Pierluigi Paganini
January 20, 2018
Threat actors with a deep knowledge of the Fiscal Italian ecosystem are using a huge botnet to target Italian companies and Ministry of the Interior. On Januaty 18 a colleague of mine (Luca) called me telling a malicious email was targeting Italian companies. This is the beginning of our new analysis adventure that Luca and […]
Pierluigi Paganini
January 20, 2018
Red Hat is going to release updates that are reverting previous patches for the Spectre vulnerability (Variant 2, aka CVE-2017-5715). Just after the release of Spectre and Meltdown patches many experts argued a significative impact on performance and stability of systems running them. While Meltdown and Spectre Variant 1 could be theoretically being addressed by […]
Pierluigi Paganini
January 20, 2018
US Government missed a historic opportunity to reform a dangerous surveillance law that opens to a global surveillance, instead it has signed a version that makes it worse. The U.S. legal framework related to the domestic surveillance has been signed by President Trump one day after the Senate approved it with 65 votes against 34. The […]
Pierluigi Paganini
January 19, 2018
The industrial giant Schneider discovered that the Triton malware exploited a zero-day vulnerability in Triconex Safety Instrumented System (SIS) controllers in an attack aimed at a critical infrastructure organization. In December 2017, a new malicious code dubbed Triton malware  (aka Trisis) was discovered by researchers at FireEye, it was specifically designed to target industrial control […]
Pierluigi Paganini
January 19, 2018
Security researchers at Forcepoint have spotted a new spam campaign that is abusing compromised FTP servers as a repository for malicious documents and infecting users with the Dridex banking Trojan. The Dridex banking Trojan is a long-running malware that has been continuously improved across the years. The malicious email campaign was first noticed by Forcepoint on January 17, 2018, the […]
Pierluigi Paganini
January 19, 2018
The software developer Abraham Masri has discovered a new bug, dubbed ‘chaiOS’ that could be exploited to crash a target’s iMessage application. The researcher and software developer Abraham Masri has discovered a new bug, dubbed ‘chaiOSÂ Text Bomb’ that could be exploited to crash recipient’s iMessage application in a continuous loop. https://twitter.com/cheesecakeufo/status/953401511429726210 The flaw exploited […]
Pierluigi Paganini
January 19, 2018
On January 8, the Health South East RHF, that is the healthcare organization that manages hospitals in Norway’s southeast region disclosed a major security breach. On January 8, the Health South East RHF, that is the healthcare organization that manages hospitals in Norway’s southeast region (countries of Ăstfold, Akershus, Oslo, Hedmark, Oppland, Buskerud, Vestfold, Telemark, […]
Pierluigi Paganini
January 18, 2018
Intel has published the results of the test conducted on the Meltdown and Spectre patches and their impact on performance confirming serious problems. According to the tech giant systems with several types of processors running Meltdown and Spectre patches may experience more frequent reboots. A few days ago Intel reported that extensive test conducted on home and business PCs […]
Pierluigi Paganini
January 18, 2018
North Korean hackers belonging to the North Korea Group 123 have conducted at least six different massive malware campaigns during 2017. North Korean hackers have conducted at least six different massive malware campaigns during 2017, most of them against targets in South Korea. Security researchers from Cisco’s Talos group who have monitored the situation for 12 […]
Pierluigi Paganini
January 18, 2018
Security experts from FireEye have spotted a new strain of the Zyklon malware that has been delivered by using new vulnerabilities in Microsoft Office. Researchers at FireEye reported the malware was used in attacks against organizations in the telecommunications, financial, and insurance sectors. Zyklon has been spotted for the first time in 2016, it is a publicly available […]
