Condividi

RSS

Piu’ articoli…

• CIS Controls e Vulnerability Assessment: guida pratica all’adozione delle best practice
• Analisi della postura di sicurezza: guida completa per rafforzare la cybersecurity
• Deception vs EDR: qual è la migliore strategia di difesa dalle minacce?
• Deception: Ingannare gli Hacker per Proteggere la Tua Rete
• Active Defence Deception: la cybersecurity che batte gli hacker con le loro stesse armi
• Decezione informatica: cos’è, come funziona e perché è fondamentale per la cybersecurity
• CSIRT e SOC: differenze tra gestione degli incidenti e monitoraggio della sicurezza
• CSIRT: rispondere agli incidenti IT per proteggere il business

Categorie …

• Backup as a Service (24)
  • Acronis Cloud Backup (18)
  • Veeam Cloud Connect (3)
• Cloud CRM (1)
• Cloud Server/VPS (23)
• Conferenza Cloud (4)
• Log Management (2)
• Monitoraggio ICT (4)
• Novita' (17)
• ownCloud (7)
• Privacy (8)
• Secure Online Desktop (14)
• Security (202)
  • Cyber Threat Intelligence (CTI) (8)
  • Decemption (4)
  • Ethical Phishing (9)
  • Penetration Test (15)
  • Posture Guard (1)
  • SOCaaS (65)
    • EDR (6)
    • SIEM (12)
    • SOAR (4)
    • UEBA (9)
  • Vulnerabilita' (83)
• Web Hosting (15)

Tags

CSIRT

• Aggiornamenti per Elasticsearch (AL01/230925/CSIRT-ITA) Settembre 25, 2023
  Elastic NV rilascia aggiornamenti di sicurezza per sanare una vulnerabilità in Elasticsearch, noto server di ricerca e analisi basato su Lucene. Tale vulnerabilità, qualora sfruttata, potrebbe permettere a un utente malintenzionato la compromissione della disponibilità del servizio sui dispositivi interessati.
• La Settimana Cibernetica del 24 settembre 2023 Settembre 25, 2023
  Scarica il riepilogo delle notizie pubblicate dallo CSIRT Italia dal 18 al 24 settembre 2023.
• Vulnerabilità in prodotti QNAP (AL02/230922/CSIRT-ITA) Settembre 22, 2023
  Aggiornamenti di sicurezza QNAP risolvono 2 vulnerabilità con gravità “alta” che interessano i prodotti QTS e Multimedia Console.
• Aggiornamenti di sicurezza Apple (AL01/230922/CSIRT-ITA) Settembre 22, 2023
  Apple ha rilasciato aggiornamenti di sicurezza per sanare 3 vulnerabilità di tipo 0-day che interessano i propri prodotti.
• Aggiornamenti per Kibana (AL05/230921/CSIRT-ITA) Settembre 21, 2023
  Elastic NV rilascia aggiornamenti di sicurezza per sanare una vulnerabilità con gravità “critica” in Kibana, nota piattaforma di visualizzazione dati. Tale vulnerabilità, qualora sfruttata, potrebbe permettere a un utente malintenzionato di accedere a informazioni sensibili nel file di log di Kibana.
• Rilevate vulnerabilità in prodotti Atlassian (AL04/230921/CSIRT-ITA) Settembre 21, 2023
  Aggiornamenti di sicurezza sanano 4 vulnerabilità presenti in vari prodotti Atlassian.
• Aggiornamenti per ISC BIND (AL03/230921/CSIRT-ITA) Settembre 21, 2023
  Aggiornamenti di sicurezza ISC sanano 2 vulnerabilità con gravità “alta” nel prodotto BIND che potrebbero comportare la compromissione della disponibilità del servizio.
• Aggiornamenti DRUPAL (AL02/230921/CSIRT-ITA) Settembre 21, 2023
  Aggiornamenti di sicurezza risolvono una vulnerabilità, con gravità “critica”, in Drupal Core.
• Aggiornamenti di sicurezza per Jenkins Core (AL01/230921/CSIRT-ITA) Settembre 21, 2023
  Rilasciato il Jenkins Security Advisory di settembre che risolve 2 vulnerabilità in Jenkins (Core) weekly e LTS.
• Rilevato sfruttamento in rete della CVE-2023-41179 relativa a prodotti Trend Micro (AL01/230920/CSIRT-ITA) Settembre 20, 2023
  Rilevato lo sfruttamento attivo in rete della vulnerabilità CVE-2023-41179 – già sanata dal vendor – presente in alcuni prodotti Trend Micro per la protezione degli endpoint.

