Aumenta la tua sicurezza dei tuoi pc, server, tablet e rimani aggiornato grazie al nostro aggregatore

PyPI bersagli di un attacco malware: registrazioni sospese per ripulire la piattaforma

L'episodio serve da monito agli sviluppatori che utilizzano componenti open source nei loro progetti: fondamentale verificare l'autenticità del codice scaricato Canali: Malware, Sicurezza Informatica,...

TheMoon Botnet Resurfaces, Exploiting EoL Devices to Power Criminal Proxy

A botnet previously considered to be rendered inert has been observed enslaving end-of-life (EoL) small home/small office (SOHO) routers and IoT devices to fuel a...

The Golden Age of Automated Penetration Testing is Here

Network penetration testing plays a vital role in detecting vulnerabilities that can be exploited. The current method of performing pen testing is pricey, leading many...

Stream.Security unveils threat investigation and AI-powered remediation capabilities

Stream.Security announced new threat investigation and AI-powered remediation capabilities. The new real-time attack path detection and generative AI-powered remediation tools are part of the real-time...

New Linux Bug Could Lead to User Password Leaks and Clipboard Hijacking

Details have emerged about a vulnerability impacting the "wall" command of the util-linux package that could be potentially exploited by a bad actor to leak...

Cos'è il Push Bombing, il nuovo attacco hacker che manda l'iPhone in tilt per rubare l'account agli utenti: "Se vi arriva questa notifica non apritela"

Il Push Bombing sta mandando in tilt diversi dispositivi Apple. La sicurezza installata, e in continuo aggiornamento, all'interno di iPhone, Mac e iPad sta cercando...

La formazione in cybersecurity non sta portando i risultati attesi

Le aziende hanno compreso l’importanza della cybersecurity e stanno aumentando i loro investimenti per formare i team di sicurezza: secondo la ricerca “The portrait of...

Addio al tuo profilo Instagram, ti rubano tutto e si fingono te

Il tuo profilo Instagram, o Facebook, può essere in pericolo: per non cadere vittima degli hacker ecco cosa devi sapere e cosa fare. Il tuo...

How much does cloud-based identity expand your attack surface?

We all know using a cloud-based identity provider (IdP) expands your attack surface, but just how big does that attack surface get? And can we...

PyPI Halts Sign-Ups Amid Surge of Malicious Package Uploads Targeting Developers

The maintainers of the Python Package Index (PyPI) repository briefly suspended new user sign-ups following an influx of malicious projects uploaded as part of a...

AI abuse and misinformation campaigns threaten financial institutions

Though generative AI offers financial firms remarkable business and cybersecurity utility, cyberthreats relating to GenAI in financial services are a consistent concern, according to FS-ISAC....

Advanced cybersecurity strategies boost shareholder returns

Companies demonstrating advanced cybersecurity performance generate a shareholder return that is 372% higher than their peers with basic cybersecurity performance, according to a new report...

Finding software flaws early in the development process provides ROI

Enterprises spend enormous effort fixing software vulnerabilities that make their way into their publicly-facing applications. The Consortium for Information and Software Quality estimates that the...

New infosec products of the week: March 29, 2024

Here’s a look at the most interesting products from the past week, featuring releases from Bedrock Security, CyberArk, GitGuardian, Legit Security, and Malwarebytes. GitGuardian SCA...

New iPad Pro and Air models now expected early May. Here's what's coming

An OLED makeover, a new larger size for the Air, M3 chips, and more are on the docket for the 2024 iPads....