Hacking

Pierluigi Paganini January 31, 2017
Gaza Cybergang is back and is targeting Governments under DustySky campaign

Security experts at PaloAlto Networks have observed a new campaign that has been launched by a cyber espionage group known as Gaza Cybergang. Security experts at Palo Alto Networks have uncovered a new cyber espionage campaign conducted by the Gaza Cybergang hacker group, also known as “Gaza Hackers Team” and “Molerats.” On September 2015, security experts at Kaspersky Lab observed an increase […]

Pierluigi Paganini January 31, 2017
An IndyCar archive left unprotected online, details on 200k racing fans exposed

A notorious security expert has discovered online an open Rsync server hosting the personal details for at least 200,000 IndyCar racing fans. The notorious expert Chris Vickery has discovered an open Rsync server hosting the personal details for at least 200,000 racing fans. Further analysis revealed that data belongs to the archive of a defunct racing […]

Pierluigi Paganini January 31, 2017
Hundreds of thousands, if not over a million Netgear routers open to hack

Hundreds of thousands of Netgear routers are vulnerable to password bypass, the company issued updates only for a number models. An impressive number of Netgear routers is affected by two flaws that can lead to password disclosure. It has been estimated that hundreds of thousand devices, potentially more than one million Netgear routers, could be hacked, by both a […]

Pierluigi Paganini January 30, 2017
Anonymous promises war on Trump, and only line experts say how to hack his mobile

Anonymous declared war to US President-elect Donald Trump, hackers are threatening to expose his alleged affairs with Russians. Anonymous declared war to US President-elect Donald Trump, recently the collective threatened to expose his “financial and personal ties with Russian mobsters.” The group is claiming to have inside information on some of Trump’s dirty affairs with Russians, […]

Pierluigi Paganini January 29, 2017
Uber pays $9,000 bug bounty payoff for partner firm’s vulnerability

A security expert discovered a flaw in a ransomware protection service that opened Uber service, and many others, to cyber attacks. The Russian penetration tester Vladimir Ivanov from the security firm Positive Technologies has discovered a vulnerability in anti-ransomware backup service Code42. The flaw could be exploited by attackers to steal data from the organizations using […]

Pierluigi Paganini January 28, 2017
CVE-2017-3792 – Cisco TelePresence MCU affected by a Remote Code Execution issue

A critical flaw tracked as CVE-2017-3792 affects three different models of the CISCO TelePresence MCU platform, MCU 5300 Series, MSE 8510 and MCU 4500. A critical vulnerability tracked as CVE-2017-3792 affects three different models of the CISCO TelePresence MCU platform. Cisco TelePresence MCU platform is a high-definition multimedia conferencing bridge that is widely adopted due to its […]

Pierluigi Paganini January 27, 2017
A hacker confirmed that President Trump Twitter account is linked to a private account

A security researcher has discovered that the President Trump’s Twitter account is exposed to the risk of hack due to security misconfigurations. While the experts are warning the press about the fact that the American President Trump is still using his personal insecure Android smartphone, we have discovered that his Twitter is exposed to the risk […]

Pierluigi Paganini January 27, 2017
Hacker discovered security flaws in Amazon, Apple and Google epub services

A hacker discovered a XXE flaw in the EpubCheck library that affects major epub services causing information disclosure and denial of service conditions. The security expert and bug hunter Craig Arendt (@craig_arendt) has discovered flaws in major eBook readers including the ones commercialized by Amazon, Apple, and Google. The expert discovered different XML external entity (XXE) […]

Pierluigi Paganini January 26, 2017
Gmail will stop allowing JavaScript (.js) file attachments starting February 13, 2017

Google announced Gmail will soon stop allowing users to attach JavaScript (.js) files to emails for obvious security reason. Google announced Gmail will soon stop allowing users to attach JavaScript (.js) files to emails for obvious security reason. JavaScripts files, like many other file types (i,e, .exe, .jar, .sys, .scr, .bat, .com, .vbs and .cmd) […]

Pierluigi Paganini January 24, 2017
A flaw in the Cisco WebEx Extension allows Remote Code Execution

Tavis Ormandy, a security expert at Google Project Zero, has discovered a critical remote code execution vulnerability in the Cisco WebEx browser extension. Google Project Zero researcher Tavis Ormandy has discovered a critical remote code execution vulnerability in the Cisco WebEx browser extension. Cisco’s initial fix does not appear to be complete, which has led to […]