Dark Reading

• Don't Get Burned by CAPTCHAs: A Recipe for Accurate Bot Protection Settembre 25, 2023
  Traditional CAPTCHAs, such as reCAPTCHA, no longer protect online businesses adequately. Real users hate them. Bots bypass them. It's time to upgrade.
• ASPM Is Good, But It's Not a Cure-All for App Security Settembre 23, 2023
  What application security posture management does, it does well. But you'll still need to fill in some holes, especially concerning API security.
• Recast Software Acquires Liquit, Consolidating the Endpoint and Application Management Markets Settembre 22, 2023
• ClassLink Provides Cybersecurity Training Course to Help Schools Protect Public Directory Data Settembre 22, 2023
• Wing Security Launches Compliance-Grade SaaS Security Solution for Just $1.5K Settembre 22, 2023
• Latest Acquisition Powers AI-based Network Detection and Response and Open XDR Capabilities for WatchGuard Settembre 22, 2023
• TikTok API Rules Stymie Analysis of US User Data, Academics Say Settembre 22, 2023
  Terms of service for API access give TikTok publication review over findings and limit access to critical data on the platform's impact on US users, researchers say.
• Hackers Let Loose on Voting Gear Ahead of US Election Season Settembre 22, 2023
  Ethical hackers were given voluntary access to digital scanners, ballot markers, and electronic pollbooks, all in the name of making the voting process more resilient to cyber threats.
• Akira Ransomware Mutates to Target Linux Systems, Adds TTPs Settembre 22, 2023
  The newly emerged ransomware actively targets both Windows and Linux systems with a double-extortion approach.
• NFL, CISA Look to Intercept Cyber Threats to Super Bowl LVIII Settembre 22, 2023
  The league is working with more than 100 partners to workshop responses to a host of hypothetical cyberattacks on the upcoming Big Game in Las Vegas.

