available for: macOS Ventura and macOS Sonoma Impact: On a […]
• APPLE-SA-12-11-2024-8 visionOS 2.2 Dicembre 12, 2024
  Posted by Apple Product Security via Fulldisclosure on Dec 12APPLE-SA-12-11-2024-8 visionOS 2.2 visionOS 2.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/121845. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Crash Reporter Available for: Apple Vision Pro Impact: An app may […]
• APPLE-SA-12-11-2024-7 tvOS 18.2 Dicembre 12, 2024
  Posted by Apple Product Security via Fulldisclosure on Dec 12APPLE-SA-12-11-2024-7 tvOS 18.2 tvOS 18.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/121844. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. AppleMobileFileIntegrity Available for: Apple TV HD and Apple TV 4K (all […]
• APPLE-SA-12-11-2024-6 watchOS 11.2 Dicembre 12, 2024
  Posted by Apple Product Security via Fulldisclosure on Dec 12APPLE-SA-12-11-2024-6 watchOS 11.2 watchOS 11.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/121843. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. AppleMobileFileIntegrity Available for: Apple Watch Series 6 and later Impact: A […]
• APPLE-SA-12-11-2024-5 macOS Ventura 13.7.2 Dicembre 12, 2024
  Posted by Apple Product Security via Fulldisclosure on Dec 12APPLE-SA-12-11-2024-5 macOS Ventura 13.7.2 macOS Ventura 13.7.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/121842. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Apple Software Restore Available for: macOS Ventura Impact: An […]
• APPLE-SA-12-11-2024-4 macOS Sonoma 14.7.2 Dicembre 12, 2024
  Posted by Apple Product Security via Fulldisclosure on Dec 12APPLE-SA-12-11-2024-4 macOS Sonoma 14.7.2 macOS Sonoma 14.7.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/121840. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Apple Software Restore Available for: macOS Sonoma Impact: An […]
• APPLE-SA-12-11-2024-3 macOS Sequoia 15.2 Dicembre 12, 2024
  Posted by Apple Product Security via Fulldisclosure on Dec 12APPLE-SA-12-11-2024-3 macOS Sequoia 15.2 macOS Sequoia 15.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/121839. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Apple Software Restore Available for: macOS Sequoia Impact: An […]
• APPLE-SA-12-11-2024-2 iPadOS 17.7.3 Dicembre 12, 2024
  Posted by Apple Product Security via Fulldisclosure on Dec 12APPLE-SA-12-11-2024-2 iPadOS 17.7.3 iPadOS 17.7.3 addresses the following issues. Information about the security content is also available at https://support.apple.com/121838. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. FontParser Available for: iPad Pro 12.9-inch 2nd generation, iPad Pro 10.5-inch, […]
• APPLE-SA-12-11-2024-1 iOS 18.2 and iPadOS 18.2 Dicembre 12, 2024
  Posted by Apple Product Security via Fulldisclosure on Dec 12APPLE-SA-12-11-2024-1 iOS 18.2 and iPadOS 18.2 iOS 18.2 and iPadOS 18.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/121837. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. AppleMobileFileIntegrity Available for: iPhone XS […]
• SEC Consult SA-20241211-0 :: Reflected Cross-Site Scripting in Numerix License Server Administration System Login Dicembre 12, 2024
  Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Dec 12SEC Consult Vulnerability Lab Security Advisory < 20241211-0 > ======================================================================= title: Reflected Cross-Site Scripting product: Numerix License Server Administration System Login vulnerable version: 1.1_596 fixed version: - CVE number: CVE-2024-50585 impact: medium homepage: https://connect.numerix.com/nlslogin.jsp...