Skip to content

Piero Bosio Social Web Site Personale Logo Fediverso

Social Forum federato con il resto del mondo. Non contano le istanze, contano le persone
  1. Home
  2. Categories
  3. Uncategorized
  4. Possibile databreach sui sistemi di Almaviva (sulla commessa Ferrovie?)

Possibile databreach sui sistemi di Almaviva (sulla commessa Ferrovie?)

Uncategorized
6 3 2
Log in to reply

Feed RSS
Possibile databreach sui sistemi di Almaviva (sulla commessa Ferrovie?)

Gli ultimi otto messaggi ricevuti dalla Federazione
@pierobosio@soc.bosio.info
Post suggeriti
  • pierostrada@sociale.networkundefined

    Switzerland plans surveillance worse than US | Tuta

    Uncategorized
    1
    1
    0 Votes
    1 Posts
    0 Views
    pierostrada@sociale.networkundefined
    Switzerland plans surveillance worse than US | Tutahttps://tuta.com/blog/switzerland-surveillance-plan> Revision of Swiss surveillance law VÜPF would directly target VPN & encrypted chat and email providers based in Switzerland.
  • francal@mastodon.unoundefined

    Leva militare: Germania come Italia, ma in più visita medica obbligatoria

    Uncategorized
    2
    1
    0 Votes
    2 Posts
    0 Views
    otttoz@mastodon.unoundefined
    @francal @attualita gli ultras arruolati d'obbligo e gratis
  • raccoon@hollow.raccoon.questundefined

    WTF did I miss

    Uncategorized
    15
    0 Votes
    15 Posts
    0 Views
    oblomov@sociale.networkundefined
    @Paradox @raccoon «who did it better»
  • pogowasright@infosec.exchangeundefined

    Some folks may recall my anger on August 18 over a vendor who wasn't responding to alerts about exposing their clients' data.

    Uncategorized databreach dataleak incidentresponse incidentmanagement thirdparty vendor accountability
    1
    0 Votes
    1 Posts
    3 Views
    pogowasright@infosec.exchangeundefined
    Some folks may recall my anger on August 18 over a vendor who wasn't responding to alerts about exposing their clients' data. The data included court files or records that were confidential or even sealed. At the time, researchers had discovered two entities that were exposed. They subsequently discovered more.Yesterday, the vendor -- who had even ignored a call from the FBI -- finally secured one of the two after the client finally reached them on the phone. The vendor told them they had fixed the problem. But did they? [SPOILER ALERT: No.]You won't believe what happened next, or maybe you will, but you'll have to stay tuned for this story, which has now gotten astronomically bigger because not only were the data still not secured but the vendor -- after claiming that the researchers had used hacking techniques to access unsecured data -- inexplicably sent the client a list of ALL of vendor's clients with their technical details AND ALL OF THEIR LOGIN CREDENTIALS. [WTF!?]I have never been as tempted to issue an actual press release warning all entities about a specific vendor, but... wow. Stay tuned. Eventually, I will write this all up, but first, I want to hear what the client's lawyers and insurers decide to do to hold the vendor accountable.(August 18 post: https://infosec.exchange/deck/@PogoWasRight/115033245331860859)#databreach #dataleak #incidentresponse #incidentmanagement #thirdparty #vendor #accountability @zackwhittaker @aj_vicens @politico