Francesca Meriggi

A rather interesting paper was released yesterday about the usefulness, or not, of SBOM tooling https://lnkd.in/ek9mAmqv by Giacomo Benedetti, Serena Cofano, Alessandro Brighente, and Mauro Conti. Ok let's delve into the paper given I'm on an SBOM thing at the moment. The authors evaluated five SBOM tools cdxgen ORT GH-sbom Syft Trivy They used Python as the language of choice, which has an interesting journey with regards to packages/dependencies. BLUF: None of them really worked well with the job of finding vulnerabilties. But hang on, SBOM tooling shouldn't find vulns right? They are there for package composition, inventory evidence etc right? Now I do agree with this statement: "Due to the lack of a standardized SBOM format and the limitations in the accuracy of existing SBOM generation tools, it is possible to end up with different generated SBOMs for the same software" So what's the skinny? well the authors recommend PIP-sbom https://lnkd.in/e3-qKEHd and yeah it's good but also highly experimental, and the author themselves state that They do reference Grype https://lnkd.in/e8hC8cGt, which is FRIGGIN' amazing and as part of a github pre-commit hook, you are in a solid space Anyway back to the findings and they state what most of us know in that there's no standardisation of what an SBOM should do, there's dependency resolution problems and false positives, but this isn't exactly news at 10 stuff right? To work out what the ground truth is, they made use of Low Jaccard Similarity Index, a fancy way to measure how similar two sets of things are cdxgen did the best at around 40%, others not so much, but cdxgen had 978 fp's and overall, the graph is interesting Missed vulnerabilities? Yep, they missed some big ones too. They couldn’t spot some critical issues because, you know, reading the actual code is hard, apparently but it's ok, there's a patagonia lot having coffee right now about this new AI SBOM startup they are making It's a great paper and I'm glad academics and researchers are looking at this as SBOM generation is a hard problem, as is using them. In short: SBOMs are trying, but they’re a little like that friend who promises to help move but shows up 3 hours late. We love the effort, but let’s keep pushing for better tools!

38

12 commenti

“BANKING BEYOND THE BANK: FINANCIAL ALTERNATIVES TO SUPPORT THE GROWTH OF ENTERPRISES” is the new online event of the Intesa Sanpaolo’s “Networking Talks” series, entirely dedicated to Private Equity, M&A, and other financial solutions to support the growth of small and medium-sized enterprises (SMEs). Discover the opportunities and challenges of innovative financial strategies to promote business growth at every stage. With an informative and straightforward approach, the topic will be explored by experts, academics, and market participants, representing different perspectives to facilitate understanding and decision-making. From implementing ESG-compliant policies and expanding internationally, to embracing digital transformation and navigating generational transitions, each phase in development requires bespoke tools that only a leading financial partner can provide. To join the online event on October 2nd at 2:00 p.m. (CET), register now: https://ow.ly/PrLQ30sGHLH #intesasanpaolo #isbd #webinar #networkingtalks #privateequity #m&a #esg #digital #sme

3

“BANKING BEYOND THE BANK: FINANCIAL ALTERNATIVES TO SUPPORT THE GROWTH OF ENTERPRISES” is the new online event of the Intesa Sanpaolo’s “Networking Talks” series, entirely dedicated to Private Equity, M&A, and other financial solutions to support the growth of small and medium-sized enterprises (SMEs). Discover the opportunities and challenges of innovative financial strategies to promote business growth at every stage. With an informative and straightforward approach, the topic will be explored by experts, academics, and market participants, representing different perspectives to facilitate understanding and decision-making. From implementing ESG-compliant policies and expanding internationally, to embracing digital transformation and navigating generational transitions, each phase in development requires bespoke tools that only a leading financial partner can provide. To join the online event on October 2nd at 2:00 p.m. (CET), register now: https://ow.ly/G5Aw30sGMuG #intesasanpaolo #isbd #webinar #networkingtalks #privateequity #m&a #esg #digital #sme

3

Once again this year, Intesa Sanpaolo Innovation Center, Fondazione Compagnia di San Paolo and Startup Genome have collaborated to analyse and enhance Turin's entrepreneurial ecosystem in the Global Startup Ecosystem Report 2024. The #GSER analyzes data from more than 4.5 million companies in more than 300 entrepreneurial innovation ecosystems around the world. It provides a comprehensive overview of startup trends and ranks the top 40 global ecosystems, emerging ecosystems, and a regional ranking. This year Turin has moved up more than 20 positions and entered the ranking of the 100 best emerging ecosystems for the first time. You can read the report here https://ow.ly/UxSh30sEeUw

