Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale
The media in this post is not displayed to visitors. To view it, please go to the original post.
Huntress reports a standardized 7-step playbook beginning with CitrixBleed 2 exploitation. Stolen NetScaler sessions made MFA irrelevant, while follow-on actions included AppMgmt-based privilege escalation, rogue local admins, ScreenConnect or Zoho Assist, and DragonForce ransomware. huntress.com/blog/citrixbleed-…

CitrixBleed 2 (CVE-2025-5777) 7Steps to Dragonforce Ransomware | Huntress

Huntress has observed a series of strikingly similar intrusions beginning with CitrixBleed 2 exploitation, employing novel local privilege escalation techniques, and ending in Dragonforce ransomware.
Michael Tigges (Huntress)

reshared this

Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale

SAP will make it easier for customers to switch to rival service providers or end contracts, averting a possible EU antitrust fine after a September 2025 probe (Foo Yun Chee/Reuters)

reuters.com/business/sap-avert…
techmeme.com/260709/p42#a26070…

Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale
The media in this post is not displayed to visitors. To view it, please go to the original post.

-India bans app used to hack e-rickshaws in viral videos
-NSA TAO is back
-Leak exposes another suspected Chinese cyber contractor
-China considering blocking foreign access to its AI models
-Accenture has another data breach
-Breaches at Nextcloud, Nayax, AssuranceAmerica, Puerto Rico's property tax collection agency
-Windows GDID reverse-engineered
-Discord admits faulty bans
-EU tells banks to plan for AI cyberattacks

Newsletter: news.risky.biz/risky-bulletin-…
Podcast: risky.biz/RBNEWS588/

India bans app used to hack e-rickshaws in viral videos

In other news: NSA TAO is back; Accenture has another data breach; leak exposes another suspected Chinese cyber contractor.
Catalin Cimpanu (Risky.Biz)
in reply to Catalin Cimpanu

mastodon - Collegamento all'originale

Catalin Cimpanu

The media in this post is not displayed to visitors. To view it, please go to the original post.
-UK to create Cyber Shield
-CIRCIA allegedly coming in September
-CISA scanning govt code with Mythos
-Police suspect Dutch national involved in Odido hack
-5.8k scam suspect arrested
-Iris C2's shady ownership
-Injective SDK supply chain attack
-Cybersecurity startup publishes infostealers to npm
-GitHub API abuse wave
-Hacked websites host OnlyFans content
-New Password-spraying campaign hits M365
-Microsoft expects increase in patches due to AI
-Gitea and Joomla plugins exploited in the wild

Catalin Cimpanu reshared this.

in reply to Catalin Cimpanu

mastodon - Collegamento all'originale

Catalin Cimpanu

The media in this post is not displayed to visitors. To view it, please go to the original post.
-New malware: GodDamn ransomware, Forg365 PhaaS, GigaWiper, CrySome RAT, SCMBANKER, Remus Stealer, Apex2 and c2c/meow botnets
-Vidar is still alive
-RedHook returns
-Two APTs target Balochistan Police
-New Helix data extortion group
-Crypto-wallet extensions can link you to your crypto-funds:
-Cisco advance notification for patches next week
-GhostLock Linux vulnerability
-HalluSquatting attack
-GhostApproval attack
-GitLost attack
-RoguePlanet gets a patch

MaryMarasKittenBakery reshared this.

Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale

Cybersecurity Startup Publishes Infostealers to NPM

opensourcemalware.com/blog/cyb…

Cybersecurity Startup Publishes Infostealers to NPM

Typosquatted AI-tool packages quietly collected git, SSH, and cloud identity data through install scripts, tracing back to one unexpected publisher
c0a15726-c5b1-4b0d-85e6-fe15553df9e2 (OpenSourceMalware)

reshared this

Lorenzo ha ricondiviso questo.

gotosocial - Collegamento all'originale

🌱 Server “green”, IA e Fediverso: facciamo un po’ di chiarezza


Negli ultimi tempi si parla molto, giustamente, di consumi energetici, data center, intelligenza artificiale e impatto ambientale.

