18970 results
Pierluigi Paganini
January 16, 2015
Google Project Zero team disclosed a new unpatched flaw affecting Windows 8.1 systems, the cyber security community is divided between those for and against. The Google Project Zero team has disclosed the details of two more unpatched Windows vulnerabilities due to its disclosure policy. Google has released the details of another Windows vulnerability that Microsoft failed to fix […]
Pierluigi Paganini
January 16, 2015
Experts at Sucury firm have analyzed a malvertising scheme that has hijacked at least two distinct Google AdWords advertising campaigns. Malvertising campaigns are one of privileged attack vector exploited by criminal crews, their efficiency depends on the ability of attackers to compromise large audience channels. In September 2014 Malwarebytes firm discovered a large scale malvertising campaign exploiting Google’s […]
Pierluigi Paganini
January 16, 2015
Malware experts at Symantec discovered a new strain of the notorious Carberp Trojan designed to steal banking credentials and sensitive data from victims. Security experts at Symantec have discovered on December 15 a malicious campaign for distributing of a new strain of the notorious Carberp Trojan. The continuous evolution of Carberp, exactly like other popular malware inclusing […]
Pierluigi Paganini
January 16, 2015
ENISA published a study on the on the threat landscape and provides a list of good practices that aim at securing an Internet infrastructure assets. ENISA has published the annual analysis on the threat landscape, the document titled Threat Landscape and Good Practice Guide for Internet Infrastructure analyzes in details the current cyber threats and […]
Pierluigi Paganini
January 15, 2015
The website of the popular Notepad++ editor was hacked and defaced by hacktivists protesting against the recently released “Je suis Charlie” edition. Members of the Tunisian hacking crew named “Hackers of the Fallaga Team” have compromised and defaced a large number of French websites following the Charlie Hebdo terrorist attack. Hundreds of French websites have been […]
Pierluigi Paganini
January 15, 2015
Researchers at IBM Trusteer discovered a new toolkit dubbed KL-Remote that allows criminals to run Remote Overlay Attacks without specific skills. It is even more simple for cyber criminals to arrange scams and conduct illegal activities thanks the offer in the cyber criminal ecosystem, for example KL-Remote is a newborn toolkit that could be used to compromise online banking accounts by […]
Pierluigi Paganini
January 15, 2015
Security Experts at Microsoft discovered a new variant of CryptoWall 3.0 ransomware that adopts I2P Anonymity Network for C&C Communications. A new version of CryptoWall ransomware has been detected in the wild by experts at Microsoft, just a week after I reported that Cisco’s Talos Security Intelligence and Research Group detected a new strain of the same […]
Pierluigi Paganini
January 14, 2015
GE MultiLink managed switches are affected by two vulnerabilities which could be exploited to gain unauthorized access and run DoS attacks on the device. Managed Ethernet switches produced by GE include the hard-coded private SSL key in a number of network devices. The Ethernet switches that present the security hole are designed for use in industrial […]
Pierluigi Paganini
January 14, 2015
Dell SecureWorks detected the Skeleton Key malware, which modifies authentication process on Active Directory (AD) systems protected by only passwords. The experts at Dell SecureWorks Counter Threat Unit(TM) (CTU) have recently discovered a malware dubbed Skeleton Key that bypasses single-factor authentication on Active Directory (AD) systems. The attackers can use to have total access to remote […]
Pierluigi Paganini
January 14, 2015
Google is not able to direct control the distribution of bug patches for its devices, and 60 percent of Android phones is exposed to security risks. The security expert Todd Bearsley published an interesting blog post on Rapid7 Security Street blog explaining that the Metasploit framework currently includes 11 different exploits for WebView. “WebView is the core component […]
Artificial Intelligence / September 04, 2026
