Andrea Succi

InfoCerts, a leading certification authority and provider of digital identity services (italian SPID) reported an unauthorized publication personal data about over 5.5 milions customers. Even if no passwords seems to be leaked, the contained information can be extremely useful for criminals to perform social engineering attacks...

8

🌐 **The Impact of the NIS2 Directive on Cybersecurity** The current landscape of cyber threats requires immediate regulatory intervention to ensure the security of essential digital infrastructures. NIS2, the second Directive on the Security of Network and Information Systems, aims to tackle these critical challenges. Here’s why it is necessary: 1. **Extended Digitalization**: With the increasing digitalization of critical processes, the attack surface also expands, making organizations more vulnerable. 2. **Global Interdependence**: Critical infrastructures are interconnected internationally; an attack in one country could have devastating repercussions for other member states of the European Union. 3. **Unified Response**: NIS2 promotes a collective approach to security, necessitating a shared cybersecurity strategy. In Italy, over 15,000 entities are expected to be affected by NIS2, with an average increase of 20% in the IT budgets of organizations. This represents a significant step towards greater protection of our infrastructures. ### Scope of Application NIS2 identifies two main categories of private entities: - **Essential Entities**: Large companies in key sectors such as energy and transport. - **Important Entities**: Medium-sized enterprises in sectors such as postal services and food distribution. Public administrations and research institutions are included, making NIS2 a crucial element for collective security. 🔒 ### Obligations and Responsibilities Organizations must register on a dedicated portal and report significant incidents within specific deadlines. Compliance will be monitored and sanctioned by the National Cybersecurity Agency. Adopting security standards such as multi-factor authentication becomes essential to ensure the protection of systems. 🚀 In a world where cybersecurity is a strategic priority, NIS2 represents a fundamental step forward. We invite...

1

🔒 **New Cybersecurity Guidelines: The Arrival of NIS2** 🔒 With the increasing landscape of cyber threats, the publication of the first implementing measure of the NIS2 directive represents a crucial step for cybersecurity in Italy. This European regulation aims to ensure a high level of security for networks and information systems, particularly for essential service operators and digital service providers. One of the main novelties includes the obligation to register on a digital platform open until February 28, 2025. Entities of various sizes will be involved, from large international groups to small companies, all required to designate a "point of contact" for communications with the National Cybersecurity Agency (ACN). This is not just a bureaucratic aspect but highlights the growing responsibility and necessity for clear references within organizations. The implementation process of NIS2 will take place gradually, with deadlines set until 2026 to complete the security measures. It is essential that NIS2 entities, which include over 80 categories of stakeholders, are ready to comply with these regulations, thus shaping a more robust cybersecurity ecosystem. 📈 With the increase in interconnections and dependencies in the global supply chain, cybersecurity has never been more crucial. Every actor has a vital role in maintaining high standards of protection. Don't wait! Get ready to tackle these challenges! Visit the website for more information on how to address these new directives! 🌐

3

#CyberAttack #Italy: Università degli Studi di Siena has been compromised by the LockBit 3.0 ransomware group. The group allegedly exfiltrated 514 GB of sensitive documents, including: - Documents with budgets detailing expenses by month from 2020 to 2024 - Documents approved by the Board of Directors regarding the financing of projects and tenders from 2022 to 2026, including financing amounts - Documents on extraordinary construction works, the appointment of the contractor, and the allocation of a budget of 1.7 million euros - Non-disclosure documents for WineCraft 2024 - Tender design contracts for 2023, including the contract budget - Documents outlining the contractor's investment plan for 2022, including expenses, rents, and the general financial plan Ransom deadline: 28th May 24. On May 10, the University of Siena's website communicated that due to a massive cyber attack by an international group of hackers, the website admission[.]unisi[.]it, the ticketing service, and the payment management services linked to international admissions are currently suspended. The technical team, supported by the National Cybersecurity Agency, is progressively restoring all services. Read more: https://lnkd.in/dKEFVWtp #Ransomware #DataBreach

4

🔐💡 Join us at Integrity360's 2024 Security First Conference in Milan! 📅 Date: June 25th, 2024 📍 Location: Milan, Italy 🔗 Theme: "Exposure, Resilience, and the AI Impact" in Cyber Security 🚨 What to Expect: Managing Threat Exposure: Dive into the latest strategies and tools with our in-house and leading industry experts. We'll explore practical solutions to reduce vulnerability and safeguard your organisation in modern, cloud-integrated IT environments. Fortifying Organisational Resilience: Learn how to build systems and cultures that withstand cyber-attacks and enable swift, efficient response and recovery. Our panelists will share valuable insights and real-world strategies to boost your resilience. Understanding AI's Role in Cyber security: Join a balanced discussion on the revolutionary role of AI in threat detection and prevention, the challenges posed by AI-enabled attackers, and the ethical implications of AI technologies in cyber security frameworks. 🌟 Whether you're looking to enhance your company's defenses or keen on understanding the latest in AI and cyber security, this conference is a must-attend event! 📩 For more details and registration, visit 🔗 https://lnkd.in/gHggzyAM #SecurityFirst #Integrity360Madrid #CyberSecurity2024

