Hacking

Pierluigi Paganini May 30, 2017
FreeRADIUS allows hackers to log in without credentials

The security researcher Stefan Winter has discovered a TLS resumption authentication bypass in FreeRADIUS, the world’s most popular RADIUS Server. The security researcher Stefan Winter from the Luxembourg’s high-speed academic network RESTENA has discovered a FreeRADIUS TLS resumption authentication bypass. FreeRADIUS is the world’s most popular RADIUS Server, “it is the basis for multiple commercial offerings. It supplies the […]

Pierluigi Paganini May 29, 2017
Microsoft silently patched a second critical Malware Protection Engine flaw

Microsoft silently patched a second critical vulnerability in its Malware Protection Engine that was discovered on May 12. Microsoft has patched the critical vulnerability in its Malware Protection Engine that was discovered on May 12 by the researchers at the Google’s Project Zero team. The vulnerability could be exploited by an attacker that has crafted an executable that […]

Pierluigi Paganini May 29, 2017
FileSystem NTFS Bug Crashes Windows 7 and Windows 8.1

A FileSystem NTFS Bug could be exploited to crash Windows 7 and Windows 8.1, using Chrome browser you can avoid problems. Until Microsoft patches this problem, use Chrome: a slip in file-path handling allows an attacker to crash Windows 7 and Windows 8.1 with a file call. A bug in the way Microsoft handle file-path could […]

Pierluigi Paganini May 29, 2017
Austrian parties SPÖ and ÖVP want Whatsapp monitoring

Austrian SPÖ and ÖVP parties are fighting for WhatsApp instant messaging and plan further measures to fight the terrorism. Both the Austrian Social Democratic Party of Austria (SPÖ) and the Austrian People’s Party (Österreichische Volkspartei; ÖVP) are fighting for instant messaging monitoring such as WhatsApp. The experts believe that the Government will end anonymous mobile phone SIM […]

Pierluigi Paganini May 27, 2017
Experts tracked a German hacker behind the spreading of Houdini Worm on Pastebin

Security experts at Recorded Future tracked a German hacker for the propagation of the Houdini worm through Pastebin sites. A German hacker that goes online with the moniker Vicswors Baghdad is the responsible for the propagation of the Houdini malware on Pastebin sites. According to the expert at Recorded Future, the same threat actor appears to be […]

Pierluigi Paganini May 27, 2017
Chipotle Mexican Grill Fast-food chain notified customers a PoS malware breach

The Fast-food chain Chipotle notified users a security breach, hackers compromised its point of sale terminals to steal payment card data. The Mexican Grill Fast-food chain Chipotle notified users a data breach, hackers infected its point of sale terminals to steal payment card data. The malicious code infected systems in 47 states and Washington earlier […]

Pierluigi Paganini May 26, 2017
Millions of Android devices potentially exposed to the Cloak and Dagger attack

Researchers at Georgia Institute of Technology have discovered a new attack against Android OS, dubbed ‘Cloak and Dagger,’ millions of devices at risk. Security researchers at Georgia Institute of Technology have discovered a new attack, dubbed ‘Cloak and Dagger’, that allows taking full control of Android devices. The  ‘Cloak and Dagger’ attack works against all versions […]

Pierluigi Paganini May 26, 2017
Flashpoint experts believe WannaCry authors speak Chinese after a linguistic analysis

Security experts at threat intelligence firm Flashpoint conducted a linguistic analysis of dozens of ransom notes displayed by the WannaCry ransomware. Malware researchers at threat intelligence firm Flashpoint conducted a linguistic analysis of 28 ransom notes displayed by the WannaCry ransomware. Flashpoint analyzed 28 WannaCry ransom notes written in various language including Chinese (both simplified and […]

Pierluigi Paganini May 25, 2017
NSA EsteemAudit exploit could trigger a new WannaCry-like attack

Security experts from enSilo firm released a free patch for Windows systems vulnerable to the NSA-linked ESTEEMAUDIT Exploit. The WannaCry emergency could not be ended because the NSA dump leaked by the Shadow Brokers team included many other dangerous exploits. Last months the Shadow Brokers group released another batch of data containing exploit codes still unpatched by Microsoft such as […]

Pierluigi Paganini May 25, 2017
Subtitles hack threatens Millions of PCs, Smart TVs, Tablets and Smartphones

Security experts from security firm Check Point warn of a subtitles hack threatens Millions of devices. According to the experts at Check Point, hackers could exploit a new attack vector that uses malicious subtitles to compromise devices via their media players. Millions of users worldwide can be targeted due to security vulnerabilities in many popular streaming platforms, including VLC, […]