yaracroft @venom@nanao.cybtex.fr

CVE-2022-23088 - FreeBSD patched a 13-year-old heap overflow in the Wi-Fi stack that could allow network-adjacent attackers to execute arbitrary code on affected installations of FreeBSD Kernel. #vuln #freebsd #wifi #networks #informatique

https://www.zerodayinitiative.com/blog/2022/6/15/cve-2022-23088-exploiting-a-heap-overflow-in-the-freebsd-wi-fi-stack

• https://github.com/thezdi/PoC/tree/master/CVE-2022-23088

🇺🇸 Montrose Environmental Group (montrose-env.com) was hit with ransomware. #usa #chemical #ransomware #laboratory #emergency #chemistry #industries #biological #energies #cyber #water #threats #innovative #technologies #services #environmental #renewables #waste #hydrogeologists #geologists #remediation #engineers #databreach #biologists #geosciences #solutions #Informatique

https://investors.montrose-env.com/news/news-details/2022/Montrose-Environmental-Group-Issues-Statement-on-Ransomware-Attack/default.aspx

🇫🇷 Les opérateurs Vice Society revendiquent une attaque informatique à l'encontre du groupe Novelty (novelty-group.com)

#france #lighting #video #led #sono #visual #rental #vicesociety #ransomware #electrical #industries #events #products #medias #innovative #sound #threats #services #management #digital #smart #databreach #customers #technologies #informatique

💀 Hertzbleed Side-Channel Attack allows to remotely steal encryption keys from #AMD (CVE-2022-23823) & #Intel (CVE-2022-24436) chips.

#vuln #crypto #chips #threats #cryptographic #informatique

https://www.hertzbleed.com

🛠 New version of TinyCheck with MISP implementation 👍​ #tools #raspberry #network #malware #wireless #infosec #smartphone #informatique

https://github.com/KasperskyLab/TinyCheck/releases/tag/v0.7-test

👮 Operation First Light 2022

• 1,770 locations raided worldwide
• ± 3,000 suspects identified
• ± 2,000 operators, fraudsters and money launderers arrested
• ± 4,000 bank accounts frozen
• ± USD 50 million worth of illicit funds intercepted

#scam #telecom #interpol #email #business #online #cyber #bec #internet #financial #threats #police #phishing #informatique

https://www.interpol.int/News-and-Events/News/2022/Hundreds-arrested-and-millions-seized-in-global-INTERPOL-operation-against-social-engineering-scams

🇺🇸 The Texas Tech University Health Science Center (ttuhsc.edu) has notified patients of a potential breach of information held by Eye Care Leaders, Inc. #usa #cyber #medical #health #patients #databreach

https://www.newschannel10.com/2022/06/10/texas-tech-university-health-science-center-patients-notified-third-party-data-security/

🇨🇦 Dans la nuit du 5 au 6 juin 2022, des individus sont entrés par effraction dans des espaces du Centre de recherche du CHU de Québec pour voler du matériel informatique. Des données #canada #hospital #medical #robbery #physical #research #engineers #employees #threats #databreach #health #healthcare #informatique

https://ici.radio-canada.ca/nouvelle/1891247/fuite-donnees-vol-materiel-informatique-centre-recherche-chu-quebec

Les opérateurs Black Basta revendiquent une attaque informatique à l'encontre de :

• 🇮🇹 RadiciGroup (radicigroup.com)

#italia #cyber #ransomware #blackbasta #industrial #chemical #logistics #corporate #spacesuit #textile #plastics #databreach #polymers #products #manufacture #synthetic #elastomers #fibres #acid #financial #chemicals #mars #governance #materials #clothing #shareholders #space #chain #polyamide #innovative #electrical #clients #solutions #water #plant #engineers #technologies #companies #management #production #power #market #thermoplastic #automotive #nonwovens #electronic #energies #business #italie #informatique

🇨🇭 Un dysfonctionnement encore « indéterminé » a empêché le système de secours des aiguilleurs du ciel Skyguide (skyguide.ch) de fonctionner correctement.

Nous sommes sûrs à 99% qu'il ne s’agissait pas d'une cyberattaque.

Cette panne a nécessité la fermeture totale de l'espace aérien suisse entre 4h et 8h30.

#aero #network #system #outage #informatique

https://www.20min.ch/fr/story/skyguide-ecarte-la-possibilite-dune-cyberattaque-163293535080

🇷🇺 Russia is exploiting the physicality of #internet #infrastructure and forcing 🇺🇦 Ukrainian ISPs to send traffic through Russian ISPs.

