Hacking

Pierluigi Paganini October 15, 2017
Swedish transport agencies targeted in DDoS cyber attacks

Swedish transport agencies were hit by cyber attacks on Wednesday and Thursday, October 11 and 12, is it Information Warfare? Swedish transport authorities were hit by cyber attacks on Wednesday and Thursday, October 11 and 12. The attacks have brought down several IT systems causing delays of the train transportation. The first attack hit the Sweden Transport […]

Pierluigi Paganini October 14, 2017
SecureWorks shed light on BRONZE BUTLER group that targets Japanese Enterprises

Researchers with Counter Threat Unit at SecureWorks continues to monitor the Bronze Butler cyberespionage group (aka Tick). Researchers with Counter Threat Unit at SecureWorks are monitoring the Bronze Butler cyberespionage group (aka Tick). The hacker group has been targeting Japanese heavy industry, manufacturing and international relations at least since 2012, According to the experts, the […]

Pierluigi Paganini October 13, 2017
A new Facebook scam allows your friend contacts to hack your account

Researchers spotted a new Facebook scam that could deceive also tech-savvy people and trick them into giving the attacker access to their Facebook accounts. Don’t trust message apparently sent from any of your Facebook Friends asking for urgent help to recover their Facebook account. Researchers have spotted a new Facebook scam that could deceive also tech-savvy people and trick […]

Pierluigi Paganini October 13, 2017
Hyatt Hotels suffered a new payment card breach, the second in two years

The Hyatt Hotels Corporation notified customers that their credit card information may have been stolen by crooks, the second time in 2 years. The Hyatt Hotels Corporation made the headlines once again, the company notified customers that their credit card information may have been stolen by crooks. The data breach affects three hotels in the United States, […]

Pierluigi Paganini October 13, 2017
Republican polling firm Victory Phones database was hacked

The databases of the Republican polling firm Victory Phones were hacked just after the 2016 election, exposing donor records. Victory Phones, an automated phone research, and data compilation firm was hacked in January exposing data on hundreds of thousands of Americans who submitted donations to Republican political campaigns. Victory Phones carries out polling on behalf of […]

Pierluigi Paganini October 12, 2017
Equifax website redirected visitors to fake Flash update, it’s malvertising

Equifax service set up for obtaining free and discounted credit reports had been redirecting users to websites offering a fake Flash Player installer. The independent security analyst Randy Abrams discovered an Equifax service set up for obtaining free and discounted credit reports had been redirecting users to websites offering a fake Flash Player installer. “As I […]

Pierluigi Paganini October 12, 2017
Swiss BPC banking software SmartVista is vulnerable to SQL Injection attacks

The suite of payment infrastructure and management systems SmartVista created by the BPC Group is vulnerable to SQL Injection attacks. Researchers at security firm Rapid7 have publicly disclosed a SQL injection vulnerability affecting the financial platform SmartVista after they couldn’t raise a response from the vendor. SmartVista is a suite of payment infrastructure and management systems […]

Pierluigi Paganini October 12, 2017
ASD revealed hacker stole 30GB of sensitive data on Australia’s military capabilities

The Australia’s foreign intelligence  Agency ASD has revealed military sensitive information has been stolen by hackers who breached a Department of Defence contractor. The Australia’s foreign intelligence agency, the Australian Signals Directorate (ASD), admitted a hacker has stolen over 30 GB of military documents. Stolen data includes details on fighter jets, military aircraft, and naval ships. The […]

Pierluigi Paganini October 11, 2017
Israel hackers caught Russian cyber spies abusing Kaspersky AV to steal NSA secrets

Israeli hackers compromised the Kaspersky infrastructure and caught Russian spies using AV tool to harvest NSA exploits. Kaspersky was not aware of the hack. There is still a heated discussion about the alleged hack of Kaspersky’s antivirus and its use to steal an NSA exploit from a US subcontractor. Explosive new revelations put at risk […]

Pierluigi Paganini October 11, 2017
Microsoft addresses CVE-2017-11826 Office Zero-Day used to deliver malware

Microsoft October Patch Tuesday addresses the CVE-2017-11826 Office Zero-Day vulnerability that has been exploited in the wild in targeted attacks. Yesterday we discussed Microsoft’s October Patch Tuesday addressed three critical zero-day security vulnerabilities tied to the DNSSEC protocol. Going deep in the analysis of the Patch Tuesday updates for October 2017 we can see that Microsoft addressed […]