Security

Pierluigi Paganini December 10, 2015
The FBI continues its crusade against the encryption

Recent Paris attacks have raised the debate around encryption, US authorities sustain that the encryption interferes with their investigation. Recent Paris attacks have raised the debate around encryption, law enforcement and intelligence agencies sustain that the encryption is defeating them to prevent terrorist activities. Of course the question is instrumentalized by politicians and media, at […]

Pierluigi Paganini December 10, 2015
AVG, McAfee, and Kaspersky antivirus were vulnerable to critical flaw

Experts at enSilo have found a critical security vulnerability in various antivirus (AV) software that could be exploited by attackers to turn the AntiVirus to an attack-enabler tool. Some of the most important security firms have had an ugly surprise, the security software they offer to their clints have been compromised by a serious vulnerability flaw […]

Pierluigi Paganini December 10, 2015
NCA launched #CyberChoice campaign, to prevent youngsters become cyber criminals

The Britain’s National Crime Agency (NCA) has launched this week #CyberChoices campaign that targets parents of youngsters aged 12-15 to explain them how it is easy to be involved in cyber criminal activities. Are script kiddies a real threat? The Britain’s National Crime Agency (NCA) thinks so and launched a campaign to discourage teens from hacking activities […]

Pierluigi Paganini December 09, 2015
xboxlive digital certificate exposed opens users to MITM attacks

Microsoft has issued an advisory to notify customers that the private keys for an SSL/TLS digital certificate for *xboxlive.com have been disclosed. According to a security advisory published by Microsoft, the company is propagating a new certificate for the *.xboxlive.com domain because it has “inadvertently disclosed” the certificate’s contents. Microsoft confirmed the accidental disclosure of the […]

Pierluigi Paganini December 08, 2015
Hashcat, the fastest Password Cracking utility is now Open Source

Hashcat, the popular password recovery tool has been released as open source under the MIT license. You can contribute to it. The popular password cracking tool Hashcat is not an open source software, the announcement was first made on December 4 on Twitter via an MD5 hash that posted  the following message: “hashcat open source” @hashcat […]

Pierluigi Paganini December 07, 2015
Critical vulnerabilities found in Honeywell Midas Gas Detectors

Another vulnerable IoT device is in the headlines, this time two serious vulnerabilities affect the Honeywell Midas gas detectors. Honeywell has just released firmware updates for its Midas gas detectors to fix two high severity vulnerabilities. The Midas gas detectors are a category of product manufactured by Honeywell to detect toxic, ambient and flammable gasses in the […]

Pierluigi Paganini December 05, 2015
UK ANPR systems are one of the ‘world’s biggest surveillance systems’

The automatic number plate recognition systems (ANPR) used by the UK police are one of the largest surveillance systems in the world. When dealing surveillance systems the majority of people imagines skilled hackers that break their computers or communication lines in order to spy on specific targets. The situation is quite different, we are surrounded by […]

Pierluigi Paganini December 04, 2015
Kazakhstan – Telco Company Kazakhtelecom will order their costumers to install rogue certificates

The Government of the Kazakhstan makes it mandatory for its citizens to install rogue security certificates to monitor them online. The Government of the Kazakhstan plans to implement a new internet control policy for all the population starting from January 1st 2016, and to accomplish that will order the population to install some rogue security […]

Pierluigi Paganini December 03, 2015
The Signal app is available in beta version

Open Whisper Systems  issued a beta version of the Signal app for Desktop that for now works only as a Chrome app and links only to Android devices. Signal is a free and open-source encrypted voice calling and instant messaging application for mobile devices. It runs on both iOS and Android and uses advanced end-to-end encryption […]

Pierluigi Paganini December 02, 2015
Adobe Animate CC replaces Adobe Flash, what about security?

Adobe announced that it is dismissing Adobe Flash Professional CC to introduce a new product, the Adobe Animate CC. It will be launched in January 2016. Adobe Flash was developed to improve users’ experience providing a simple environment for the development of applications and games, but the advent of HTML5 has undermined its existence. We […]