Mauro Bollini

#CyberAttack #Italy: Università degli Studi di Siena has been compromised by the LockBit 3.0 ransomware group. The group allegedly exfiltrated 514 GB of sensitive documents, including: - Documents with budgets detailing expenses by month from 2020 to 2024 - Documents approved by the Board of Directors regarding the financing of projects and tenders from 2022 to 2026, including financing amounts - Documents on extraordinary construction works, the appointment of the contractor, and the allocation of a budget of 1.7 million euros - Non-disclosure documents for WineCraft 2024 - Tender design contracts for 2023, including the contract budget - Documents outlining the contractor's investment plan for 2022, including expenses, rents, and the general financial plan Ransom deadline: 28th May 24. On May 10, the University of Siena's website communicated that due to a massive cyber attack by an international group of hackers, the website admission[.]unisi[.]it, the ticketing service, and the payment management services linked to international admissions are currently suspended. The technical team, supported by the National Cybersecurity Agency, is progressively restoring all services. Read more: https://lnkd.in/dKEFVWtp #Ransomware #DataBreach

4

RANSOMWARE ALERT ☣  - Università degli Studi di Siena falls victim to LockBit Ransomware The group claims to publish the organization's data on May 28, 2024.and provided sample screenshots. - #data_breach #data_leak #infosec #dark_web #DataBreach  #DataLeak  #Services  #CyberThreat  #CyberAttack

3

We’re happy to share with you the newest issue of eForensics Magazine - OSINT in Forensics. https://lnkd.in/dYKKHyZ3 #infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding

3

🚨Medium Risk Vulnerability🚨 in OpenImageIO! CVE-2024-40630 is an information disclosure vulnerability due to a bug in the HEIF input functionality. Users are advised to upgrade to the 2.5.13.1 release. This highlights the importance of keeping software up to date to prevent exploitation of known vulnerabilities. #OpenImageIO #Vulnerability #OWASP #InfoSec https://lnkd.in/eAVyiNkR

1

New feature in TaskForce 2024.6! 🎉 With the new TaskForce update, you can combine various ports into a group in Express mode. Each group has different settings of target folder, file format, type of hash to calculate, and case report fields. #dfir #digitalforensics #forensicimaging

13

New Report on Cyber Security Skill Gaps reveals 14% of small firms in Italy says its very difficult to hire employees with the right Cyber Skills     Full Report = https://lnkd.in/g_g5Av_z

2

The cover topic for this month is reverse engineering, and we have a great guide for you to follow, by Leonardo Marciano and Deivison Franco. https://lnkd.in/dr6U9UjG #infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding

1

The cover topic for this month is reverse engineering, and we have a great guide for you to follow, by Leonardo Marciano and Deivison Franco. https://lnkd.in/dr6U9UjG #infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding

1

The cover topic for this month is reverse engineering, and we have a great guide for you to follow, by Leonardo Marciano and Deivison Franco. https://lnkd.in/dr6U9UjG #infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding

1

🚨Ransomware Alert 🇮🇹Italy - Inps Servizi On November 18, 2024, Inps Servizi, a provider supplying cumulative contribution data from companies via model F24 to QuAS, experienced a ransomware cyberattack. This incident exclusively affected Inps Servizi's systems and did not impact QuAS's operations. The compromised data pertained solely to the total contributions paid by each company, without any personal details of individual members. At the time of writing, the website of Inps Servizi (inpsservizi​.it) is not responding.

1

The cover topic for this month is reverse engineering, and we have a great guide for you to follow, by Leonardo Marciano and Deivison Franco. https://lnkd.in/dZK7GtiU #infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #opensource #windows

1

The cover topic for this month is reverse engineering, and we have a great guide for you to follow, by Leonardo Marciano and Deivison Franco. https://lnkd.in/dZK7GtiU #infosec #cybersecurity #pentest #pentesting #hacking #hackers #windows

1

Discover Scilla, a powerful info-gathering tool built in GO! Efficiently perform subdomain enumeration, DNS lookup, port scanning, and directory bruteforcing. https://lnkd.in/gzCSN2a Edoardo Ottavianelli #OSINT #intelligence #investigation #reconnaissance #cybersecurity #infosec #tool

97

1 Comment

New Vulnerability Report! CVSS 6.5 The WordPress Advanced Control Manager plugin by ItalyStrap, version 2.16.0 or earlier, is vulnerable to Cross Site Scripting, which could enable attackers to inject harmful scripts like redirects and advertisements into websites, impacting visitors. Report link: https://lnkd.in/g_WEhnBm #patchstack #cybersecurity #WordPress #opensource #vulnerability #updatenow #technews #securityalert #websecurity #infosec

1

1 Comment

📣 InTheCyber: a team in continuous growth and certification. We are excited again this week to share another milestone achieved by our team of experts! Congratulations Marco Pedrinazzi for obtaining the MAD20 MITRE ATT&CK Security Operation Assessment certification. 💻🔒 This certification enables Marco to conduct fast, efficient and comprehensive SOC assessments based on the ATT&CK framework. This means that he has validated his abilities to: - Analyse SOC technologies and data sources to identify potential vulnerabilities. - Conduct in-depth interviews and discussions with SOC staff using ATT&CK as a reference point. - Make targeted recommendations to improve the effectiveness and detection capabilities of the SOC based on the evaluation results. Congratulations again Marco Pedrinazzi! 🏆 #MAD20 #MITRE #ATT&CK #Security #Operation #Assessment #SOC #CyberSecurity #InTheCyber

7