Categoria : Security

image_pdfimage_print

Progress Software issued an emergency fix to deal with a vulnerability impacting its its LoadMaster and LoadMaster Multi-Tenant (MT) Hypervisor products. This issue, called CVE-2024-7591, is considered a maximum severity vulnerability. The vulnerability is an improper input validation issue, which could allow unauthenticated, remote attackers to gain access to LoadMaster’s management interface.  Security leaders weigh in  Jason ..

Leggi tutto

A survey of 500 enterprise leaders across six countries (United States, United Kingdom, Germany, Japan, Canada and Australia) highlights the relationship between connectivity and cybersecurity. The research asserts that better connectivity improves an organization’s chances of defending against cyberattacks, as 38% of organizations with excellent connectivity are among industry leaders for cybersecurity performance. When an ..

Leggi tutto

La mobile security è una branca della cybersecurity che si occupa specificamente degli aspetti di sicurezza legata ai dispositivi mobili (smartphone, tablet, watch, smart tv…), alla loro interazione con i servizi esterni e alla protezione dell’utente e dei suoi dati personali. Nozioni preliminari Per capire gli obiettivi della mobile security occorre introdurre il concetto di ..

Leggi tutto

Risk management was analyzed in a recent report by AuditBoard. The study revealed that expanding expectations are coming at a time when internal audit has limited bandwidth for advisory-related services — and increasing risk demand and insufficient risk management capacity are creating a risk coverage gap for the business. The report looks at where internal audit teams are currently spending ..

Leggi tutto

Generative artificial intelligence (GenAI) was analyzed in a recent report by Transmit. The report includes screenshots of dark web forums, marketplaces and subscription-based services.  According to the report, Blackhat Gen-AI tools make it easier to create and automate fraud campaigns, resulting in an increased volume, velocity and variety of attacks. GenAI tools automate pentesting to find enterprise ..

Leggi tutto

Research identified a malvertising campaign targeting employees of Lowe’s. The malvertising campaign, leveraging Google ads, seeks to access current and former employee credentials. These Google ads appear when a Google Search is done for the Lowe’s internal HR portal, MyLowesLife. The URLs for these Google ads closely resemble the legitimate URL for the HR portal website and ..

Leggi tutto