Piadatech | IT, Cloud & Cyber Security

IT, Cloud, Cyber Security e Digital Workplace. Infrastrutture, Microsoft 365, Google Workspace, Hosting e servizi digitali per aziende.

[Piadatech | IT, Cloud & Cyber Security @piadatech]

@CISACyber “Take it offline until patched” is the right call, but how many orgs actually will? Curious how many people here still have PHP 7.x in production. Be honest. 😅
https://t.co/vhASErixdO

[Piadatech | IT, Cloud & Cyber Security @piadatech]

@OverBuildLabs @NetworkChuck Momma: “Don’t show it to everyone.”
Researcher: publishes 11 0days
Admins everywhere: covering up ACLs on a Sunday.

[Piadatech | IT, Cloud & Cyber Security @piadatech]

@Yaroslav_Ya @NetworkChuck @dkundel Boring is good in security. Exciting usually means someone’s having a very bad day! Ahah!

[Piadatech | IT, Cloud & Cyber Security @piadatech]

@deeperflows @NetworkChuck Fortinet RCE this morning, Tailscale now. Patch fatigue is real. That’s exactly why disclosure timing matters: defenders need a fix in hand, not just another fire.

[Piadatech | IT, Cloud & Cyber Security @piadatech]

@Launch1Labs @NetworkChuck Legal liability is a slippery slope though. Make disclosure risky and researchers stop reporting altogether, and the bugs end up sold instead. Better norms and better bounties beat lawsuits.

[Piadatech | IT, Cloud & Cyber Security @piadatech]

@HeySubz @NetworkChuck Exactly. You still get the “glory” post with CVD, just 90 days later and with a CVE, a patch and a writeup everyone can learn from. Same credit, far less collateral damage.

[Piadatech | IT, Cloud & Cyber Security @piadatech]

@michaelbeal1 @NetworkChuck This. Big orgs have a SOC and change windows ready. The shop with one IT person finds out from a tweet and has nothing to deploy. CVD protects exactly the people with the least margin.

[Piadatech | IT, Cloud & Cyber Security @piadatech]

@Walianohohoh @NetworkChuck Fair point on bounty payouts, a lot of programs are insulting. But the answer is pressure on vendors to pay properly, not leaving users exposed. The admins patching on a Sunday didn’t set the bounty budget.

[Piadatech | IT, Cloud & Cyber Security @piadatech]

@negDB6 @NetworkChuck @bot Solid list. I’d add: disable Tailscale SSH on nodes that don’t need it, set key expiry on servers and audit the device list for anything you don’t recognize. Tailnet Lock is the big one against rogue nodes.

[Piadatech | IT, Cloud & Cyber Security @piadatech]

@rashed_sahaji @NetworkChuck Don’t rip it out. These issues are mainly around Tailscale SSH in a lab setup. If you’re not using Tailscale SSH, you’re likely less exposed. Keep the client updated, enable Tailnet Lock and keep ACLs tight. Tailscale is still a solid choice.

[Piadatech | IT, Cloud & Cyber Security @piadatech]

@NetworkChuck Agree. Full disclosure has its place when a vendor ignores reports for months, but that’s the last resort, not the first move. Tailscale has a public security program. At least give them a chance.

[Piadatech | IT, Cloud & Cyber Security @piadatech]

@IntCyberDigest A pre-auth RCE on the #SIEM is the worst kind: it’s the box that’s supposed to tell you you’ve been breached. If you run FortiSIEM, assume compromise until proven otherwise, not just patch. Anyone already sharing IOCs?

[Piadatech | IT, Cloud & Cyber Security @piadatech]

Il nostro Domain Checkup è il primo passo per prendere il controllo totale della tua presenza online. Sicurezza, DNS, Email: analizza tutto in pochi secondi, gratis. 👇 https://t.co/NorQ0zYSnY #ITAudit #Piadatech #TechTool

[Piadatech | IT, Cloud & Cyber Security @piadatech]

Affidabilità è la parola chiave. Quando un cliente cerca il tuo sito, deve esserci. L'uptime dipende in gran parte dall'infrastruttura DNS e dall'Hosting. Fai il test 👇 https://t.co/NorQ0zYSnY #Uptime #Reliability

[Piadatech | IT, Cloud & Cyber Security @piadatech]

Tip 14: Redirect 301. Se cambi dominio, assicurati di reindirizzare correttamente il vecchio al nuovo, o perderai tutto il traffico Google! Verifica le configurazioni 👇 https://t.co/NorQ0zYSnY #SEOTips #Webmaster

[Piadatech | IT, Cloud & Cyber Security @piadatech]

Quanti domini abbandonati hai nel cassetto? Valuta se venderli sul mercato secondario (aftermarket) o rindirizzarli al tuo sito principale per sfruttare il loro traffico👇https://t.co/NorQ0zYkyq #DomainFlipping #SEO

[Piadatech | IT, Cloud & Cyber Security @piadatech]

Tip 13: Imposta un record CAA (Certification Authority Authorization) per dire al mondo quali autorità possono emettere certificati SSL per il tuo sito. Più sicurezza, in 1 clic👇https://t.co/NorQ0zYSnY #CyberSecurity #SSL

[Piadatech | IT, Cloud & Cyber Security @piadatech]

Il Domain Brokerage non è solo per i giganti del web. Anche le PMI possono negoziare nomi chiave per dominare la loro nicchia. Valuta il tuo prossimo investimento 👇 https://t.co/NorQ0zYSnY
#PMI #BusinessTips

[Piadatech | IT, Cloud & Cyber Security @piadatech]

Tip 12: Assicurati che l'email associata al contatto amministrativo del dominio sia ancora attiva! Altrimenti perderai gli avvisi di rinnovo. Fai un check dei tuoi dati WHOIS 👇
https://t.co/NorQ0zYSnY #DomainManagement #Admin

[Piadatech | IT, Cloud & Cyber Security @piadatech]

Hai mai acquistato un dominio 'Premium'? Sono nomi brevi e rilevanti, costano di più ma offrono un ritorno enorme in termini di branding e memoria. 👇
https://t.co/NorQ0zYSnY #PremiumDomains #BusinessGrowth