yaracroft @venom@nanao.cybtex.fr

Samedi dernier, Laurent Perrier a annoncé avoir détecté une intrusion sur son réseau informatique.

https://www.capital.fr/entreprises-marches/laurent-perrier-victime-dune-cyberattaque-1401242

Minutes before Trump left office, millions of the Pentagon’s dormant IP addresses sprang to life

https://www.washingtonpost.com/technology/2021/04/24/pentagon-internet-address-mystery/

Of Corona, Buggy Audio Drivers and Industrial Espionage

https://insinuator.net/2021/04/of-corona-buggy-audio-drivers-and-industrial-espionage/

When AI's Start Hacking

https://www.schneier.com/blog/archives/2021/04/when-ais-start-hacking.html

La curieuse annonces des adresses IPv4 de l'armée états-unienne

https://www.bortzmeyer.org/as8003.html

Nvidia Warns : severe security bugs in GPU driver, VGPU software

https://threatpost.com/nvidia-security-bugs-gpu-vgpu/165597/

All Your Macs Are Belong To Us

https://objective-see.com/blog/blog_0x64.html

Un an après, la cyberattaque laisse encore des traces à Charleville-Mézières

https://abonne.lardennais.fr/id252064/article/2021-04-25/un-apres-la-cyberattaque-laisse-encore-des-traces-charleville-mezieres

Vulnerability affecting Drupal 7, 8.9, 9.0 and 9.1. Drupal core's sanitization API fails to properly filter cross-site scripting under certain circumstances.

https://www.drupal.org/sa-core-2021-002

A new analysis of the SolarWinds breach suggests that the attacker infrastructure behind the campaign is far larger than first believed.

https://www.zdnet.com/article/solarwinds-hack-analysis-reveals-56-boost-in-command-server-footprint/

Santa Clara Valley Transportation Authority (vta.org) last weekend has forced a days-long shutdown of many of the agency's computer systems. VTA officials say they believe they have contained the cyberattack, but key systems remained offline Thursday.

VTA is experiencing technology system disruptions, including the customer call center and real-time info. ( Apr 19, 2021 )

https://www.mercurynews.com/2021/04/22/cyberattack-targets-vta-unclear-if-personal-information-breached/

The pandemic has created formidable challenges for industries across the board - but none more so than healthcare. In addition to needing to accommodate often staggering influxes of seriously ill patients, hospitals and other medical providers face the foreboding prospect of an extended spike in cyber threats.

https://www.cpomagazine.com/cyber-security/inside-the-cyber-attack-machine-what-hospitals-need-to-know-about-the-dark-web-and-post-pandemic-threats/

Cyber threats rise amid chaos of pandemic

https://www.gloucestertimes.com/news/local_news/cyber-threats-rise-amid-chaos-of-pandemic/article_277a3422-083d-5b10-9f08-cecbbfb13d3b.html

Mexico - In passing this law, Mexico joins the proud ranks of China, Saudi Arabia, Afghanistan, Venezuela, and 18 other countries that require biometric data in order to obtain a SIM card

Creating a nationwide biometric database will be like handing Mexico's worst criminals a menu that gives them access to any citizen or public official they might be interested in.

Collecting biometric data is much easier than keeping it safe. If neither the NSA was able to keep its data safe nor the U.S government was capable of keeping safe its most sensitive employee background checks, what chance do Mexican telecoms or the country's government have? None. Mexican citizens have reason to be worry.

https://restofworld.org/2021/mexico-cellphone-data-law-crime/

Técnicas de ataque del ransomware Ryuk: víctimas el SEPE y la Universidad de Castilla-La Mancha

https://blog.elhacker.net/2021/04/tecnicas-de-ataque-del-ransomware-ryuk-sepe-y-universidad-castilla-la-mancha-uclm.html

How to tunnel traffic through Azure Application Proxy

https://www.trustedsec.com/blog/azure-application-proxy-c2/

Finding Buried Treasure in Server Message Block (SMB)

https://www.blackhillsinfosec.com/finding-buried-treasure-in-server-message-block-smb/