Russian military hackers pose as recruiters to target Ukrainian IT workers
Ukraine’s computer emergency response team, CERT-UA, said Saturday that the campaign has been running since at least May and is linked to Sandworm, the notorious hacking unit associated with Russia’s GRU military intelligence agency.
🔗️ [Therecord] https://link.is.it/6cchrZ
Ukraine’s computer emergency response team, CERT-UA, said Saturday that the campaign has been running since at least May and is linked to Sandworm, the notorious hacking unit associated with Russia’s GRU military intelligence agency.
🔗️ [Therecord] https://link.is.it/6cchrZ
AI, ora controlli preventivi sui modelli: il blocco di Astra, le regole di Trump
Gli Usa procedono con cautela contro il rischio incontrollato dell'AI. OpenAI ha sospeso parte delle attività interne sul nuovo modello Astra, per pericoli cybersecurity. Il Governo Trump sperimenta un patto volontario per la sicurezza AI. Si cerca un difficile equilibrio tra sicurezza e innovazione, con conseguenze globali
🔗️ [Cybersecurity360] https://link.is.it/W5nfzm
Gli Usa procedono con cautela contro il rischio incontrollato dell'AI. OpenAI ha sospeso parte delle attività interne sul nuovo modello Astra, per pericoli cybersecurity. Il Governo Trump sperimenta un patto volontario per la sicurezza AI. Si cerca un difficile equilibrio tra sicurezza e innovazione, con conseguenze globali
🔗️ [Cybersecurity360] https://link.is.it/W5nfzm
New StormEncryptor ransomware used by former Medusa affiliate
A financially motivated threat actor previously associated with the Medusa ransomware operation is now deploying a new ransomware strain called StormEncryptor.
🔗️ [Bleepingcomputer] https://link.is.it/Is8NmY
A financially motivated threat actor previously associated with the Medusa ransomware operation is now deploying a new ransomware strain called StormEncryptor.
🔗️ [Bleepingcomputer] https://link.is.it/Is8NmY
Data Center Physical Security: Mitigating FPV Drone Threats
We explore how shifting online sentiment and low-cost FPV technology are creating an unprecedented airborne threat vector.
🔗️ [Flashpoint] https://link.is.it/jDk15g
We explore how shifting online sentiment and low-cost FPV technology are creating an unprecedented airborne threat vector.
🔗️ [Flashpoint] https://link.is.it/jDk15g
FBI, South Korea warn of Gunra ransomware gang targeting critical infrastructure
The Gunra ransomware gang is breaching critical infrastructure organizations through vulnerabilities in popular brands of firewalls, the FBI and South Korea’s government warned.
🔗️ [Therecord] https://link.is.it/iGlhAe
The Gunra ransomware gang is breaching critical infrastructure organizations through vulnerabilities in popular brands of firewalls, the FBI and South Korea’s government warned.
🔗️ [Therecord] https://link.is.it/iGlhAe
OpenAI releases ChatGPT 5.6 Cyber, but it's only for approved users
OpenAI has developed a new model called "GPT 5.6 Cyber," designed for vulnerability research, penetration testing, incident response, and remediation.
🔗️ [Bleepingcomputer] https://link.is.it/3UBKxB
OpenAI has developed a new model called "GPT 5.6 Cyber," designed for vulnerability research, penetration testing, incident response, and remediation.
🔗️ [Bleepingcomputer] https://link.is.it/3UBKxB
BdThemes plugins supply-chain hack creates rogue WordPress admins
A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators' browsers to create rogue admin accounts.
🔗️ [Bleepingcomputer] https://link.is.it/OHaOoK
A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators' browsers to create rogue admin accounts.
🔗️ [Bleepingcomputer] https://link.is.it/OHaOoK
Hackers breached a small Polish energy plant via private APN last year
Hackers breached a heat-and-power plant facility in Poland, which supplies heat to about 50,000 residents, using a private APN (Access Point Name) to access an OT (Operational Technology) network.
