Hacking

Pierluigi Paganini January 26, 2016
Flaw in Magento exposes millions of websites at risk of takeover

A stored cross-site scripting vulnerability in Magento exposes millions of e-commerce websites at risk of takeover, update your platform as soon as possible Once again a vulnerability in the popular Magento e-commerce platform opens at risk of hijacking attacks millions of online merchants. According to the experts at Sucuri, the Magento e-commerce platform was affected by a […]

Pierluigi Paganini January 26, 2016
Lenovo SHAREit affected by hard-coded password and many other flaws

Security experts at Core Security’s CoreLabs have discovered a hard-coded password and other vulnerabilities in the Lenovo SHAREit File-Sharing App. Lenovo today has patched several security issues related to the presence of a hard-coded password the file-sharing application Lenovo ShareIT application for Android and Windows that is available for free. The application was designed by […]

Pierluigi Paganini January 25, 2016
OpKillingBay – Anonymous shut down Japanese airport site to protest against slaughter of Dolphin

OpKillingBay – A group of hackers linked to the Anonymous collective shut down the Japanese Airport Website to protest against the slaughter of Dolphin. The collective Anonymous has launched a DDoS attack that shut down the Website of the Japanese Narita International Airport on Friday night (at around 9:30 p.m) until Saturday (around 1 a.m). The attack has been confirmed by the […]

Pierluigi Paganini January 25, 2016
A flaw in TeslaCrypt ransomware allows file recovering

The victims of the infamous TeslaCrypt ransomware can now rejoice, there is a free tool to decrypt files encrypted by TeslaCrypt and TeslaCrypt 2.0 TeslaCrypt is one of the most insidious ransomware first detected in the wild in 2015, today I have a good news for its victims. TeslaCrypt was first detected in February 2015, the […]

Pierluigi Paganini January 24, 2016
Skype – IP will now be hidden by default to avoid attacks

Skype announced it will hide the user’s IP address, the new security feature is enabled by default in the latest update provided by the company. Skype now hides users’ IP addresses, a measure implemented to protect them against attacks from online trolls. Skype announced the security feature this week in a blog post, the feature is […]

Pierluigi Paganini January 23, 2016
The Fortinet SSH backdoor found in many other products

A review of all the products allowed Fortinet to discover the same SSH backdoor on some versions of its solutions. Recently security experts reported the presence of a SSH backdoor in Fortinet firewalls, news of the day is that the company has found the same backdoor also in several new products, many of them running current […]

Pierluigi Paganini January 22, 2016
Be careful Facebook users, you are under attack!

Facebook users are receiving malicious email delivering malware masquerading as audio message, a similar campaign also targeted WhatsApp users. Social media and instant messaging application are a privileged vector for cyber threats, in many cases bad actors exploited them to spread malicious links and infect a large number of users. Now a new campaign is targeting […]

Pierluigi Paganini January 21, 2016
A Reflected File Download flaw affects Google Finance

The Portuguese cyber security expert David Sopas has discovered a Reflected File Download (RFD) vulnerability affecting Google Finance. The researchers explained that different from other similar Reflected File Download he discovered in the past, this time, the attackers don’t need to create a page to force the download. “Found this vulnerability when auditing other client. With this RFD you don’t […]

Pierluigi Paganini January 20, 2016
Which are the worst passwords of 2015?

SplashData has published its fifth annual report on most used passwords in 2015, including the list of the Worst passwords of the year. For the fifth time, experts from the SplashData security firm have published a report, titled “Worst Passwords of 2015”  that analyzes the use of passwords in 2015. The researchers compiled the annual report with data […]

Pierluigi Paganini January 20, 2016
Feds fear high sophisticated attacks at Super Bowl 50

Federal security officials fear that attacks on fiber optic systems in the Bay Area may pose a threat to Super Bowl 50 A security memo issued by the FBI and Department of Homeland Security is warning of the dangers of a high-tech attack against crowds at the next Super Bowl 50. The event will be held in the […]