Pierluigi Paganini

Pierluigi Paganini November 08, 2015
The Infernal-Twin tool, easy hacking wireless networks

The Infernal-Twin is an automated tool designed for penetration testing activities, it has been developed to automate the Evil Twin Attack. The Infernal-Twin is an automated tool designed for penetration testing activities, it has been developed to assess wireless security by automating the Evil Twin Attack. “The tool was created to help the auditors and penetration testers […]

Pierluigi Paganini November 08, 2015
Security Affairs newsletter Round 34 – Best of the week from best sources

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from the best sources free for you in your email box. Hackers have accessed details of 1,827 Vodafone customers How to steal Jaguar XFR cars in 60 seconds by hacking them Allegations of ISIS involvement in Flight 7K9268 crash not […]

Pierluigi Paganini November 04, 2015
CryptoWall 4.0 Released with a New Look and Several New Features

The fourth member of the CryptoWall family of ransomware, CryptoWall 4.0, has just been released, complete with new features and a brand new look. We recently reported that CryptoWall 3.0 has allegedly caused over $325 million in annual damages. CryptoWall first emerged in April 2014. Its first major upgrade was dubbed CryptoWall 2.0, and first emerged in October […]

Pierluigi Paganini November 03, 2015
Chimera, a new strain of ransomware in the wild

According to a German website, there is a new strain of ransomware dubbed Chimera that also threatens to publish personal data on the Internet. A new strain of ransomware is targeting German companies, it is named Chimera and this time crooks don’t limit their extortion scheme to the file encrypting, they are also threatening victims […]

Pierluigi Paganini November 01, 2015
Security Affairs newsletter Round 33 – Best of the week from best sources

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from the best sources free for you in your email box. Germany probes alleged new case of US espionage: Regin malware infected Gov laptop Alleged LulzSec member claims responsibility for the DDoS on TalkTalk This 11-year-old is selling cryptographically secure […]

Pierluigi Paganini October 28, 2015
The US DoD still uses SHA-1 signed certificates for use by military agencies

The United States Department of Defense is still issuing SHA-1 signed certificates for its military agencies, despite they are considered insecure. Today I have published a blog post on the Army Vulnerability Response Program (AVRP), a sort of bug bounty program specific for the US military environment. The idea is to incentive  the ethical disclosure of vulnerabilities […]

Pierluigi Paganini October 27, 2015
WhatsApp collects phone numbers, call duration, and a lot of metadata

A group of experts  has conducted a research that demonstrates the type of data that can be gathered through the forensic study of WhatsApp. A new research conducted by forensic researchers at the University of New Haven (F. Karpisek of Brno University of Technology in the Czech Republic, and Ibrahim Baggili and Frank Breitinger, co-directors of the Cyber […]

Pierluigi Paganini October 24, 2015
TalkTalk CEO confirmed personally receiving a ransom demand

The CEO of TalkTalk confirmed personally receiving a ransom from the alleged attackers, a Russian Islamist group claimed the responsibility of the attack. TalkTalk Telecom Group plc has publicly disclosed that four million subscribers have been impacted by a “sustained cyberattack” that hit its servers. The TalkTalk CEO Dido Harding has now confirmed personally receiving a […]

Pierluigi Paganini October 23, 2015
TalkTalk data breach, hackers compromised 4 million customer records

The British Internet Service Provider TalkTalk discloses possible breach and admits some data are not encrypted. The investigation is still ongoing. Another illustrious victim of a data breach is in the headlines, TalkTalk Telecom Group plc has announced that four million subscribers may have been impacted by a “sustained cyberattack” that hit its servers. TalkTalk Telecom […]

Pierluigi Paganini October 21, 2015
Apple fixes serious flaws in the Productivity Apps

Updates released last week by Apple for Apple Productivity Apps fix a number of flaws that can be exploited for a number of attacks. Apple has recently released Keynote 6.6, Pages 5.6, Numbers 3.6, and iWork for iOS 2.6 to fix multiple flaws in the Productivity Apps, mainly related to input validation issues that caused problems […]