Il CERT-AGID ha rilevato recentemente una sofisticata campagna di phishing mirato che sta prendendo di mira gli studenti dell’Università di Padova (UniPd).

L’operazione, ancora in corso, sfrutta tecniche di ingegneria sociale particolarmente insidiose, pensate per colpire un target giovane ma altamente digitalizzato come quello universitario.

La rapidità con cui si è diffusa l’attività fraudolenta ha spinto gli analisti del CERT ad avvertire immediatamente l’Ateneo.

Secondo le prime evidenze, i criminali informatici stanno inviando email contenenti riferimenti a false borse di studio, ideate per attirare l’attenzione delle vittime e stimolare un’interazione rapida.

I messaggi rimandano a una pagina web che replica in maniera quasi identica il portale di Single Sign-On (SSO) dell’Università di Padova. Obiettivo finale: sottrarre le credenziali istituzionali degli studenti, che potrebbero poi essere utilizzate per ulteriori compromissioni o accessi non autorizzati ai servizi accademici.

A seguito dell’individuazione della minaccia, il CERT-AGID ha informato tempestivamente l’Università di Padova, mettendo in moto le procedure di risposta e mitigazione. Contestualmente, il team ha distribuito gli Indicatori di Compromissione (IoC) a tutti gli enti accreditati al feed ufficiale, per consentire un blocco rapido delle infrastrutture malevole e prevenire l’espansione dell’attacco ad altri potenziali bersagli.

Questo episodio conferma come il settore accademico sia sempre più nel mirino delle campagne di phishing, in quanto ricco di dati personali, credenziali e informazioni sensibili. Gli studenti rappresentano un target appetibile, spesso non sufficientemente formato sulle tecniche avanzate di inganno digitale. In questo contesto, la collaborazione tra CERT-AGID e gli atenei rimane un elemento chiave per il contenimento delle minacce.

Nell’era dell’intelligenza artificiale generativa, riconoscere un’e-mail di phishing è più complesso: i messaggi sono più credibili, privi di errori grammaticali e spesso personalizzati.

Per difendersi è fondamentale adottare alcuni controlli di base: verificare sempre il dominio del mittente, evitare di cliccare link sospetti, controllare che le pagine di login siano realmente quelle ufficiali, attivare l’autenticazione a più fattori e, in caso di dubbi, rivolgersi direttamente agli uffici competenti. L’AI può essere un alleato, ma anche una potente arma nelle mani dei cyber criminali: consapevolezza e verifica restano le migliori difese.

L'articolo Campagna di phishing mirato ai danni dell’Università di Padova proviene da Red Hot Cyber.

An interesting trend over the last year or two has been the emergence of modern retrocomputer PCs, recreations of classic PC hardware from back in the day taking advantage of modern parts alongside the venerable processors. These machines are usually very well specified for a PC from the 1980s, and represent a credible way to run your DOS or early Windows software on something close to the original. [CNX Software] has news of a couple of new ones from the same manufacturer in China, one sporting a 386sx and the other claiming it can take either an 8088 or an 8086.

Both machines use the same see-through plastic case, screen, and keyboard, and there are plenty of pictures to examine the motherboard. There are even downloadable design files, which is an interesting development. They come with a removable though proprietary looking VGA card bearing a Tseng Labs ET4000, a CF card interface, a USB port which claims to support disk drives, a sound card, the usual array of ports, and an ISA expansion for which a dock is sold separately. The battery appears to be a LiPo pouch cell of some kind.

