Cyberpills.news
Exploring the future of cyber security and cloud computing at the european expo in AmsterdamCutting-edge innovations, global networking, and learning opportunities in cyber security and cloud computing in september 2023The Cyber Security & Cloud Expo is scheduled for September 26-27, 2023, at the prestigious RAI Amsterdam. This event will bring together industry leaders, innovators and enthusiasts from around the world to explore the latest trends and advancements in the cyber security and cloud computing industry....
DarkBERT: the AI weapon in the fight against cybercrimeAn advanced language model trained on the dark web promises to revolutionize defense against cyberthreatsThe artificial intelligence (AI) sector has seen impressive growth in recent months, with large language models (LLMs) making their way onto the scene. The emblematic case is ChatGPT, an AI chatbot, capable of generating contents of various kinds - texts, images, audio - thanks to the analysis of an...
National Cybersecurity Agency annual report 2022: progress and challengesACN highlights developments in the cybersecurity industry, with a focus on digital protection, response and development, emphasizing international missions and partnershipsItaly's National Cybersecurity Agency (ACN) recently made its annual report available to the public, detailing the overall impact of its operations over the past year. The document, expressly required by the founding legislation and released to Members of Parliament, highlights ACN's actions, results...
DDoS attack on Microsoft: OneDrive, Azure and Outlook stoppedA mysterious hacktivist collective, Anonymous Sudan, disrupts Microsoft cloud services through a massive DDoS attack. Microsoft responds with security tighteningMicrosoft recently confirmed that a DDoS-type cyberattack caused a number of significant disruptions to its cloud services in early June. These problems have affected the use of popular applications such as Outlook, OneDrive and Azure Cloud. Responsibility for the hack was blamed on an obscure hacktivist...
Revolutionizing transport: the future of ADAS in vehiclesAn insight into the trends, opportunities, and legal landscape impacting the deployment of Advanced Driver-Assistance Systems over the next half-decadeThe future of transportation holds immense promise with the evolution of Advanced Driver-Assistance Systems (ADAS). In the past decade, billions of dollars have been invested in these technologies, aiming to revolutionize our roads and transport logistics. Market predictions suggest ADAS could generate...
Enel launches the Cyber Harbour: Turin's cybersecurity hubThe energy giant puts Turin at the center of its strategies with a new research and development center that aims to protect critical infrastructures and companies from cyber attacksEnel has decided to focus on Turin as the site of its new research center for information security, called "Cyber Harbour". The project, unveiled on June 19 at the Lingotto, the energy giant's new operational base, envisages that the center is not only a stronghold of security but also a place of connection...
Diicot cybercriminals unleashing a new wave of DDoS attacksRomanian threat actor Diicot exhibits enhanced capabilities and diversified attack strategies, posing significant cybersecurity concernsIn the realm of cybersecurity, researchers have unearthed some new payloads that have not been recorded before, tied to a Romanian cyber threat group referred to as Diicot. This group is suspected to be capable of initiating distributed denial-of-service (DDoS) attacks. The name Diicot carries significant...
Mystic Stealer - the new emerging cyberthreatSophisticated malware for rent on hacking forums and the darknet, with worrying impact on browsers, cryptocurrencies and password managersSince April 2023, an emerging malware called Mystic Stealer has been rapidly spreading among the cybercriminal community. This malicious software is offered for rent for $150 a month on darknet hidden markets and hacking forums. Its victims include 40 web browsers, 70 browser extensions, 21 cryptocurrency...
Jiuzhang: the quantum revolution in the computing worldFrom a chinese laboratory comes a supercomputer capable of eclipsing any traditional rival, opening new horizons for artificial intelligenceIn the world of quantum computers, one stands out for its incredible performance: the Jiuzhang, created by a group of scientists led by Pan Jianwei, recognized in China as the "father of quantum computing". According to the South China Morning Post, the Jiuzhang can perform artificial intelligence (AI)...
Cyber security: a priority for the sports worldThe increase in cyberattacks in the sports sector underlines the importance of preventive strategies and collaboration with cybersecurity expertsWe live in an age where the use of the Internet is increasingly predominant and as such, cyber security plays a crucial role. Every entity, from companies to government institutions, and every individual, is susceptible to being the target of cyber attacks. That's why taking preventive measures to defend...
