Antonio Artiaco

RANSOMWARE ALERT ☣  - Università degli Studi di Siena falls victim to LockBit Ransomware The group claims to publish the organization's data on May 28, 2024.and provided sample screenshots. - #data_breach #data_leak #infosec #dark_web #DataBreach  #DataLeak  #Services  #CyberThreat  #CyberAttack

3

#CyberAttack #Italy: Università degli Studi di Siena has been compromised by the LockBit 3.0 ransomware group. The group allegedly exfiltrated 514 GB of sensitive documents, including: - Documents with budgets detailing expenses by month from 2020 to 2024 - Documents approved by the Board of Directors regarding the financing of projects and tenders from 2022 to 2026, including financing amounts - Documents on extraordinary construction works, the appointment of the contractor, and the allocation of a budget of 1.7 million euros - Non-disclosure documents for WineCraft 2024 - Tender design contracts for 2023, including the contract budget - Documents outlining the contractor's investment plan for 2022, including expenses, rents, and the general financial plan Ransom deadline: 28th May 24. On May 10, the University of Siena's website communicated that due to a massive cyber attack by an international group of hackers, the website admission[.]unisi[.]it, the ticketing service, and the payment management services linked to international admissions are currently suspended. The technical team, supported by the National Cybersecurity Agency, is progressively restoring all services. Read more: https://lnkd.in/dKEFVWtp #Ransomware #DataBreach

4

This Physical Red Team Operations: Physical Penetration Testing with the REDTEAMTOPSEC Methodology™ Credential is VERIFIEDThis digital credential was securely issued via Accredible and its information is valid. https://lnkd.in/dfXuKnNZ

2

Thanks for the great new knowledge I learned from your course, training. This course should be completed by all corporate security and everyone who is for information security

5

1 commento

New Report on Cyber Security Skill Gaps reveals 14% of small firms in Italy says its very difficult to hire employees with the right Cyber Skills     Full Report = https://lnkd.in/g_g5Av_z

2

New feature in TaskForce 2024.6! 🎉 With the new TaskForce update, you can combine various ports into a group in Express mode. Each group has different settings of target folder, file format, type of hash to calculate, and case report fields. #dfir #digitalforensics #forensicimaging

13

Would you like to learn new tools that you will use in your daily investigative work? eForensics Magazine will meet your needs. https://lnkd.in/d7_mm2JV #infosec #cybersecurity #pentest #pentesting #hacking #hackers #opensource

1

The Cybersecurity and Infrastructure Security Agency (CISA) announced the release of a new resource, the Vehicle Incident Prevention and Mitigation Security Guide. CISA created this Guide to provide stakeholders with a high-level overview of general security best practices to prevent vehicular attacks that can harm pedestrians and critical infrastructure, and potential actions to mitigate the consequences, should an incident occur. It also provides a current, detailed look at the threat environment for this vector, and underscores the fact that taking steps to mitigate against deliberate incidents can yield additional benefits for protection against accidental ones. The product outlines key steps organizations and individuals can take to increase their security in the face of vehicle incident threats. https://lnkd.in/dC9ynu9b

9

2 commenti

MerkSpy is designed to clandestinely monitor user activities, capture sensitive information, and establish persistence on compromised systems. But opening the file triggers the exploitation of CVE-2021-40444, a high-severity flaw in MSHTML that could result in remote code execution without requiring any user interaction. It was addressed by Microsoft as part of Patch Tuesday updates released in September 2021. #MSHTML #patching #security

1

[FREE ACCESS ARTICLE]Reconnaissance - Questions and Answers with Gilbert Oviedo https://lnkd.in/dK_q9_ar \#infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding #opensource

1

A hacker has allegedly uncovered a Remote Code Execution (RCE) vulnerability in a subdomain of Italy’s Ministry of Defence website. This could have serious implications, allowing remote code execution. Dive into the details: https://lnkd.in/gnghh538 #SecurityAlert #RCEVulnerability #ItalyDefence #CyberThreats #CyberSecurity #hackernews #threatintelligence

2

CVE-2024-3661 - CVSS 8.8 - EPSS We don't have an EPSS score for this CVE yet - By design, the DHCP protocol does not authenticate messages, including for example the classless static route option (121). An attacker with the ability to send DHCP messages can manipulate routes to redirect VPN traffic, allowing the attacker to read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN. Many, if not most VPN systems based on IP routing are susceptible to such attacks. Ref.1: https://lnkd.in/eXEskBcn Ref.2: https://lnkd.in/e_KwDMtH

1

The cover topic for this month is reverse engineering, and we have a great guide for you to follow, by Leonardo Marciano and Deivison Franco. https://lnkd.in/dZK7GtiU #infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #opensource #windows

1