#telecom #networks #threats #war providers #informatique

https://www.wired.com/story/ukraine-russia-internet-takeover/

Les opérateurs BlackCat revendiquent des attaques informatiques à l'encontre de :

• 🇺🇸 Grand Valley State University (gvsu.edu)

• 🇦🇹 Carinthia (ktn.gt.av)

• 🇺🇸 Green Mountain Electric Supply (gmes.com)

• 🇺🇸 Horwitz, Horwitz & Associates (horwitzlaw.com)

• 🇮🇹 Tecno Pack (tecnopackspa.it)

• 🇺🇸 The Allison Inn VictimName Spa (theallison.com)

• 🇺🇸 Purvis Industries, LLC (purvisindustries.com)

• 🇺🇸 Plainedge Public Schools (plainedgeschools.org)

#usa #italy #blackcat #austria #government #ransomware #education #city #lawyers #campus #law #industrial #packing #supply #software #systems #products #electrics #pneumatics #financial #therapeutic #engineers #relaxation #luxury #hydraulics #pipes #tubes #chain #culinary #management #business #motors #solutions #injury #students #databreach #treatments #industries #electrical #schools #brands #autriche #italie #informatique

Les opérateurs LV revendiquent des attaques informatiques à l'encontre de :

• 🇺🇸 Schiffmans (schiffmans.com)

• 🇮🇹 Motoluce (motoluce.com)

#usa #design #ransomware #jewelry #stores #lighting #lv #products #services #retails #package jeweler #solutions #shops #informatique

Tens of thousands of user tokens are exposed via the Travis CI API, which allows anyone to access historical clear-text logs.

More than 770 million logs of free tier users are available, from which you can easily extract tokens, secrets, and other credentials associated with popular cloud service providers such as GitHub, AWS, and Docker Hub. Attackers can use this sensitive data to launch massive cyberattacks and to move laterally in the cloud.

#cyber #threats #online #web #services #aws #credentials #github #travis #api #tokens #docker #databreach #informatique

https://blog.aquasec.com/travis-ci-security

Les opérateurs LockBit revendiquent des attaques informatiques à l'encontre de :

• 🇮🇹 Gruppo Waste Italia S.p.A. (gruppowasteitalia.it)

• 🇮🇩 PT Medco Energi Internasional Tbk (medcoenergi.com)

• 🇲🇱 La Direction Générale des Impôts du Mali (dgi.gouv.ml)

• 🇬🇧 Genus plc (genusplc.com)

#italy #indonesia #mali #uk #lockbit #government #ransomware #animal #industrial #chemicals #food #genetics #biotechnology #pharma #treatment #governance #smart #production #innovative #gas #pigs #accounting #services #shareholders #treatments #research #investment #development #meat #energies #partnership #future #strategic #farmers #technologies #rental #taxes #agricultural #databreach #corporate #organic #financial #power #impots #advisers #economic #customers #milk #waste #management #modern #investors #slavery #oil #fiscal #teleservices #business #informatique

Les opérateurs Quantum revendiquent des attaques informatiques à l'encontre de :

• 🇺🇸 YMCA South Florida (ymcasouthflorida.org)

• 🇬🇧 Shred Station (shredstation.co.uk)

• 🇺🇸 M. Green & Company LLP (mgreencpas.com)

• 🇦🇺 Medlab Pathology (medlab.com.au)

#usa #uk #australia #quantum #coronavirus #fitness #communities #ransomware #health
#nurses #toxicological #innovative #confidential #government #drives #waste #technologies #identities #medical #accounting #patients #providers #clients #agricultural #doctors #pathology #research #reputation #covid #business #services #management #solutions #future #corporate #careers #informatique

🇹🇼 Les opérateurs Cuba revendiquent une attaque informatique à l'encontre d'Etron Technology, Inc (etron.com)

#taiwan #cuba #industrial #ransomware #innovative #pic #memory #ubiquitous #corporate #technologies #solutions #industries #devices #controllers #electronic #strategic #products #hardware #threats #smart #cam #drives #software #interface #datasheet #customers #automotive #usb #chips #storage #databreach #webcam #informatique

🇦🇹 Les opérateurs Black Basta revendiquent une attaque informatique à l'encontre de Bernd Hösele Group (hoesele.com)

#austria #cyber #ransomware #cosmetic #perfumery #online #shops #luxury #databreach #retail #blackbasta #agency #customers #brands #perfume #informatique

🇿🇦 Africa's largest supermarket retailer, Shoprite Holdings Ltd (shopriteholdings.co.za) hit with ransomware. #africa #retailer #ransomware #supermarket #business #ransomhouse #brands #food #distribution #crisis #logistics #chain #supply #stores #databreach #cyber #city #market #companies #threats #afrique #informatique

https://www.shopriteholdings.co.za/articles/Newsroom/2022/possible-data-compromise.html

« A cunning tactic »

Cybercrime groups that specialize in stealing corporate data & demanding a ransom not to publish it have tried countless approaches to shaming their victims into paying.

The latest innovation in ratcheting up the heat comes from the BlackCat ransomware group, which has traditionally published any stolen victim data on the Dark Web. Today, however, the group began publishing individual victim websites on the public Internet, with the leaked data made available in an easily searchable form.

#blackcat #internet #threats #shaming #psychological #corporate #business #exposure #cyber #shaming #tactics #ransomware #databreach #informatique

https://krebsonsecurity.com/2022/06/ransomware-group-debuts-searchable-victim-data/