Kimberly Cheatle, U.S. Secret Service Director, has resigned. This resignation is in the wake of the recent assassination attempt against former president Donald Trump. A hearing followed the assassination attempt, in which political leaders on both sides of the aisle expressed discontent with Cheatle’s testimony. House Oversight Committee Chairman James Comer of Kentucky said, “The ..
Categoria : Security
Lug 23, 2024 Marina Londei Approfondimenti, News, RSS, Tecnologia 0 Le password sono ormai universalmente riconosciute come un metodo di autenticazione debole e andrebbero sostituite da meccanismi più robusti, come l’autenticazione multi-fattore e le passkey. Le passkey permettono di accedere ai propri dispositivi e account utilizzando codici e biometria, come l’impronta digitale, il riconoscimento facciale, ..
As artificial intelligence (AI) becomes increasingly embedded into society — at home and in the office — through virtual assistants, automated services and workplace productivity tools, there is a pressing need for regulatory guardrails and governance policies to protect consumer privacy and data rights. Corporate AI adoption presents organizations with a rising threat of potential ..
Sumsub unveils the ‘2024 Fraudlympics,’ an awareness campaign displaying fraud data across a range of countries, industries and categories. The data reveals which nations are leading in categories such as: Fraud by type (deep fakes, identity theft, etc.) Fraud by document (driving license, passport, etc.) Fraud by industry (crypto, iGaming, etc.) In the awareness campaign, ..
Nel panorama della sicurezza informatica, la minaccia di attacchi fisici tramite dispositivi USB malevoli è una realtà crescente. Tra questi, uno dei più insidiosi è il famigerato USBsamurai. Questo piccolo dispositivo, apparentemente innocuo, rappresenta una vera e propria bomba a orologeria per qualsiasi infrastruttura industriale. Scopriamo insieme di cosa si tratta, come funziona e quali ..
Trend Micro has observed an advanced persistent threat (APT) group exploiting vulnerabilities in Internet Explorer. The group, known as Void Banshee, is leveraging a recently patched vulnerability to infect victim machines with the Atlantida info-stealer. This is part of a multi-stage attack involving uniquely crafted URL files and impacting the Windows MSHTML Platform. The vulnerability ..
A judge has dismissed a majority of the SEC lawsuit against SolarWinds, apart from securities fraud claims prompted by a statement on SolarWinds’s website that advertised the company’s security controls. The judge stated that SolarWinds previously acknowledged it had no obligation to disclose individual cyber incidents and no promised ability to prevent all cyber incidents. ..
Lug 22, 2024 Marina Londei Attacchi, Hacking, Malware, Minacce, News, RSS 0 I ricercatori di Trend Micro hanno scoperto una variante Linux del ransomware Play che cifra i file solo quando si trova in un ambiente ESXi VMware. Il gruppo è attivo dal 2022, ma è la prima volta che esegue campagne attaccando i sistemi ..
Automated at-scale attack campaigns now represent the vast majority of online threats, and are starting to blend together with targeted attacks. As the number of these attacks increases, so does the cyber risk for organizations. Unfortunately, the most common approaches to defense — including vulnerability management, phishing awareness, signature-based network and endpoint detection — ..
Come per tutti i problemi complessi con cause molteplici, non esiste una soluzione per il ransomware che sia contemporaneamente semplice, efficace ed economica. In generale, possiamo distinguere tra contromisure basate sul ripristino dei dati criptati da una intrusione e quelle che mirano a contenere l’intrusione prima del suo successo completo. Il backup come contromisura Le ..
