Il Blog di Michele Pinassi

NoName057 attacca alcuni siti web italiani, tra cui il sito web ufficiale di Giorgia Meloni (https://www.giorgiameloni.it) e altri portali istituzionali.

ENTRO OGGI su Steam, HalfLife è gratuito. https://store.steampowered.com/app/70/HalfLife/

Securely configuring the potentially thousands of cloud identities, workloads, and other resources needed to support the high pace of modern software development is difficult—but also critical to prevent attackers from breaching these systems, where security gaps too often go unnoticed. https://www.datadoghq.com/state-of-cloud-security/

Gli stati Usa denunciano Meta perché danneggerebbe la salute mentale degli adolescenti 33 stati degli USA portano in tribunale Meta poiché non fa abbastanza per evitare i problemi di salute mentale e dipendenza da social network.

...for leaks. And he found some interesting things... https://matan-h.com/analyze-stackoverflow

"The Dragon Touch tablet also came with a very outdated version of the KIDOZ app pre-installed. This app touts being “COPPA Certified” and “turns phones & tablets into kids friendly devices for playing and learning with the best kids’ apps, videos and online content.” This version operates as kind of like a mini operating system where you can download games, apps, and configure parental controls within the app." https://www.eff.org/deeplinks/2023/11/low-budget-should-not-mean-high-risk-kids-tablet-came-preloaded-sketchyware

Recently Google Bard got some powerful updates, including Extensions. Extensions allow Bard to access YouTube, search for flights and hotels, and also to access a user’s personal documents and emails. https://embracethered.com/blog/posts/2023/google-bard-data-exfiltration/

This year, Google has seen an increase in the number of vulnerabilities impacting central processing units (CPU) across hardware systems. Two of the most notable of these vulnerabilities were disclosed in August, when Google researchers discovered Downfall (CVE-2022-40982) and Zenbleed (CVE-2023-20593), affecting Intel and AMD CPUs, respectively. https://cloud.google.com/blog/products/identity-security/google-researchers-discover-reptar-a-new-cpu-vulnerability

Any account that has not been touched for two years could be eradicated, including a user’s Google Workspace apps like Drive, Docs and Photos. https://nypost.com/2023/11/13/tech/google-will-delete-many-gmail-accounts-soon-is-yours-safe/

federprivacy.org violato da Alpha Team?

Ho sempre pensato che lo smart working sia, per certi ruoli, una forma di lavoro vantaggiosa per entrambi: per il datore di lavoro, che può risparmiare sui costi di gestione dei locali e delle infrastrutture degli uffici. Per il lavoratore, che può finalmente organizzarsi a progetti, secondo i suoi tempi ed esigenze, con flessibilità. https://www.wired.it/article/smart-working-lavoro-futuro-imprese/

Analysis by the firm found that printer-related security risks are still largely overlooked by many SMBs, with one-third revealing they have no security measures in place at all to protect them. https://www.itpro.com/security/the-humble-printer-is-still-a-leading-cause-of-cyber-attacks

Have you ever thinked about hacking your Roomba vacuum cleaner? https://hackingroomba.com/

Ever wondered what living under AI surveillance in Europe would feel like? Don’t Spy EU allows you to scan the faces of European lawmakers through a face recognition algorithm. They’re the ones in charge of finalizing the AI Act, so let’s make sure they fully understand the risks of biometric surveillance. https://dontspy.eu/

Rilevata vulnerabilità in prodotti Atlassian (AL01/231031/CSIRT-ITA) Aggiornamenti di sicurezza sanano una vulnerabilità con gravità “critica” presente in Atlassian Confluence Data Center and Server. by CSIRT - https://www.csirt.gov.it/contenuti/rilevata-vulnerabilita-in-prodotti-atlassian-al01-231031-csirt-ita