New frontiers of technological surveillanceBetween state-of-the-art prison monitoring systems and government data collection, privacy is increasingly under siegeA prison in Atlanta, Georgia has introduced a state-of-the-art monitoring system that not only records the whereabouts of inmates, but also their heartbeat. This system, developed by Talitrix, uses hundreds of sensors attached to inmate-wearable bracelets, similar to those of Fitbits. Although prison...
Cybersecurity 2023: new technological frontiers to defend against cybercrimeFrom artificial intelligence to blockchain: how emerging innovations are revolutionizing digital securityThe importance of cybersecurity is now essential for companies and individuals in an era characterized by the incessant increase in cyber attacks and data breaches. The continuing evolution of cybercriminals and the changing nature of cyber threats have heightened the need for advanced cybersecurity...
Vulnerability Etag: the anonymity of Tor at riskA recent discovery shows how the Etag HTTP header can be exploited to reveal the hidden IP address of Tor servicesTor is known for providing a higher level of anonymity online, making it difficult for users to be identified and tracked. However, a recent discovery has exposed a possible vulnerability. This comes from the use of an HTTP header called Etag, which can potentially reveal the true IP address of a service.Etag...
The tech paraphernalia of 2023: maximize the growth of your startupLearn about the leading software tools that are revolutionizing how new businesses operate and thrive in the digital ageStarting a business can be challenging, especially if you have limited resources and budget. However, there are a number of pieces of software that can help you establish your business quickly and efficiently without draining your budget. One of them is Eye10, a simplified search engine optimization...
Safe surfing in the sea of telecommuting: 10 key cyberthreatsDiscover the most frequent risks of remote working to protect your data and keep your digital security barrier strongWith the rise of remote working, catalysed by the Covid-19 pandemic, cybersecurity has become critical for businesses. While telecommuting offers work flexibility and cost savings, it also introduces a number of cybersecurity risks that need to be addressed. In this article, we'll explore the 10 most...
Misinformation and cybersecurity: the dark connectionDeciphering the role of disinformation in cybersecurity threats and social engineeringThe global landscape is increasingly subject to the phenomenon of disinformation, which has caused many discussions over the years. Prominent politicians, such as Donald Trump with his constant claims of "fake news" or Vladimir Putin with his provocative rhetorical style, have fueled this issue. Furthermore,...
Russian group Clop attacks US government agenciesThe Clop emerges as a possible leading actor. The group, active since 2018, targets organizations affected by a specific vulnerabilityYesterday, US Cybersecurity officials said a "small amount" of government agencies have been affected by data breaches as part of an extensive hacking campaign. The culprit is likely Russia-based Clop ransomware group. This group of cybercriminals took advantage of a vulnerability in the MOVEit file...
Louisiana big data breach: personal safety appealAfter massive cybersecurity attack, experts and organizations urge citizens to protect their sensitive information and safeguard their creditDemetrice Rogers, a cybersecurity expert and adjunct professor at Tulane University's School of Professional Advancement, expressed her concern about the sharing of personal data of Louisianans on the dark web, following a large data breach. As public attention focuses on the problem, he urged the public...
Diicot: from cryptojacking to DDoS attacksRomanian threat group extends its capabilities: new attack strategy details and defense adviceCybersecurity researchers have identified previously undocumented workloads linked to Diicot, a Romanian threat group, highlighting the group's potential to launch Distributed Denial of Service (DDoS) attacks. The name Diicot has a certain relevance, as it coincides with the name of the Romanian police...
Innovation in cybercrime in the post-pandemic eraAttackers adapt to new technological realities: from the decay of Office macros to the rise of multi-factor authentication bypass and cloud threatsAs COVID-19-related medical and economic measures have eased, attackers have had to reinvent themselves to find new ways to make money, honing their social engineering skills, commodifying once-sophisticated attacking techniques, and creatively seeking new opportunities in unexpected. In 2022, the cyber-attack...
