Combination of USB-C to Lightning O.MG cables now makes #iPhones a major target #informatique
Unknown actor using CLFS log files for stealth
New Zealand's third-largest internet service provider (ISP), Vocus, was hit by a #DDoS attack, which prompted outages all over the country. It cut off around 15% of the country's broadband customers from the #internet #threats #informatique
La commune vaudoise de Rolle (rolle.ch
) actualisera un journal de bord concernant l'attaque #informatique qu'elle a subie et de ses conséquences pour les citoyens. #swiss #suisse
https://www.20min.ch/fr/story/rolle-ouvre-un-journal-dinformations-sur-la-cyberattaque-105203758775
One of the greatest dangers facing the #Internet with the potential for global impact is a powerful solar superstorm. A Coronal Mass Ejection (CME), popularly known as solar storm, is a directional ejection of a large mass of highly magnetized particles from the sun. #nature #threats #technologies
48000 ordinateurs vont être remis d'ici novembre 2021 aux élèves de seconde ainsi que les 1ère année de CAP de la région des Pays de La Loire. Attention à la pensée magique, l'ordinateur ne résout pas tous vos problèmes, ce n'est qu'un outil. #education #france #informatique
BOF Adios self-deleting executables #windows
19300 Firebase databases from a grand total of 180,300 were left exposed online without authentication
(CVE-2021-38408) A stack-based buffer overflow vulnerability in Advantech WebAccess caused by a lack of proper validation of the length of user-supplied data may allow RCE. #vuln
💥 (CVE-2021-26084) was recently detected in exploits ITW (in the wild), a mass exploitation of Atlassian Confluence is ongoing & expected to accelerate #vuln
PST, Want a Shell? ProxyShell Exploiting #Microsoft Exchange Servers
https://www.fireeye.com/blog/threat-research/2021/09/proxyshell-exploiting-microsoft-exchange-servers.html #vuln
HyperFuzzer - hybrid fuzzer for virtual CPUs #informatique
https://www.microsoft.com/en-us/research/uploads/prod/2021/09/hyperfuzzer-ccs21.pdf
0-day RCE backdoor in Teradek IP video device firmwares - This is a report of a 0-day backdoor giving root shell (root:upsetdac
). #vuln
TP-Link AC1200 Archer C50 (v6) #vuln
https://cybernews.com/security/amazon-tp-link-router-ships-with-vulnerable-firmware/
(CVE-2021-26084) (PoC) - An OGNL injection vulnerability exists that would allow an authenticated user, and in some instances unauthenticated user, to execute arbitrary code on a Confluence Server or Data Center instance. #vuln
Des données personnelles ont été dérobées lors de la compromission d'un module de la plateforme France-visas (france-visas.gouv.fr
) en date du 10 août 2021. #france #informatique
The Dallas Independent School District, one of the biggest school districts in the United States, has released an advisory a data security incident.
Technical information about the SolarWinds Serv-U SSH vulnerability (CVE-2021-35211) #vuln
apkeep - Command-line tool for downloading APK files from various sources. #rust
SARA - Simple Android Ransomware Attack
sc(r)apy | full metal packets
> We Are the Borg
> You Will be Assimilated
> Resistance is Futile