12

Lemonway has been blocked by Banca d'Italia - Eurosistema to open new wallets in the country until further notice #Lemonway, a leading French #fintech and key partner for Italian #crowdfunding platforms, has been blocked by Banca d’Italia from opening new wallets until further notice. This unexpected restriction affects Lemonway's ability to enter into new agreements for payment services and introduce new products and services in Italy. The regulatory action impacts new customers but does not affect existing accounts or services. Founded to streamline the management of client wallets for crowdfunding platforms, Lemonway has been a significant player in the fintech sector, with ambitions to become a major European market leader. The decision by Banca d’Italia comes amid similar restrictive measures taken against other fintech companies like Qonto, primarily due to Anti Money Laundering (AML) concerns. The intervention by Banca d’Italia is poised to have substantial implications for the crowdfunding sector in Italy, where alternatives to Lemonway are limited. This regulatory hurdle comes at a time when the industry is already grappling with increased costs and reduced margins due to new European regulations. The current regulatory climate emphasizes the need for fintech companies to prioritize compliance and adapt to evolving regulatory requirements to maintain their market position and continue their growth trajectory. The startup itself informed current customer of this activity through a specific email today. The article on AziendaBanca in the first comment. Want to stay up to date with the market? Here my newsletter: - Linkedin: https://lnkd.in/d4h8zqKA  - Substack: https://lnkd.in/dzfGJzmW

69

11 commenti

Driving Innovation and Sustainability: Intesa Sanpaolo recognized at the Green Economy Award. On September 19th, the iconic Salone Margherita in Naples became the stage for the Green Economy Award, celebrating Italian companies at the forefront of Wellbeing and Sustainability. Intesa Sanpaolo earned a special mention for its forward-thinking use of artificial intelligence to enhance security and promote social responsibility. In 2023, the bank introduced educational cybersecurity videos and a personalized virtual brand ambassador for its foreign banks, designed to empower customers and raise awareness of online risks. These initiatives highlight a steadfast commitment to digital sustainability and ensuring a safer, more informed digital experience for all. #GreenEconomyAward #Innovation #Sustainability #AI #Cybersecurity #DigitalSustainability #Wellbeing #CustomerProtection #IntesaSanpaolo #CorporateResponsibility

1

Wise words as always from Giovanni. The real challenge is to factorize the novel risks adequately covering the relevant forward looking info

34

3 commenti

Once again this year, Intesa Sanpaolo Innovation Center, Fondazione Compagnia di San Paolo and Startup Genome have collaborated to analyse and enhance Turin's entrepreneurial ecosystem in the Global Startup Ecosystem Report 2024. The #GSER analyzes data from more than 4.5 million companies in more than 300 entrepreneurial innovation ecosystems around the world. It provides a comprehensive overview of startup trends and ranks the top 40 global ecosystems, emerging ecosystems, and a regional ranking. This year Turin has moved up more than 20 positions and entered the ranking of the 100 best emerging ecosystems for the first time. You can read the report here https://ow.ly/V9h130sEooi

2

After a period of initial distrust, #GenerativeAI is reaching a role in #modelgovernance thanks to unquestionable advantages: - Automation: GenerativeAI can automate repetitive tasks in monitoring and managing models, reducing the time and costs associated with these operations. - Advanced Analysis: It can analyze large volumes of data and identify patterns or anomalies that may escape human observation, thereby improving the quality of model outcomes. - Data-Driven Decisions: with the capability to generate and test different variables and scenarios, GenerativeAI supports more informed decisions. - Governance and Compliance: It helps ensure that models are aligned with regulations and internal policies, facilitating documentation and reporting required by regulatory authorities. - Continuous Improvement: models can be constantly updated and improved based on feedback and new data, ensuring they remain relevant and effective. On the other side Transparency and Explainability must be under control to increase stakeholders' trust. Discover on www.prometeia.com why we are Category leaders in #ModelRiskQuantification and our expertise in #AIValidation

