Catégories
Réseaux sociaux
Contact
light man people woman

Le tour des actus cybersécurité | 28 août 2022

Voici le rapport de veille de la semaine faisant le tour des actualités les plus intéressantes. Certaines d’entre elles seront développées dans les prochains articles. Bonne lecture et merci pour le café 😉

Vol / perte de données

LastPass Reveal Security Incident

Password management giant LastPass has revealed details of a security incident earlier this month in which proprietary information was stolen by threat actors.

Google researchers expose Iranian hackers’ tool to steal emails from Gmail, Yahoo and Outlook

Security researchers linked the program to the so-called Charming Kitty Iranian hacker group known to carry out intelligence operations.

Cyberattaques / fraudes

Unprecedented cyber attack hit State Infrastructure of Montenegro

The state Infrastructure of Montenegro was hit by a massive and “unprecedented” cyber attack, authorities announced.

LockBit ransomware gang blames victim for DDoS attack on its website

LockBit Ransomware Gang claims its leak site was hit by a massive DDoS attack allegedly carried out by security company Entrust.

Counterfeit Phones Found to Contain Backdoor to Hack WhatsApp

Budget Android device models that are counterfeit versions associated with popular smartphone brands contain multiple hidden trojans designed to target WhatsApp

EU Report Outlines Cyber Response to Ukraine Invasion

The EU’s Justice and Home Affairs Agencies’ Network (JHAAN) has released new details of its continued work to monitor and contain cyber-threats since Russia’

France hospital Center Hospitalier Sud Francilien suffered ransomware attack

French hospital Center Hospitalier Sud Francilien, suffered a cyberattack on Sunday and was forced to send patients to other structures

https://www.bitdefender.com/blog/hotforsecurity/hackers-demand-10-million-from-paris-hospital-after-ransomware-attack/

Ransomware attacks jump as new malware strains proliferate, research finds

Ransomware cases increased 47 percent amid a rise in attacks involving new strains of malware from the LockBit cybercrime syndicate.

Failles / vulnérabilités

Cybercriminals Are Selling Access to Chinese Surveillance Cameras

Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed.

Hackers are using this sneaky exploit to bypass Microsoft’s multi-factor authentication

Attackers guessed the password of a dormant account and were able to apply their own MFA to it – providing access to the victim’s network.

Critical flaw impacts Atlassian Bitbucket Server and Data Center

Atlassian fixed a critical flaw in Bitbucket Server and Data Center that could lead to malicious code execution on vulnerable instances

Justice / police / réglementation

Twitter slammed by security boss turned whistleblower Mudge

Loose access to production systems, out of date software, and more claimed

Ex-Apple engineer pleads guilty to stealing Apple’s car secrets

An ex-Apple engineer has pleaded guilty to stealing trade secrets from Apple’s autonomous vehicle project.

Jack Dorsey’s Other Company Hit With Lawsuit Over Alleged Negligent Data Security Practices

The suit accused Block of failing to properly prevent a former employee from gaining access to millions of Cash App investing customers’ data.

Suisse

Le Tribunal administratif fédéral devra statuer sur le projet de cloud public de la Confédération

Le Tribunal administratif fédéral doit clarifier s’il existe une base légale suffisante pour le projet de cloud public de la Confédération. En l’absence d’une telle base, un plaignant demande l’arrêt immédiat du projet.

Ce que le groupe Amag a appris du cyberincident de 2020

Fin janvier 2020, des pirates informatiques s’en sont pris aux systèmes ITde l’importateur automobile Amag. Roger Mattman, CISO du groupe Amag, revient sur ce qui s’est exactement passé. Il explique comment le groupe a réagi à l’attaque et les leçons qui peuvent être tirées de cet incident.

Ciblée par un ransomware, la Haute Ecole Arc a évité le chiffrement de ses données (update)

La Haute Ecole Arc a été ciblée par une cyberattaque début juillet, perpétrée par un gang opérant un ransomware. Les données n’ont pas pu être chiffrées, selon la haute école. Les pirates avaient toutefois mis la main sur des documents et demandé une rançon.

Divers

Signal is secure, as proven by hackers

Users of the Signal messaging app got hit by a hacker attack. We analyze what happened and why the attack demonstrates that Signal is reliable.

Most top mobile carriers retain geolocation data for two years on average, FCC findings show

Ten of the top 15 mobile carriers offer no way for consumers to opt-out of geolocation data collection, according to responses to the agency.

Mots-clés
Vous devriez également aimer