Andrea Fortuna
AboutSearch
Tools
DFIR Toolkit OSINT Toolkit
  • Nov 15, 2019

    Court forces e-mail provider Tutanota to release unencrypted messages

    The e-mail provider Tutanota advertises to be the “world’s most secure e-mail service”. The company offers encrypted e-mail communication and claims to have six million customers relying on this security promise. … read more »
  • Nov 15, 2019

    Facebook phishing attempt using image share notifications

    Just a short post to report an interesting phenomenon! … read more »
  • Nov 14, 2019

    Vulnerabilities in 5G protocol may allows to track users and make fake emergency alerts

    Security researchers at Purdue University and the University of Iowa have found new vulnerabilities that can be used to track a victim’s real-time location, spoof emergency alerts or silently disconnect a phone from the 5G network. … read more »
  • Nov 13, 2019

    A glitch on Facebook App's UI reveals a weird camera activity

    UPDATE 2019/11/14: Facebook released version 247.0 that fixes the glitch. … read more »
  • Nov 12, 2019

    The myths of VPNs

    Some days ago, a group of servers belonging to multiple VPN providers has been breached. After this events, many people have expressed doubts about the real usefulness of VPNs. … read more »
  • Nov 8, 2019

    MESSAGETAP: Eavesdropping on SMS Messages inside Telco Networks

    FireEye reports on a Chinese-sponsored espionage campaign to eavesdrop on text messages, violating telco servers: yet another example that demonstrates why end-to-end message encryption is so important. … read more »
  • Nov 7, 2019

    Some thoughts about WS-Discovery DDoS attacks

    Security researchers from Akamai published interesting details about the Web Services Dynamic Discovery (WS-Discovery) protocol, which they say can be abused to launch massive DDoS attacks. … read more »
  • Nov 6, 2019

    Light Commands: hacking voice assistants via laser beam

    Researchers from the University of Michigan and the University of Electro-Communications in Tokyo, demonstrated that is possible to hack smart voice assistants like Siri, Alexa and Google using a lasers beam to send them inaudible commands. … read more »
  • Nov 5, 2019

    A brand-new mass attack uses BlueKeep exploit to infect with Monero miners

    It was just a matter of time: the first “mass exploiting” of BlueKeep vulnerability is spotted in the wild. If you haven’t already patched your servers, do it asap! … read more »
  • Nov 1, 2019

    CVE-2019-13720: new Chrome 0-day bug exploited in the wild

    Yesterday, Google engineers released an urgent update for the Chrome browser to patch an actively exploited zero-day. … read more »
  • Nov 1, 2019

    The warp drive is now a little less impossible

    How feasible are Warp Drives? A new theory opens the door to the possibility of creating a real warp drive (in the future!). … read more »
  • Oct 31, 2019

    CPDoS in a nutshell

    Recently, a team of cybersecurity researchers from Cologne University of Applied Sciences (Hoai Viet Nguyenand Luigi Lo Iacono) has disclosed a new cache poisoning attack against CDN systems that could be used to force a website into delivering error pages… read more »
  • Oct 30, 2019

    Pwnagotchi: the open source gadget for WiFi pwning!

    Remember the Tamagotchi? Simone Margaritelli/Evilsocket created the Pwnagotchi, a mix between a game from the 90s and a wardriving tool, with a touch of machine learning. … read more »
  • Oct 29, 2019

    Happy 50th Birthday, Internet!

    On October 29, 1969, a first data packet was transmitted between two computers. It was the spark that started Internet. … read more »
  • Oct 25, 2019

    The American army said goodbye to floppy disks.

    Some days ago I’ve published a post about retrogaming: today I’d like to talk about another piece of modern art, floppy disks! … read more »
  • Oct 24, 2019

    How to create a VirtualBox VM from command line

    A very appreciated feature of #VirtualBox is the possibility to be used in a #headless environment, without a #GUI. #linux #debian #commandline … read more »
  • Oct 23, 2019

    Servers belonging to multiple VPN providers has been breached: do VPN's gives a false feeling of security?

    I admit, the polemical title is just to get attention: VPNs are still useful! … read more »
  • Oct 22, 2019

    Internet Archive: a paradise for retrogamers!

    The Internet Archive is a nonprofit digital library that archives digital versions of computer games, books, audio recordings and videos. … read more »
  • Oct 18, 2019

    A NASA engineer says he has designed a space engine that may violate the laws of physics

    A spacecraft that would allow humans to reach every corner of the Universe? … read more »
  • Oct 17, 2019

    Meet Graboid, the first cryptojacking worm that spreads using Docker images: how to defend your infrastructure from this new threat?

    Recently, researchers from Palo Alto Networks’ threat intelligence team Unit 42 have uncovered the first instance case of a cryptojacking worm that propagates via malicious Docker images. … read more »
« Previous page Next page »

Andrea Fortuna

  • Andrea Fortuna
  • andrea@andreafortuna.org
  • andreafortuna
  • andreafortunaig
  • andrea-fortuna

Cybersecurity expert, software developer, experienced digital forensic analyst, musician