Plus récents
yaracroft

🇨🇭 Le bataillon cyber 42 actif depuis le 1er janvier 2022 ne convainc pas tout le monde. L'armée « crée des attentes surfaites », selon un expert.

tdg.ch/le-cyberbataillon-ne-co

0
yaracroft

🇫🇷 Une partie des SI du Centre Hospitalier de Castelluccio (ch-castelluccio.fr) impactée par une attaque informatique perpétrée dans la journée du lundi 28 mars 2022.

librexpression.fr/lhopital-de-

1
yaracroft

CVE-2022-27666, a vulnerability in esp6 module that achieves local privilege escalation.

github.com/plummm/CVE-2022-276

0
yaracroft

In order to breach into its victims' networks, this intrusion set employs not only advanced social engineering techniques that encompass SIM swap attacks against the telecommunication sector and spearphishing, but also the acquisition of active passwords & session tokens on specialized dark web markets and forums.

In this context, the City of London Police announced the 24 th of March 2022 that seven teenagers between the ages of 16 and 21 were arrested. We don't know if the supposedly « mastermind » of the LAPSUS$ intrusion set is amongst the seven.

intrinsec.com/wp-content/uploa

0
yaracroft

🇺🇸 Arizona's Secretary of State : the agency is experiencing a system-wide outage. Updates will be provided as more information becomes available.

twitter.com/SecretaryHobbs/sta

0
yaracroft

CVE-2018-25032 could potentially allow a Denial-of-Service () attack. This bug was reported by Danilo Ramos of Eideticom, Inc. It has lain in wait 13 years before being found! The « bug » was introduced in zlib 1.2.2.2, with the addition of the Z_FIXED option.

github.com/madler/zlib/commit/

1
yaracroft

The Mars Stealer pilfers user credentials stored in various browsers, as well as many different wallets. This is being distributed via social engineering techniques, malspam campaigns, malicious software cracks, and keygens.

blog.morphisec.com/threat-rese

0
yaracroft

🔥 There is a terrifying and highly effective « method » that criminal hackers are now using to harvest sensitive customer data from Internet service providers, phone companies and firms. It involves compromising email accounts and websites tied to police departments and government agencies, and then sending unauthorized demands for subscriber data while claiming the information being requested can't wait for a court order because it relates to an urgent matter of life and death.

krebsonsecurity.com/2022/03/ha

1
yaracroft

Latvia and Lithuania detain 108 over multi-million euro call centre scam.

europol.europa.eu/media-press/

0
yaracroft

🇩🇿 Lors de la première conférence sur les enjeux de la cybersécurité organisée, avant-hier, à l'hôtel El-Aurassi, par la société Intelligent Network (Inet), les professionnels en cybersécurité ont recommandés à l'Algérie de créer une agence de sécurité des systèmes d'information. Selon les données de l'ITU de 2020, l'Algérie se positionne à la 104e place sur 182 pays sur la cybersécurité.

liberte-algerie.com/economie/l

0
yaracroft

🔌 GitHub Actions is now experiencing degraded performance. We are investigating reports of degraded availability.

githubstatus.com/incidents/3nr

0
yaracroft

🇫🇷 Conférence de presse sur l'attaque informatique ayant fortement perturbée les systèmes informatiques et téléphoniques de la ville d'Aix-les-Bains.

lessorsavoyard.fr/38649/articl

0
yaracroft

🇺🇦 З початку війни СБУ ліквідувала 5 ворожих ботоферм потужністю понад 100 тис. фейкових акаунтів

ssu.gov.ua/novyny/z-pochatku-v

0
yaracroft

Technical analysis of a new campaign which initiates attacks with a that uses conversation hijacking to deliver IcedID.

intezer.com/blog/research/conv

0
yaracroft

DDoSecrets acquires over 140,000 emails from MashOil

ddosecrets.com/wiki/MashOil

0
yaracroft

CVE-2022-22274 - Vulnerability in the SonicWALL SonicOS via HTTP request allows a remote unauthenticated attacker to cause DoS or potentially results in RCE.

psirt.global.sonicwall.com/vul

0
yaracroft

CVE-2022-1040 - Sophos Firewall users are therefore advised to make sure their products are updated. Vulnerability allows a remote attacker who can access the Firewall's User Portal or Webadmin interface to bypass authentication and execute arbitrary code.

sophos.com/en-us/security-advi

0
yaracroft

A major internet disruption has been registered across on national provider 🇺🇦 Ukrtelecom.

netblocks.org/reports/internet

0
yaracroft

A vulnerability in 그누보드 (gnuboard5) allows a malicious actor to de-obfuscate all addresses of users.

0g.vc/posts/insecure-cipher-gn

0
yaracroft

A lot of people still think that the security that OTPs offer is based on their randomness but in fact it's based on their unpredictability.

siginthistorian.blogspot.ca/20

0
Plus anciens

yaracroft recommande :

informatique

2,96K

threats

2,03K

ransomware

1,24K

france

589

vuln

270

europe

125

tools

124

infosec

61

phishing

48
nanao

Comme le soleil, les machines ne se couchent jamais.

Ressources

Développeurs

Qu’est-ce que Mastodon ?

nanao.cybtex.fr

Davantage…