Condividi

RSS

Piu’ articoli…

• Cos’è veramente un cyber threat
• SNYPR: Big Data al servizio della ricerca delle minacce
• Hadoop Open Data Model: raccolta dati “open”
• Pass the Ticket: come mitigarlo con un SOCaaS
• Cos’è il Vishing e come funziona
• UBA e UEBA: le differenze
• Database Activity Monitoring: cos’è e come metterlo in pratica
• SOAR e l’automazione della sicurezza informatica

Categorie …

• Backup as a Service (3)
  • Acronis Cloud Backup (18)
  • Veeam Cloud Connect (3)
• Cloud CRM (1)
• Cloud Server/VPS (22)
• Conferenza Cloud (4)
• Log Management (2)
• Monitoraggio ICT (4)
• Novita' (13)
• ownCloud (7)
• Privacy (8)
• Secure Online Desktop (14)
• Security (9)
  • Cyber Threat Intelligence (CTI) (3)
  • Ethical Phishing (8)
  • SOCaaS (23)
    • SIEM (10)
    • UEBA (8)
  • Vulnerabilita' (84)
• Web Hosting (15)

Tags

CSIRT

• Rilevata vulnerabilità in NGINX Ingress Controller per Kubernetes (AL01/211022/CSIRT-ITA) Ottobre 22, 2021
  Rilevata una vulnerabilità del prodotto Kubernetes ingress-nginx che potrebbe permettere la modifica arbitraria degli ”Ingress objects” da parte di utenti non autorizzati, mettendo a rischio la confidenzialità e l’integrità delle comunicazioni.
• Disponibili aggiornamenti per prodotti CISCO (AL01/211021/CSIRT-ITA) Ottobre 21, 2021
  Aggiornamenti di sicurezza Cisco del 20 ottobre 2021 sanano molteplici vulnerabilità su diversi prodotti.
• Nuova versione di Google Chrome (AL02/211020/CSIRT-ITA) Ottobre 20, 2021
  Nuovo aggiornamento di Google Chrome per Windows, Mac e Linux corregge 19 vulnerabilità di sicurezza.
• Critical Patch Update di Oracle (AL01/211020/CSIRT-ITA) Ottobre 20, 2021
  Oracle ha rilasciato gli aggiornamenti di sicurezza mensili che risolvono 419 nuove vulnerabilità su più prodotti.
• La Settimana Cibernetica del 17 ottobre 2021 Ottobre 18, 2021
  Scarica il riepilogo delle notizie pubblicate dallo CSIRT Italia dal 11 al 17 ottobre 2021.
• Campagna a tema “Aggiornamento software DIKE” volta alla diffusione di software malevolo (AL01/211018/CSIRT-ITA) - Aggiornamento Ottobre 18, 2021
  Individuata una campagna a tema “Aggiornamento del software DIKE” con impatto verso utenze italiane e volta all’installazione di software legittimo utilizzato per scopi malevoli.
• Aggiornamenti di sicurezza per prodotti Juniper Networks (AL01/211015/CSIRT-ITA) Ottobre 15, 2021
  Juniper Networks rilascia aggiornamenti di sicurezza per sanare molteplici vulnerabilità su più prodotti, di cui una con gravità “critica”.
• Security Patch Day per i prodotti SAP (AL02/211014/CSIRT-ITA) Ottobre 14, 2021
  SAP rilascia il Security Patch Day di ottobre per i propri prodotti che risolve 14 vulnerabilità, di cui 3 con gravità “critica”.
• Palo Alto Networks rilascia aggiornamenti per GlobalProtect (AL01/211014/CSIRT-ITA) Ottobre 14, 2021
  Aggiornamenti di sicurezza per il prodotto GlobalProtect sanano una vulnerabilità con gravità “alta”.
• Sanata vulnerabilità nella libreria keypair (BL01/211013/CSIRT-ITA) Ottobre 13, 2021
  Rilevata una vulnerabilità nella libreria javascript keypair che potrebbe compromettere la confidenzialità e l’integrità dei messaggi criptati per mezzo della stessa.

Dark Reading

• Ransomware Rise Pushes Organizations to Prepare for Attack Ottobre 23, 2021
  Ransomware attacks continue to grow in number and severity, data shows, but organizations are stepping up to prepare for the threat.
• aDolus Raises $2.5M to Secure Critical Infrastructure and Grow Sales and Marketing Team Ottobre 22, 2021
  Software supply chain security experts to drive aggressive go-to-market strategy
• 'TodayZoo' Phishing Kit Cobbled Together From Other Malware Ottobre 22, 2021
  Microsoft's analysis of a recent phishing attack shows how cybercriminals are mixing and matching to efficiently develop their attack frameworks.
• 7 Ways to Lock Down Enterprise Printers Ottobre 22, 2021
  Following the PrintNightmare case, printer security has become a hot issue for security teams. Here are seven ways to keep printers secure on enterprise networks.
• What Does Better Insider Risk Management Look Like? Ottobre 22, 2021
  Conventional data security tools do not address insider risk — a growing problem in today's remote-hybrid world. We need a better way to manage insider risk.
• What Squid Game Teaches Us About Cybersecurity Ottobre 22, 2021
  When life inside the security operations center feels treacherous, here are some suggestions for getting out alive.
• Google Buckles Down on Android Enterprise Security Ottobre 21, 2021
  The launch of Android 12 brings several new default security features, along with new security efforts for Android Enterprise.
• Malware Abuses Core Features of Discord Ottobre 21, 2021
  Researchers warn that Discord's bot framework can be easily weaponized.
• Cybrary Launches New Partnership with Check Point Software to Make Cybersecurity Training Accessible to All Ottobre 21, 2021
  Online cybersecurity professional development platform bolsters the Check Point Education Initiative.
• Security Teams Still Favor Prevention Over Detection Ottobre 21, 2021
  Security leaders are adopting a multilayered approach to address new security threats and risks.

