Andrea Fortuna
AboutSearch
Tools
DFIR Toolkit OSINT Toolkit
  • Apr 23, 2020

    New iOS zero-days allows unassisted attacks via Mail.app

    Cybersecurity startup ZecOps discovered two zero-day vulnerabilities affecting iPhone and iPad devices during the analysis of a series of ongoing remote attacks that have targeted iOS users since at least January 2018. Following a routine iOS Digital Forensics and Incident… read more »
  • Apr 22, 2020

    Weekly Privacy Roundup #4

    D'oh! A lot of dataleaks! Telsy’s report on UniCredit’s data breach went viral worldwide On the evening of April 19, Telsy denounced that the personal data of about 3000 employees of the UniCredit S.p.A. bank, one of the largest banks… read more »
  • Apr 21, 2020

    Beware! A fully functional SMBGhost exploit will be coming soon!

    A proof-of-concept remote code execution exploit for the Windows 10 "SMBGhost" vulnerability (CVE-2020-0796) was developed and presented yesterday by Yuki Koike, a researcher by Ricerca Security. The vulnerability, that only impacts specific versions of Windows 10 and Windows Server, was… read more »
  • Apr 20, 2020

    Weekly Cybersecurity Roundup #4

    As was the case in the past weeks, threat actors attempt to capitalize on coronavirus outbreak. System32 Comics Is BGP Safe Yet? No. But we are tracking it carefully BGP leaks and hijacks have been accepted as an unavoidable part… read more »
  • Apr 17, 2020

    Weekly Tech Roundup #3

    This week NASA, MIT and…d'oh! COVID-19, again! Sandboxie's Source Code has been released Sophos, the company that acquired the Sandboxie sandboxing software and technology from Invincea in 2017, has released the source code of the application to the public. Sandboxie,… read more »
  • Apr 16, 2020

    Weekly Privacy Roundup #3

    Here in your mind you have complete privacy. Here there's no difference between what is and what could be – Chuck Palahniuk EU Commission Recommends a Common Approach to Using Mobile Apps and Location Data to Combat and Exit COVID-19… read more »
  • Apr 15, 2020

    A TikTok flaw could allows hijacking of contents, leaving users open to fake news

    The issue has been discovered by two developers, Talal Haj Bakry and Tommy Mysk. Developers have demonstrated how easy it is to trick TikTok into connecting to a fake server, exploiting app architecture, that uses HTTP instead of HTTPS to retrieve media… read more »
  • Apr 14, 2020

    Privacy by Obfuscation

    In an interesting article on The MIT Press Reader, Finn Brunton & Helen Nissenbaum discuss how opting out of surveillance is practically useless, and suggests to use data obfuscation as a better alternative. I suggest to read the whole article,… read more »
  • Apr 13, 2020

    Weekly Cybersecurity Roundup #3

    Happy (quarantined) Easter!… read more »
  • Apr 10, 2020

    Weekly Tech Roundup #2

    Don't worry, 5G did not cause Coronavirus! https://twitter.com/Sandford_Police/status/1246125769539162113 How the 5G coronavirus conspiracy theory tore through the internet It started with one doctor. On January 22, Belgian newspaper Het Laatste Nieuws published an interview with Kris Van Kerckhoven, a general… read more »
  • Apr 9, 2020

    i3: how to make a pretty lock screen with a small bash script

    My regular readers already knows that my favorite desktop environment on Linux is i3.However, let's face it, the UI of the default theme of lockscreen tool (i3lock) is hawful. Luckily, i3lock provides some command line options, such us the -i… read more »
  • Apr 8, 2020

    Weekly Privacy Roundup #2

    Privacy is implied. Privacy is not up for discussion - Mikko Hypponen… read more »
  • Apr 7, 2020

    Security analysis of WhatsApp calls

    Today i'd like to share a interesting research by Marvin Schirrmacher, focused on WhatsApp calls.… read more »
  • Apr 6, 2020

    Weekly Cybersecurity Roundup #2

    Remote work, 5th week!… read more »
  • Apr 3, 2020

    Weekly Tech Roundup #1

    It's Friday! Let's talk about Minecraft, Books, Space Movies AI and Robots!… read more »
  • Apr 2, 2020

    TLDR #3: Zero Trust Security

    "Zero trust" is a phrase first coined by John Kindervag, in a research for Forrester Research Inc., in 2010… read more »
  • Apr 1, 2020

    Be careful! A Windows flaw lets Zoom leak network credentials and run code remotely

    Researcher have found a security issue in the Windows client of the popular video conferencing service that can be used for limited remote code execution and, worse, to capture and replay security tokens to access network resources… read more »
  • Mar 31, 2020

    Some security thoughts about videocalls

    Recently in Norway a school had to stop using the Whereby video conference service because during a video lesson a man broke into the group video conference and ​showed himself naked.… read more »
  • Mar 30, 2020

    Weekly Cybersecurity Roundup #1

    So, let's start with the new "Weekly Cybersecurity Roundup"!… read more »
  • Mar 27, 2020

    Amethyst: an 8-bit home computer based on ATmega1284

    Amethyst, by Matt Sarnoff, it's a great project for a classic home computer… read more »
« Previous page Next page »

Andrea Fortuna

  • Andrea Fortuna
  • andrea@andreafortuna.org
  • andreafortuna
  • andreafortunaig
  • andrea-fortuna

Cybersecurity expert, software developer, experienced digital forensic analyst, musician