🔗️ [Bleepingcomputer] https://link.is.it/gQ23us
Hackers breached a heat-and-power plant facility in Poland, which supplies heat to about 50,000 residents, using a private APN (Access Point Name) to access an OT (Operational Technology) network.
🔗️ [Bleepingcomputer] https://link.is.it/gQ23us
Sicurezza delle reti e Wi-Fi pubblici: la cifratura del traffico è diventata la prima linea di difesa per la privacy
La cifratura della rete Wi-Fi e la tutela della privacy sono fondamentali quando si naviga: ecco un servizio VPN a costi ridotti da attivare.
🔗️ [Cybersecurity360] https://link.is.it/xLkmNi
La cifratura della rete Wi-Fi e la tutela della privacy sono fondamentali quando si naviga: ecco un servizio VPN a costi ridotti da attivare.
🔗️ [Cybersecurity360] https://link.is.it/xLkmNi
New Zealand Targets Russian Cyber Actors With Fresh Sanctions
New Zealand has announced a new round of sanctions against Russia, targeting 33 individuals and entities accused of supporting Moscow’s
🔗️ [Thecyberexpress] https://link.is.it/KT0uj2
New Zealand has announced a new round of sanctions against Russia, targeting 33 individuals and entities accused of supporting Moscow’s
🔗️ [Thecyberexpress] https://link.is.it/KT0uj2
Input validation: perché la sicurezza applicativa comincia dai dati che lasciamo entrare
Ogni dato proveniente dall'esterno può diventare un vettore di attacco. Per questo l'input validation non dovrebbe essere un controllo aggiunto a valle, ma un requisito di progettazione: un approccio multilivello che riduce la superficie di attacco senza sacrificare l'usabilità
🔗️ [Cybersecurity360] https://link.is.it/TkSFnU
Ogni dato proveniente dall'esterno può diventare un vettore di attacco. Per questo l'input validation non dovrebbe essere un controllo aggiunto a valle, ma un requisito di progettazione: un approccio multilivello che riduce la superficie di attacco senza sacrificare l'usabilità
🔗️ [Cybersecurity360] https://link.is.it/TkSFnU
Gestione dei rischi NIS 2: la scelta del metodo determina la qualità del sistema
La scelta del metodo non è una decisione tecnica di secondo piano, ma stabilisce il modo in cui l’organizzazione comprenderà i propri rischi, selezionerà le misure e dimostrerà la coerenza del proprio sistema. Ecco perché la gestione dei rischi occupa il centro esatto della NIS 2
🔗️ [Cybersecurity360] https://link.is.it/Ax6sBs
La scelta del metodo non è una decisione tecnica di secondo piano, ma stabilisce il modo in cui l’organizzazione comprenderà i propri rischi, selezionerà le misure e dimostrerà la coerenza del proprio sistema. Ecco perché la gestione dei rischi occupa il centro esatto della NIS 2
🔗️ [Cybersecurity360] https://link.is.it/Ax6sBs
Supply Chain Security: How ANY.RUN Helps US and EU Enterprises Prevent Incidents
See actionable steps for CISOs on how to build stronger supply chain security and reduce risk of third-party attacks.
🔗️ [Any] https://link.is.it/ufEOGM
See actionable steps for CISOs on how to build stronger supply chain security and reduce risk of third-party attacks.
🔗️ [Any] https://link.is.it/ufEOGM
From Detection Gaps to Fraud & Scam Leadership
This article explains how banks can increase their Value Detection Rate (VDR) using ThreatFabric's Behavioural SDK
🔗️ [Threatfabric] https://link.is.it/H5lPfo
This article explains how banks can increase their Value Detection Rate (VDR) using ThreatFabric's Behavioural SDK
🔗️ [Threatfabric] https://link.is.it/H5lPfo
US and South Korea warn of Gunra ransomware targeting govt agencies
U.S. federal agencies and South Korea's National Policy Agency warned government and critical infrastructure organizations worldwide to secure their systems against Gunra ransomware attacks.
