Security Affairs

Pierluigi Paganini September 28, 2017
A high-risk two-years old flaw in Linux kernel was just patched

A high-risk security vulnerability discovered more than two years ago has been patched in Linux kernel. The flaw discovered by researchers with Qualys Research Labs affects all Linux distributions that have not fixed their kernels after a commit released on April 14, 2015. Tracked as CVE-2017-1000253, the flaw could be exploited by attackers to escalate privileges. The vulnerability […]

Pierluigi Paganini September 24, 2017
Security Affairs newsletter Round 129 – News of the week

A new round of the weekly SecurityAffairs newsletter arrived! The best news of the week with Security Affairs. Once again thank you! ·      400,000 UK consumers at risk after the Equifax data breach ·      Chrome will label Resources delivered via FTP as Not Secure ·      MAGENTO 2.0.16 and 2.1.9 security update fixes critical flaw in […]

Pierluigi Paganini September 17, 2017
Security Affairs newsletter Round 128 – News of the week

A new round of the weekly SecurityAffairs newsletter arrived! The best news of the week with Security Affairs. ·      Crooks leverage Facebook CDN servers to bypass security solutions ·      Mexican tax refund MoneyBack site exposed 400GB of sensitive customer data ·      Security Affairs newsletter Round 127 – News of the week ·      Apache Foundation rejects […]

Pierluigi Paganini September 14, 2017
Zerodium is offers $1 Million for Tor Browser Exploits

The company ZERODIUM announced it will pay up to $1 million for fully working zero day exploits for Tor Browser on Tails Linux and Windows OSs. The zero-day broker Zerodium offers $1 million for Tor Browser exploits with the intent to unmask Tor users. The controversial firm will then resell the zero-day exploit for Tor […]

Pierluigi Paganini September 10, 2017
Security Affairs newsletter Round 127 – News of the week

A new round of the weekly SecurityAffairs newsletter arrived! The best news of the week with Security Affairs. ·      FICO reports a 39 Percent Rise in Debit Cards Compromised in US ·      Google removed almost 300 Android apps involved in DDoS attack ·      Security Affairs newsletter Round 126 – News of the week ·      US […]

Pierluigi Paganini September 10, 2017
Mexican tax refund MoneyBack site exposed 400GB of sensitive customer data

Experts from security firm Kromtech discovered the Mexican VAT refund site MoneyBack exposed 400GB of sensitive information. Another huge data leak made the headlines, experts from security firm Kromtech discovered the Mexican VAT refund site MoneyBack exposed sensitive customer information online. because of a misconfigured database. Kromtech discovered the unsecured CouchDB during a routine security audit. The Mexican VAT refund […]

Pierluigi Paganini September 03, 2017
Security Affairs newsletter Round 126 – News of the week

A new round of the weekly SecurityAffairs newsletter arrived! The best news of the week with Security Affairs. ·      Defray Ransomware used in targeted attacks on Education and Healthcare verticals ·      Security Affairs newsletter Round 125 – News of the week ·      Tor relay of a Brazilian University was banned after harvesting .onions ·      Chinese […]

Pierluigi Paganini September 02, 2017
DragonOK APT is adopting new tactics, techniques and procedures

Researchers at Palo Alto Networks recently observed the DragonOK APT group adopting new tactics, techniques and procedures. China-linked cyber espionage group DragonOK is back, security experts from Palo Alto Networks have uncovered a new campaign leveraging the KHRAT remote access Trojan (RAT). The DragonOk group (also known as NetTraveler (TravNet), PlugX, Saker, Netbot, DarkStRat, and ZeroT i) was first spotted September […]

Pierluigi Paganini August 31, 2017
Expert discovered 2,893 Bitcoin miners left exposed on the Internet

The popular Dutch security researcher Victor Gevers has discovered thousands of Bitcoin miners left exposed on the Internet. The popular security researcher Victor Gevers, the founder of the GDI Foundation, has discovered 2,893 Bitcoin miners left exposed on the Internet. I see about 2,893 Chinese Bitcoin "Thunder mining machines" online which are accessible via telnet […]

Pierluigi Paganini August 27, 2017
Security Affairs newsletter Round 125 – News of the week

A new round of the weekly SecurityAffairs newsletter arrived! The best news of the week with Security Affairs. ·      Hackers can completely hijack a mobile device via replacement of a touchscreen ·      Learning About ISIS Intentions Using Open Source Intelligence ·      Security Affairs newsletter Round 124 – News of the week ·      Enigma platform hacked, […]