Plus récents
yaracroft

L'agence fédérale américaine du commerce (FTC) gonfle ses muscles afin de créer un rapport de force en menaçant d'utiliser toute son autorité légale pour poursuivre en justice les entreprises qui ne protégent pas les données des consommateurs contre l'exposition à des vulnérabilités connues

lemondeinformatique.fr/actuali

0
yaracroft

🇪🇺 Lutter contre la fraude aux fonds européens

lemonde.fr/international/artic

0
yaracroft

« The attack surfaces are multiplying all over the place and the consequences of these attacks are hard to imagine yet » ( Stuart E. Madnick, professor of IS&T at MIT )

zdnet.com/article/your-cyberse

0
yaracroft

CVE-2021-44832 - IBM Cloud APM v8.1.4.0 Server installs a vulnerable Online Help application.

ibm.com/blogs/psirt/security-b

0
yaracroft

CVE-2021-20047 - SonicWall Global VPN client version 4.10.6 (32-bit and 64-bit) and earlier have a DLL Search Order Hijacking vulnerability. Successful exploitation via a local attacker could result in RCE in the target system.

cyberis.co.uk/blog/CVE-2021-20

0
yaracroft

Passer par les sous-traitants attaquer des grands groupes est une technique établie. Terminé les escarmouches, ce sont de vraies batailles que se livrent états, services secrets, entreprises et électrons libres du dark web. Avec, comme dans le champ du terrorisme, une frontière parfois très poreuse entre cyberguerre et cybercriminalité.

le-tout-lyon.fr/a-lyon-les-age

0
yaracroft

New Zloader campaign exploits Microsoft's Signature Verification putting users at risk. 🔥 This banking malware designed to steal user credentials and private information is back with a simple yet sophisticated infection chain.

research.checkpoint.com/2022/c

0
yaracroft

Increasing incidence of cyberattacks will be a key driver fueling the mobile security software market. Mobile market size is estimated to grow by USD 2.75 billion from 2021 to 2025 at a CAGR of 10% with the enterprises segment having largest market share.

technavio.com/report/mobile-se

0
yaracroft

Google Chrome - This update includes 37 security fixes.

chromereleases.googleblog.com/

0
yaracroft

Security patch for the HarmonyOS

huaweicentral.com/january-2022

0
yaracroft

CVE-2021-22045 - VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and VMware Fusion (12.2.0) contains a heap-overflow vulnerability in CD-ROM device emulation. Someone with access to a VM with CD-ROM device emulation may be able to exploit it in conjunction with other issues to execute code on the hypervisor from a virtual machine.

vmware.com/security/advisories

1
yaracroft

Ce que vous devez-savoir sur les caractéristiques de Purple Fox

guardicore.com/labs/purple-fox

0
yaracroft

Purple Fox - The threat actors have noticed that the attacks generally take advantage of legitimate software for implementing malicious payloads. The vulnerability has been named CVE-2021-1732, and this vulnerability generally optimizes rootkit capabilities that are leveraged in their attacks.

blog.minerva-labs.com/maliciou

0
yaracroft

🇺🇸 IBEX Global Solutions, Inc. (ibex.co) announced that the company's IT systems were the target of a malware attack, resulting in sensitive consumer data of more than 174,000 people being compromised.

jdsupra.com/legalnews/data-bre

0
yaracroft

Le 18 décembre 2021, la Suisse procède à l'expulsion de Vladislav Klyushin suite à la demande d'extradition des États-Unis.

bluewin.ch/fr/infos/faits-dive

0
yaracroft

Russian businessman Vladislav Klyushin pleaded not guilty to participating in an $82 million insider trading scheme that relied on information stolen through hacking.

reuters.com/world/russian-busi

0
yaracroft

CVE-2021-1732 Technical Analysis

mcafee.com/blogs/enterprise/mc

0
yaracroft

credential stuffing : more than 1.1 million online accounts compromised in cyberattacks at 17 well-known companies - « Right now, there are more than 15 billion stolen credentials being circulated across the »

ag.ny.gov/press-release/2022/a

0
yaracroft

🐘 Elephant Beetle, a financially motivated threat group targeting and infiltrating organizations from the finance and commerce sectors in Latin America. The group executes its attacks patiently over long periods of time, blending in with the target’s environment and going completely undetected while it quietly liberates organizations of large amounts of money.

blog.sygnia.co/elephant-beetle

0
yaracroft

📵 Persistence without « Persistence » : Meet The Ultimate Persistence Bug - « NoReboot »

blog.zecops.com/research/persi

0
Plus anciens

yaracroft recommande :

informatique

2,96K

threats

2,03K

ransomware

1,24K

france

589

vuln

270

europe

125

tools

124

infosec

61

phishing

48
nanao

Comme le soleil, les machines ne se couchent jamais.

Ressources

Développeurs

Qu’est-ce que Mastodon ?

nanao.cybtex.fr

Davantage…