Andrea Piras

Recommended Mitigations 1) Boot Windows into Safe Mode 2) Navigate to the directory C:\Windows\System32\drivers\CrowdStrike 3) Locate the file matching C-00000291*.sys and delete it 4) Boot the host normally Note: You can also boot in Windows Recovery Environment (WinRE) #crowdstrikefriday

5

Elementi essenziali per lo sviluppo di #malware. Malware Development Essentials Part 1 For Malware development and security professionals, understanding the inner workings of Windows is crucial https://lnkd.in/ejJYzvfc #hack #windows

1

SOC of the future. Blueprint for a Security Operations Center in 2030 - Current #state of the #SOC - Relevant #developments between 2024-2030 - #Vision on the SOC in 2030 Security monitoring and incident response will face major challenges in the coming years, as the complexity of infrastructures, threats and regulations increases. Presently, there is a lack of understanding of how #SOCs might and should evolve to address these challenges. Commissioned by #NCSC, TNO completed this project to look into the possible challenges. Based on the findings from the literature review and #expert #interviews a number of possible scenarios have been provided as a thought #exercise. The report additionally presents a number of recommendations. Centro de Investigación de Ciberseguridad IoT - IIoT

89

Role of Firewalls Firewalls are a fundamental defense tool. They help block unauthorized access to networks. #FirewallProtection #NetworkSecurity #KCSS #CyberEssentials https://lnkd.in/dbmEags

2

Today, no one is immune to cyber threats. Cyber resilience is therefore no longer an option but an essential obligation for any state or company operating in the digital and cyber space. Protecting critical infrastructures and sensitive data is crucial to ensuring security and continuity of services. In the face of increasingly sophisticated attacks, every organization must strengthen its defenses and anticipate risks to be better prepared for cyber crises. As highlighted in the World Economic Forum's report on Cyber Resilience, building resilience is key to mitigating the impact of cyber threats and ensuring long-term stability in the digital age: https://lnkd.in/enfk6HqA

34

Over 22k unpatched Palo Alto Network devices (PANs) exposed to the internet. The time to patch these has passed as exploitation attempts have been detected, with more expected. Patch your PANs and sign up for Shadowserver reports to get alerts as to whether or not there are vulnerable PANs in your networks.

93

5 commenti

The divide between “multi-purpose” and “vertical” vendors is longstanding in IT, but analysts now favor the latter in cybersecurity. 📈 With cyber threats increasing rapidly, few vendors can tackle them on multiple fronts. 🗣️ At #InfoSec 2024, Libraesva CEO Paolo Frizzi discussed their niche status in Italy and international expansion. 🎯 He highlighted future goals and presented “The Reality Gap” study, showing #email is still underestimated as a risk factor ⚠️✉️ (download here: https://ow.ly/oMzL50SIXae). 👨‍💻 Read the full article by SecurityOpenLab, here: https://ow.ly/CTTL50SIXaf #EmailSecurity #Cybersecurity #Interview #InfoSec2024

31

🚨 Security Alert: Cloud Europe hit by RansomHub Group! 🚨 Cloud Europe S.r.l., a company specialising in the design and management of data centers, has become the latest victim of a major ransomware attack. This breach has significantly compromised their security measures and service continuity. Additionally, the disclosure of their employees' identity documents constitutes a serious violation of GDPR, exposing the company to significant legal and financial repercussions. ⚖️📉 💻 Details of the Attack: 🌐 Website: https://lnkd.in/gtrxHY5V  📍 Target Location: Via Giacomo Peroni, 292 - 00131 Roma, P. IVA 13441661009, 41.93265° N, 12.62955° E 🆔💳 PII disclosed: EU identity cards and health insurance cards 📂 Data Compromised: Over 70TB of server data encrypted and 541.46GB of sensitive data stolen. 🚨 Persistent Threat: The attackers claim ongoing access to both Cloud Europe’s network and their clients' and partners' networks. ⚠️ Message from RansomHub: "We have encrypted your servers and stolen over 541.46GB of your sensitive data. We maintain persistence in your network and in your clients' and partners' networks. If you want to voluntarily start cooperation, we are waiting for you in chat. Otherwise, all data will be published or sold." 📆 Company Profile: Cloud Europe, based in Rome, is a company that specialises in the design, construction, and management of modular data center infrastructure for both private and public sector clients. They focus on providing high standards of security and quality to ensure business continuity and resilience, particularly for organizations in the financial and insurance sectors​ Stay vigilant and protect your data! 🛡️ #DekkoSecure #CyberSecurity #DataBreach #Ransomware #CloudEurope #Infosec #DataProtection #StaySafe #CyberAttack #RansomHub #CyberAlert #DataCenters #BusinessContinuity #ITSecurity

3

💡An interesting comparison of DALL-E images generated for two similar prompts, at different times in the last year and half, showing how adding "cybersecurity" affected the outcome. 💡In the first two examples, adding the word “cybersecurity”, impacted how attractive the image was. In the final example, adding cybersecurity doesn’t automatically create a less attractive image. 

22

9 commenti

The ECSF provides an open tool to build a common understanding of the cybersecurity professional role profiles in Europe and common mappings with the appropriate skills and competences required. https://lnkd.in/dP7UyRmN #SIEM #SOC #DFIR #TI #CTI #MITRE

2

LLM Tip of the Day Do you have security baselines for an application or a database that are Linux specific but you need the Windows version? Ask your favorite LLM to convert the OS guidance for you, and have an OS expert refine the changes. Saves a a good amount of time.

5

The #security of modern applications is constantly evolving. All application environments will face new types of attacks in the future, and using #AI to automatically adjust policies is essential. Marco Urciuoli Country Manager for Italy and Malta at F5, delves into the details with SecurityOpenLab to explore the results of our latest SOAS report, including #API security, the rise of modern applications, and future expectations in the Italian market: https://lnkd.in/eM34FAkv

3

Precursor Security Managed Detection & Response have identified a phishing campaign orchestrated from compromised supplier mailboxes. Phishing e-mails containing an image portraying an attached file, the screenshot is actually hyperlinked to a .docx file on Dropbox that leads the user to an evilginx credential stealer. SOCs and IT teams should look out for the following indicators: - Web Proxy logs: Dropbox URLs to docx files - Web Proxy logs: URLs with '1.html' or other vague html names - DNS queries to glitch[.]me - DNS queries to domains with the '.xyz' TLD

32

Need to turn business continuity, data management, and security into music to your ears? Let's do this together. SSI: Digitally Mindful #businesscontinuity #datamanagement #cybersecurity Antonio Assandri - Roberto DI CATALDO - Massimo Chierici

7

2 commenti