Plus récents
yaracroft

CVE-2021-41379 works in every supporting installation. Including Windows 11 & Server 2022 with November 2021 patch.

github.com/klinix5/InstallerFi

0
yaracroft

The top of the cybercriminal pyramid is represented by the for zero-days. It is an extremely expensive and competitive one, and it's usually been a prerogative of state-sponsored threat groups. However, certain high-profile cybercriminal groups (read: gangs) have amassed incredible fortunes and can now compete with the traditional buyers of exploits. During our investigation for this research piece we've noticed cybercriminals discussing ideas for an Exploit-as-a-Service model that would inevitably lower the barrier for accessing sophisticated .

digitalshadows.com/blog-and-re

0
yaracroft

: CVE-2021-0157 & CVE-2021-0158

intel.com/content/www/us/en/se

0
yaracroft

🔓 New Vulnerabilities in Public Transport Schemes for Pay, Pay, Pay

paymentvillage.org/resources

0
yaracroft

Le site de Nature & Découvertes Suisse victime d'une attaque. Les données personnelles de plus de 200 clients ont été exfiltrées. Les personnes concernées ont été informées. L'incident technique a été identifié lors d'un contrôle. « Il y avait une faille de sécurité sur le système de gestion de contenu »

lenouvelliste.ch/articles/suis

0
yaracroft

A vulnerability at a CDSL subsidiary, CDSL Ventures Limited (CVL), has exposed personal and financial data of over 4 crore Indian investors twice in a period of 10 days

cyberx9.com/cdsl-data-exposed-

0
yaracroft

CVE-2021-43287 - GoCD instances - exploitability is high due to the fact that this vulnerability can be exploited in a single HTTP request

attackerkb.com/assessments/910

0
yaracroft

CISA : Known Exploited Vulnerabilities Catalog

cisa.gov/known-exploited-vulne

0
yaracroft

L'héritier du cyberattaquant de Mohamed bin Zayed, DarkMatter, s'allie à la start-up de l'ex-patron du Mossad. Beacon Red, la filiale dédiée à la guerre hybride du groupe de défense émirati EDGE Group, se rapproche de XM Cyber. Cette start-up cyber, fondée par l'ex-chef du Mossad, Tamir Pardo, va l'assister pour traiter des vulnérabilités informatiques [intelligenceonline]

Afficher le fil de discussion
0
yaracroft

Hackers have successfully breached , and security measures to hack the 13 Pro, Google and Windows 10

forbes.com/sites/daveywinder/2

0
yaracroft

CVE-2021-30892 has discovered a that could allow an attacker to bypass System Integrity Protection in and perform arbitrary operations on a device

microsoft.com/security/blog/20

0
yaracroft

<html><meta http-equiv="refresh" content="0; url=calculator://1234" /><body><h1>hacked</h1></body></html>&#10

0
yaracroft

A attack on University of Colorado Boulder in September 2021 compromised the personal information of approximately 30,000 current and former students and employees, the campus announced Monday. Attackers exploited a vulnerability in Atlassian software that CU Boulder’s Office of Information Technology

denverpost.com/2021/10/25/cu-b

0
yaracroft

gangs are abusing a 0 day in EntroLink appliances

therecord.media/ransomware-gan

0
yaracroft

This vulnerability allows a low-privilege user (such as www-data) to escalate his privileges to root using a bug in PHP-FPM, which has been present for 10 years (the patched release is PHP-8.0.12)

ambionics.io/blog/php-fpm-loca

0
yaracroft

💥 Nextcloud security vulnerabilities (CVE-2021-39220, CVE-2021-39221, CVE-2021-39222, CVE-2021-39223, CVE-2021-39224)

github.com/nextcloud/security-

0
yaracroft

Une combinaison de failles dans Pay et permet d'effectuer des paiements sans contact sans effectuer le déverrouillage de son

economiematin.fr/news-pirates-

0
yaracroft

💥 CVE-2021-34484 This vulnerability affects every & Desktop Edition including 11 & server 2022

halove23.blogspot.com/2021/10/

0
yaracroft

CVE-2021-1529 A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, LOCAL attacker to execute arbitrary commands with root privileges

tools.cisco.com/security/cente

0
yaracroft

CVE-2021-42299 Une preuve de faisabilité baptisée « TPM Carte Blanche » permet de faire passer pour sain un appareil qui ne l'est plus en manipulant des données au niveau TPM

github.com/google/security-res

0
Plus anciens

yaracroft recommande :

informatique

2,96K

threats

2,03K

ransomware

1,24K

france

589

vuln

270

europe

125

tools

124

infosec

61

phishing

48
nanao

Comme le soleil, les machines ne se couchent jamais.

Ressources

Développeurs

Qu’est-ce que Mastodon ?

nanao.cybtex.fr

Davantage…