Splinternet: the fragmentation of the internet and the future of the webThe growing division of cyberspace: how nations, laws and corporations affect the global structure of the webThe word "Armageddon", in the collective imagination, is a synonym for imminent catastrophe or unattainable disaster. While usually used in a religious context, we can borrow this term to describe a current phenomenon that is insidiously threatening the unity of the internet. Although the internet appears...
The impending cybersecurity revolution in the oil and gas industryRising governance expectations, heightened regulatory requirements, and the emergence of new trends outline a complex future for cybersecurity in the energy industryIn recent years, the oil and gas industry in the United States has witnessed a growing need for cybersecurity measures due to the ever-increasing cyber risks. This need has become even more pressing with the new information security directives issued by the Transportation Safety Administration (TSA)...
Exponential growth expected in the industrial cyber security marketThe industrial sector faces complex challenges in the digital age: the risks of cyber security and the importance of employee trainingAccording to a recent report by Future Market Insights (FMI), the Industrial Cyber Security Market is forecast to expand with a compound annual growth rate (CAGR) of 7.7% from 2022 to 2032. The market is projected to reach a valuation of $20.7 billion in 2022 and $43.5 billion by 2032.The challenges...
Boom of SMS scams: 330 million dollars lost in the last year aloneFTC report shows a worrying increase in message scams: FBI and cybersecurity experts share tips on how to recognize and prevent themThe report released last week by the Federal Trade Commission (FTC) reveals a disturbing reality: SMS scams have caused economic damage in excess of $ 330 million in the last year alone. This figure marks a notable increase from the previous year's 131 million and the 86 million recorded in 2020.Smishing:...
US federal agencies in the crosshairs of a global cyberattackA sophisticated cyber-attack exploits software vulnerabilities, targeting critical infrastructure and causing national security concernsSeveral US federal agencies have been hit by a global cyberattack that exploited a software vulnerability, CNN reported. Eric Goldstein, assistant executive director for cybersecurity at the Cybersecurity and Infrastructure Security Agency (CISA), said his agency "is providing support to several federal...
Trend Micro revolutionizes threat hunting with generative AIAI assistant, based on GPT 3.5, promises to streamline security center operations and speed up incident investigationsTrend Micro Inc. today launched "Companion", a new GPT 3.5-based generative AI assistant. This tool is designed to be a trusted point of reference for Security Operations Center (SOC) teams, to which they can turn to answer questions related to threat hunting. Companion integrates with Trend Vision One...
Safeguard the energy sector from cyberattacksFour essential strategies to strengthen the resilience of the energy sector against increasingly sophisticated cyber threatsIn the context of digital evolution, energy operators are increasingly connecting decades-old systems, combining information (IT) and operational (OT) technologies. Traditional security techniques, based on the model of total separation between digital and physical systems, have proved inadequate to...
Telegram data breach: implications for India's personal data securityCybersecurity experts weigh in on the consequences, the importance of security infrastructure, and why healthcare institutions are primary targetsRecently, an alarming disclosure about a data breach has emerged, purporting that the globally renowned messaging service, Telegram, holds access to private data of Indian citizens, encompassing their Aadhaar and PAN cards. This information leak is attributed to the CoWIN portal, a hub for Covid vaccination...
Zilla Security launches SaaS innovations for corporate identity securityWith Zilla Secure and SOD, the company aims to revolutionize the security management of cloud and SaaS applications, making it easier to identify and fix improper access configurationsZilla Security has unveiled two new software-as-a-service (SaaS) solutions, Zilla Secure and Segregation of Duties (SOD). These innovations aim to improve enterprise-level identity security for cloud-based applications and infrastructure, SaaS and legacy applications.The need for new security tools in...
Zscaler innovates cloud security: new services for the Zero Trust ExchangeThe new offering enhances branch office monitoring, attack mitigation and secure connection, revolutionizing IT managementZscaler, the innovative security company, unveiled four new services and capabilities to further enhance its Zscaler Zero Trust Exchange cloud security platform. The new additions deliver significant improvements in monitoring and remediating sophisticated attacks, as well as providing a new way to securely...
