Pierluigi Paganini
October 24, 2015
How much cost a zero-day for an industrial control system? Where is to possible to buy them and who are the main buyers of these commodities? We have discussed several times about the importance of zero-day in cyber attacks against computer systems, the exploitation of previously unknown vulnerabilities is a prerogative of well-funded hacking groups such as state-sponsored crews. […]
Pierluigi Paganini
October 24, 2015
The CEO of TalkTalk confirmed personally receiving a ransom from the alleged attackers, a Russian Islamist group claimed the responsibility of the attack. TalkTalk Telecom Group plc has publicly disclosed that four million subscribers have been impacted by a âsustained cyberattackâ that hit its servers. The TalkTalk CEO Dido Harding has now confirmed personally receiving a […]
Pierluigi Paganini
October 23, 2015
The Pawn Storm APT group set up rogue VPN and SFTP servers to target Dutch Safety Board employees involved in the MH17 crash investigation. July 17, 2014, Flight MH17, traveling from Amsterdam to Kuala Lumpur, was shot down by a missile in mysterious circumstances. Flight MH17 was flying over a conflict zone in eastern Ukraine […]
Pierluigi Paganini
October 23, 2015
Imperva has discovered that attackers hijack CCTV cameras to launch powerful DDoS attacks exploiting weak credentials and poor configurations of IoT devices. Internet of Things devices are becoming privilege targets of threat actors that daily abuse of their resources to run cyber attacks or to organize frauds or to spy on unaware users. Unfortunately, most IoT devices […]
Pierluigi Paganini
October 23, 2015
The British Internet Service Provider TalkTalk discloses possible breach and admits some data are not encrypted. The investigation is still ongoing. Another illustrious victim of a data breach is in the headlines, TalkTalk Telecom Group plc has announced that four million subscribers may have been impacted by a âsustained cyberattackâ that hit its servers. TalkTalk Telecom […]
Pierluigi Paganini
October 23, 2015
Experts at MalwareBytes uncovered a new malvertising campaign operated by Technical Support Scammers that are targeting Apple Mac owners. Scammers are prolific and ingenious guys, this time they are targeting Mac pretending to be operators of the Apple Technical support. Technical support scammers are running aggressive malvertising also relying on legitimate ad networks. “These scams aren’t being […]
Pierluigi Paganini
October 22, 2015
The ISACA study “2015 Advanced Persistent Threat Awareness-Third Annual” tries to uncover information security professionalsâ understanding of APT threats. A new report published by the ISACA organization that surveyed more than 660 cyber security professionals reveals that more than one in four organizations (28%) have already suffered an APT attack. According to the experts, the BYOD is increasing […]
Pierluigi Paganini
October 22, 2015
Experts at Bleeping Computer blog are reporting a new strain of ransomware dubbed LowLevel04 that is spreading via Remote Desktop and Terminal Service. Security experts at Bleeping Computer blog are reporting a new strain of ransomware dubbed LowLevel04 that is using an unusual infection mechanism, it is being spread via Remote Desktop and Terminal Service. […]
Pierluigi Paganini
October 21, 2015
Updates released last week by Apple for Apple Productivity Apps fix a number of flaws that can be exploited for a number of attacks. Apple has recently released Keynote 6.6, Pages 5.6, Numbers 3.6, and iWork for iOS 2.6 to fix multiple flaws in the Productivity Apps, mainly related to input validation issues that caused problems […]
Pierluigi Paganini
October 21, 2015
Apple told a federal judge that it âwould be impossibleâ to access data on a locked iPhone running one of the newer versions of the iOS operating system. Unlock this iPhone, I need access it for the investigation. It is probably one of the most common requests US law enforcement makes to Apple, but it […]
