Garanzia Assicurativa Cyber Risk Piergiorgio Venuti

Garanzia Assicurativa Cyber Risk

Alla luce dei recenti attacchi informatici e dell’aumentare dei ransomware (come WannaCry e Petya) la Secure Online Desktop in collaborazione con Broker Busani Stefano di Union Brokers (vedi PRESENTAZIONE BROKER) è lieta di presentare la Garanzia Assicurativa Cyber Risk come valido strumento per aumentare la sicurezza dei propri dati.

 

Garanzia Assicurativa Cyber Risk – Descrizione

La Garanzia Assicurativa Cyber Risk protegge il cliente anche se il danno è stato da lui causato. Lo protegge da tutte le richieste di risarcimento anche se il danno è dovuto a:

  • – errore;
  • – Negligenza;
  • – Violazione;
  • – Omissione di doveri;
  • – Colpa grave;
  • – Illecito per:
    •  – violazione della Sicurezza della Rete;
    •  – Malware;
    •  – Hacking;
    • – Attacchi D.O.S. (Denial of Service);
    • – Accesso o Uso NON autorizzato;
    • – Privacy.

Copre anche la Cyber estorsione: cioè le somme che l’assicurato paga per porre fine ad un evento di Cyber-Estorsione (cioè una minaccia ricevuta al sistema informatico al fine di richiedere denaro all’assicurato).

Include anche la perdita di dati: causati da errore umano, errore di programmazione, black out, atti informatici dolosi, attacchi D.O.S., Malware, Hacking, uso o accesso NON autorizzato.

Copre tutte le spese che derivano da questi eventi e copre le spese per legali, periti e i costi sostenuti.

Quando avvengono purtroppo questi eventi l’azienda resta ferma a volte per giorni , a volte purtroppo per settimane!

La garanzia assicurativa Cyber Risk copre anche le perdite economiche derivanti da aver interrotto l’attività!

 

[btnsx id=”2929″]

A chi si rivolge?

Questo prodotto si rivolge a tutte le società di piccole e medie dimensioni con fatturato inferiore a €25milioni. Escluse quelle di vendita al dettaglio.

 

Cosa è necessario fare in pratica?

Per sottoscrivere la polizza è sufficiente rivolgersi a noi, che seguiremo il cliente nell’analizzare il grado di rischio della sua attività fino a parametrizzare per lui la corretta garanzia contro l’evento Cyber.

 

Business Case

Prestigioso hotel 5stelle in Tirolo (Austria), le chiavi di tutte le camere dell’hotel sono chiavi elettroniche a scheda, gli hacker si impossessano del sistema informatico dell’Hotel e bloccano l’apertura di tutte le porte delle camere dell’hotel. I clienti sono in preda al panico, nel mentre scatta la richiesta di versamento di alcune decine di migliaia di euro da parte degli hackers: l’hotel non ha altra scelta: paga. La polizza rimborsa l’hotel di quanto l’hotel ha versato agli hackers.

 

[btnsx id=”2929″]