7

🔐💡 Join us at Integrity360's 2024 Security First Conference in Milan! 📅 Date: June 25th, 2024 📍 Location: Milan, Italy 🔗 Theme: "Exposure, Resilience, and the AI Impact" in Cyber Security 🚨 What to Expect: Managing Threat Exposure: Dive into the latest strategies and tools with our in-house and leading industry experts. We'll explore practical solutions to reduce vulnerability and safeguard your organisation in modern, cloud-integrated IT environments. Fortifying Organisational Resilience: Learn how to build systems and cultures that withstand cyber-attacks and enable swift, efficient response and recovery. Our panelists will share valuable insights and real-world strategies to boost your resilience. Understanding AI's Role in Cyber security: Join a balanced discussion on the revolutionary role of AI in threat detection and prevention, the challenges posed by AI-enabled attackers, and the ethical implications of AI technologies in cyber security frameworks. 🌟 Whether you're looking to enhance your company's defenses or keen on understanding the latest in AI and cyber security, this conference is a must-attend event! 📩 For more details and registration, visit 🔗 https://lnkd.in/gHggzyAM #SecurityFirst #Integrity360Madrid #CyberSecurity2024

22

Citalid: 📣 [#BreakingNews] Citalid is once again mentioned in Gartner's Hype Cycle 2024 for Cyber Risk Management, in the Cyber Risk Quantification category! 💥 This edition of the Hype Cycle highlights the key benefits of using cyber risk quantification (#CRQ) for businesses:  👉 Improved trust between cyber risk management teams and management teams  👉Objective decision-making when it comes to investing in cyber security 👉 Aligned cyber risk with other operational risks 👉 Easier risk assessments 🚀 As a European leader in the field, we are delighted that our technology has been recognised once again by the experts at Gartner. Since 2017, we have been helping organisations to better understand cyber risk and make better decisions in their management of this very specific risk thanks to innovative, patented models.  To find out more about Citalid, join the next live demo session ➡️ https://lnkd.in/eJmekuk5 👀 What are the experts saying about quantifying cyber risk? Where does this technology stand today? Find the answer to all these questions here ➡️ https://lnkd.in/efzpJ76u #CyberRiskQuantification #CISO #RiskManagement #Cyber

16

DLP Insights | The Italian Data Protection Authority has once again returned to the issue of the use of #biometric data, reaffirming that it is unlawful to monitor the attendance and activities of employees through facial recognition. Click here to find out more about this topic: https://lnkd.in/dPFyAimV   #DeLucaPartners #GDPR #Labourlaw

15

CYBER SECURITY RISK HANDBOOK: KEY TOOLKITS - Internet Security Alliance / ecoDa a.s.b.l - The European Confederation of Directors Associations Tool A: #Ransomware Readiness Tool B: Assessing the Board #Cyber #Risk - Oversight Effectivenees Tool C: #Insider #Threats Tool D: #Supply #Chain and Third - Party Risks Tool E: #Incidents #Response Tool F: #Board - Level Cybersecurity #Metrics Tool G: Mergers and #Acquisitions Tool H: Building a #Relationship with the CISO Tool I: Enhancing #Cybersecurity oversight disclosures: 10 questions for boards Tool J: Securing #Cloud #Services Tool K: Supporting #national #security and five triangulation questions for boards members to ask their CISOS Tool L: Tool for the #board of #Directors to decide general use of #artificial #intelligence Centro de Investigación de Ciberseguridad IoT - IIoT

105

1 Comment

New Report on Cyber Security Skill Gaps reveals 14% of small firms in Italy says its very difficult to hire employees with the right Cyber Skills     Full Report = https://lnkd.in/g_g5Av_z

2

Probably you already have documented security policies in place for GDPR, but these will need to be supplemented and updated for DORA. DORA extends the Network and Information Security (NIS2) Directive, which specifies cybersecurity measures required for protection of critical infrastructure. Download our eBook https://lnkd.in/ddG3xpb5 #DORA #IBM #CyberSecurity #RazLee

8

1 Comment

🎥 Recap: Why Digital Forensics is Critical for Enterprises – Protecting Assets and Mitigating Risks In partnership with Exterro, we hosted a dynamic Round Table Discussion exploring the vital role of Digital Forensics in safeguarding enterprise assets and mitigating risks in today’s technology-driven world. This highly engaging session brought together leading experts, forensic specialists, and business leaders to delve into the evolving landscape of digital forensics and its indispensable value for modern enterprises. 💡 Key Insights from the Discussion: ✅ How digital forensics aids in detecting and responding to cyber threats. ✅ The importance of forensic investigations in minimizing legal and financial risks. ✅ Real-world examples of leveraging forensics to protect critical business assets. ✅ Future trends in digital forensics tools and technologies. The conversation reinforced the growing need for enterprises to adopt robust forensic strategies to proactively address challenges, from cybersecurity incidents to compliance and legal investigations. We are excited to share the highlights video from the event, capturing the rich discussions and invaluable expertise shared by our panelists. 👉 Watch the Highlights Here: https://lnkd.in/gCsCuZpt For access to the full hybrid video, request at info@events4sure.com A big thank you to Exterro for sponsoring this important discussion and to all our participants for their thoughtful contributions. How is your organization leveraging digital forensics to mitigate risks and secure its assets? Share your thoughts below! #DigitalForensics #EnterpriseRiskManagement #CyberSecurity #RoundTableDiscussion #Exterro #ProtectingAssets #BusinessContinuity Pankaj Parnami Events 4 Sure Sanjul Kushwaha