If you would like one they can be found through the usual channels for a not-outrageous price compared to similar machines. We can see the attraction, though maybe we’ll stick with an emulator for now. If you’d like to check out alternatives we’ve reported in the past on similar 8088 and 386sx computers.

hackaday.com/2025/11/23/a-coup…

Remember the Key Bridge collapse? With as eventful a year as 2025 has been, we wouldn’t blame anyone for forgetting that in March of 2024, container ship MV Dali plowed into the bridge across Baltimore Harbor, turning it into 18,000 tons of scrap metal in about four seconds, while taking the lives of six very unlucky Maryland transportation workers in the process. Now, more than a year and a half after the disaster, we finally have an idea of what caused the accident. According to the National Transportation Safety Board’s report, a loss of electrical power at just the wrong moment resulted in a cascade of failures, leaving the huge vessel without steerage. However, it was the root cause of the power outage that really got us: a wire with an incorrectly applied label.

Sal Mercogliano, our go-to guy for anything to do with shipping, has a great rundown of the entire cascade of failures, with the electrically interesting part starting around the 8:30 mark. The NTSB apparently examined a control cabinet on the Dali and found one wire with a heat-shrink label overlapping the plastic body of its terminating ferrule. This prevented the wire from being properly inserted into a terminal block, leading to poor electrical contact. Over time, the connection got worse, eventually leading to an undervoltage condition that tripped a circuit breaker and kicked off everything else that led to the collision. It’s a sobering thought that something so mundane and easily overlooked could result in such a tragedy, but there it is.

youtube.com/embed/znWl_TuUPp0?…

We’ve been harping a bit on the Flock situation in this space over the last month or so, but for good reason, or at least it seems to us. Flock’s 80,000-strong network of automated license plate readers (ALPRs), while understandably attractive from a law-and-order perspective, is a little hard to swallow for anyone interested in privacy and against pervasive surveillance. And maybe all of that wouldn’t be so bad if we had an inkling that the security start-up had at least paid passing attention to cybersecurity basics.

But alas, Benn Jordan and a few of his cybersecurity pals have taken a look inside a Flock camera, and the news isn’t good. Granted, this appears to be a first-pass effort, but given that the “hack” is a simple as pressing the button on the back of the camera a few times. Doing so creates a WiFi hotspot on the camera, and from there it’s off to the races. There are plenty of other disturbing findings in the video, so check it out.

youtube.com/embed/uB0gr7Fh6lY?…

Sufficiently annuated readers will no doubt recall classic toys of the ’60s and ’70s, such as Lite-Brite and Rock ‘Em Sock ‘Em Robots, and games like Mouse Trap and Toss Across. We recall owning all of those at one time or another, and surprisingly, they all sprang from the inventive mind of the same man: Burt Meyer, who died on October 30 at the age of 99. We have many fond memories of his inventions, but truth be told, we never much cared for Mouse Trap as a game; we just set up the Rube Goldberg-esque trap and played with that. The rest, though? Quality fun. RIP, Burt.

Last week, we featured the unfortunate story about a Russian humanoid robot that drunk-walked its way into “demo hell” history. And while it’s perhaps a bit too easy to poke fun at something like this, it’s a simple fact of life that the upright human form is inherently unstable, and that any mechanism designed to mimic that form is bound to fall once in a while. With that in mind, Disney Research engineers are teaching their humanoid bots to fall with style. The idea is for the robots to protect their vital parts in the event of a fall, which is something humans (usually) do instinctively. They first did hundreds of falls with virtual robots, rewarding them for correctly ending up in the target pose, and eventually worked the algorithms into real, albeit diminutive, robots. The video in the article shows them all sticking the landing, and even if some of the end poses don’t seem entirely practical, it’s pretty cool tech.

And finally, this week on the Hackaday Podcast was discussed the infuriating story of an EV-enthusiast who had trouble servicing the brakes on his Hyundai Ioniq. Check out the podcast if you want the full rant and the color commentary, but the TL;DL version is that Hyundai has the functions needed to unlock the parking brakes stuck behind a very expensive paywall. Luckily for our hacker hero, a $399 Harbor Freight bidirectional scan tool was up to the task, and the job was completed for far less than what the officially sanctioned tools would have cost. But it turns out there may have been a cheaper and more delightfully hackish way to do the job, with nothing but a 12-volt battery pack and a couple of jumper wires. Lots of vehicles with electric parking brakes use two-wire systems, so i’s a good tip for the shade tree mechanic to keep in mind.

youtube.com/embed/SbopO815aek?…

hackaday.com/2025/11/23/hackad…

The BBC wanted to show everyone how a computer might be used in schools. A program aired in 1979 asks, “Will Computers Revolutionise Education?” There’s vintage hardware and an appearance of PILOT, made for computer instructions.

