Frontline
physical security
17 December 2025
Cyber-Physical Security Report
Cyber-Physical Security Report – As the holidays come, let’s reflect on how important it is to feel safe in the places where we live and work. But today, security isn’t just about people or spaces: it means protecting a hybrid ecosystem, halfway between the analog and digital worlds, where people, spaces, and technologies are increasingly […]
Cultura
12 December 2024
Be careful of the trick
The mantra of the good buyer. Black Friday trick The Black Friday weekend is just around the corner, bringing with it a whole slew of offers, discounts and tempting promotions that seem impossible to miss. But behind this frenzy lies a growing danger: computer scams. Cyber attackers know how to exploit our cognitive biases to […]
Compliance
12 December 2024
IMQuality Webinar โ NIS 2 & Cyber Security
NIS Directive 2 and Cyber Security – On 17 October the framework that the EU has designed to address new challenges of resilience in cybersecurity, defined by the so-called NIS2 (Directive 2022/2555), will enter into force. We discussed this with IMQ at the free IMQuality Webinar on 10 October. Some issues emerged, including: Cyber attacks […]
Cybersecurity
22 July 2024
Securing Critical Infrastructures
In the era of industrial automation, cybersecurity in the IoT (Internet of Things) and OT (Operational
Technology) sectors has become a top priority.
News & Eventi
21 May 2024
Business & Breakfast: Cyber Security
The adoption of proactive strategies: ๐๐๐ ๐๐๐๐ฆ ๐๐ญ๐ญ๐๐๐ค ๐๐ข๐ฆ๐ฎ๐ฅ๐๐ญ๐ข๐จ๐งย as a tool to identify infrastructure, physical, procedural and human vulnerabilities.
Cultura
8 May 2024
Moves not to repeat at home (valid even if it is not World Password Day)
In todayโs hybrid world, oscillating between analog and digital, cybersecurity has become a top priority for users and businesses.
News & Eventi
8 May 2024
Go-to-Market Global Cyber Security
Cyber Security is increasingly a global issue that goes beyond political geographies: this requires companies to adopt a broad and integrated vision of risk.
Cybersecurity
8 May 2024
BLACK TEAM โ Physical Attack
With the Black Team, we make sure that your companyโs restricted areas really are. To do this, we use the simplest method we know: we try to get into it.
Software Security
7 May 2024
Bypassing Certificate Pinning on Flutter-based Android Apps. A new guide.
ย One of the preliminary activities when analyzing mobile application, more usually than not, is to be able to sniff HTTP/S traffic via a MitM proxy. This is quite straightforward in the case of naive applications, but can be quite challenging when applications use certificate pinning techniques. In this post I’ll try to explain the […]
Software Security
17 April 2024
Semgrep Rules for iOS Application Security (Swift)
Nowadays, millions of people rely on iOS mobile applications forย almost everything. As a result iOS devices manage a significant amount of data including sensitive ones, such as: credentials, health data, payment dataย and so on. For these reasons ensuring the security of iOS applications is more critical than ever when developing iOS applications. Securely handling sensitive […]
Uncategorized
6 March 2024
Testing the Security of Modbus Services
ICS and Building Management Systems (BMS) support several protocols such as Modbus, Bacnet, Fieldbus and so on. Those protocols were designed to provide read/write control over sensors and actuators from a central point. Driven by our experience with BMS, we decided to release our own methodology and internal tool used for proactive attack surface analysis […]
Software Security
23 October 2023
Semgrep Rules for Android Application Security
Introduction The number of Android applications has been growing rapidly in recent years. In 2022, there were over 3.55 million Android apps available in the Google Play Store, furthermore, this number is expected to keep growing in the coming years. The expansion of the Android app market is being driven by a number of factors, […]
Cybersecurity
26 June 2023
IMQ Intuity & BloodHound by SpecterOps
#ActiveDirectory, and and increasingly #Azure Active Directory, are key elements of a computer infrastructure that manage digital identities and regulate the authentication process of users, devices and business applications.For this reason, they are coveted targets during the execution of a cyber attack. Their compromise or even just reading key information, can give the attacker a considerable advantage.On […]
Cybersecurity
26 June 2023
PURPLE TEAM TRAINING – Sharing different perspectives
Purple Team Training. In the real world those who defend never know who, when and from where they will attack. For this reason, the Purple Team was born to show you how we attack you in real time sharing different perspectives: those of those who attack and those of those who defend. The aim is […]
Cultura
26 June 2023
SAFETY FOR DIGITAL COMPANIES Good password hygiene habits
World Password Day. Using a strong and effective password in the office is like wearing the safety clothing of the digital world. The human brain, however, is not programmed to remember strong passwords, nor to keep in mind a different complex password for each account. On the contrary, it is programmed to act quickly and […]
