Luca Donetti Dontin Il sito di un pazzo sistemista! - page 92

AT&T Discloses Breach of Customer Data

On July 12, AT&T released a public statement on unauthorized access of customer data from a third-party cloud platform. AT&T also provided recommendations and resources for affected customers.     CISA encourages customers to review the following AT&T article for additional information and follow necessary guidance to…

Continue reading →

Vulnerabilità in prodotti Citrix (AL01/240712/CSIRT-ITA)

Rilevata nuova vulnerabilità di sicurezza con gravità “alta” che interessa il software Citrix uberAgent impiegato per il monitoraggio di desktop, infrastrutture desktop virtuali (VDI) e ambienti informatici server-based. Tale vulnerabilità potrebbe permettere ad un utente malevolo la possibilità di elevare i propri privilegi sui dispositivi…

Continue reading →

Misusing Palo’s Captive Portal as a Guest Wi-Fi Welcome Page

I was faced with an interesting customer requirement: An existing guest Wi-Fi should be prefaced with a welcome page for accepting the terms and conditions. Since there was already a Palo Alto Networks firewall in place, could we perhaps use its captive portal directly for…

Continue reading →

FCC to Provide $200 Million to Schools and Libraries Cybersecurity

Here’s everything you need to know about the FCC’s Schools and Libraries Cybersecurity Pilot Project. Source link Author: Fortinet Article used for cyber security disclosure.

Continue reading →

CISA and FBI Release Secure by Design Alert on Eliminating OS Command Injection Vulnerabilities

Today, CISA and FBI are releasing their newest Secure by Design Alert in the series, Eliminating OS Command Injection Vulnerabilities, in response to recent well-publicized threat actor campaigns that exploited OS command injection defects in network edge devices (CVE-2024-20399, CVE-2024-3400, CVE-2024-21887) to target and compromise users. These vulnerabilities…

Continue reading →

Rilevata nuova vulnerabilità relativa a OpenSSH (AL05/240710/CSIRT-ITA)

È stata recentemente rilevata una nuova vulnerabilità, identificata tramite la CVE-2024-6409, che interessa OpenSSH. Tale vulnerabilità – distinta da regreSSHion, trattata nell’ambito della AL01/240702/CSIRT-ITA – è dovuta ad una condizione di “race condition” nel gestore dei segnali che potrebbe comportare l’esecuzione di codice arbitrario nel…

Continue reading →

Rilevate vulnerabilità in prodotti Fortinet (AL03/240710/CSIRT-ITA)

Rilevate nuove vulnerabilità in alcuni prodotti Fortinet, di cui 5 con gravità “alta” in FortiExtender, FortiADC e FortiAIOps. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.

Continue reading →

How to Speak to the Board So They Get on Board with Security

Learn more about what CISOs need to know about cybersecurity regulations and making cyber a business imperative. Source link Author: Fortinet Article used for cyber security disclosure.

Continue reading →

Page 92 of 189 ← First ... 90 91 92 93 94 ... Last →