🔗️ [Bleepingcomputer] https://link.is.it/jmclD6
U.S. federal agencies and South Korea's National Policy Agency warned government and critical infrastructure organizations worldwide to secure their systems against Gunra ransomware attacks.
🔗️ [Bleepingcomputer] https://link.is.it/jmclD6
Network Security Policy Management (NSPM): colmare il gap tra normativa UE e adozione in azienda
Normative come NIS2 e DORA stanno innalzando gli standard in termini di resilienza, responsabilità e governance operativa, imponendo alle organizzazioni di dimostrare l'esistenza dei controlli di sicurezza e l'efficacia nel tempo. Ecco cos'è il Network Security Policy Management, l'anello mancante fra la normativa europea e l'implementazione reale
🔗️ [Cybersecurity360] https://link.is.it/nVZtcg
Normative come NIS2 e DORA stanno innalzando gli standard in termini di resilienza, responsabilità e governance operativa, imponendo alle organizzazioni di dimostrare l'esistenza dei controlli di sicurezza e l'efficacia nel tempo. Ecco cos'è il Network Security Policy Management, l'anello mancante fra la normativa europea e l'implementazione reale
🔗️ [Cybersecurity360] https://link.is.it/nVZtcg
Cisco warns of high-severity ClamAV flaws with public exploits
Cisco warned of two high-severity vulnerabilities affecting the Secure Endpoint Connector that allow threat actors to crash the ClamAV scanning process in denial-of-service (DoS) attacks.
🔗️ [Bleepingcomputer] https://link.is.it/nQJg1P
Cisco warned of two high-severity vulnerabilities affecting the Secure Endpoint Connector that allow threat actors to crash the ClamAV scanning process in denial-of-service (DoS) attacks.
🔗️ [Bleepingcomputer] https://link.is.it/nQJg1P
Gunra Ransomware Builds a New Attack Network Through RaaS
Gunra ransomware has expanded its operations through a structured ransomware-as-a-service (RaaS) affiliate program, prompting the FBI, CISA and other agencies
🔗️ [Thecyberexpress] https://link.is.it/GqZRhM
Gunra ransomware has expanded its operations through a structured ransomware-as-a-service (RaaS) affiliate program, prompting the FBI, CISA and other agencies
🔗️ [Thecyberexpress] https://link.is.it/GqZRhM
Kids’ online safety bill faces dim prospects of passage this session despite progress
Proponents of the Kids Online Safety Act are cheering recent progress but acknowledge a long road ahead for legislation that, despite mounting political pressure, may be difficult to pass this session.
🔗️ [Therecord] https://link.is.it/ESrEzh
Proponents of the Kids Online Safety Act are cheering recent progress but acknowledge a long road ahead for legislation that, despite mounting political pressure, may be difficult to pass this session.
🔗️ [Therecord] https://link.is.it/ESrEzh
CISA: Microsoft SharePoint flaw now exploited in ransomware attacks
CISA confirmed today that ransomware gangs have begun abusing a high-severity Microsoft SharePoint remote code execution vulnerability, which has been flagged as actively exploited since early July.
🔗️ [Bleepingcomputer] https://link.is.it/Lw0pHw
CISA confirmed today that ransomware gangs have begun abusing a high-severity Microsoft SharePoint remote code execution vulnerability, which has been flagged as actively exploited since early July.
🔗️ [Bleepingcomputer] https://link.is.it/Lw0pHw
CyberSec di base: pubblicazione dei servizi
Intro Praticamente tutte le reti, salvo alcune eccezioni, devono esporre qualche servizio verso internet. Se riprendiamo il nostro schema “brutto” possiamo riportare visivamente un esempio molto se…
🔗️ [Roccosicilia] https://link.is.it/SMDDt8
Intro Praticamente tutte le reti, salvo alcune eccezioni, devono esporre qualche servizio verso internet. Se riprendiamo il nostro schema “brutto” possiamo riportare visivamente un esempio molto se…
🔗️ [Roccosicilia] https://link.is.it/SMDDt8