Voici le rapport de veille de la semaine faisant le tour des actualités les plus intéressantes. Certaines d’entre elles seront développées dans les prochains articles. Bonne lecture et Merci pour le café !
Vol / perte de données
Documents secrets : Apple est actuellement victime d’un ransomware à 50 millions de dollars
Apple est victime d’un ransomware à 50 millions de dollars. Un groupe de hackers russes menacent de dévoiler des données secrètes.
Logins for 1.3 million Windows RDP servers collected from hacker market
The login names and passwords for 1.3 million current and historically compromised Windows Remote Desktop servers have been leaked by UAS, the largest hacker marketplace for stolen RDP credentials.
13 millions de clients de Phone House Espagne dans les mains de pirates
Gestion des cookies We use cookies on our website to give you the most relevant experience by remembering your preferences and repeat visits. By clicking “Accept”, you consent to the use of ALL the cookies.
Passwordstate password manager hacked in supply chain attack
Click Studios, the company behind the Passwordstate password manager, notified customers that attackers compromised the app’s update mechanism to deliver malware in a supply-chain attack after breaching its networks.
Cyberattaque à l’encontre du 1er acteur indépendant du tourisme français
Gestion des cookies We use cookies on our website to give you the most relevant experience by remembering your preferences and repeat visits. By clicking “Accept”, you consent to the use of ALL the cookies.
Geico data breach exposed customers’ driver’s license numbers
Car insurance provider Geico has suffered a data breach where threat actors stole the driver’s licenses for policyholders for over a month.
Six million male members may have been exposed after hack of gay dating service
Manhunt, a popular gay dating service, has suffered a data breach which may have put members at risk of exposure.
Cyberattaques / fraudes
Hundreds of networks reportedly hacked in Codecov supply-chain attack
More details have emerged on the recent Codecov system breach which is being likened to the SolarWinds hack. In new reporting, investigators have stated that hundreds of customer networks have been breached in the incident, expanding the scope of this system breach beyond just Codecov’s systems.
Les États-Unis restent la principale cible des cyberattaques – Le Monde Informatique
Sécurité : Selon les agences de renseignement américaines, au cours des prochaines décennies, des groupes de pirates soutenus par des États-nations vont passer…
Failles / vulnérabilités
Signal CEO Hacks Cellebrite iPhone Hacking Device Used By Cops
One of the biggest encrypted chat apps in the world just showed how a device used to decrypt messages can be hacked and tampered with.
Stanford student finds glitch in ransomware payment system to save victims $27,000
Sometimes the good guys win.
Signal CEO gives mobile-hacking firm a taste of being hacked
Software developed by data extraction company Cellebrite contains vulnerabilities that allow arbitrary code execution on the device, claims Moxie Marlinspike, the creator of the encrypted messaging app Signal.
Une faille zero-day de Pulse Secure VPN, exploitée par des cyber-espions – Le Monde Informatique
Sécurité : Des groupes de cyber-espionnage s’appuient sur les vulnérabilités des VPN pour contourner l’authentification et établir des portes dérobées. Des…
Pulse Secure VPN Flaws Exploited to Target US Defense Sector
China-linked attackers have used vulnerabilities in the Pulse Secure VPN appliance to attack US Defense Industrial Base networks.
Justice / police / réglementation
Linux bans University of Minnesota for committing malicious code
Linux kernel project maintainers have imposed a ban on the University of Minnesota (UMN) from contributing to the open-source Linux project after a group of UMN researchers were caught submitting a series of malicious code commits, or patches that deliberately introduced security vulnerabilities in the official Linux project.
Divers / Suisse
La Suisse a établi sa stratégie pour renforcer sa cyberdéfense
La Suisse a défini sa stratégie en matière de cyberdéfense pour les années 2021 à 2024. Approuvé par la conseillère fédérale Viola Amherd, le document trace l’axe stratégique à suivre et s’articule autour de trente champs d’action dans quatre domaines-clés.
The World’s Largest Hacking Conferences Are Back IRL This Summer
Def Con and Black Hat, two of the largest hacking conferences in the world, are going to be back in person in Las Vegas this year.
1 commentaire
Commentaires désactivés.