Plus récents
yaracroft

 Framemaker : This update addresses a critical vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user

0
yaracroft

 Illustrator 2021 : This update addresses a critical vulnerability. Successful exploitation could lead to arbitrary code execution in the context of current user

0
yaracroft

Dimension : This update addresses a critical vulnerability. Successful exploitation could lead to arbitrary code execution in the context of current user

0
yaracroft

Multiples vulnerabilities discovered in products

wiki.scn.sap.com/wiki/pages/vi

0
yaracroft

CVE-2021-22928 - A vulnerability has been identified in Virtual Apps and Desktops that could, if exploited, allow a user of a Windows VDA that has either Citrix Profile Management or Citrix Profile Management WMI Plugin installed to escalate their privilege level on that Windows VDA to SYSTEM

support.citrix.com/article/CTX

0
yaracroft

Multiples vulnerabilities discovered in Microsoft products

msrc.microsoft.com/update-guid

0
yaracroft

Multiple vulnerabilities in VMware ESXi products

vmware.com/security/advisories

0
yaracroft

Sneaky malware reconfigures Hive OS wallet for profit

securehoney.net/blog/sneaky-ma

0
yaracroft

Twitter admits it verified several fake accounts. Alex Stamos, Facebook's former chief security officer, noted that many of the account names appeared to be Turkish, suggesting that the incident could be linked to a nation-state operation. This incident raises questions about how the accounts were able to get verified in the first place, and why 's processes didn't flag them before they were discovered by a third-party researcher

dailydot.com/debug/twitter-ver

0
yaracroft

(Reuters) - An Iranian-American businessman wants to sue firm Dechert LLP (dechert.com) over allegations of hacking, seeking a court's approval to add it as a defendant in a long-simmering dispute with the Ras Al Khaimah Investment Authority (RAKIA). Azima's effort to sue Dechert over hacking is further fallout from last year's exposure of the Indian firm BellTroX. Obscure Indian cyber firm spied on politicians, investors worldwide..

reuters.com/article/us-cyber-i

0
yaracroft

CVE-2021-28474 : Analysis - SharePoint Remote Code Execution (RCE)

zerodayinitiative.com/blog/202

0
yaracroft

Two Companies Have REvil Data ; They Don't (O'RLY?) Appear Eager to Help

bankinfosecurity.com/blogs/the

0
yaracroft

REvil fait-il le coup de la disparition délibérée ? Les spéculations vont bon train. L' de semble avoir été stoppée. Ce groupe est soupçonné d'avoir été aux commandes du Gandcrab ( qui, d'après eux, aurait dégagé + de 130 millions d'euros / an ). Les auteurs de ce dernier avaient annoncé leur disparation au printemps 2019, manifestement pour mieux revenir quelques mois plus tard. Si la disparition volontaire de REvil est confirmée, elle viendrait s'ajouter à celles d'autres opérateurs de ransomware tels que DarkSide et Avaddon.

lemagit.fr/actualites/25250395

0
yaracroft

In a first for the Air Force's new information warfare entity, the service inked patent license agreements with the private sector for code it developed in house to detect . Software, called Whiddler, scans files on a network and calculates the probability of whether a file is malicious. It looks for suspicious items that don't have a signature and therefore might escape software that scans for known problematic signatures. With the technology transferred to a third party, the government can choose whether its wants to adopt improvements to the code that the companies make. The companies can modify and improve the code and sell it to , making the larger community more secure, officials said.

c4isrnet.com/cyber/2021/07/12/

0
yaracroft

La preuve de vaccination reçue par des millions de Québécois sous forme de code QR renferme des données personnelles que le gouvernement n'a pas suffisement sécurisé. Des experts en cybersécurité y voient un potentiel de fraude élevé « Si un commerçant véreux ou curieux prend une application maison pour exploiter l'information, il y a un potentiel d'exploitation malveillante », dit Steve Waterhouse, ancien officier de sécurité au ministère de la Défense et chargé de cours en cybersécurité à l'Université de Sherbrooke ( )

ici.radio-canada.ca/nouvelle/1

0
yaracroft

« To know your enemy, you must become your enemy » ( Sun Tzu )

HAK5 Top Pentest Devices

🦆 Rubber Ducky
🐢 Lan Turtle
🍍 WiFi PinApple
🐰 Bash Bunny
🐿️ Packet Squirrel

0
yaracroft

Le 5 juillet 2021, la startup française Spliiit (spliiit.com), qui n'avait pas corrigée une faille de sécurité connue sur , s'est vue exfiltrer sa base de données contenenant des informations portant sur plus de 200 000 clients. Unique, comme incident de sécurité ? Pas vraiment. On pourrait même dire « banal », si l'attaquant ne s'était pas fait connaître.

cyberguerre.numerama.com/12671

0
yaracroft

Comme annoncé dans son communiqué de presse du 7 mai 2021, Albioma a été victime d'une attaque par sur le réseau du Groupe. L'attaque n'a eu aucune conséquence sur l'activité industrielle d'exploitation. Les investigations menées en profondeur par les experts en cybersécurité que nous avons diligentées ont fait apparaitre qu'une exfiltration de certaines données () de l'entreprise a été constatée.

boursier.com/actions/actualite

0
yaracroft

Salaires : Baromètre des rémunérations 2021

silkhom.com/wp-content/uploads

0
yaracroft

Masquerading as scholars with the University of London's School of Oriental and African Studies (SOAS), the threat actor TA453 has been covertly approaching individuals since at least January 2021 to solicit sensitive information. The threat actor, an APT who we assess with high confidence supports Islamic Revolutionary Guard Corps (IRGC) intelligence collection efforts, established backstopping for their credential infrastructure by compromising a legitimate site of a highly regarded academic institution to deliver personalized credential harvesting pages disguised as registration links. Identified targets included experts in Middle Eastern affairs from think tanks, senior professors from well-known academic institutions, and journalists specializing in Middle Eastern coverage.

TA453 illegally obtained access to a website belonging to a world class academic institution to leverage the compromised infrastructure to harvest the credentials of their intended targets. The use of legitimate, but compromised, infrastructure represents an increase in TA453's sophistication and will almost certainly be reflected in future campaigns. TA453 continues to iterate, innovate, and collect in support of IRGC collection priorities.

proofpoint.com/us/blog/threat-

0
Plus anciens

yaracroft recommande :

informatique

2,96K

threats

2,03K

ransomware

1,24K

france

589

vuln

270

europe

125

tools

124

infosec

61

phishing

48
nanao

Comme le soleil, les machines ne se couchent jamais.

Ressources

Développeurs

Qu’est-ce que Mastodon ?

nanao.cybtex.fr

Davantage…