Condividi

RSS

Piu’ articoli…

• Ingegneria sociale: come gli hacker truffano le loro vittime
• Cos’è il phishing? Capire e individuare attacchi di ingegneria sociale
• Evitare il Ransomware: ecco perché è meglio non correre alcun rischio
• Ransomware a doppia estorsione: Cosa sono e come difendersi
• Zero-Day attack: cosa sono e come difendersi con SOCaaS
• Sistema di monitoraggio, una panoramica
• Data Exfiltration: difesa dal furto di dati
• Installare un certificato Let’s Encrypt su macchina Debian based

Categorie …

• Backup as a Service (3)
  • Acronis Cloud Backup (17)
  • Veeam Cloud Connect (3)
• Cloud CRM (1)
• Cloud Server/VPS (22)
• Conferenza Cloud (4)
• Log Management (2)
• Monitoraggio ICT (4)
• Novita' (11)
• ownCloud (7)
• Privacy (7)
• Secure Online Desktop (14)
• Security (5)
  • Ethical Phishing (1)
  • SOCaaS (12)
    • SIEM (3)
    • UEBA (3)
  • Vulnerabilita' (82)
• Web Hosting (13)

Tags

CSIRT

• Phishing Amazon tramite Signal (AL01/210210/CSIRT-ITA) Febbraio 10, 2021
  Di recente è stata rilevata una campagna di phishing a tema Amazon indirizzata verso utenti Signal.
• Campagna phishing Enel Energia (AL01/210209/CSIRT-ITA) Febbraio 9, 2021
  È stata recentemente individuata una campagna di phishing che sfrutta il tema di un finto rimborso da parte di Enel Energia.
• Vulnerabilità su prodotti SolarWinds (AL01/210208/CSIRT-ITA) Febbraio 8, 2021
  Sono state recentemente individuate due vulnerabilità nella piattaforma Orion e una nel software Serv-U FTP.
• La Settimana Cibernetica del 7 febbraio 2021 Febbraio 8, 2021
  Il riepilogo delle notizie pubblicate dallo CSIRT italiano dal 1 al 7 febbraio 2021.
• Nuovo aggiornamento Google Chrome (AL01/210205/CSIRT-ITA) Febbraio 5, 2021
  Google ha rilasciato un nuovo avviso di sicurezza relativo a una nuova vulnerabilità che interessa il browser Chrome.
• Vulnerabilità su Google Chrome (AL03/210204/CSIRT-ITA) Febbraio 4, 2021
  Google ha rilasciato di recente degli avvisi di sicurezza relativi a vulnerabilità con impatto critico, alto e medio che interessano il browser Chrome.
• Vulnerabilità su prodotti Cisco (AL02/210204/CSIRT-ITA) Febbraio 4, 2021
  Cisco ha rilasciato avvisi di sicurezza relativi a vulnerabilità con impatto critico, alto e medio su diversi prodotti.
• Campagne di phishing multiple veicolate da indirizzi legittimi (AL01/210204/CSIRT-ITA) Febbraio 4, 2021
  Individuate multiple campagne di phishing che sfruttano indirizzi di posta legittimi al fine di raccogliere informazioni sugli utenti.
• Campagna phishing mirata al furto di credenziali aziendali (AL03/210202/CSIRT-ITA) Febbraio 2, 2021
  Individuata una campagna phishing che sfrutta finte pagine di login ai servizi aziendali con riferimenti personalizzati.
• Aggiornamento vulnerabilità nel software Sudo (AL02/210202/CSIRT-ITA) Febbraio 2, 2021
  Recentemente è stata rilevata in rete una Proof of Concept (PoC) che illustra come sfruttare una vulnerabilità presente nell’applicazione Unix “sudo”.

Dark Reading:

• High-Severity Vulnerabilities Discovered in Multiple Embedded TCP/IP Stacks Febbraio 10, 2021
  Flaw leaves millions of IT, OT, and IoT devices vulnerable to attack.
• SASE Surge: Why the Market Is Poised to Grow Febbraio 10, 2021
  Analysts who anticipate the SASE market will expand by more than a factor of five before 2025 explain reasons behind the surge.
• Zero Trust in the Real World Febbraio 10, 2021
  Those who are committed to adopting the concept have the opportunity to make a larger business case for it across the organization, working with executive leaders to implement a zero-trust framework across the entire enterprise.
• Multivector Attacks Demand Security Controls at the Messaging Level Febbraio 10, 2021
  As a Google-identified attack reveals, security teams need to look beyond VPNs and network infrastructure to the channels where social engineering takes place.
• Florida Water Utility Hack Highlights Risks to Critical Infrastructure Febbraio 9, 2021
  The intrusion also shows how redundancy and detection can minimize damage and reduce impact to the population.
• Microsoft Fixes Windows Zero-Day in Patch Tuesday Rollout Febbraio 9, 2021
  Microsoft's monthly security fixes addressed a Win32k zero-day, six publicly known flaws, and three bugs in the Windows TCP/IP stack.
• SentinelOne Buys Data Analytics Company Scalyr Febbraio 9, 2021
  Cloud-based big data platform boosts extended detection and response (XDR) offering.
• How Neurodiversity Can Strengthen Cybersecurity Defense Febbraio 9, 2021
  Team members from different backgrounds, genders, ethnicities, and neurological abilities are best equipped to tackle today's security challenges.
• Microsoft & Facebook Were Phishers' Favorite Brands in 2020 Febbraio 9, 2021
  Cloud services was the most impersonated industry, followed by financial services, e-commerce, and social media, researchers report.
• Fighting Fileless Malware, Part 2: Countermeasures Febbraio 9, 2021
  Why do fileless attacks persist? Let's break down the strengths and weaknesses of the existing mitigations.