3

In a series of recent press interviews, the Chair of ASD’s Cyber Task Force, Giorgio Mosca (Leonardo) addressed critical aspects of the forthcoming European Union Cybersecurity Certification Scheme for Cloud Services (EUCS). "The proposal for a European cybersecurity certification scheme for cloud services (EUCS) that the European Union Agency for Cybersecurity (ENISA) and the European Cybersecurity Certification Group (ECCG) are expected to produce in the coming days does not meet the demands of an industry eager for certainty and equal standards.” Read more on Giorgio Mosca’s media interviews here: https://lnkd.in/eNxkSn3d ASD’s recent note on the EUCS underscores the need for transparent and harmonised criteria to guard against risks such as service disruptions and unlawful data access. The European aerospace, defence, and security industries advocate for these standards to maintain the EU’s digital market competitiveness and security. Read ASD’s note on the European Union Cybersecurity Certification Scheme for Cloud Services: https://lnkd.in/eJTq_SRp

14

🎙️ integrating an Open Source and IP policy into a CI/CD system 🚀 The #CRA is here and there is a full set of challenges related to compliance and IP. Carlo Piana and Alberto Pianon described during #LinaroConnect the experience and learnings of building and implementing such a system for Oniro. 🔗 Watch now: https://hubs.la/Q02Nzcrj0 Whether you're a developer, Open Source enthusiast, or simply interested in the future of software development, this is a must-watch! 💻✨ #IoT #Mobile #DevOps #Oniro #Compliance OpenChain Project Array.eu

8

📣 Don't miss out! 💻 Register below for the incoming webinar organized by Sprinto (thanks!) where our head of Cloud Alessio Panni will delve into our 'Trust through Transparency' compliance strategy. 6 November 12.00 PM CET. #compliance #Cybersecurity #cloud

10

1 Comment

THIS WEEK'S CYBERSECURITY DOSSIER Brought to us by CYFIRMA Research Threat Actor in Focus - APT41: The Persistent Threat Behind Prolonged Cyber Espionage and Data Exfiltration Threat Actors: APT41 Attack Type: Malicious Web Shells Objective: Espionage Target Technology: Windows` Target Geographies: Italy, Spain, Taiwan, Thailand, Turkey, and the U.K Target Industries: Shipping and Logistics, Media and Entertainment, Technology, and Automotive Sectors Business Impact: Data Loss, Data exfiltration Summary: #APT41, an advanced persistent threat group with ties to Chinese state-sponsored espionage, has been actively conducting a prolonged and sophisticated cyber campaign targeting multiple industries across various regions. Known for their unique approach of utilizing non-public malware for both espionage and personal gain, APT41 has compromised organizations in the global shipping and logistics, media and entertainment, technology, and automotive sectors. The majority of these targeted entities are based in Italy, Spain, Taiwan, Thailand, Turkey, and the United Kingdom, reflecting the group’s broad geographical reach. The initial phase of APT41’s attack involved deploying ANTSWORD and BLUEBEAM web shells to infiltrate systems and deliver the DUSTPAN dropper. This dropper executed the BEACON backdoor, establishing command-and-control communication with APT41’s infrastructure. This foothold allowed them to gain initial access and begin their operations. As they deepened their intrusion, APT41 escalated their tactics by deploying the DUSTTRAP dropper, which decrypted and executed malicious payloads in memory, leaving minimal forensic traces. They also engaged in hands-on keyboard activity, demonstrating their capability for direct and active manipulation of compromised systems. Read here ↪ https://www.cyfirma.com/ #CyberSecurity #Cyfirma #ETLM #externalthreatlandscape #ThreatIntelligence #CyberIntelligence #CYFIRMAResearch #malware #ransomware #threatactor #cybersecurityawareness Kumar Ritesh Dr. Saurabh Lal, P.D. Anna Koh Amit Thakur Glaiza Pardilla Harsha Vardhan Sam Parmar Rahul Raghav Yusuke Tateno Chiaki Izena（伊是名千晶）Greg Baylis David Plummer Rakesh R V Nicko Navarrete Ruri A. Hyungchan Mike Cho Sathip Kongjantra Huy. Nguyen Tuong Vinh Dudley Swanepoel Mouli Saha Greg Baylis Vincent Cheng Julius S.

20