È un tema serio.
Proprio per questo andrebbe trattato con precisione, non con slogan.

“Server green” non significa “impatto zero”


Usare un provider con data center efficienti, alimentazione ottimizzata, buone metriche energetiche e una gestione seria dell’infrastruttura è sicuramente una scelta positiva.

Ma non significa che il servizio sia magicamente a impatto nullo.

Anche una piccola istanza del Fediverso consuma risorse:

  • CPU
  • RAM
  • storage
  • database
  • media cache
  • backup
  • federazione
  • email
  • CDN
  • traduzioni
  • traffico di rete

Tutto questo ha un costo energetico.

Magari piccolo, magari ben gestito, magari molto più contenuto di tante piattaforme centralizzate enormi, ma comunque reale.

La compensazione non cancella automaticamente il consumo


Anche la formula “compensiamo piantando alberi” va maneggiata con cautela.

Piantare alberi può essere una buona cosa, ma una compensazione ambientale ha senso solo se è:

  • documentata
  • verificabile
  • addizionale
  • permanente
  • proporzionata al consumo reale

Altrimenti rischia di diventare più comunicazione che reale neutralizzazione dell’impatto.

Il punto non è fingere di non consumare


Il punto serio dovrebbe essere un altro:

dimensionare bene i servizi.

Non fare il passo più lungo della gamba.
Non gonfiare artificialmente l’infrastruttura.
Non inseguire numeri inutili.
Non centralizzare tutto in poche istanze gigantesche.
Non trasformare il Fediverso in una copia “alternativa” dei social commerciali.

Il Fediverso dà il meglio quando è fatto da tante istanze piccole, medie, locali, tematiche, ben amministrate e sostenibili.

Non serve raccontarsi favole.

Serve amministrare con criterio.

Anche le piccole istanze hanno senso


Una piccola istanza ben dimensionata, con iscrizioni controllate, costi bassi e risorse adeguate, può avere un impatto molto contenuto.

Non perché “non consuma”.

Ma perché consuma il giusto per quello che deve fare.

Questa è la vera sostenibilità tecnica:
sobrietà, misura, manutenzione e responsabilità.

In sintesi


Dire “siamo green” è facile.

Più corretto sarebbe dire:

cerchiamo di ridurre l’impatto, scegliamo infrastrutture efficienti, dimensioniamo con criterio e non sprechiamo risorse.


Questo è un discorso serio.

Il resto, spesso, è solo marketing ambientale con una foglia verde sopra.

#Fediverso

#fediverso
in reply to Osservatorio Fediverso

friendica (DFRN) - Collegamento all'originale

Max - Poliverso 🇪🇺🇮🇹

 — (Firenze)

@Osservatorio Fediverso

Ma infatti ho scritto che l'utilità nell'avere tante piccole istanze c'è, solo che probabilmente non è nell'efficienza energetica che va cercata. Siamo d'accordo.

Ci sono comunque molti altri motivi per cui sarebbe utile avere tante piccole istanze, infatti sto pensando sempre più spesso di farmene una mia (ma non nego che più di tutto per me conterebbe l'aspetto tecnico-ludico del gestirmi una piattaforma in solitaria, dalla A alla Z 😁).

@Osservatorio Fediverso

Fediverso reshared this.

Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale

📰 Srsly Risky Biz: Supreme Court Undermines Section 702

risky.biz/ssupreme-court-under…

Srsly Risky Biz: Supreme Court Undermines Section 702 - Risky Business Media

A new US Supreme Court decision could undermine the flow of Section 702 intelligence collection from Europe.Section 702 allows the US gove [Read More]
risky.biz

reshared this

Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale

Another leak at a Chinese security firm exposes another possible Chinese cyber contractor/APT

netaskari.substack.com/p/zron-…

ZRON: Full digital espionage service ?

