Massimiliano Dal Cero

DRIFT Linux is born🐧 A #Linux distro built for #DigitalForensics & #IncidentResponse (#DFIR): a portable lab for device and disk acquisition, Web/Cloud evidence collection, and early stages of incident analysis. driftlinux.org/blog/technical… #linux #cybersecurity #forensics #cyber

this is not a joke 😉 #driftlinux #cybersecurity #digitalforensics

test

🤯#Apoicalypse365 : When the Interface Becomes a Weapon 🧨 digitaldefense.it/apoicalypse365… This is not an #exploit that plays with low-level binaries or obscure payloads. It’s simpler. And precisely because of that, it may be worse. It merges a technical design gap with the human factor: the UI becomes the attacker’s ally, trust becomes the real #vulnerability. - #Impersonation without fake domains. - Legitimate buttons weaponized. - Users convinced they are safe. - Calendar invites that bypass suspicion. - A “Join the meet” button that becomes the attack vector. 👉 If your business runs on #Microsoft365, you should read this. #cybersecurity #microsoft #teams #outlook digitaldefense.it/apoicalypse365…

Apoicalypse365: Quando l’interfaccia di Microsoft Outlook diventa un’arma 📌 Link all'articolo : redhotcyber.com/post/apoicalyp… #redhotcyber #news #cybersecurity #hacking #malware #ransomware #microsoft #outlook #teams

🤬 #Apoicalypse365 After 1 year of reporting trust-breaking vulnerabilities in Microsoft’s #Outlook + #Teams, here is a practical demonstration of one of them. Impersonation, UI manipulation, poisoned interactions. Microsoft labeled key behaviors as “expected” or “moderate.” 📹 Video below 🔗 Full disclosure page (technical details + PoC + timeline): digitaldefense.it/apoicalypse365/ #infosec #cybersecurity #microsoft

🚨 Critical issues in Microsoft’s communication suite 🚨 #apoicalypse I’ve spent 1 year reporting a chain of vulnerabilities in Microsoft’s communication suite. trust-breaking behaviors that let attackers impersonate internal contacts, manipulate UI actions and poison user interactions. Microsoft called it “expected behavior” and “moderate” risk. No fix. No CVE. No timeline. I’m publishing the full case soon. Attached is one of the impersonation examples. #microsoft #cybersecurity #vulnerability

🚨 .PH Domain Global Security Issue 🚨 ⚠️ Every non-existent .ph domain resolves to 45.79.222.138 (Linode, USA) instead of the official registry and redirects to malicious sites. #CyberSecurity #DNS #Phishing #ThreatIntel 🔗 Long post LinkedIn: linkedin.com/feed/update/ur…

#iCaltastrophe ⚠️ Significant Potential Attack Chain in Office365 ⚠️ A calendar event auto-added with a trusted name & photo, and a button leading to a malicious page. linkedin.com/posts/dalcero_… #cybersecurity #microsoft #M365

👺 Liar’s Dividend: e di come il “genio maligno” di Cartesio arrivò a creare simulazioni e simulacri con i #deepfake 🧞‍♂️ massimiliano-dalcero.medium.com/liars-dividend… #AI #artificalintelligence #fakenews #CyberSecurity

🛑 Saper dire “#no” è importante! … anche nella #cyber massimiliano-dalcero.medium.com/saper-dire-no-… #CyberSecurity #TrueStory

API security analysis e Penetration Test digitaldefense.it/offensive-secu… #penetrationtest #pt #cyber #security #cybersecurity

digitaldefense.it - Cybersecurity & Digital Forensics #cyber #cybersecurity #digitaldefense

Buone cybervacanze a tutti ✌ Con l’arrivo del 14 di agosto, sarà per me tempo di staccare la spina e prendersi una meritata pausa dai social: ma sempre allerta! digitaldefense.it/blog/agosto-cy… #cybervacanze #vacanze #agosto #ferie #cybersecurity #auguri #cybercrime #digitalforensics

... di fantasia, ma mica poi così tante, eh? 😅

Facciamoci 2 risate esitve😀 oggi è il 13 di agosto e voglio restare il più leggero possibile e condividere un piccolo decalogo #CyberSecurity e #digitalforensics di fantasia con cui sorridere: linkedin.com/posts/dalcero_…