Andrea Ravaioli’s Post

Is the Finance industry the most targeted by cyber-attackers? Briefly said, the answer is no. Source: https://lnkd.in/gxJvHEHS

What is DWELL TIME? Dwell time is calculated as the number of days an attacker is present in a  compromised environment before they are detected. You can expect this number to be higher when an attack is perpetrated by an Advanced Persistent Threat. The average number in 2023 is reported by Mandiant to be 10 days, and when defenders detect adversary intrusions internally, they do so faster than the overall median dwell time. Can you think how much information can be exfiltrated and possibly altered in 10 days? Source: Special Report: Mandiant M-Trends 2024

Do you know what an Advanced Persistent Threat (APT) is? Evidently inspired by Intelligence Agencies, they are neither tools nor techniques: the terms is used to describe a category of malicious threat actors aiming at remaining undetected for as long as possible while exfiltrating information and, sometimes, compromising systems. The median "dwell-time", the time an APT attack goes undetected, differs widely between regions. FireEye reported the mean dwell-time for 2018 in the Americas as 71 days, EMEA as 177 days, and APAC as 204 days. https://lnkd.in/eZGkrpsi

A while ago I explained why my profile photo (set as "public") is incomplete. It is deliberate as face recognition technologies allow all the sort of scary scenarios. One example? As Erik Prince describes, soon drone empowered by face recognition and GPS technologies will be able to act as sicarios as seen in gangster movies. They might kill or temporarily impair their targets, depending by how their owner programmed them.

Have you heard of a new feature of Window 11 called "Recall"? Presently only available in new "Copilot+PCs", it is basically a key and screen logger saving locally all you do. Most certainly very attractive to hackers, you can turn it off but there are ways they can turn it back on... https://lnkd.in/eMEeYEfx

I've been very positively impressed by this comprehensive guide in managing data protection risk published (in English) by the data protection supervisory authority of Spain - The AEPD. A reference-grade publication strongly recommended to anyone in the business of data privacy/protection. https://lnkd.in/eCPyDb6d  

Microsoft platforms and products are ubiquitous, trusted by companies of all sizes and industries and even by Government agencies around the world. You'd think one of the reason of success is that THEY ARE SAFE. Read and think again: https://lnkd.in/eu6fd7X4

I don't know but I am ashamed to say, so here you go a (wrong) guess and you might even trust it! And no, it is not me: it is Chat GPT! https://lnkd.in/emZjPfGb

Do you think you can avoid malware/spyware installations just by not taking action or just by deleting a suspect sms or email message? Try to answer and then read this: https://lnkd.in/ebX_XfV2