Hacking

Pierluigi Paganini March 05, 2018
Applebee restaurants suffered payment card breach

RMH Franchise Holdings revealed on Friday afternoon that PoS systems at the Applebee ’s restaurants were infected with a PoS malware. Another week another data breach, RMH Franchise Holdings revealed last week that PoS systems at the Applebee’s restaurants were infected with malware. The PoS malware was used to collect names, payment card numbers, expiration dates, and […]

Pierluigi Paganini March 05, 2018
New attacks on 4G LTE networks can allow to spy on users and spoof emergency alerts

A group of researchers discovered a number of weaknesses in the 4G LTE networks that could be exploited by attackers to eavesdrop on phone calls and text messages, knock devices offline, track location, and spoof emergency alerts. A group of researchers from Purdue and the University of Iowa have discovered a number of vulnerabilities affecting the […]

Pierluigi Paganini March 05, 2018
SgxPectre attack allows to reveal the content of the SGX enclave

A group of researchers from the Ohio State University has discovered a new variation of the Spectre attack named SgxPectre that allows to reveal the content of the SGX enclave. A group of researchers from the Ohio State University has discovered a new variation of the Spectre attack named SgxPectre. Intel Software Guard eXtensions (SGX) is a technology […]

Pierluigi Paganini March 04, 2018
Recent Memcached DDoS attacks drive RDoS extortion practice

Crooks already started to blackmail companies asking for a ransom demand in Monero cryptocurrency to avoid being attacked via Memcached servers. Last week, the Github service was hit by the biggest-ever DDoS attack that peaked 1.35 Tbs by abusing the memcached protocol to power so-called memcached DDoS attacks. Researchers believe that threat actors in the wild will abuse misconfigured […]

Pierluigi Paganini March 04, 2018
GCHQ fears energy smart meters could expose millions of Bretons to hack

In the United Kingdom, new smart energy meters that are set to be installed in 27 million homes were found vulnerable by GCHQ. Unsecured IoT devices are a privileged target of hackers and unfortunately, smart energy meters belong to this category. In the UK, new smart energy meters that are set to be installed in […]

Pierluigi Paganini March 03, 2018
A flaw in HP Remote Management hardware Integrated Lights-Out 3 leaves expose servers to DoS

Hewlett Packard Enterprise issued a security patch to address a vulnerability (CVE-2017-8987) in HP remote management hardware Integrated Lights-Out 3. Hewlett Packard Enterprise has issued a security patch to address a vulnerability (CVE-2017-8987) in its remote management hardware Integrated Lights-Out 3 that equip the family of HP ProLiant servers. The Hewlett-Packard iLO is composed of […]

Pierluigi Paganini March 02, 2018
Github hit by the biggest-ever DDoS attack that peaked 1.35 Tbs

On February 28, 2018, the popular GitHub’s code hosting website was hit by the largest-ever distributed denial of service (DDoS) attack that peaked at 1.35 Tbps On February 28, 2018, the popular GitHub’s code hosting website was hit by the largest-ever distributed denial of service (DDoS) attack. The DDoS attack peaked at record 1.35 Tbps […]

Pierluigi Paganini March 02, 2018
Equifax confirmed additional 2.4 Million identifies affected by security breach

The results of the forensic investigation on the massive Equifax hack revealed additional 2.4 Million identities were involved in the security incident. The massive Equifax hack made the headlines again, new revelations about the security breach emerge in the last hours. The credit bureau company announced this week it identified an additional 2.4 million American consumers affected by […]

Pierluigi Paganini March 01, 2018
Hundreds of Tim Hortons outlets across Canada closed after malware attack

Tim Hortons restaurants across Canada have been hit by a computer malware that forced some locations to shut down over the past week. When dealing with cyber threats for the retail sector, Target in most prominent case of potential damages from a cyber attack. Today I want to report you the case of a malware-based […]

Pierluigi Paganini March 01, 2018
DPA Report: Russia-linked APT28 group hacked Germany’s government network

Germany Government confirmed that hackers had breached its computer network and implanted a malware that was undetected for one year. German news agency DPA reported that Russian hackers belonging to the APT28 group (aka Fancy Bear, Pawn Storm, Sednit, Sofacy, and Strontium) have breached Germany’s foreign and interior ministries’ online networks. The agency, quoting unnamed security sources, revealed that the […]