Hacking

Pierluigi Paganini December 29, 2019
A new trojan Lampion targets Portugal

New trojan called ‘Lampion’ has spread using template emails from the Portuguese Government Finance & Tax during the last days of 2019. Last days of 2019 were the perfect time to spread phishing campaigns using email templates based on the Portuguese Government Finance & Tax. SI-LAB noted that Portuguese users were targeted with malscam messages […]

Pierluigi Paganini December 28, 2019
173 Million Zynga accounts were impacted in the September hack

In September Zynga, the American social game developer running social video game services suffered a data breach that 173 Million accounts. Zynga Inc is an American social game developer running social video game services founded in April 2007, it primarily focuses on mobile and social networking platforms. Among the online games developed by the company, […]

Pierluigi Paganini December 27, 2019
NVIDIA patches CVE-2019-5702 high-severity flaw in GeForce Experience

NVIDIA released a security update for the Windows NVIDIA GeForce Experience app that addresses CVE-2019-5702 high severity flaw. NVIDIA addresses a high severity vulnerability (CVE-2019-5702) in Windows NVIDIA GeForce Experience (GFE) app that could be exploited by local attackers to trigger a denial of service (DoS) condition or escalate privileges on systems running the vulnerable […]

Pierluigi Paganini December 27, 2019
Thai Officials confirmed the hack of prison surveillance cameras and the video broadcast

Authorities in Thailand are investigating a cyber attack that resulted in the broadcast of surveillance video from inside a prison in the country’s south. Local media reported that hackers broke into the surveillance system at Lang Suan prison in the southern province of Chumphon, the video was broadcast live on YouTube for several hours. The […]

Pierluigi Paganini December 26, 2019
Experts warn of 5 new flaws in Google Chrome dubbed Magellan 2.0

Google addressed a new set of vulnerabilities, dubbed Magellan 2.0, that could be exploited for remote code execution inside the Chrome browser. Google has fixed five SQLite vulnerabilities, dubbed Magellan 2.0, that could be exploited by an attacker to remotely execute malicious code inside the Chrome browser. The vulnerabilities were discovered by researchers from the […]

Pierluigi Paganini December 25, 2019
New Mozi P2P Botnet targets Netgear, D-Link, Huawei routers

A new Mozi P2P botnet is actively targeting Netgear, D-Link, and Huawei routers by probing for weak Telnet passwords to compromise them. Security experts from 360 Netlab spotted a new Mozi P2P botnet that is actively targeting Netgear, D-Link, and Huawei routers by probing for weak Telnet passwords to compromise them. According to the researchers, […]

Pierluigi Paganini December 25, 2019
Entercom Radio Network hit by a second cyber attack in a few months

A new cyber attack hit the radio network Entercom, this is the second time the company has suffered a similar security incident in a few months. A cyber attack hit the radio network Entercom, the incident has impacted the back-office functions and in some cases, the stations were apparently forced to run recorded programs. Entercom […]

Pierluigi Paganini December 24, 2019
FBI flash alert warns of LockerGoga and MegaCortex Ransomware attacks

The FBI has issued a warning to the private industry of cyber attacks involving the LockerGoga and MegaCortex Ransomware. The FBI is warning the private industry of cyber attacks involving the LockerGoga and MegaCortex Ransomware. “In an FBI Flash Alert marked as TLP:Amber and seen by BleepingComputer, the FBI is warning the private industry regarding […]

Pierluigi Paganini December 23, 2019
CVE-2019-19781 Citrix flaw exposes 80,000 companies at risk

Critical CVE-2019-19781 flaw in Citrix NetScaler ADC and Citrix NetScaler Gateway could be exploited to access company networks, 80,000 companies at risk worldwide. A critical vulnerability in Citrix Application Delivery Controller (NetScaler ADC) and Citrix Gateway (NetScaler Gateway), tracked as CVE-2019-19781, could be exploited by attackers to access company networks. It has been estimated that […]

Pierluigi Paganini December 23, 2019
Op Wocao – China-linked APT20 was able to bypass 2FA

China-linked cyber espionage group APT20 has been bypassing two-factor authentication (2FA) in recent attacks, cyber-security firm Fox-IT warns. Security experts from cyber-security firm Fox-IT warns of a new wave of attacks, tracked as Operation Wocao, carried out by China-linked cyber espionage group APT20 that has been bypassing 2FA. The attacks aimed at government entities and […]