Catégories
Réseaux sociaux
Contact
data codes through eyeglasses

L’hebdo des cyber-menaces (10 oct 2021)

Voici le rapport de veille de la semaine faisant le tour des actualités les plus intéressantes. Certaines d’entre elles seront développées dans les prochains articles. Bonne lecture et merci pour le café 😉

Vol / perte de données

Twitch Suffers Massive 125GB Data and Source Code Leak Due to Server Misconfiguration

Due to a server-side misconfiguration, Twitch has suffered a massive leak of more than 125 GB of data and source code.

Telecom giant behind routing SMS discloses 5-year-long data breach

The target of the data breach Syniverse works with carriers like T-Mobile, Verizon, Twilio, and AT&T in routing SMS text messages.

Details of Pandora Papers data leak – Cybersecurity Insiders

On October 3rd, 2021, the International Consortium of Investigative Journalists (ICIJ) published the financial details related to Pandora Papers

Cryptomonnaies : 6 000 utilisateurs de Coinbase voient leurs actifs partir dans la nature

Coinbase vient de notifier au moins 6 000 de ses clients du vol de leurs comptes de cryptomonnaies. Les procédures de sécurité de la plateforme sont pointées du doigt.

Cyberattaques / fraudes

Google warns 14,000 Gmail users targeted by Russian hackers

Google has warned about 14,000 of its users about being targeted in a state-sponsored phishing campaign from APT28, a threat group that has been linked to Russia.

Microsoft: Russian state hackers behind 53% of attacks on US govt agencies

Microsoft says that Russian-sponsored hacking groups are increasingly targeting US government agencies, with roughly 58% of all nation-state attacks observed by Microsoft between July 2020 and June 2021 coming from Russia.

Cybercriminals threaten to hack EU hospitals in latest COVID-19 vaccine scam

Cybercriminals are demanding people’s personal information and claiming to have the ability to falsify vaccination records at hospitals across the European Union.

Smishing on the Rise

Feedzai’s list of top 5 fraud scams features SMS phishing attacks for the first time

Failles / vulnérabilités

New U.S. Government Initiative Holds Contractors Accountable for Cybersecurity

US Justice Department launches civil cyber-fraud initiative to combat online crime

Justice / police / réglementation

https://www.europol.europa.eu/newsroom/news/ransomware-gang-arrested-in-ukraine-europol%E2%80%99s-support

Ransomware operators behind hundreds of attacks arrested in Ukraine

Europol has announced the arrest of two men in Ukraine, said to be members of a prolific ransomware operation that extorted victims with ransom demands ranging between €5 to €70 million.

Le pirate de l’AP-HP, un anti-passe sanitaire, a été arrêté

L’homme a reconnu avoir volé et publié les 1,4 million de rapports de tests Covid-19. Il a été mis en examen ce vendredi.

Texan Imprisoned Over COVID-19 Hoax

Man locked up for claiming on Facebook that he paid someone with COVID-19 to lick grocery store items

Transnational fraud ring stole millions from Army members, veterans

Fredrick Brown, a former U.S. Army contrractor, was sentenced today to 151 months in prison after admitting to his role in a conspiracy that targeted thousands of U.S. servicemembers and veterans and caused millions of dollars in losses.

Suisse

Pour lutter contre les ransomware, une motion veut empêcher les transactions anonymes en crypto

Une motion du socialiste Roger Nordmann propose d’interdire les transactions anonymes en cryptomonnaie, de manière à restreindre les moyens des hackers, qui exigent en général que les rançons leur soient réglées dans ces devises.

En Suisse, la cyberdéfense s’appuie aussi sur le soutien et l’implication des start-up

Ruag lance un nouvel appel à candidatures pour son programme d’accélération visant entre autres à renforcer la cybersécurité de la Suisse. De son côté, l’armée a désigné le vainqueur de son Cyber Startup Challenge 2021: la start-up zurichoise Decentriq. Cette dernière va pouvoir tester sa solution dans l’environnement réel du DDPS.

Divers

European Parliament calls for ban on AI-powered mass surveillance

The EU Parliament has voted in favor of a resolution that bans the adoption of AI-powered biometric mass surveillance technologies such as facial recognition systems in the continent.

Mots-clés
Vous devriez également aimer