Hacking

Pierluigi Paganini August 01, 2019
MICROCHIPS Act aims at improving tech supply chain

MICROCHIPS Act (S. 2316) – Two US Senators have introduced a bill to protect US government supply chain against foreign sabotage and cyber espionage. Two US senators have introduced legislation a bill, dubbed Manufacturing, Investment and Controls Review for Computer Hardware, Intellectual Property and Supply ACT (MICROCHIPS Act – S. 2316) that aims at protecting […]

Pierluigi Paganini August 01, 2019
Cisco to pay $8.6 million fine for selling flawed surveillance technology to the US Gov

Cisco is going to pay $8.6 million to settle a legal dispute for selling vulnerable software to the US government. Back in 2008, a whistle-blower identifies a vulnerability in Cisco video surveillance software, but the tech giant continued to sell the software to US agencies until July 2013. The case was filed in the Federal […]

Pierluigi Paganini August 01, 2019
CISA warns of critical flaws in Prima FlexAir access control system

The U.S. CISA published a security advisory to warn of multiple critical vulnerabilities affecting in Prima FlexAir access control system. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) published an advisory to warn of critical flaws affecting access control systems manufactured by Prima Systems. Prima access control has a wide range of solutions, including wall-mounted […]

Pierluigi Paganini July 31, 2019
Cyber attacks hit Louisiana schools ahead of year’s beginning

A wave of cyber attacks hit schools of Louisiana ahead of year’s beginning that is planned for the next week. Several schools of Louisiana were targeted by hackers ahead of year’s beginning that is planned for the next week. The AP press states that a fourth Louisiana school district is assessing damages caused by a […]

Pierluigi Paganini July 31, 2019
DHS warns of cyber attacks against small airplanes

A few hours ago, I have written about an interesting analysis of the possible hack of avionics systems, not DHS warns of cyber attacks against small airplanes. Today we introduced an interesting report published by researchers at Rapid7 about the hacking of avionics systems via CAN bus, now the DHS issues an alert to warn […]

Pierluigi Paganini July 31, 2019
Hacking avionics systems through the CAN bus

An expert analyzed the level of security of avionics systems used in small airplanes, and the results are disconcerting. Patrick Kiley, a senior security consultant at Rapid7 conducted an investigation into the security of avionics systems inside small airplanes. The results are disconcerting it is quite easy to hack a small plane. Kiley, which is […]

Pierluigi Paganini July 31, 2019
Hacking eCommerce sites based on OXID eShop by chaining 2 flaws

Researchers at RIPS Technologies discovered vulnerabilities in the OXID eShop platform that could expose eCommerce websites to hack. Experts at RIPS Technologies discovered several flaws in the OXID eShop platform that could be exploited by unauthenticated attackers to compromise eCommerce websites. OXID eShop is a popular e-commerce software platform used by important brands like Mercedes […]

Pierluigi Paganini July 31, 2019
Hacking campaign is wiping Iomega NAS Devices exposed online

Experts warn of a new campaign carried out by threat actors that are wiping Iomega NAS devices exposed online. Security experts are warning of a campaign carried out by attackers that are deleting files on publicly accessible Lenovo Iomega NAS devices. Likely attackers use the Shodan search engine to find unprotected IOmega NAS exposed online […]

Pierluigi Paganini July 30, 2019
Google Project Zero hackers disclose details and PoCs for 4 iOS RCE flaws

Security experts at Google disclosed details and proof-of-concept exploit codes for 4 out of 5 security vulnerabilities in Apple iOS. Researchers at Google disclosed details and proof-of-concept exploit codes for 4 out of 5 security vulnerabilities in Apple iOS that could be exploited by attackers to hack Apple devices by sending a specially-crafted message over […]

Pierluigi Paganini July 30, 2019
LAPD data breach exposes personal info of thousands of officers

While Capital One incident is making the headlines, another incident may have severe consequences, the Los Angeles Police Department (LAPD) also suffered a data breach. The Los Angeles Police Department (LAPD) suffered a data breach that exposed the names, email addresses, passwords, and birth dates for thousands of police officers and applicants. The NBCLosAngeles confirmed that […]