Plus récents
yaracroft

The top of the cybercriminal pyramid is represented by the for zero-days. It is an extremely expensive and competitive one, and it's usually been a prerogative of state-sponsored threat groups. However, certain high-profile cybercriminal groups (read: gangs) have amassed incredible fortunes and can now compete with the traditional buyers of exploits. During our investigation for this research piece we've noticed cybercriminals discussing ideas for an Exploit-as-a-Service model that would inevitably lower the barrier for accessing sophisticated .

digitalshadows.com/blog-and-re

0
yaracroft

Record rise in attacks with a FIFTH targeted at and research , GCHQ agency reveals.

dailymail.co.uk/news/article-1

0
yaracroft

« 82% of systems reported experiencing an attack in last 18 months » Medigate, healthcare's leading clinical device data security and integration platform, today announced it has launched a research collaboration with CrowdStrike, a leader of cloud-delivered endpoint and workload protection.

prnewswire.com/news-releases/8

0
yaracroft

Mi-juillet 2021, la Ville d'Erstein (ville-erstein.fr) & l'intercommunalité sont victimes d'une attaque informatique par « rançongiciel » qui fait perdre une importante quantité de données

dna.fr/faits-divers-justice/20

0
yaracroft

🇫🇷 Le groupe français Eduservices (groupe-eduservices.fr) confronté à une attaque informatique impliquant un . Eduservices regroupe 19 écoles d'enseignement supérieur privé ce qui représente ±30 000 étudiants : Ecole Internationale Tunon, Ipac Bachelor Factory, ISCOM, MBway, MyDigitalSchool, Win, Pigier, AFTEC, Cap Vers, ESICAD, ESPL, IPAC, Isifa Plus Values, IHECF, Ipac Design, Esimode, Acfamultimedia, Studio M, Cime Art.

lemagit.fr/actualites/25250955

0
yaracroft

« We are in a crisis of trust and truth » 🔥 Information disorder is a crisis that exacerbates all other crises. When bad information becomes as prevalent, persuasive, and persistent as good information, it creates a chain reaction of harm.

aspeninstitute.org/wp-content/

0
yaracroft

Since early September 2021, Josh Muir and five other maintainers of the noblox.js package, have been trying to prevent cybercriminals from distributing through similarly named code libraries. Noblox.js is a wrapper for the Roblox API, which many gamers use to automate interactions with the hugely popular platform. The inside story of ransomware repeatedly masquerading as a popular JS library for Roblox . Ongoing attacks target kids as drags its feet.

theregister.com/2021/11/16/nob

0
yaracroft

🔌 Massive takes down , , , and many more.

theverge.com/2021/11/16/227855

0
yaracroft

🇧🇪 Fuite de données sur la plateforme Bruvax : la Cocom reconnaît la présence d'une faille de sécurité qui permet de connaitre le statut vaccinal de n'importe quel Bruxellois, le MR convoque Alain Maron devant le Parlement. Le gouvernement bruxellois va devoir clairement s'expliquer sur ces manquements graves au RGPD. L'association Charta 21 est à l'origine de l'alerte concernant cette violation de données caractérisée.

lalibre.be/belgique/societe/20

0
yaracroft

Today, we are sharing details of recent incidents on the npm registry, the details of our investigations. These investments include the requirement of two-factor authentication () during for maintainers and admins of popular packages on , starting with a cohort of top packages in the first quarter of 2022.

github.blog/2021-11-15-githubs

0
yaracroft

AFNOR (afnor.org) hit by cyber attack with « An experience you wouldn't wish to anyone... but highly instructive »

youtube.com/watch?v=SvwHHpunXr

0
yaracroft

Le Emotet refait surface. Pourtant, en janvier 2021, une opération internationale - chapeautée par Europol et Eurojust - avait réussi à prendre le contrôle de l'infrastructure Emotet. Les serveurs avaient été physiquement saisis par les autorités des différents pays impliqués

usine-digitale.fr/article/dema

0
yaracroft

« It's appalling » ; « What is wrong with these people in terms of the lack of security? » ; « If data has been accessed the potential for it to be copied and rendered in ways that were never contemplated escalates dramatically … That's pretty lame [saying] the data has been only accessed. » ( Ann Cavoukian )

itworldcanada.com/article/cavo

0
yaracroft

La start-up française Lifen (lifen.fr)annonce une levée de fonds de 50 millions d'euros auprès de Creadev et Lauxera Capital Partners, avec la participation des investisseurs historiques Partech, Serena et la MACSF.

dsih.fr/article/4467/lifen-lev

0
yaracroft

🧟 Emotet revient d'outre-tombe 🔥

cyber.wtf/2021/11/15/guess-who

0
yaracroft

: CVE-2021-0157 & CVE-2021-0158

intel.com/content/www/us/en/se

0
yaracroft

What if a literally cannot be seen and thus evades detection even from thorough code reviews ? Homoglyph attacks & invisible characters can pose a threat.

certitude.consulting/blog/en/i

0
yaracroft

CyrusOne & CoreSite, spécialisées dans la conception et la gestion de centres de données, vont être rachetés pour près de 19 milliards $USD au total, 25 milliards de dollars en incluant leurs dettes

nasdaq.com/articles/data-cente

0
yaracroft

« The Far-Reaching Attacks of the Void Balaur Cybermercenary Group »

documents.trendmicro.com/asset

0
yaracroft

🇧🇪 L'association Charta 21 alerte d'une violation de données flagrante. Une simple prise de rendez-vous sur la plateforme de gestion de Bruvax permet de déduire le statut vaccinal -19 de n'importe quel Bruxellois.

lesoir.be/406542/article/2021-

0
Plus anciens

yaracroft recommande :

informatique

2,96K

threats

2,03K

ransomware

1,24K

france

589

vuln

270

europe

125

tools

124

infosec

61

phishing

48
nanao

Comme le soleil, les machines ne se couchent jamais.

Ressources

Développeurs

Qu’est-ce que Mastodon ?

nanao.cybtex.fr

Davantage…