Cryptographic attack revealed: cameras become hacking toolsThe secret keys of smart cards and smartphones could be compromised thanks to an innovative attack that uses video cameras and power LEDsResearchers have developed an innovative attack that allows the recovery of secret encryption keys contained in smart cards and smartphones. This is accomplished by using iPhone cameras or commercial surveillance systems to record power LEDs, which indicate when the smart card reader or smartphone is...
Fraudulent GitHub intrusion: fake accounts spread malwareA network of fake researchers is using GitHub to spread malicious code masquerading as proofs of concept for unknown vulnerabilitiesSeveral fake GitHub accounts associated with a fraudulent cybersecurity firm have been spotted for spreading malicious repositories on the code hosting service. Seven of these repositories, still accessible at the time of writing, pose as test exploits (PoCs) for alleged zero-day vulnerabilities in Discord,...
Security flaw exposed in WooCommerce Stripe Gateway pluginMajor vulnerability could allow attackers to access and disclose sensitive information, affecting over 900,000 active installationsA security flaw has been discovered in the WordPress WooCommerce Stripe Gateway plugin, which could lead to unauthorized disclosure of sensitive information. This vulnerability has been tracked under the designation CVE-2023-34000, which affects plugin versions 7.4.0 and earlier.Fixed the problem and...
Microsoft addresses 73 software vulnerabilities on June 2023 Patch TuesdayTech giant fixes a number of critical security flaws, including a Chromium zero-day bug, in its latest updateMicrosoft released updates to fix important security holes in its Windows operating system and other software components during the June 2023 Patch Tuesday updates. Of 73 identified vulnerabilities, six are rated Critical, 63 Important, two Moderated, and one Low as for gravity. This also includes three...
BatCloak: the new malware invisible to antivirusesIn the digital criminal underground, BatCloak emerges as an essential tool for obfuscating malicious codeSince September 2022, a new malware named BatCloak has attracted the attention of cybercriminals for its advanced obfuscation features, making it virtually undetectable by traditional antivirus solutions. BatCloak is distinguished by its ability to transform malicious code into "evasive" versions, making...
A bridge between school and work: the agreement between Rome and Leonardo for training in ITAn innovative collaboration that promotes education in computer science and cybersecurity, combating early school leaving and offering career opportunitiesA three-year agreement was recently signed at Palazzo Valentini between the Metropolitan City of Rome Capital and Leonardo, a leading company in the IT field. This agreement has as its main purpose the creation of an advanced training course in Information Technology. Starting from the 2023-2024 school...
Dark Frost Botnet: the silent threat behind gaming industry disruptionsUnmasking the perpetrator behind the threat: a comprehensive dissection of its devastating structure, goals, and capabilitiesUnusual activity from a specific application piqued the interest of the Akamai company, prompting them to investigate. Noticing a series of unusual HTTP requests and binaries labeled "roof", Akamai began technical analysis. While initial scans using various third-party tools failed to reveal any nefarious...
The US fears Chinese attacks on critical infrastructureIn a climate of growing tension, US authorities predict potential sabotage of their infrastructure by Chinese hackersA senior US cybersecurity official on Monday expressed concern about the likelihood that Chinese hackers could disrupt critical US infrastructure, such as pipelines and railroads, in the event of a conflict with the United States. In a speech at the Aspen Institute in Washington, the Director of the...
ISA launches first ever OT Cybersecurity Summit in ScotlandInternational experts gather to discuss standards and innovations in the safety of operational technologiesAberdeen, Scotland has been selected as the launching point for the International Society for Automation's (ISA) Operational Technologies (OT) Cybersecurity Summit. This choice was motivated by the city's strategic position in the energy sector. After spending two days on cybersecurity training, the...
Outage of Microsoft services attributed to a possible attack by Anonymous SudanRepeated Azure outages raise concern as Microsoft investigates alleged DDoS attackMicrosoft reported a new outage on Friday after customers received error messages while trying to sign in to the Azure portal. Additionally, customers may have had difficulty trying to access the Microsoft Sign in admin center and Microsoft Intune. Despite this, the outages were mitigated within hours.Preliminary...
