Le top 5 de la semaine | 23 Apr 2023 • DCOD Cybersécurité

Voici une sélection de 5 actualités cybersécurité qu’il ne fallait pas manquer cette semaine. Bonne lecture et merci pour le café 😉

Top 1

3CX Breach Was a Double Supply Chain Compromise
We learned some remarkable new details this week about the recent supply-chain attack on VoIP software provider 3CX. The lengthy, complex intrusion has all the makings of a cyberpunk spy novel: North Korean hackers using legions of fake executive accounts on LinkedIn to lure people into opening malware disguised as a job offer; malware targeting Mac and Linux users working at defense and cryptocurrency firms; and software supply-chain attacks nested within earlier supply chain attacks.

Top 2

LockBit Ransomware Expands Attack Spectrum to Mac Devices
LockBit ransomware gang is reportedly developing a new version of malware that can encrypt files on Apple macOS

Top 3

Pro-Russia hackers DDoSed the EUROCONTROL agency
Pro-Russia hackers KillNet launched a massive DDoS attack against Europe’s air-traffic agency EUROCONTROL.

Top 4

U.S. and U.K. Warn of Russian Hackers Exploiting Cisco Router Flaws for Espionage
U.K. and U.S. cybersecurity agencies have warned of Russian nation-state actors exploiting flaws affecting Cisco networking equipment.

Top 5

Israeli surveillance firm QuaDream is shutting down amidst spyware accusations
The Israeli surveillance firm QuaDream is allegedly shutting down its operations after Citizen Lab and Microsoft uncovered their spyware.