> compile ; link ; run _

male, italian, nerd, engineer, developer & appsec guy.

[compile-link-run]

[compile-link-run]

[compile-link-run]

Encryp-xit: Europe will go all in for crypto backdoors in June

App-makers get a choice: Open up voluntarily or we'll pass laws forcing you to

[compile-link-run]

Security for open-source code. Move fast and stay safe with Continuous Delivery, Secured.

[compile-link-run]

How One Photo Could Have Hacked Your WhatsApp and Telegram Accounts

Two popular end-to-end encrypted messaging services — WhatsApp and Telegram — have patched a flaw that could have allowed attackers to hack any WhatsApp & Telegram Account.

[compile-link-run]

Critical vulnerability under “massive” attack imperils high-impact sites

Exploits for easy-to-spot bug are trivial, reliable, and publicly available.

[compile-link-run]

Today, Tuesday 7 March 2017, WikiLeaks begins its new series of leaks on the U.S. Central Intelligence Agency. Code-named "Vault 7" by WikiLeaks, it is the largest ever publication of confidential documents on the agency.

[compile-link-run]

Hacker Selling Over 1 Million Decrypted Gmail and Yahoo Passwords On Dark Web

Hacker SunTzu583 is selling over 1 Million decrypted Gmail and Yahoo account passwords on dark web marketplace.

[compile-link-run]

Database of 1.4 Billion Records leaked from World’s Biggest Spam Networks

A database of 1.4 billion email addresses combined with real names, IP addresses, and often physical address has been exposed from World’s Biggest Spam Networks

[compile-link-run]

New Fileless Malware Uses DNS Queries To Receive PowerShell Commands

Cisco security researchers have discovered a new fileless malware that uses DNS Queries to receive PowerShell Commands from cyber criminals

[compile-link-run]

ReBreakCaptcha: Breaking Google’s ReCaptcha v2 using.. Google

TL;DR A logic vulnerability, dubbed ReBreakCaptcha, which lets you easily bypass Google’s ReCaptcha v2 anywhere on the web. Overview Back in 2016, I started poking around to see how hard it w…

[compile-link-run]

Dridex's Cold War: Enter AtomBombing

IBM X-Force researchers discovered that an upgraded version of Dridex has been using a new injection method, signifying the Trojan's continued evolution.

[compile-link-run]

Internet-Connected Teddy Bear Leaks Millions Of Voice Messages and Password

Internet Connected Smart Teddy Bear Hacked! Over 2 Million Parents’ and Kids’ Voice Messages and Passwords Held for Ransom.

[compile-link-run]

That Night I Snuck Into the Oscars

This happened in 2005. True story.

[compile-link-run]

During routine maintenance [from 1pm to midnight PST yesterday], a number of users were signed-out from their Google accounts. This may have resulted in you being signed out of your account or seeing a notification about “A change in your Google account” or “Account Action Required.” We hear your concerns that this appeared to potentially be phishing or another type of security issue. We can assure you that the security of your account was never in danger as a result of this issue.

[compile-link-run]

[compile-link-run]

Last Friday, Tavis Ormandy from Google’s Project Zero contacted Cloudflare to report a security problem with our edge servers. He was seeing corrupted web pages being returned by some HTTP requests run through Cloudflare. It turned out that in some unusual circumstances, which I’ll detail below, our edge