Using PILOT looks suspiciously like working with a modern chatbot without as much AI noise. The French teacher in the video likes that schoolboys were practicing their French verb conjugation on the computer instead of playing football.

If you want a better look at hardware, around the five-minute mark, you see schoolkids making printed circuit boards, and some truly vintage oscilloscope close-ups. There are plenty of tiny monitors and large, noisy printing terminals.

You have to wonder where the eight-year-olds who learned about computers in the video are today, and what kind of computer they have. They learned binary and the Towers of Hanoi. Their teacher said the kids now knew more about computers than their parents did.

As a future prediction, [James Bellini] did pretty well. Like many forecasters, he almost didn’t go far enough, as we look back almost 50 years. Sure, Prestel didn’t work out as well as they thought, dying in 1994. But he shouldn’t feel bad. Predicting the future is tough. Unless, of course, you are [Arthur C. Clarke].

youtube.com/embed/2df88qJYYnM?…

hackaday.com/2025/11/23/retrot…

We’ve probably all had a few conversations with people who hold eccentric scientific ideas, and most of the time they yield nothing more than frustration and perhaps a headache. In [Bertrand Selva]’s case, however, a conversation with a flat-earth believer yielded a device that uses a pair of gyroscopes to detect earth’s rotation, demonstrating that rotation exists without the bulkiness of a Foucalt pendulum.

[Bertrand] built his apparatus around a pair of BMI160 MEMS gyroscopes, which have a least significant bit for angular velocity corresponding to 0.0038 degrees per second, while the earth rotates at 0.00416 degrees per second. To extract such a small signal from all the noise in the measurements, the device makes measurements with the sensors in four different positions to detect and eliminate the bias of the sensors and the influence of the gravitational field. Before running a test, [Bertrand] oriented the sensors toward true north, then had a stepper motor cycle the sensors through the four positions, while a Raspberry Pi Pico records 128 measurements at each position. It might run the cycle as many as 200 times, with error tending to decrease as the number of cycles increases.

A Kalman filter processes the raw data and extracts the signal, which came within two percent of the true rotational velocity. [Bertrand] found that the accuracy was strongly dependent on how well the system was aligned to true north. Indeed, the alignment effect was so strong that he could use it as a compass.

In the end, the system didn’t convince [Bertrand]’s neighbor, but it’s an impressive demonstration nonetheless. This system is a bit simpler, but it’s also possible to measure the earth’s rotation using a PlayStation. For higher precision, check out how the standards organizations manage these measurements.

youtube.com/embed/edkJiVSeGOk?…

hackaday.com/2025/11/23/measur…

Partono le prenotazioni della campagna “Arance di natale arance per la vita” 2025. C’e’ tempo fino al 3 dicembre!

La finalita’ e’ la ripresa dei lavori per il completamento dell’ospedale di Duhla, lavori che attualmente sono fermi per mancanza di fondi.
IBAN dell’Associazione Verso il Kurdistan: IT17 Q030 6909 6061 0000 0111 185 Causale: Campagna arance 2025

Prenotazioni entro il 3 dicembre.

Per info: Antonio 335 7564743 – Lucia 333 5627137

Per chi volesse dare un contributo liberale, la causale è: contributo volontario.

Associazione Verso il Kurdistan Odv

L'articolo Campagna “Arance di Natale, arance per la vita” proviene da Retekurdistan.it.