Most businesses say they want to prioritize remediation and recovery capabilities, yet when it gets down to it, many ultimately opt not to make these investments. Thirty-five percent require days or even weeks to recover lost SaaS data, and more than a third worry that their company doesn’t have a good enough backup and recovery ..
Categoria : Security
KnowBe4 released its new report highlighting cybersecurity challenges facing the manufacturing industry. As the most targeted industry for cyberattacks for a fourth consecutive year, the report reveals that the manufacturing sector’s expanding digital footprint is putting operations, intellectual property and economic resilience at risk. A particular concern raised in the report is the persistent threat ..
Lug 15, 2025 Marina Londei Hacking, In evidenza, Minacce, News, RSS, Vulnerabilità 0 Nuova minaccia per le GPU: secondo un recente comunicato di NVIDIA, le GPU della compagnia sarebbero vulnerabili a RowHammer, una tecnica di attacco che sfrutta la possibilità di alterare la DRAM. Questa tecnica sfrutta la densità delle celle di memoria per corrompere ..
A new SentinelOne report reveals new artifacts associated with ZuRu, an Apple macOS malware. ZuRu typically spreads via trojanized versions of legitimate software. In May 2025, the malware was observed mimicking a cross platform SSH client and server management tool called Termius. Initially documented in September 2021, ZuRu was involved in a campaign hijacking searches for ..
Questo approfondimento conclude la serie dedicata all’onboarding dei dispositivi IoT, con un focus specifico sullo zero trust onboarding e la sua implementazione pratica. L’articolo esplora le strategie di verifica continua dell’identità, la micro-segmentazione delle reti, l’implementazione del Software-defined Perimeter (SDP) e le tecniche di protezione contro minacce zero-day. Viene presentata una visione completa delle moderne ..
In cybersecurity, success can feel like fighting an uphill battle. You can make all the right decisions, implement strong controls, train staff, follow every framework, and still fall victim to an attack. Meanwhile, others may take a more passive approach and avoid visible fallout, at least for a time. This uneven playing field makes it ..
Nvidia is recommending a mitigation for customers of one of its GPU product lines that will degrade performance by up to 10 percent in a bid to protect users from exploits that could let hackers sabotage work projects and possibly cause other compromises. The move comes in response to an attack a team of academic ..
Research from Cybersecurity Researcher Jeremiah Fowler has uncovered an unencrypted, non-password-protected database containing 245,949 records. The database appears to belong to Rockerbox, a tax credit consultancy. The files hosted personally identifiable information (PII) that, if in the possession of a malicious actor, could leave individuals at risk of phishing, social engineering, financial crimes or identity ..
Lug 14, 2025 Marina Londei In evidenza, Minacce, News, RSS, Vulnerabilità 0 I ricercatori di AG Security Research hanno individuato una vulnerabilità negli eUICC di Kigen, chip che abilitano le funzionalità delle eSIM, che consente a un attaccante di installare applet malevoli sui dispositivi. Nel dettaglio, il problema risiede nella tecnologia Java Card usata da Kigen ..
The Cybersecurity & Infrastructure Security Agency (CISA) has added four new vulnerabilities to the Known Exploited Vulnerabilities (KEV) Catalogue, citing evidence of active exploitation. The vulnerabilities are as follows: Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability (CVE-2014-3931) PHPMailer Command Injection Vulnerability (CVE-2016-10033) Rails Ruby on Rails Path Traversal Vulnerability (CVE-2019-5418) Synacor Zimbra Collaboration Suite (ZCS) Server-Side ..
