C’è un paradosso inquietante nel mondo della cybersicurezza di oggi. Mentre investiamo miliardi in software antivirus e sistemi di protezione sempre più sofisticati, gli attaccanti stanno semplicemente… smettendo di usare virus. Il dato che emerge dal CrowdStrike 2025 Global Threat Report (pubblicato il 27 febbraio 2025) è tanto semplice quanto allarmante: il 79% degli attacchi ..
Categoria : Security
The researchers added: “This campaign is notable in that it demonstrates how impactful smishing operations can be executed using simple, accessible infrastructure. Given the strategic utility of such equipment, it is highly likely that similar devices are already being exploited in ongoing or future smishing campaigns.” Sekoia said it’s unclear how the devices are being ..
The U.S. government has shut down as of 12:01 am on October 1, 2025. According to AP News, the Congressional Budget Office estimates that roughly 750,000 federal employees could be furloughed each day of the shutdown. Government shutdowns do not impact essential services, such as FBI investigators, air traffic controllers, CIA officers and members of ..
The OpenSSL Project has announced the availability of several new versions of the open source SSL/TLS toolkit, which include patches for three vulnerabilities. Versions 3.5.4, 3.4.3, 3.3.5, 3.2.6, 3.0.18, 1.0.2zm and 1.1.1zd of the OpenSSL Library have been released. Most of them fix all three vulnerabilities, tracked as CVE-2025-9230, CVE-2025-9231 and CVE-2025-9232. Two of the ..
Ott 01, 2025 Marina Londei Approfondimenti, In evidenza, Minacce, Minacce, News, RSS, Tecnologia 0 Secondo l’ultima ricerca di FireMon, azienda di sicurezza esperta nella gestione dei dispositivi di rete, il 60% dei firewall aziendali non supera i controlli di conformità ad alta gravità dopo la valutazione, mentre un 34% non supera i livelli critici. Il ..
A Chinese state-sponsored hacking group tracked as ‘Phantom Taurus’ has been targeting government and telecommunications organizations for espionage for more than two years, Palo Alto Networks reports. Initially observed in 2023, the APT was only recently linked to Chinese hacking groups through shared infrastructure, as its tactics, techniques and procedures (TTPs) differ from those typically ..
Canadian airline WestJet this week confirmed that customer personal information was stolen in a June 2025 cyberattack. The incident, disclosed on June 13, involved unauthorized access to several internal systems and impacted the availability of WestJet’s application and website. The airline’s operations were not affected by the attack, and WestJet restored access to its application ..
NIST has published a new guide designed to help organizations reduce cybersecurity risks associated with the use of removable media devices in operational technology (OT) environments. NIST Special Publication (SP) 1334 was authored by the National Cybersecurity Center of Excellence (NCCoE) and it focuses on the use of USB flash drives, but also mentions other ..
Identity and access management (IAM) provider Descope has announced raising $35 million in a seed funding extension that brings the total raised by the company to $88 million. The cash infusion came from existing investors Cerca Partners, Dell Technologies Capital, Lightspeed Venture Partners, Notable Capital, Triventures, and Unusual Ventures. Founded in 2022, the Los Altos, ..
This October marks the 22nd anniversary of Cybersecurity Awareness Month, an initiative launched under the guidance of the U.S. Department of Homeland Security. Its purpose is to highlight the importance of taking daily action to reduce risks when online and when using connected devices. This year’s theme focuses on government entities and small and medium-sized ..
