Pierluigi Paganini

Pierluigi Paganini July 09, 2019
Flaw in Zoom video conferencing software lets sites take over webcam on Mac

Zoom video conferencing software for Mac is affected by a flaw that could allow attackers to take over webcams when users visit a website. Cybersecurity expert Jonathan Leitschuh disclosed an unpatched critical security vulnerability in the Zoom app for Apple Mac computers, that is chained with another issue, could be exploited by attackers to execute […]

Pierluigi Paganini July 09, 2019
Kaspersky report: Malware shared by USCYBERCOM first seen in December 2016

The malware samples shared by USCYBERCOM last week were first detected in December 2016 in attacks attributed to Iran-linked APT33. Last week the United States Cyber Command (USCYBERCOM) uploaded to VirusTotal a malware used by Iran-linked APT33 group in attacks in Dec 2016 and Jan 2017. Now experts at Kaspersky confirmed that the malware was […]

Pierluigi Paganini July 09, 2019
A new Astaroth Trojan Campaign uncovered by Microsoft

Microsoft Defender ATP Research Team discovered a fileless malware campaign that was spreading the information stealing Astaroth Trojan. Experts at the Microsoft Defender ATP Research Team discovered a fileless malware campaign that is delivering the information stealing Astaroth Trojan. The malware is able to log the users’ keystrokes, collect information through hooking, access clipboard content, and monitor […]

Pierluigi Paganini July 08, 2019
Cyberattack shuts down La Porte County government systems

Government computer systems at La Porte County, Indiana, were shut down after a cyber attack hit them on July 6. Experts believe it was a ransomware attack. On July 6, a cyber attack brought down government computer systems at La Porte County, Indiana. At the time of writing, there were only a few details about […]

Pierluigi Paganini July 08, 2019
Spotting RATs: Delphi wrapper makes the analysis harder

Experts observed an increase of the malware spreading using less-known archive types as dropper,in particular ISO image.Delphi wrapper makes analysis harder Introduction In the last period, we observed an increase of the malware spreading using less-known archive types as an initial dropper, in particular, ISO image. The spread of threats exploiting ISO image to hide […]

Pierluigi Paganini July 08, 2019
Backdoor mechanism found in Ruby strong_password library

The developer Tute Costa found a backdoor in the Ruby library during regular security audits before deploying his code in the production environment. The developer Tute Costa found a backdoor in the Ruby library during regular security audits. The dangerous code was used to check the password strength of user-chosen passwords when the library was being […]

Pierluigi Paganini July 08, 2019
UK ICO fines British Airways ÂŁ183 Million under GDPR over 2018 security breach

The UK Information Commissioner’s Office (ICO) fined British Airways with ÂŁ183 million for failing to protect its customers’ data during last year’s security breach. The UK Information Commissioner’s Office (ICO) fined British Airways with ÂŁ183 million for failing to protect the personal information of roughly 500,000 customers during 2018 security breach. “Following an extensive investigation the ICO […]

Pierluigi Paganini July 08, 2019
Experts uncovered a new Magecart campaign that hacked over 960 stores

Security experts have uncovered a Magecart large-scale payment card skimming campaign that compromised 962 online stores based on Magento. Security experts at Sanguine Security have uncovered a new large-scale payment card skimming campaign that already hacked 962 online stores running on the Magento CMS. The list of hacked e-commerce also includes a number of websites belonging […]

Pierluigi Paganini July 07, 2019
Security Affairs newsletter Round 221 – News of the week

A new round of the weekly SecurityAffairs newsletter arrived! The best news of the week with Security Affairs. Kindle Edition Paper Copy Once again thank you! Bulgarian IT expert arrested after disclosing a flaw in kindergarten software Germany and the Netherlands agreded to build TEN, the first ever joint military internet Germany and the Netherlands […]

Pierluigi Paganini July 07, 2019
Hackers compromised a Canonical GitHub account, Ubuntu source code was not impacted

Yesterday, July 6, 2019, hackers breached the GitHub account of Canonical Ltd., the company behind the Ubuntu Linux distribution. On July 6, 2019, hackers have breached the GitHub account of Canonical Ltd., the organization behind the Ubuntu Linux distribution. The company immediately launched an investigation, the good news is that the source code of the […]