Voici le rapport de veille de la semaine faisant le tour des actualités les plus intéressantes. Certaines d’entre elles seront développées dans les prochains articles. Bonne lecture et Merci pour le café !
Vol / perte de données
Hacker leaks full database of 77 million Nitro PDF user records
A stolen database containing the email addresses, names, and passwords of more than 77 million records of Nitro PDF service users was leaked today for free.
1.4 million Pixlr user records shared on hacker forum
1.4 million Pixlr user records have been leaked online to a hacker forum. The user records contain information that can be used by malicious actors to carry out
Malwarebytes says SolarWinds hackers accessed its internal emails
Cybersecurity firm Malwarebytes today confirmed that the threat actor behind the SolarWinds supply-chain attack were able to gain access to some company emails.
Bonobos clothing store suffers a data breach, hacker leaks 70GB database
Bonobos men’s clothing store has suffered a massive data breach exposing millions of customers’ personal information after a cloud backup was downloaded by a threat actor. The corporate systems were not breached by the attacker.
Phishing : Des milliers d’identifiants ont été exposés, trouvables par une simple recherche Google
Une vaste campagne de phishing a permis à des cyberattaquants de s’emparer de milliers d’identifiants d’employés. Mais les données volées ont été indexées par Google et étaient visibles publiquement au moyen d’une simple recherche.
Massive privacy risk as hacker sold 2 million MyFreeCams user records
The same hacker also sold almost 19,000 customers’ records stolen from a Hong Kong-based online shop. Here’s what was sold.
Cyberattaques / fraudes
Le FBI met en garde contre des attaques de phishing vocal | WeLiveSecurity
Les criminels amènent les employés à leur remettre leurs identifiants et utilisent ces données pour s’infiltrer dans les réseaux d’entreprise.
Failles / vulnérabilités
Bugs in Signal, Facebook, Google chat apps let attackers spy on users
Vulnerabilities found in multiple video conferencing mobile applications allowed attackers to listen to users’ surroundings without permission before the person on the other end picked up the calls.
Bugs Allowed Hackers to Hijack Kindle Accounts With Malicious Ebooks
The flaws that potentially allowed hackers to spend money using victims’ credit cards are now fixed.
UK govt gives malware infected laptops to vulnerable students
Some of the laptops distributed by the UK Department for Education (DfE) to vulnerable students have been found to be infected with malware as reported by the BBC.
Justice / police / réglementation
Rogue CCTV technician spied on hundreds of customers during intimate moments
Prosecutors said the technician accessed more than 200 customer CCTV systems on more than 9,600 occasions to spy on them getting naked and engaging in sexual activity.
Divers
–
