Hacking

Pierluigi Paganini July 01, 2018
Security Affairs newsletter Round 169 – News of the week

A new round of the weekly SecurityAffairs newsletter arrived! The best news of the week with Security Affairs. Let me inform you that my new book, “Digging in the Deep Web” is online with a special deal 20% discount Kindle Edition Paper Copy Once again thank you! ·      A hacker devised a method to unlock […]

Pierluigi Paganini July 01, 2018
Security issues in the LTE standard expose billions on mobile users to attacks

Security issues in the LTE mobile device standard could be exploited by persistent attackers to spy on users’ cellular networks and hijack data traffic. A team of from Ruhr-Universität Bochum and New York University Abu Dhabi has discovered some security issues in the LTE mobile device standard that could be exploited by persistent attackers (i.e. intelligence […]

Pierluigi Paganini June 30, 2018
The popular online survey software Typeform suffered a security breach

Typeform, the popular online survey platform, has suffered a data breach that exposed partial data of some users, no payment card data was stolen. Typeform, the popular online survey platform, is the last victim of a data breach. Typeform software is widely adopted by businesses worldwide to easily arrange surveys, it allows easy creation of […]

Pierluigi Paganini June 29, 2018
Adidas warns US consumers of a potential security breach

The sportswear company Adidas announced that it has launched an investigation after learning of a potential security breach that could impact millions of its US customers. Adidas published a security alert to warn that hackers may have stolen customer data from its US website. The German sportswear company confirmed that attackers may have had unauthorized access to […]

Pierluigi Paganini June 29, 2018
Hackers compromised Gentoo Linux GitHub Page and planted a malicious code

The development team of the Gentoo Linux distribution notifies users that hackers compromised one of the GitHub accounts and planted a malicious code. Developers of the Gentoo Linux distribution announced that hackers compromised one of the GitHub accounts used by the organization and planted a malicious code. “Today 28 June at approximately 20:20 UTC unknown […]

Pierluigi Paganini June 29, 2018
Ticketmaster suffered a data breach and blamed a third-party provider over the incident

The entertainment ticketing service Ticketmaster announced it has suffered a data breach that exposed personal and payment customer information. Hackers accessed name, address, email address, telephone number, payment details and Ticketmaster login details of company customers. According to the company, attackers installed a malicious code on customer support product hosted by Inbenta Technologies, an external […]

Pierluigi Paganini June 28, 2018
Apophis Squad hacker group is the alleged responsible for the DDoS attack against ProtonMail

A massive DDoS attack hit encrypted email provider ProtonMail, experts believe it was powered by Russian hackers. On Wednesday morning, ProtonMail informed customers that its systems were under attack that was causing a delay in the delivery of the messages. Our network is under attack again. No data is breached or lost, but emails will be […]

Pierluigi Paganini June 28, 2018
Ops … the DoublePulsar NSA-Linked implant now works also on Windows Embedded devices

This is a very bad news for security community, the NSA-linked DoublePulsar exploit can now target Windows Embedded devices. The DoublePulsar exploit was released publicly in April 2017 by ShadowBrockers hackers that allegedly stole them from the NSA. The hackers leaked a huge trove of hacking tools and exploit codes used by the US intelligence agency, most of […]

Pierluigi Paganini June 28, 2018
Talos releases ThanatosDecryptor, a free Thanatos Ransomware decryptor

Experts from Cisco’s Talos team released a free decryption tool for the Thanatos ransomware to recover the files without paying the ransom. The Thanatos ransomware first appeared in the threat landscape in February when it was discovered by researchers at the MalwareHunterTeam. The experts from Talos believe the malware is being actively developed, it was being distributed […]

Pierluigi Paganini June 27, 2018
Unpatched WordPress file deletion vulnerability could allow site takeover and code execution

Seven months ago, security experts discovered a critical file deletion vulnerability that affects all WordPress versions, currently, the issue is still unpatched. The vulnerability could be exploited to complete takeover of the websites running the popular CMS and gain arbitrary code execution. The issue is severe if we consider the potential impact, WordPress is the most popular CMS […]