Breaking News

Pierluigi Paganini July 10, 2019
Adobe Patch Tuesday updates for July 2019 address only 5 minor flaws

Adobe Patch Tuesday updates for July 2019 address minor vulnerabilities in the Bridge CC, Experience Manager and Dreamweaver products. Good news for Adobe users, Adobe Patch Tuesday updates for July 2019 address only minor flaws in the Bridge CC, Experience Manager, and Dreamweaver products. Adobe fixed an out-of-bounds memory read issue affecting the Bridge CC on Windows and […]

Pierluigi Paganini July 10, 2019
UK ICO proposes a $123 million fine for Marriott 2014 data breach

The UK’s data privacy regulator plans to fine giant hotel chain Marriott International with a £99 million ($123 million) under GDPR over 2014 data breach. The company replied that it will fight against the fine, it could reply to the UK ICO’s proposal before the final determination. The UK’s data privacy regulator announced that the giant hotel […]

Pierluigi Paganini July 10, 2019
Microsoft released Patch Tuesday security updates for July 2019

Microsoft Patch Tuesday updates for July 2019 address a total of 77 vulnerabilities, 14 rated as Critical, 62 as Important, and only 1 as Moderate in severity. Microsoft released Patch Tuesday updates for July 2019 that address a total of 77 vulnerabilities, 14 rated as Critical, 62 as Important, and only 1 as Moderate in severity. Patch Tuesday updates for July 2019 […]

Pierluigi Paganini July 09, 2019
Prototype Pollution flaw discovered in all versions of Lodash Library

Liran Tal, a developer advocate at open-source security platform Snyk, discovered a high-severity prototype pollution security flaw that affects all versions of lodash. Lodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm. Liran Tal, a developer advocate at Snyk, discovered a high-severity prototype pollution vulnerability, tracked as CVE-2019-10744, that affects all […]

Pierluigi Paganini July 09, 2019
Maryland Department of Labor discloses a data breach

The Maryland Department of Labor announced it has suffered a data breach announced that exposed personally identifiable information.  The Maryland Department of Labor suffered a data breach, hackers accessed databases containing personally identifiable information (PII). The security breach was discovered earlier this year, hackers also accessed data stored in the Literacy Works Information System and […]

Pierluigi Paganini July 09, 2019
Flaw in Zoom video conferencing software lets sites take over webcam on Mac

Zoom video conferencing software for Mac is affected by a flaw that could allow attackers to take over webcams when users visit a website. Cybersecurity expert Jonathan Leitschuh disclosed an unpatched critical security vulnerability in the Zoom app for Apple Mac computers, that is chained with another issue, could be exploited by attackers to execute […]

Pierluigi Paganini July 09, 2019
Kaspersky report: Malware shared by USCYBERCOM first seen in December 2016

The malware samples shared by USCYBERCOM last week were first detected in December 2016 in attacks attributed to Iran-linked APT33. Last week the United States Cyber Command (USCYBERCOM) uploaded to VirusTotal a malware used by Iran-linked APT33 group in attacks in Dec 2016 and Jan 2017. Now experts at Kaspersky confirmed that the malware was […]

Pierluigi Paganini July 09, 2019
A new Astaroth Trojan Campaign uncovered by Microsoft

Microsoft Defender ATP Research Team discovered a fileless malware campaign that was spreading the information stealing Astaroth Trojan. Experts at the Microsoft Defender ATP Research Team discovered a fileless malware campaign that is delivering the information stealing Astaroth Trojan. The malware is able to log the users’ keystrokes, collect information through hooking, access clipboard content, and monitor […]

Pierluigi Paganini July 08, 2019
Cyberattack shuts down La Porte County government systems

Government computer systems at La Porte County, Indiana, were shut down after a cyber attack hit them on July 6. Experts believe it was a ransomware attack. On July 6, a cyber attack brought down government computer systems at La Porte County, Indiana. At the time of writing, there were only a few details about […]

Pierluigi Paganini July 08, 2019
Spotting RATs: Delphi wrapper makes the analysis harder

Experts observed an increase of the malware spreading using less-known archive types as dropper,in particular ISO image.Delphi wrapper makes analysis harder Introduction In the last period, we observed an increase of the malware spreading using less-known archive types as an initial dropper, in particular, ISO image. The spread of threats exploiting ISO image to hide […]