Voici le rapport de veille de la semaine faisant le tour des actualités les plus intéressantes. Certaines d’entre elles seront développées dans les prochains articles. Bonne lecture et merci pour le café 😉
Vol / perte de données
La brèche de données de Robinhood fait 7 millions de victimes | WeLiveSecurity
Robinhood, la très populaire plateforme de trading, a subi une brèche de cybersécurité le 3 novembre, qui a affecté environ 7 millions d’utilisateurs.
Piraté par des espions américains, Booking.com a décidé… de ne rien faire
Des données de milliers de réservations dans le Moyen-Orient ont été volées par une agence de renseignement américaine. Mais aucune victime de ce piratage n’a été alertée.
Cyberattaques / fraudes
FBI system hacked to email ‘urgent’ warning about fake cyberattacks
The Federal Bureau of Investigation (FBI) email servers were hacked to distribute spam email impersonating FBI warnings that the recipients’ network was breached and data was stolen.
Hackers with Chinese links breach defense, energy targets, including one in US
The goal, seemingly, was “the gathering and exfiltration of sensitive documents from the compromised organization.”
Le plus grand service de paiement en ligne du Brésil piraté
Gestion des cookies We use cookies on our website to give you the most relevant experience by remembering your preferences and repeat visits. By clicking “Accept”, you consent to the use of ALL the cookies.
Gmail accounts are used in 91% of all baiting email attacks
Bait attacks are on the rise, and it appears that actors who distribute this special kind of phishing emails prefer to use Gmail accounts to conduct their attacks.
FBI warns of Iranian hackers looking to buy US orgs’ stolen data
The Federal Bureau of Investigation (FBI) warned private industry partners of attempts by an Iranian threat actor to buy stolen information regarding US and worldwide organizations.
Likely state-based hackers infected Hong Kong websites to spy on Apple users, Google says
Apple released a patch on Sept. 23.
Failles / vulnérabilités
Les systèmes critiques exposés à des failles TCP/IP dans Nucleus – Le Monde Informatique
Intrusion, Hacking et Pare-feu : Des vulnérabilités affectant le protocole TCP/IP du système d’exploitation temps réel Nucleus de Siemens peuvent déboucher sur l’exécution de code à…
Des millions de routeurs et NAS vulnérables au malware BotenaGo – Le Monde Informatique
Malware : L’équipe de chercheurs Alien Labs d’AT&T a découvert un logiciel malveillant écrit en langage Go mettant en danger des millions de routeurs, NAS et…
EU pharmaceutical giants run old, vulnerable apps and fail to use encryption in login forms
New research highlights hundreds of companies that are at risk of cyberattacks.
Justice / police / réglementation
Suspected REvil Ransomware Affiliates Arrested in Global Takedown
Suspected Sodinokibi/REvil ransomware affiliates have been arrested during a global takedown.
Surveillance firm pays $1 million fine after ‘spy van’ scandal
The Office of the Commissioner for Personal Data Protection in Cyprus has collected a $1 million fine from intelligence company WiSpear for gathering mobile data from various individuals arriving at the airport in Larnaca.
Suisse
Divers
Conti ransomware gang apologized to Arab Royals over data leak
The data leak took place last month when the infamous Conti ransomware gang hacked UK-based jewelry store Graff.
Hacker-for-Hire Group Spied on More Than 3,500 Targets in 18 Months
Russian-speaking “Void Balaur” group’s victims include politicians, dissidents, human rights activists, doctors, and journalists, security vendor discloses at Black Hat Europe 2021.