Security

Pierluigi Paganini July 22, 2015
Joomla Helpdesk Pro flaws leave systems vulnerable to several attacks

The Outpost24 team has identified several vulnerabilities that affect Joomla HelpDesk Pro extension, the flaws can lead to remote code execution on servers. Kasper Bertelsen, a security researcher at Outpost24 has discovered a number of vulnerabilities in the Joomla Helpdesk Pro extension which can lead to remote code execution on servers. The Helpdesk Pro Joomla extension is developed […]

Pierluigi Paganini July 22, 2015
Facebook query packs detects Hacking Team malware on Mac OS X

Facebook releases query packs for finding possible malware infection, including the malicious exploits used by the Hacking Team to hack Mac OS X. The Hacking Team hack revealed to the IT industry the “weapons” used by the Italian firm to compromise practically every system. Security experts who analyzed the material leaked online discovered the exploits […]

Pierluigi Paganini July 21, 2015
MongoDB admins exposed 600 terabytes of data by using un-patched versions

MongoDB administrators have exposed something like 595.2 terabytes of data by using bad poor configurations, or un-patched versions of the MongoDB. John Matherly, the creator of Shodan, the marvelous search engine for connected devices, revealed that many MongoDB administrators have exposed something like 595.2 terabytes of data by using bad poor configurations, or un-patched versions […]

Pierluigi Paganini July 21, 2015
Microsoft released out-of-band patch following Hacking Team hack

According to the security experts at FireEye, Microsoft releases out-of-band patch for all Windows version after Hacking Team hack. Microsoft released an out-of-band patch to fix a critical security issue in the Windows Adobe Type Manager Library that could be exploited by attackers to execute arbitrary code remotely on the targeted machine. The exploitation of […]

Pierluigi Paganini July 21, 2015
Free Milano Tool scans for Hacking Team Malware and exploits

Researchers at Rook Security have released a free tool, called Milano, that is able to detect the presence of HackingTeam malware on target systems. Researchers at Rook Security have released a free tool, called Milano, that is able to detect the presence of HackingTeam malware on target systems. The experts have also published a set […]

Pierluigi Paganini July 20, 2015
Incidents at Federal Government Agencies increased more than 1,000 percent since 2006

According to a new report by the Government Accountability Office (GAO), The Federal Government needs for stronger controls across Federal Agencies. According to a report submitted as testimony by Greg Wilshusen, director of information security issues at GAO, in a recent congressional hearing cybersecurity incidents that involved federal government have increased more than 1,000 percent since 2006. The […]

Pierluigi Paganini July 19, 2015
Dead NIS agent left note denying spying on SK population

South Korean police has found a NIS agent that left a note denying massive surveillance operated by the Government of Seoul on the population. The New York Times reported that a 46-year-old NIS agent working for the South Korean government was found dead in an apparent suicide. The man left a note denying National Intelligence […]

Pierluigi Paganini July 19, 2015
Security Affairs newsletter Round 18 – Best of the week from best sources

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from the best sources free for you in your email box. A new Zero-Day Vulnerability arises from Hacking Team hack Hacking Team Another Flash Zero-Day: CVE-2015-5122 Hacking Team by Numbers – The Infographic Hacking Team chief: Were the GOOD GUYS […]

Pierluigi Paganini July 18, 2015
NSA Releases SIMP, An Open Source Network Security Tool

The US Intelligence National Security Agency (NSA) has just released a network security tool dubbed Systems Integrity Management Platform (SIMP). The US Intelligence National Security Agency (NSA) has released a network security tool. Dubbed Systems Integrity Management Platform (SIMP), designed and distributed to secure the networks of organizations improving the resilience to cyber attacks. According to […]

Pierluigi Paganini July 17, 2015
Bogus News mobile App discovered in Hacking Team arsenal

Experts at Trend Micro have discovered a malicious Android App while they were analyzing the package of data stolen from Hacking Team. Experts at Trendmicro analyzing package of data stolen from Hacking Team systems discovered a fake news app that was designed to circumvent filtering in Google Play. The malicious app was downloaded only 50 […]