The cybersecurity in the nuclear domain: an examination of NNSAAn in-depth exploration of the National Nuclear Security Administration's approach to managing cybersecurity risks in its digital and nuclear weapon systemsThe National Nuclear Security Administration (NNSA) is responsible for managing the cybersecurity risks of complex systems that extend beyond typical computer networks. These systems are incorporated in nuclear weapon components and the weapons themselves. While the NNSA has been creating policies and...
The geopolitics of cyber extortion: analysis and implications according to Orange CyberdefenseReport 2023: increase in attacks in south-east Asia and Latin America, decline in NATO nations. The crucial role of public-private collaborationCyber threats, especially cyber extortion attacks, have become increasingly common in recent years, putting organizations of all sizes and industries at risk. This is the finding of Orange Cyberdefense, which analyzed the data relating to 6,707 companies confirmed victims. Despite an 8% drop in cyber...
Fortinet releases patches to fix a serious vulnerability in FortiGate firewallsCritical vulnerability CVE-2023-27997 discovered by a Lexfo researcher could allow remote code execution if exploited by a threat actorFortinet has released a series of patches to fix a critical security vulnerability in its FortiGate firewalls. The aforementioned vulnerability could be exploited by a threat actor to remotely execute code. Lexfo security researcher Charles Fol, who discovered and reported the flaw, said in a tweet over...
ISO/IEC 27001:2022: changes and comparison with the GDPRIn-depth analysis of the structure of ISO/IEC 27001:2022, its key frameworks, its impact on data protection and comparison with EU regulation 2016/679The publication of ISO/IEC 27001:2022 - "Information security, cybersecurity and privacy protection - Information security management systems - Requirements" represents a significant advance in information security management. This international standard, released in October 2022, particularly emphasizes...
EU contemplates Huawei ban in 5G networks: security and economic dependence on ChinaIn response to the security risks, the European Union is considering excluding Huawei from the development of next-generation networksThe idea is emerging in Brussels of prohibiting European Union countries from using companies that could compromise the security of next-generation telecommunications networks, including Huawei. According to sources reported by the Financial Times, the European Commission would be examining the possibility...
New law to strengthen international cooperation on cyber securityUS senators propose international cyber partner act to enhance global response to cyber attacks, protecting critical infrastructure and promoting cross-border cooperationOn June 7, Senators Gary Peters, a Democrat of Michigan, and James Lankford, a Republican of Oklahoma, introduced a bipartisan bill to improve the Cybersecurity and Infrastructure Security Agency's (CISA) ability to work with partners conferences on cyber security issues. This move was born out of a...
The new frontiers of cybersecurity: interview with the director of the National AgencyFrattasi, the director of the Cybersecurity Agency, commits to faster cyber education, artificial intelligence adoption, and agency expansionBruno Frattasi, director general of the National Cybersecurity Agency, in an interview, talks about the constant progress of the Agency. Key topics include Pnrr implementation, 5G transition, contracts and resilience. The Agency is also considering a possible move to a new location. Through the use of...
Meta sanctioned: IDPC enforces EU to US data transfer blockMajor Irish verdict clashes with social media giant over data protection, potentially disrupting Facebook services in EuropeOn May 12, 2023, the Irish Data Protection Commission (IDPC) made a significant decision against Meta Platforms Ireland Ltd, formerly known as Facebook. The case concerns the transmission of personal data, some of which are sensitive, of Facebook users located in the European Union (EU) to the parent...
Webinar on digital excellence for SMEs: strategies and cybersecurityLearn how to manage a competitive and secure digital presence with the Punto Impresa Digitale webinarDigital is now a fundamental component for the success of any company, and this is especially true for small and medium-sized businesses. To help SMEs understand the importance of digital and how to use it effectively, the Chamber's Punto Impresa Digitale has organized a series of workshops called Eccellenze...
New spectralviper backdoor used in an attack against vietnamese public companiesUsing open source projects as a malware customization strategyA new backdoor named Spectralviper has been used in an attack on Vietnamese public companies. Elastic Security Labs has discovered that it is a previously unknown, highly obscured 64-bit backdoor that provides PE upload and injection, file upload and download, file and directory manipulation, and the...