Condividi


RSS

Piu’ articoli…

Categorie …

Tags

RSS CSIRT

RSS darkreading

RSS Full Disclosure

  • CVE-2024-25286 - RedSys - A Cross-Site Request Forgery (CSRF) vulnerability was identified in the Authorization Method of 3DSecure 2.0 Settembre 12, 2024
    Posted by RUBEN LOPEZ HERRERA on Sep 11Product: 3DSecure 2.0 Manufacturer: Redsys Affected Version(s): 3DSecure 2.0 3DS Authorization Method Tested Version(s): 3DSecure 2.0 3DS Authorization Method Vulnerability Type: Cross-Site Request Forgery (CSRF) Risk Level: Medium Solution Status: Not yet fixed Manufacturer Notification: 2024-01-17 Solution Date: N/A Public Disclosure: 2024-09-17 CVE Reference: CVE-2024-25286 Overview: A Cross-Site […]
  • CVE-2024-25285 - RedSys - 3DSecure 2.0 is vulnerable to form action hijacking Settembre 12, 2024
    Posted by RUBEN LOPEZ HERRERA on Sep 11Product: 3DSecure 2.0 Manufacturer: Redsys Affected Version(s): 3DSecure 2.0 3DS Method Authentication Tested Version(s): 3DSecure 2.0 3DS Method Authentication Vulnerability Type: Cross-Site Scripting (XSS) Risk Level: Medium Solution Status: Not yet fixed Manufacturer Notification: 2024-01-17 Solution Date: N/A Public Disclosure: 2024-09-17 CVE Reference: CVE-2024-25285 Overview: 3DSecure 2.0 is […]
  • CVE-2024-25284 - RedSys - Multiple reflected Cross-Site Scripting (XSS) vulnerabilities in the 3DS Authorization Method of 3DSecure 2.0 Settembre 12, 2024
    Posted by RUBEN LOPEZ HERRERA on Sep 11Product: 3DSecure 2.0 Manufacturer: Redsys Affected Version(s): 3DSecure 2.0 3DS Authorization Method Tested Version(s): 3DSecure 2.0 3DS Authorization Method Vulnerability Type: Cross-Site Scripting (XSS) Risk Level: Medium Solution Status: Not yet fixed Manufacturer Notification: 2024-01-17 Solution Date: N/A Public Disclosure: 2024-09-17 CVE Reference: CVE-2024-25284 Overview: Multiple reflected Cross-Site […]
  • CVE-2024-25283 - RedSys - Multiple reflected Cross-Site Scripting (XSS) vulnerabilities exist in the 3DS Authorization Challenge of 3DSecure 2.0 Settembre 12, 2024
    Posted by RUBEN LOPEZ HERRERA on Sep 11Product: 3DSecure 2.0 Manufacturer: Redsys Affected Version(s): 3DSecure 2.0 3DS Authorization Challenge Tested Version(s): 3DSecure 2.0 3DS Authorization Challenge Vulnerability Type: Cross-Site Scripting (XSS) Risk Level: Medium Solution Status: Not yet fixed Manufacturer Notification: 2024-01-17 Solution Date: N/A Public Disclosure: 2024-09-17 CVE Reference: CVE-2024-25283 Overview: Multiple reflected Cross-Site […]
  • CVE-2024-25282 - RedSys - 3DSecure 2.0 is vulnerable to Cross-Site Scripting (XSS) in its 3DSMethod Authentication Settembre 12, 2024
    Posted by RUBEN LOPEZ HERRERA on Sep 11Product: 3DSecure 2.0 Manufacturer: Redsys Affected Version(s): 3DSecure 2.0 3DS Method Authentication Tested Version(s): 3DSecure 2.0 3DS Method Authentication Vulnerability Type: Cross-Site Scripting (XSS) Risk Level: Medium Solution Status: Not yet fixed Manufacturer Notification: 2024-01-17 Solution Date: N/A Public Disclosure: 2024-09-17 CVE Reference: CVE-2024-25282 Overview: 3DSecure 2.0 is […]
  • KL-001-2024-012: VICIdial Authenticated Remote Code Execution Settembre 10, 2024
    Posted by KoreLogic Disclosures via Fulldisclosure on Sep 10KL-001-2024-012: VICIdial Authenticated Remote Code Execution Title: VICIdial Authenticated Remote Code Execution Advisory ID: KL-001-2024-012 Publication Date: 2024-09-10 Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2024-012.txt 1. Vulnerability Details      Affected Vendor: VICIdial      Affected Product: VICIdial      Affected Version: 2.14-917a      Platform: GNU/Linux      CWE Classification:...
  • KL-001-2024-011: VICIdial Unauthenticated SQL Injection Settembre 10, 2024
    Posted by KoreLogic Disclosures via Fulldisclosure on Sep 10KL-001-2024-011: VICIdial Unauthenticated SQL Injection Title: VICIdial Unauthenticated SQL Injection Advisory ID: KL-001-2024-011 Publication Date: 2024-09-10 Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2024-011.txt 1. Vulnerability Details      Affected Vendor: VICIdial      Affected Product: VICIdial      Affected Version: 2.14-917a      Platform: GNU/Linux      CWE Classification: CWE-89:...
  • OXAS-ADV-2024-0005: OX App Suite Security Advisory Settembre 10, 2024
    Posted by Martin Heiland via Fulldisclosure on Sep 09Dear subscribers, We're sharing our latest advisory with you and like to thank everyone who contributed in finding and solving those vulnerabilities. Feel free to join our bug bounty programs for OX App Suite, Dovecot and PowerDNS at YesWeHack. This advisory has also been published at https://documentation.open-xchange.com/appsuite/security/advisories/html/2024/oxas-adv-2024-0005.html. […]
  • [SYSS-2024-030]: C-MOR Video Surveillance - OS Command Injection (CWE-78) Settembre 6, 2024
    Posted by Matthias Deeg via Fulldisclosure on Sep 05Advisory ID: SYSS-2024-030 Product: C-MOR Video Surveillance Manufacturer: za-internet GmbH Affected Version(s): 5.2401, 6.00PL01 Tested Version(s): 5.2401, 6.00PL01 Vulnerability Type: OS Command Injection (CWE-78) Risk Level: High Solution Status: Open Manufacturer Notification: 2024-04-05 Solution Date: - Public Disclosure: 2024-09-04...
  • [SYSS-2024-029]: C-MOR Video Surveillance - Dependency on Vulnerable Third-Party Component (CWE-1395) Settembre 6, 2024
    Posted by Matthias Deeg via Fulldisclosure on Sep 05Advisory ID: SYSS-2024-029 Product: C-MOR Video Surveillance Manufacturer: za-internet GmbH Affected Version(s): 5.2401 Tested Version(s): 5.2401 Vulnerability Type: Dependency on Vulnerable Third-Party Component (CWE-1395) Use of Unmaintained Third Party Components (CWE-1104) Risk Level: High Solution Status: Fixed...

Customers

Newsletter

{subscription_form_2}