Full Disclosure

• APPLE-SA-2023-09-21-6 macOS Ventura 13.6 Settembre 23, 2023
  Posted by Apple Product Security via Fulldisclosure on Sep 22APPLE-SA-2023-09-21-6 macOS Ventura 13.6 macOS Ventura 13.6 addresses the following issues. Information about the security content is also available at https://support.apple.com/kb/HT213931. Apple maintains a Security Updates page at https://support.apple.com/HT201222 which lists recent software updates with security advisories. Additional CVE entries coming soon. Kernel Available for: macOS […]
• APPLE-SA-2023-09-21-7 macOS Monterey 12.7 Settembre 23, 2023
  Posted by Apple Product Security via Fulldisclosure on Sep 22APPLE-SA-2023-09-21-7 macOS Monterey 12.7 macOS Monterey 12.7 addresses the following issues. Information about the security content is also available at https://support.apple.com/kb/HT213932. Apple maintains a Security Updates page at https://support.apple.com/HT201222 which lists recent software updates with security advisories. Additional CVE entries coming soon. Kernel Available for: macOS […]
• APPLE-SA-2023-09-21-5 watchOS 9.6.3 Settembre 23, 2023
  Posted by Apple Product Security via Fulldisclosure on Sep 22APPLE-SA-2023-09-21-5 watchOS 9.6.3 watchOS 9.6.3 addresses the following issues. Information about the security content is also available at https://support.apple.com/kb/HT213929. Apple maintains a Security Updates page at https://support.apple.com/HT201222 which lists recent software updates with security advisories. Kernel Available for: Apple Watch Series 4 and later Impact: A […]
• APPLE-SA-2023-09-21-4 watchOS 10.0.1 Settembre 23, 2023
  Posted by Apple Product Security via Fulldisclosure on Sep 22APPLE-SA-2023-09-21-4 watchOS 10.0.1 watchOS 10.0.1 addresses the following issues. Information about the security content is also available at https://support.apple.com/kb/HT213928. Apple maintains a Security Updates page at https://support.apple.com/HT201222 which lists recent software updates with security advisories. Kernel Available for: Apple Watch Series 4 and later Impact: A […]
• APPLE-SA-2023-09-21-3 iOS 16.7 and iPadOS 16.7 Settembre 23, 2023
  Posted by Apple Product Security via Fulldisclosure on Sep 22APPLE-SA-2023-09-21-3 iOS 16.7 and iPadOS 16.7 iOS 16.7 and iPadOS 16.7 addresses the following issues. Information about the security content is also available at https://support.apple.com/kb/HT213927. Apple maintains a Security Updates page at https://support.apple.com/HT201222 which lists recent software updates with security advisories. Additional CVE entries coming soon. […]
• APPLE-SA-2023-09-21-2 iOS 17.0.1 and iPadOS 17.0.1 Settembre 23, 2023
  Posted by Apple Product Security via Fulldisclosure on Sep 22APPLE-SA-2023-09-21-2 iOS 17.0.1 and iPadOS 17.0.1 iOS 17.0.1 and iPadOS 17.0.1 addresses the following issues. Information about the security content is also available at https://support.apple.com/kb/HT213926. Apple maintains a Security Updates page at https://support.apple.com/HT201222 which lists recent software updates with security advisories. Kernel Available for: iPhone XS […]
• APPLE-SA-2023-09-21-1 Safari 16.6.1 Settembre 23, 2023
  Posted by Apple Product Security via Fulldisclosure on Sep 22APPLE-SA-2023-09-21-1 Safari 16.6.1 Safari 16.6.1 addresses the following issues. Information about the security content is also available at https://support.apple.com/kb/HT213930. Apple maintains a Security Updates page at https://support.apple.com/HT201222 which lists recent software updates with security advisories. WebKit Available for: macOS Big Sur and Monterey Impact: Processing web […]
• Advisory X41-2023-001: Two Vulnerabilities in OPNsense Settembre 23, 2023
  Posted by X41 D-Sec GmbH Advisories via Fulldisclosure on Sep 22Advisory X41-2023-001: Two Vulnerabilities in OPNsense =========================================================== Highest Severity Rating: High Confirmed Affected Versions: 23.1.11_1, 23.7.3, 23.7.4 Confirmed Patched Versions: Commit 484753b2abe3fd0fcdb73d8bf00c3fc3709eb8b7 Vendor: Deciso B.V. / OPNsense Vendor URL: https://opnsense.org Credit: X41 D-Sec GmbH, Yasar Klawohn and JM Status: Public Advisory-URL:...
• SEC Consult SA-20230918-0 :: Authenticated Remote Code Execution and Missing Authentication in Atos Unify OpenScape Settembre 18, 2023
  Posted by SEC Consult Vulnerability Lab, Research via Fulldisclosure on Sep 18SEC Consult Vulnerability Lab Security Advisory < 20230918-0 > ======================================================================= title: Authenticated Remote Code Execution and Missing Authentication product: Atos Unify OpenScape Session Border Controller Atos Unify OpenScape Branch Atos Unify OpenScape BCF vulnerable version: OpenScape SBC...
• SEC Consult SA-20230829-0 :: Reflected Cross-Site Scripting (XSS) in PTC - Codebeamer (ALM Solution) Settembre 18, 2023
  Posted by SEC Consult Vulnerability Lab, Research via Fulldisclosure on Sep 18SEC Consult Vulnerability Lab Security Advisory < 20230829-0 > ======================================================================= title: Reflected Cross-Site Scripting (XSS) product: PTC - Codebeamer (ALM Solution) vulnerable version: =21.09-SP14 CVE number: CVE-2023-4296...