Full Disclosure

• [CSA-2021-003] Remote Code Execution in GridPro Request Management for Windows Azure Pack Ottobre 22, 2021
  Posted by Certitude - Advisories on Oct 22~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~ Certitude Securtiy Advisory - CSA-2021-003 ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ PRODUCT […]
• Onapsis Security Advisory 2021-0020: SAP Enterprise Portal - Exposed sensitive data in html body Ottobre 22, 2021
  Posted by Onapsis Research via Fulldisclosure on Oct 22# Onapsis Security Advisory 2021-0020: SAP Enterprise Portal - Exposed sensitive data in html body ## Impact on Business One HTTP endpoint of the portal exposes sensitive information that could be used by an attacker with administrator privileges, in conjunction with other attacks (e.g. XSS). ## Advisory […]
• Onapsis Security Advisory 2021-0019: [Multiple CVEs] Memory Corruption vulnerability in SAP NetWeaver ABAP IGS service Ottobre 22, 2021
  Posted by Onapsis Research via Fulldisclosure on Oct 22# Onapsis Security Advisory 2021-0019: [Multiple CVEs] Memory Corruption vulnerability in SAP NetWeaver ABAP IGS service ## Impact on Business An unauthenticated attacker without specific knowledge of the system can send a specially crafted packet over a network which will trigger an internal error in the system […]
• Onapsis Security Advisory 2021-0018: [Multiple CVEs] Memory Corruption vulnerability in SAP NetWeaver ABAP Gateway service Ottobre 22, 2021
  Posted by Onapsis Research via Fulldisclosure on Oct 22# Onapsis Security Advisory 2021-0018: [Multiple CVEs] Memory Corruption vulnerability in SAP NetWeaver ABAP Gateway service ## Impact on Business An unauthenticated attacker without specific knowledge of the system can send a specially crafted packet over a network which will trigger an internal error in the system […]
• Onapsis Security Advisory 2021-0017: [Multiple CVEs] Memory Corruption vulnerability in SAP NetWeaver ABAP Enqueue service Ottobre 22, 2021
  Posted by Onapsis Research via Fulldisclosure on Oct 22# Onapsis Security Advisory 2021-0017: [Multiple CVEs] Memory Corruption vulnerability in SAP NetWeaver ABAP Enqueue service ## Impact on Business An unauthenticated attacker without specific knowledge of the system can send a specially crafted packet over a network which will trigger an internal error in the system […]
• Onapsis Security Advisory 2021-0016: XXE in SAP JAVA NetWeaver System Connections Ottobre 22, 2021
  Posted by Onapsis Research via Fulldisclosure on Oct 22# Onapsis Security Advisory 2021-0016: XXE in SAP JAVA NetWeaver System Connections ## Impact on Business A high-privileged SAP JAVA NetWeaver user is able to abuse an XXE vulnerability with the goal of reading files from the OS (compromising confidentiality) and/or making system processes crash (compromising availability). […]
• Onapsis Security Advisory 2021-0015: [Multiple CVEs] Memory Corruption vulnerability in SAP NetWeaver ABAP Dispatcher service Ottobre 22, 2021
  Posted by Onapsis Research via Fulldisclosure on Oct 22# Onapsis Security Advisory 2021-0015: [Multiple CVEs] Memory Corruption vulnerability in SAP NetWeaver ABAP Dispatcher service ## Impact on Business An unauthenticated attacker without specific knowledge of the system can send a specially crafted packet over a network which will trigger an internal error in the system […]
• Backdoor.Win32.LanaFTP.k / Heap Corruption Ottobre 19, 2021
  Posted by malvuln on Oct 19Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/e2660742a80433e027ee9bdedc40e190.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Backdoor.Win32.LanaFTP.k Vulnerability: Heap Corruption Description: The malware listens on TCP port 1075. Third-party attackers who can reach the server can send a specially crafted sequential payload causing a heap corruption. Type: […]
• Backdoor.Win32.LanFiltrator.11.b / Unauthenticated Remote Command Execution Ottobre 19, 2021
  Posted by malvuln on Oct 19Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/9f87546e667e5af59a8580ddf7fd43c7.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Backdoor.Win32.LanFiltrator.11.b Vulnerability: Unauthenticated Remote Command Execution Description: The malware listens on TCP ports 999, 888. Third-party attackers who can reach the system can execute commands made available by the malware....
• Virus.Win32.Ipamor.c / Unauthenticated Remote System Reboot Ottobre 19, 2021
  Posted by malvuln on Oct 19Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/bbf032a3aa288f02403295f0472d1f05.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Virus.Win32.Ipamor.c Vulnerability: Unauthenticated Remote System Reboot Description: The malware listens on UDP port 139. Third-party attackers can send a single uppercase char "D" datagram packet to the infected machine causing it […]