24

2 commenti

Intesa Sanpaolo's Banca dei Territori Division with the New York Branch of the IMI Corporate & Investment Banking Division, in collaboration with the Italian International Propeller Clubs and SRM - Study Center connected to the Group met in New York in recent days for a joint mission dedicated to promoting the strategic role of Italian ports in the Mediterranean and enhancing the shipping and logistics sectors. A series of meetings that confirm Intesa Sanpaolo's objective of being a point of reference for the entire sector and aims to encourage further expansion of the American presence in Italy, especially in the maritime economy supply chain. A desire that is also expressed with a ceiling of 10 billion euros of financing, largely already invested in the port areas through the Single Special Economic Zone of the South and the Simplified Logistics Zones of the Center and North. "Intesa Sanpaolo actively supports the development of the maritime economy and the Italian port system, has already provided 6 billion euros of direct and indirect financing to support these investments, focusing on Group synergies and the interest of sensitive foreign companies and investors to the expected tax and administrative advantages" commented Anna Roscio, Executive Director of Corporate Sales & Marketing of Intesa Sanpaolo. Find out more: https://ow.ly/nQ9030sCge1

2

The recent cyberattack on ASST Rhodense by the ransomware group Cicada3301 has once again highlighted the vulnerabilities of Italian healthcare institutions. The theft of 1 terabyte of sensitive data, published entirely on the criminal group's Data Leak Site, underscores the urgent need to strengthen cybersecurity measures, as highlighted by the #NIS2 regulation. In a context where knowing the "demons" is essential to counter them, a comprehensive Identity and Access Management (IAM) solutions can protect healthcare organizations from increasingly sophisticated threats with: - Multi-Factor Authentication (MFA): Implement additional layers of security to ensure that only authorized users can access critical systems. - Single Sign-On (SSO): Reduce the risk of phishing attacks and simplify user access while enhancing security. - Zero Trust Security: Adopt a security approach that requires continuous verification of identities and devices, reducing the risk of unauthorized access. - Compliance and Governance: Ensure that access policies are consistently applied and compliant with data protection regulations. #CyberSecurity #HealthcareSecurity #IAM #PingIdentity #DataProtection #ZeroTrust #MFA #SSO

9

“BANKING BEYOND THE BANK: FINANCIAL ALTERNATIVES TO SUPPORT THE GROWTH OF ENTERPRISES” is the new online event of the Intesa Sanpaolo’s “Networking Talks” series, entirely dedicated to Private Equity, M&A, and other financial solutions to support the growth of small and medium-sized enterprises (SMEs). Discover the opportunities and challenges of innovative financial strategies to promote business growth at every stage. With an informative and straightforward approach, the topic will be explored by experts, academics, and market participants, representing different perspectives to facilitate understanding and decision-making. From implementing ESG-compliant policies and expanding internationally, to embracing digital transformation and navigating generational transitions, each phase in development requires bespoke tools that only a leading financial partner can provide. To join the online event on October 2nd at 2:00 p.m. (CET), register now: https://ow.ly/glA830sGHKR #intesasanpaolo #isbd #webinar #networkingtalks #privateequity #m&a #esg #digital #sme

1

🌟 Intesa Sanpaolo Achieves Best Half-Year Results in 17 Years! 🌟 Under the leadership of Carlo Messina, #IntesaSanpaolo continues to solidify its position as a top player in the European banking sector. 🔹 Outstanding Financial Performance: • Net Operating Income: +10% compared to H1 2023 • Operating Result: +17% compared to H1 2023 • Gross Current Result: +15% compared to H1 2023 • Lowest Ever Cost/Income Ratio: 38.3% • NPL Coverage Ratio: 1% 🔹 Strategic Investments: despite significant investments in IT (3.2 billion) and the new labor contract, operating costs have decreased. 🔹 Strong Client Growth: • Customer Financial Assets: 1,350 billion • Commissions: +7% compared to H1 2023 • Best Half-Year Performance in Insurance Activities 🔹 Positive Outlook Amid Rate Drops: even with decreasing interest rates, the projected net profit for 2024-2025 stands at 8.4 billion. Intesa Sanpaolo’s commitment to innovation and efficiency continues to drive its success. The bank’s exceptional performance reflects its strategic vision and dedication to delivering value to its clients and shareholders. 👉 https://lnkd.in/dDTqpMA3 #Banking #Finance #Leadership #Innovation #IntesaSanpaolo #FinancialResultso

10

In the meeting "PNRR and EDIH: financing Research and Innovation with concessions" organized by SMACT Competence Center in collaboration with Intesa Sanpaolo and T2i, financing opportunities to support their digital transition and research and innovation projects were presented to companies. Specifically, the benefits offered by the PNRR and the European Digital Innovation Hubs (EDIH) program were illustrated, which together with the strategic support that Intesa Sanpaolo can support companies in the digital transition and sustainable growth paths. Find out more: https://ow.ly/kz7H30sHyp3

