Plus récents
yaracroft

🇦🇺 Latitude Financial will not pay a ransom to those behind a cyber attack. Latitude Financial Services could face a class action lawsuit from some of the 14 million customers who have had their personal information exposed

abc.net.au/news/2023-04-11/lat

1
yaracroft

🇩🇪 ZBW (zbw.eu) has fallen victim to a cyber attack. Numerous services, including e-mail, are unavailable

0
yaracroft

🇫🇷 🇮🇹 Hyundai ( via @ildisinformatico )

attivissimo.blogspot.com/2023/

0
yaracroft

🇫🇷 Selon le quotidien régional L'Union Volkswagen France (volkswagen.fr) a connu un « incident » de sécurité

lunion.fr/id474304/article/202

0
yaracroft

🇨🇦 Town of St. Marys (townofstmarys.com)

Total costs to date for the incident: $1,301,103.86

stmarysindy.com/news/article.p

0
yaracroft

🇪🇸 La Autoridad Catalana de Protección de Datos ha recibido y tramitado un total de 150 notificaciones de organizaciones y entidades que han sufrido violaciones de seguridad de datos personales

apdcat.gencat.cat/ca/sala_de_p

0
yaracroft

🇨🇦 Suite à l'annonce d'une série de mesures visant à soutenir 🇺🇦 l'Ukraine, une vague d'attaques en déni de service distribué revendique par 🇷🇺 NoName a perturbé l'accès à certains sites web dont celui du premier ministre (pm.gc.ca), le port de Québec (portquebec.ca) et celui d'Halifax (portofhalifax.ca)

ici.radio-canada.ca/nouvelle/1

0
yaracroft

🇧🇪 Industrie du Bois de Vielsalm (ibv.be)

dhnet.be/regions/luxembourg/ba

0
yaracroft

Takedown of GenesisMarket

europol.europa.eu/operations-s

0
yaracroft

🇺🇸 Operations knocked offline due to a malware attack at the Oak Ridge (oakridgetn.gov) will gradually return in the coming weeks

oakridgetn.gov/oak-ridge-busin

1
yaracroft

🇬🇧 Capita plc (capita.com)

theguardian.com/business/2023/

0
yaracroft

🇺🇸 Lumen Technologies, Inc (lumen.com)

securityweek.com/lumen-technol

0
yaracroft

🇺🇸 A ransomware attack targeted the Jefferson County School (jefcoed.com) system over spring break

al.com/news/2023/04/jefferson-

0
yaracroft

🇺🇸 Mendocino County Office of Education (mcoe.us) ( via bettercyber.co)

mcoe.us/files/user/228/MCOE-%2

0
yaracroft

🇧🇪 SABCA (sabca.be)

lavenir.net/actu/2023/04/01/le

0
yaracroft

🇪🇸 La operadora del Grupo MASMOVIL (grupomasmovil.com) ha comunicado que han accedido a datos sensibles de los clientes Yoigo (yoigo.com) y advierte sobre posibles intentos de phising

elespanol.com/omicrono/tecnolo

0
yaracroft

🇫🇷 Challenge SSTIC 2023

sstic.org/2023/challenge/

1
yaracroft

A better way to attack Microsoft Azure AD with temporary access passes

Microsoft's TAPs were designed to simplify passwordless authentication, but they can also be used by attackers to bypass MFA.

Even if an administrator goes in and deletes the TAP, an attacker could still maintain access to the user account. In the process of the OAuth On-Behalf-Of (OBO) flow, we have somehow removed the correlation between the Temporary Access Passes (TAP) and the refresh token, a process I (Daniel Heinsen, SpecterOps) am calling « OBO persistence ».

Granted, in this scenario, you only have access to APIs that don't require admin consent, but that's enough to read the users email, Teams messages, OneNote notes, and calendar. In order to revoke this access, an administrator will need to revoke all the user refresh tokens.

posts.specterops.io/id-tap-tha

🛠 obo-wash

0
yaracroft

🗃 March 31 : World Backup Day

0
yaracroft

🇪🇺 European School Education Platform (school-education.ec.europa.eu)

politico.eu/article/eu-commiss

0
Plus anciens

yaracroft recommande :

informatique

2,96K

threats

2,03K

ransomware

1,24K

france

589

vuln

270

europe

125

tools

124

infosec

61

phishing

48
nanao

Comme le soleil, les machines ne se couchent jamais.

Ressources

Développeurs

Qu’est-ce que Mastodon ?

nanao.cybtex.fr

Davantage…