Veille Sécurité (22 mars 2015)
-
Target to pay $10 million in proposed settlement for 2013 data breach
“The proposal, which requires U.S. federal court approval, calls for individual victims to receive up to $10,000. As many as 110 million people were affected by the attack, which occurred during the holiday shopping season.”
-
L’armée française teste de nouveau sa cyberdéfense
“Considérant la cyberdéfense comme une priorité, l’armée française organise des simulations pour tester ses défenses. Après un premier exercice l’an dernier, un nouvel entraînement se déroule jusqu’au 27 mars.”
-
ProtonMail lève $ 2M pour porter la communication cryptée vers le grand public
“Le service de haute sécurité des e-mails accèlère considérablement son développement pour répondre à une forte demande.”
-
La machine qui casse les codes PIN des iPhone
“Certains fournisseurs proposent des boîtiers permettant de casser un code de verrouillage des smartphone Apple. Des chercheurs ont analysé leur fonctionnement.”
-
VPNs illegal in UAE, says Dubai Police
“A senior official in the Dubai Police force has stated that the use of Virtual Private Networks is illegal across the United Arab Emirates.”
-
Google VPN équipera Android 5.1 Lollipop ?
“Peut être une bonne nouvelle pour les utilisateurs d'Android Lollipop ! Google semble y intégrer secrètement un service de réseau privé virtuel (VPN), surnommé « Google VPN ».”
-
Banks defend integrity of passcode-less TouchID login
“Royal Bank of Scotland and NatWest have played down claims by a security researcher that their new Touch ID banking login feature might be circumvented, arguing the hack would only be possible with jail-broken iPhones — the use of which is not recommended.”
-
BlackBerry and IBM launch secure tablet based on Samsung Galaxy Tab
“BlackBerry subsidiary Secusmart has teamed up with IBM to deliver a high-security tablet device for public sector markets and enterprises, and in particular to provide access to data that is subject to special security requirements.”
-
Millions of iOS and Android users vulnerable to Freak cyber attack
“Millions of iOS and Android mobile applications are still vulnerable to the Freak flaw, despite the availability of patch fixes, according to FireEye researchers.”
-
On-Demand passwords and e2e encryption source code Launched by Yahoo
“Yahoo made two major announcements this week regarding its security protocol. One was the launching of the new “on-demand†password service and the other was the release of Yahoo mail's end-to-end encryption source code that is available on GitHub.”
-
Apple removes antivirus apps from iOS App Store
“Apple is deleting antivirus and antimalware apps from its iOS App Store without official warning or announcement. “
-
Le groupe qui a piraté la BCGE diffuse des données médicales volées en France
“Après le vol de données financières à la Banque cantonale de Genève en janvier, le groupe de hackers Rex Mundi a piraté un laboratoire français d’analyses de sang et publié les données de 15’000 patients.”
-
9-year-old CEO hacks Android smartphone in minutes
“Wondering how secure your Android smartphone is? Well, a 9-year-old cybersecurity expert has demonstrated how hackers could steal contacts, call logs and messages within just 15 minutes.”
-
Yahoo publie le code de son plug-in de chiffrement mail
“Yahoo veut recueillir l’avis des experts en sécurité avant de lancer d’ici la fin d’année son plug-in de chiffrement de bout-en-bout des e-mails. Il vient d’en publier le code source sur GitHub.”
-
Yahoo! pays $24,000 to Hacker for finding Security Vulnerabilities
“Yahoo! has offered $24,000 to a security researcher for finding out and reporting three critical security vulnerabilities in its products including Yahoo! Stores and Yahoo!-hosted websites.”
Posted from Diigo. The rest of my favorite links are here.
Marc Barbezat
Veilleur et spécialiste en cybersécurité
1 Comment
Comments are closed.
Pingback: Actus Sécurité Grand public 2015 S12 | La Mare du Gof