Leaked information of a red team toolbox from the Chinese company Zhirong Network Tech reveals an information acquisition and processing pipeline seemingly designed for foreign espionage operations.
NetAskari

reshared this

Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale

"Chinese authorities have held meetings ​with top tech firms over the past month about potentially restricting overseas access to China's most advanced AI models, including those yet to be released, three people familiar ‌with the discussions said."

reuters.com/world/beijing-is-l…

reshared this

Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale

"Unlike water used in a dishwasher or a toilet — which often returns to a treatment facility to be recycled — the water in cooling systems vanishes into the air. It becomes water vapour and escapes into the atmosphere. This fundamental difference is why data centre water use is not comparable to that of typical household use, where water cycles back through municipal systems."

irishexaminer.com/opinion/comm…

Data centres are gobbling up water they cannot replace – there is a solution

Every Google search, photo upload, or ChatGPT response passes through a bank of high-powered, water-guzzling computers situated at a data centre, writes Muhammad Wakil Shahzad
Irish Examiner
Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale
The media in this post is not displayed to visitors. To view it, please go to the original post.

-All new cars to include a camera aimed at the driver's face
-Canada hacked a ransomware gang
-Taiwan charges execs for helping Chinese hackers
-Vulns can bork Hoymiles solar panels
-DHSIG investigates forced CISA reassignments
-UK Foreign Office impacted by Fortibleed
-Prince Harry loses Daily Mail hacking lawsuit
-Predator victims sue Intellexa
-US Army defacements
-BONK meme coin hacked for $20m

Podcast: risky.biz/RBNEWS587/
Newsletter: news.risky.biz/risky-bulletin-…

All new cars to include a camera aimed at the driver's face

In other news: Canada hacked a ransomware gang; Taiwan charges two execs with helping Chinese hackers; new vulnerabilities can bork Hoymiles solar panels.
Catalin Cimpanu (Risky.Biz)
in reply to Catalin Cimpanu

mastodon - Collegamento all'originale

Catalin Cimpanu

The media in this post is not displayed to visitors. To view it, please go to the original post.
-Ctrl Wallet shuts down after exploit
-Ill Bloom bug exploited to steal $3.1m
-Class-action accuses RAM makers of price fixing
-Godot bans AI code slop
-Tech platforms fail to deploy age restrictions in Australia
-EU RT ban also applies to websites and persons
-Spain arrests CARR and Z-Pentest member
-15yo teen arrested for hacking anime site with ChatGPT
-Profile on Lurking Lizard proxy operator and Scattered Spider
-More AI spotted in SpectrePaste malware delivery

Catalin Cimpanu reshared this.

in reply to Catalin Cimpanu

mastodon - Collegamento all'originale

Catalin Cimpanu

The media in this post is not displayed to visitors. To view it, please go to the original post.
-Pink group registers passkeys on behalf of its victims
-Most crypto-hacks this year target DeFi platforms
-New RedWing Android MaaS
-New Cavern Manticore APT
-UAT-7810 builds ORBs for other APTs
-UNK_MassTraction targets Roundcube servers
-ColdFusion bug exploited in the wild
-Tenda router have a backdoor
-New Rogue Agent technique
-New Januscape KVM guest-to-host escape
-New prompt injection techniques
Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale

Soooo Tenda devices have an admin backdoor. Potential redeployment locations: a wood chipper, the nearest active volcano, or that really annoying neighbor's house.

No patch; have fun!

Please note earlier versions of this post had an incorrect CVE number. It has been fixed.

discourse.ifin.network/t/cve-2…

CVE-2026-11405: Multiple Tenda Routers Have an Admin Backdoor

CVSSv3: None yet Multiple versions of Tenda firmware have a backdoor in remote administration login, allowing anyone to access configuration of the device. Affected Versions: US_FH1201V1.0BR_V1.2.0.14(408)_EN_TD US_W15EV1.0br_V15.11.0.
IFIN
Questa voce è stata modificata (5 giorni fa)
Lorenzo ha ricondiviso questo.

mastodon - Collegamento all'originale
The media in this post is not displayed to visitors. To view it, please go to the original post.

Hoymiles inverters used with those super-popular solar panels installed on balconies across Europe can be switched on or off, or even permanently disabled via a newly discovered vulnerability

PDF: ccc.de/system/uploads/382/orig…

reshared this

⇧