3

⬇️ Today, let’s deep dive into the #Payments ecosystem in #Italy from our latest white paper, "Key Players in the EU Payments Landscape 2024": https://lnkd.in/dVYy5rTP 💳 Owned by local banks, BANCOMAT S.p.A. plays a central role in Italy’s payment landscape with three main solutions: Bancomat (interbank network), PagoBancomat (the card scheme), and BancomatPay (online payment solution). While cash still dominates at POS, with 69% of transactions, digital payment adoption is rising. Visa and Mastercard are also key players, with 34% and 20% market share, respectively. 🌐 Similar to other European countries, Italy offers a range of alternative payment methods. Our Member Satispay is a highly popular mobile payment app, with over 4.4 million users and partnerships with government platforms like PagoPA S.p.A. PayPal remains the leading digital wallet, with over 90% market share, and other solutions like Apple Pay, Google Pay, and Skrill are available. Meanwhile, BNPL continues to grow, led by local unicorn Scalapay. Scalapay entered multiple partnerships during the second half of 2023, partnering with the US-based card issuing platform Marqeta. Other players include Tinaba and MyBank. 🏦 The three leading banks are Intesa Sanpaolo, UniCredit, and CDP Cassa Depositi e Prestiti (CDP), holding significant market share. UniCredit’s buddyunicredit, N26, Revolut, and HYPE can be found in the fully digital banking landscape, and non-banking issuers like PostePay and Mooney are important institutions in Italy. The key challenge that banks and financial institutions are facing is the instant payments regulation. This regulation poses digitalisation challenges to the players in this industry and may lead to an overhaul of the entire internal IT payment systems of certain institutions. 📶 Italy is a strategic market for payment service providers as it transitions from cash to digital. Major players like Nexi Italy lead the payment processing space, serving over 900,000 merchants. Worldline Italia, Axerve and Edenred Payment Solutions are also prominent players, with growing acceptance networks across the country. Key Takeaway💡: "Local payment solutions (such as Bancomat, Satispay) remain highly popular and the preferred payment methods. Due to the high cash usage in the country, Italy is an attractive market for new players and innovative solutions. Similarly to other countries in the European Union, instant payments have become one of the key challenges and will force players to adapt their technical capabilities.” Massimo Tonassi | Partner – Deloitte

11

🚀 Intesa Sanpaolo reports record results – Q3 and first nine months of 2024! Big news for Intesa Sanpaolo: €7.2 billion net profit for the first nine months of 2024 – that’s up 17% YoY! €2.4 billion net profit for Q3 alone, thanks to gains in both interest margins and fees. 📈 What’s Next?   We’re raising our net profit forecast for 2025 to €9 billion, while targeting €8.5 billion for 2024. All of this with zero reliance on acquisitions – avoiding integration delays, tech mismatches, and management distraction. 🔊 CEO Carlo Messina's statement: “The results from the first nine months of 2024 confirm Intesa Sanpaolo as a European leader” said CEO #CarloMessina. He noted that Intesa Sanpaolo’s market valuation places it alongside BNP Paribas and Santander—despite a significantly larger balance sheet. “In 2024, we expect to achieve a net profit above €8.5 billion, while the net profit target for 2025 has been increased to approximately €9 billion” Messina emphasized, “thanks to our bank’s strong potential to grow profitability organically”. Why it matters:   Intesa Sanpaolo is achieving growth by leveraging internal synergies, not by taking on the risks that come with big acquisitions. 🔹 Behind the Results: People & Technology 🔸 Technology: €3.5 billion invested in digital transformation. - 55% of our applications now run on Cloud, powered by our proprietary isytech platform. - Our digital bank, #Isybank, welcomed over 400,000 new clients, accelerating sharply since September. 🔸 People: Major growth in Wealth Management. - 1,500 new Global Advisors to be hired for Wealth Management & Protection, targeting 2,500 advisors at Banca dei Territori. - By 2027, we’ll have 20,000+ employees dedicated to Wealth Management & Protection across Italy, making Banca dei Territori a top 4 financial advisory network nationally. We’re building on our foundation and our vision for the future. 🏆 #IntesaSanpaolo #Q3Results #WealthManagement #DigitalBanking #FutureofBanking #italy #UE #EU

5