Full Disclosure

• SEC Consult SA-20210210-0 :: Reflected Cross-Site Scripting in Adobe Magento Commerce Febbraio 10, 2021
  Posted by SEC Consult Vulnerability Lab on Feb 10SEC Consult Vulnerability Lab Security Advisory < 20210210-0 > ======================================================================= title: Reflected Cross-Site Scripting (XSS) product: Adobe Magento Commerce vulnerable version: < 2.4.2 fixed version: 2.4.2 CVE number: CVE-2021-21029 impact: Medium homepage: https://magento.com/ found: 2020-06-29...
• Trojan-Spy.Win32.WebCenter.a / Information Disclosure Febbraio 8, 2021
  Posted by malvuln on Feb 07Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/e3cf225a94c6be5a26fc21a1ec83f418.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Trojan-Spy.Win32.WebCenter.a Vulnerability: Information Disclosure Description: The trojan creates a dir named "webcenter" under "C:\Windows\SysWOW64" and drops various exes and html pages to return information about the...
• Trojan-Spy.Win32.SpyEyes.awow / Insecure Permissions EoP Febbraio 7, 2021
  Posted by malvuln on Feb 07Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/e61a6755db1c59eb1d219b761de925f4.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Trojan-Spy.Win32.SpyEyes.awow Vulnerability: Insecure Permissions EoP Description: SpyEyes.awow creates a insecure dir named "$Recycle$" under the c:\ drive, granting change (C) permissions to the authenticated users group. Also, drops...
• Trojan.Win32.Delf.uq / Insecure Permissions EoP Febbraio 7, 2021
  Posted by malvuln on Feb 07Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/a4ea99b54e171274795f14a4ac7f17ba.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Trojan.Win32.Delf.uq Vulnerability: Insecure Permissions EoP Description: Malware creates an vulnerable dir named "downsoft" under c:\ drive granting change (C) permissions to the authenticated users group. Type: PE32 MD5:...
• Email-Worm.Win32.Sircam.eb / Insecure Permissions EoP Febbraio 7, 2021
  Posted by malvuln on Feb 07Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/cd88a9b686acd9ccf23dba8d248129b4.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Email-Worm.Win32.Sircam.eb Vulnerability: Insecure Permissions EoP Description: Sircam.eb creates a vuln dir under c:\ drive named "Windupdt" and drops an exe named "winupdate.exe". Grants change (C) permissions to...
• Trojan.Win32.Cospet.abg / Insecure Permissions EoP Febbraio 7, 2021
  Posted by malvuln on Feb 07Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/5f5b308853b9aa9243390c135ff6ba1b.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Trojan.Win32.Cospet.abg Vulnerability: Insecure Permissions EoP Description: Cospet.abg, creates an vulnerable dir named "dir" under c:\ drive granting change (C) permissions to the authenticated users group. Sends SYN packet to TCP port...
• Trojan.Win32.Comei.pgo / Insecure Permissions EoP Febbraio 7, 2021
  Posted by malvuln on Feb 07Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/7cb253cf47b6de8adfea559e51950c17.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Trojan.Win32.Comei.pgo Vulnerability: Insecure Permissions EoP Description: Trojan malware creates an vulnerable dir named "dir" under c:\ drive granting change (C) permissions to the authenticated users group. Type: PE32 MD5:...
• Trojan-Spy.Win32.SpyEyes.auwl / Insecure Permissions EoP Febbraio 7, 2021
  Posted by malvuln on Feb 07Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/0115ba22a0d009a13d0748027dd62e2a.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Trojan-Spy.Win32.SpyEyes.auwl Vulnerability: Insecure Permissions EoP Description: SpyEyes creates a vuln dir named "cleansweep.exe" under c:\ drive and drops an exe inside also named "cleansweep.exe". The vulnerable trojan...
• Trojan-Spy.Win32.SpyEyes.auqj / Insecure Permissions EoP Febbraio 7, 2021
  Posted by malvuln on Feb 07Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/ea6ed38ab5264cd92f0d42eb020e87d8.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Trojan-Spy.Win32.SpyEyes.auqj Vulnerability: Insecure Permissions EoP Description: SpyEyes.auqj creates a hidden vuln dir named "wedfsadeex.exe" under c:\ drive, granting change (C) permissions to the authenticated users group. Type:...
• Trojan.Win32.Gentee.h / Insecure Permissions EoP Febbraio 7, 2021
  Posted by malvuln on Feb 07Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/2bd5672432a545db03db0e09c120d42e.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Trojan.Win32.Gentee.h Vulnerability: Insecure Permissions EoP Description: Trojan Gentee.h creates a vuln dir named "Paltalk" under c:\ drive, granting change (C) permissions to the authenticated users group. Type: PE32 MD5:...