Hacking

Pierluigi Paganini July 03, 2018
Iranian Charming Kitten ATP group poses as Israeli cybersecurity firm in phishing campaign

Iranian APT groups continue to very active, recently Charming Kitten cyber spies attempted to pose as an Israeli cyber-security firm that uncovered previous hacking campaigns. The Iranian Charming Kitten ATP group, aka Newscaster or Newsbeef,  launched spear phishing attacks against people interested in reading reports about it. The Newscaster group made the headlines in 2014 when experts at iSight issued a report describing the […]

Pierluigi Paganini July 02, 2018
Trezor users targeted by phishing attacks, experts blame DNS Poisoning or BGP Hijacking

The maintainers of the Trezor multi-cryptocurrency wallet service reported a phishing attack against some of its users that occurred during the weekend. I had some issues yesterday, when accessing your site. It seems to be related with DNS. Is https://t.co/wGje8x5lRN legit? — Carsten đŸ‡č🇭 ⚡ (@CarstenBKK) July 1, 2018 The attack appears more complex respect […]

Pierluigi Paganini July 01, 2018
Zerodium offers up to $500,000 for Linux Zero-Day exploits

The sale of Zero-day exploits is a prolific business, zero-day broker Zerodium offers rewards of up to $500,000 FreeBSD, OpenBSD, NetBSD, Linux Zero-Days. The sale of Zero-day exploits is a prolific business that most people totally ignore, to better understand its evolution let’s analyze together the offer of the popular exploit broker Zerodium. To have […]

Pierluigi Paganini July 01, 2018
Data Broker Exactis data breach, one of the biggest ever, exposes millions of Americans

Security expert Vinny Troia has found a huge trove of data belonging to millions of Americans that were left unsecured online.  The security researcher Vinny Troia was analyzing the level of security for Elasticsearch installs exposed online when discovered millions of records belonging to Americans that were left unsecured online. The expert used Shodan to find U.S. […]

Pierluigi Paganini July 01, 2018
Security issues in the LTE standard expose billions on mobile users to attacks

Security issues in the LTE mobile device standard could be exploited by persistent attackers to spy on users’ cellular networks and hijack data traffic. A team of from Ruhr-UniversitĂ€t Bochum and New York University Abu Dhabi has discovered some security issues in the LTE mobile device standard that could be exploited by persistent attackers (i.e. intelligence […]

Pierluigi Paganini June 30, 2018
The popular online survey software Typeform suffered a security breach

Typeform, the popular online survey platform, has suffered a data breach that exposed partial data of some users, no payment card data was stolen. Typeform, the popular online survey platform, is the last victim of a data breach. Typeform software is widely adopted by businesses worldwide to easily arrange surveys, it allows easy creation of […]

Pierluigi Paganini June 30, 2018
Facebook Quiz app NameTests left 120 Million users’ data exposed online

Experts discovered a third-party quiz app, called NameTests, that was found exposing data of up to 120 million Facebook users. A bug on the Nametests.com exposed data of over 120 million users who took personality quizzes on Facebook, the good news is that the flaw was addressed as part of the Facebook’s Data Abuse Bounty Program launched […]

Pierluigi Paganini June 29, 2018
Adidas warns US consumers of a potential security breach

The sportswear company Adidas announced that it has launched an investigation after learning of a potential security breach that could impact millions of its US customers. Adidas published a security alert to warn that hackers may have stolen customer data from its US website. The German sportswear company confirmed that attackers may have had unauthorized access to […]

Pierluigi Paganini June 29, 2018
Hackers compromised Gentoo Linux GitHub Page and planted a malicious code

The development team of the Gentoo Linux distribution notifies users that hackers compromised one of the GitHub accounts and planted a malicious code. Developers of the Gentoo Linux distribution announced that hackers compromised one of the GitHub accounts used by the organization and planted a malicious code. “Today 28 June at approximately 20:20 UTC unknown […]

Pierluigi Paganini June 29, 2018
Ticketmaster suffered a data breach and blamed a third-party provider over the incident

The entertainment ticketing service Ticketmaster announced it has suffered a data breach that exposed personal and payment customer information. Hackers accessed name, address, email address, telephone number, payment details and Ticketmaster login details of company customers. According to the company, attackers installed a malicious code on customer support product hosted by Inbenta Technologies, an external […]