Trend Micro’s Zero Day Initiative (ZDI) this week published 13 advisories describing unpatched vulnerabilities in Ivanti Endpoint Manager. One of the flaws allows local attackers to elevate their privileges and was reported to Ivanti in November 2024. The remaining 12 lead to remote code execution (RCE) and were reported in June 2025. While the vulnerabilities ..
Categoria : Security
Apple on Friday announced significant updates to its bug bounty program and the company is now offering up to $2 million for complex exploit chains. Since the launch of its public bug bounty program in 2020, Apple has awarded a total of more than $35 million to over 800 security researchers. Multiple hackers earned $500,000 ..
Google Threat Intelligence Group (GTIG) and Mandiant have continued to analyze the recent Oracle E-Business Suite (EBS) extortion campaign and their researchers have identified some of the pieces of malware deployed in the attacks. The attacks came to light on October 2, when GTIG and Mandiant warned that executives at many organizations using Oracle EBS ..
Le frodi bancarie in Italia rappresentano una minaccia in costante evoluzione, con perdite stimate superiori a 180 milioni di euro nel 2024. I bonifici istantanei registrano tassi di frode 48 volte superiori rispetto a quelli ordinari, mentre le tecniche di manipolazione psicologica rappresentano oltre il 67% del valore totale delle frodi. Secondo i dati più ..
Discord says that hackers made off with images of 70,000 users’ government IDs that they were required to provide in order to use the site. Like an increasing number of sites, Discord requires certain users to provide a photo or scan of their driver’s license or other government ID that shows they meet the minimum ..
Ott 09, 2025 Marina Londei In evidenza, News, Phishing, Prodotto, RSS 0 Kaspersky ha annunciato Notification Protection, una nuova funzionalità anti-phishing per la sua app mobile per Android. Il sistema è in grado di individuare e rimuovere link sospetti dalle comunicazioni ricevute sulle diverse applicazioni di messaggistica, compresi gli SMS. “Nella prima metà del 2025, ..
Questo articolo fa parte di una serie dedicata al modello MindShield, un paradigma innovativo di sicurezza integrata per infrastrutture critiche. Nel presente contenuto esploreremo gli strumenti tecnologici e innovativi attualmente utilizzabili a supporto della sicurezza infrastrutturale, analizzando come psicologia predittiva, intelligence, intelligenza artificiale e Internet of Things possano essere integrati efficacemente nel modello MindShield per ..
Il 19 gennaio 2025 TikTok ha rischiato di scomparire dagli smartphone di 170 milioni di americani. Solo l’intervento dell’ultimo minuto del presidente Trump il 20 gennaio, con una proroga di 75 giorni, ha evitato il blackout totale della piattaforma negli Stati Uniti. Ma la domanda che ossessiona governi e utenti resta la stessa: TikTok è ..
The annual DataTribe Challenge uncovers the most promising cybersecurity startups, and gives them an opportunity to pitch their firms and products to an audience of venture and private equity firms and security experts. DataTribe itself is a seed stage venture foundry focused on early stage cybersecurity firms – startups. Each year the firm holds the ..
A relatively new security layer, AI security posture management (AI-SPM) can help organizations identify and reduce risks related to their use of AI, especially large language models. It constantly finds, evaluates, and fixes security and compliance risks throughout the organization’s AI footprint. By making opaque AI interactions transparent and manageable, AI-SPM allows businesses to innovate ..
