Pierluigi Paganini

Pierluigi Paganini December 29, 2016
Researcher found a severe flaw in the MONyog monitoring tool

A security expert discovered a vulnerability in the MONyog tool that could be exploited by a normal user to elevate his privilege access. The security researcher and penetration tester Mutail Mohamed (@muleyl) discovered a vulnerability in the MONyog, the most secure and scalable MySQL monitoring tool of the server monitoring tool. The application URL is https://www.webyog.com/product/monyog and the affected version is MONyog […]

Pierluigi Paganini December 28, 2016
ZyXEL Customized Routers plagues by multiple vulnerabilities

According to the firm SecuriTeam, several ZyXEL customized routers are affected by many vulnerabilities that could be easily exploited by hackers. According to the firm SecuriTeam, multiple ZyXEL customized routers are affected by many vulnerabilities. The devices are distributed by the Thai IPS TrueOnline. The ZyXEL customized routers are offered for free to the customers with default settings, including default accounts […]

Pierluigi Paganini December 27, 2016
Hacked Sony Music Entertainment account tweeted about Britney Spears’s Death

Hackers compromised the Sony Music Entertainment Twitter account and posted the messages on Britney Spears’s Death. Experts blame OurMine crew. Sony Music Entertainment’s Twitter account was compromised and hackers posted the news of the Britney Spears’s death. “RIP @britneyspears #RIPBritney 1981-2016” and “Britney spears is dead by accident! We will tell you more soon #RIPBritney.” states […]

Pierluigi Paganini December 26, 2016
Hacker Interviews – R.I.U. crip (@cripthepoodle) – Security Affairs

@cripthepoodle was one of the members of the dreaded PoodleCorp hacker crew recently he targeted Steam platform, let’s meet him. You are a talented hacker that is very active online, could you tell me more about you. Could you tell me which his your technical background and when you started hacking? I started to get into […]

Pierluigi Paganini December 25, 2016
Security Affairs newsletter Round 92 – News of the week

A new round of the weekly SecurityAffairs newsletter arrived! The best news of the week with Security Affairs. First of all, let me inform you that at the #infosec16 SecurityAffairs was awarded as The Best European Personal Security Blog http://securityaffairs.co/wordpress/48202/breaking-news/securityaffairs-best-european-personal-security-blog.html DNSChanger Exploit kit targets Home routers in malvertising campaign Security expert disclosed a full zero-day drive-by exploit […]

Pierluigi Paganini December 23, 2016
Phantom Squad and PoodleCorp tango down against Steam and Origin Servers

The servers of the Steam gaming platform and Origin are down. Phantom Squad and PoodleCorp are claiming responsibility for the attacks. It’s holiday time and hackers can transform this period in a nightmare for gamers. Two years ago Lizard Squad hackers took down the networks of Sony PSN and Microsoft XBox Live. Now the notorious Phantom Squad […]

Pierluigi Paganini December 22, 2016
A security expert found a 0-Day flaw in NETGEAR WNR2000 Routers

An expert found flaws in NETGEAR WNR2000 routers that could be remotely exploited by an attacker to take full control of the affected device. The security expert Pedro Ribeiro discovered vulnerabilities in NETGEAR WNR2000 Routers, including a zero-day flaw, that could be exploited remotely to take full control of the device if remote administration is enabled. […]

Pierluigi Paganini December 18, 2016
Security Affairs newsletter Round 91 – News of the week

A new round of the weekly SecurityAffairs newsletter arrived! The best news of the week with Security Affairs. First of all, let me inform you that at the #infosec16 SecurityAffairs was awarded as The Best European Personal Security Blog http://securityaffairs.co/wordpress/48202/breaking-news/securityaffairs-best-european-personal-security-blog.html THANK YOU! President Obama orders full review of alleged Russian hacking in US Election Georgia traced an […]

Pierluigi Paganini December 15, 2016
Phishing campaign on Office 365 Business users leverages Punycode

Security researchers discovered a new phishing campaign leveraging Punycode and a bug in Office 365 defense systems to deceive victims. Office 365 business email users continue to be the target of phishing campaigns, a new wave of attacks was leveraging Punycode to avoid detection of Microsoft’s default security and desktop email filters. Punycode is a method added […]

Pierluigi Paganini December 13, 2016
Some versions of Netgear routers remain vulnerable to arbitrary command injection

A security flaw was discovered in some NetGear routers that could be easily exploited by a remote attacker to gain root access on the device and remotely run code. Some versions of Netgear routers remain affected by a security flaw that could be exploited by hackers to gain root access on the device and remotely […]