Jose Rafael Santos

Portugal has modified its cybercrime law to establish a legal safe harbor for good-faith security research and to make hacking non-punishable under certain strict conditions. https://lnkd.in/dmbXDa49

72

1 comentário

Nice write-up. Detailed look at one of the threat actors in the news. How they do what they do. How much of what they say to believe, and what not to believe and why.

10

1 comentário

📕 European Union Agency for Cybersecurity (ENISA) published Technical Advisory of Secure Use of Package Managers This document focuses on how developers can securely use package managers as part of their #softwaredevelopment life cycle. In particular, this document, outlines common risks involved in the use of third-party packages, presents secure practices for selecting, integrating, and monitoring packages and describes approaches for addressing vulnerabilities found in dependencies. #security #informationsecurity

19

QNAP Systems over the weekend rolled out patches for two dozen vulnerabilities across its product portfolio, including seven flaws demonstrated at the Pwn2Own Ireland 2025 hacking competition. #CVE-2025-62840 #CVE-2025-62842

2

Securing a huge number of assets can be hard. With Ethiack, scalability isn't an issue. Learn more about how Ethiack helped University of Porto secure over 5,000 assets in this blog post👇 https://lnkd.in/d7wnDCHk

23

2 comentários

🔒 A “zero-click” flaw in WhatsApp exposed iOS and macOS users. The attack required no user interaction, proving how even the most trusted apps can become entry points for espionage. 👉 For businesses, the risk is even greater: conversations, credentials, and documents can be compromised in seconds. This is where MDM/UEM makes the difference: - Control over installed apps; - Forced and standardized updates; - Centralized security policies; - Rapid incident response; With Urmobo, your company gains extra layers of protection and complete visibility across mobile devices. ➡️ Read more on the blog: https://lnkd.in/dCfkuzkw

2

📣 Securing has been selected as a trusted partner in the EU-funded CYSSDE program. This initiative helps public institutions strengthen cybersecurity resilience. Thanks to this grant, ministries, universities, critical infrastructure, and other eligible entities can access penetration testing and remediation support at no cost. Our team focuses on web and mobile applications and network infrastructure, following international standards like OWASP and NIST. If your organization handles citizen data or operates essential services, this is a great opportunity to improve security without additional budget. Read the full story in the Securing Knowledge Base 👉 https://lnkd.in/dPrX7hHE

23

2 comentários

New AboutDFIR.com security bulletin is live! KillSec Ransomware is Attacking Healthcare Institutions in Brazil The KillSec Ransomware group has threatened to leak sensitive data unless negotiations are initiated promptly. According to threat intelligence reporting by Resecurity, the root cause of the incident – data exfiltration from insecure AWS S3 bucket. Considering the investigation performed by cybersecurity experts, the window of exposure can be estimated at ‘several months.’ Probably, this is the first notable supply chain incident affecting the healthcare industry in Brazil. Notably, it is not the first time the ransomware group has targeted Brazil. Some time ago, the actors leaked personal and business data containing CNPJ/CPF […]

7

OpenClaw exposes a hard truth for CISOs. Traditional enterprise security was not designed for autonomous agents. 🛡️ In this new checklist, Cinthia Portugal lays out eight critical controls for securing OpenClaw and similar agent assistants across the enterprise. ⚙️ From identity classification and tool scoping to runtime enforcement and indirect prompt injection, this is a practical blueprint for closing the gap between how agents operate and how security assumes they work. If agents are acting with human permissions in your environment, governance cannot stay theoretical. 👇 🔗 https://lnkd.in/ezWT8W3s #AISecurity #AgenticAI #Cybersecurity #CISO #AIGovernance

5

Yesterday, we recorded a Packet Protector episode with Jody Brazil at FireMon and it blew my mind. 🤯 I hadn't been paying close attention and missed a big change. I always thought of Firemon as an extremely robust firewall management tool. Managing multiple firewalls (even of the same mfr) is rough, and Firemon made it easy to even manage any combos of PANs, Cisco, Juniper, Fortinet - whatever. And it managed all of the workflows and compliance checks, all the way to and including full automation of the configs. But yesterday... I found out they have full L2/L3 visibility including inside the network. They acquired Lumeta (which we used extensively for finding 'leaks' in federal networks years ago) and turned that into an Asset Manager. They have a new (free) AI-driven Insights engine. Long story short - Firemon is now NOT just a firewall management tool. It's a single platform for edge-to-core-to-egress visibility including on-prem and cloud assets and infrastructures. So, if you're at RSAC go check them out. #PacketProtector Andrew Conry-Murray #networkengineering #networksecurity #firewallmanagement #lumeta #assetmanagement #visibility #automation

29

If you’re building LLM or agent workflows on AWS, there’s one resource I think you should read: https://lnkd.in/dhH2iDnZ The AWS Prescriptive Guidance mapping to the OWASP Top 10 for LLM apps is very practical and it bridges AI security and cloud security well, especially if you’re building in AWS.

5