Plus récents

🇺🇸 , (), and join the growing list of U.S companies halting business in . Governments around the world have applied sanctions against Russia due to its unwarranted war with .

fastcompany.com/90726978/apple

🇺🇸 Merrick B. Garland announced the launch of Task Force KleptoCapture, an interagency law enforcement task force dedicated to enforcing the sweeping sanctions, export restrictions, and economic countermeasures that the U.S has imposed, along with allies and partners, in response to 's unprovoked invasion of . KleptoCapture have been designed to isolate Russia from global markets and impose serious costs for this unjustified act of war, by targeting the crimes of Russian officials, government-aligned elites, and those who aid or conceal their unlawful conduct.

justice.gov/opa/pr/attorney-ge

Avoiding Source Code Spoofing - Recent reports have highlighted problems in the review of source code containing non-ASCII Unicode characters (the so-called « Trojan Source Exploit »). A person reviewing a submission of source code could be fooled into thinking that the code was okay, when it was actually malicious.

unicode.org/L2/L2022/22007r2-a

🇺🇦 L'ensemble des caméras sont connectés à un seul et même réseau. Un travail d'analyse poussé nous permet finalement d'accéder à plus d'une trentaine de véhicules de police dans la ville. Vues de l'intérieur des automobiles, vues de l'extérieur, messages radio, conversations téléphoniques, tout est librement accessible à qui se donne la peine de chercher. Mouvements des forces de l'ordre, emplacement des équipements militaires et autres informations sensibles pourraient tomber en de bien mauvaises mains.

reflets.info/articles/reflets-

🇺🇦 Massive attack on Ukrainian universities that coincided with the invasion of Ukraine by Russia, and resulted in at least 30 compromised Ukrainian university websites. The threat actor behind this attack is a group based in Brazil called the Monday group, which the members refer to as « theMx0nday ».

wordfence.com/blog/2022/03/ukr

Le nombre de vulnérabilités ICS signalées a bondi de +110% au cours des 4 dernières années

claroty.com/2h21-biannual-repo

🇨🇦 Quantum ransomware attacked InfoTek, a Canada based IT Consulting firm. In addition to personal data, the attack includes data about customers and bank documents.

In Part II of this series on the leaked chats from the gang, we explore what it's like to work for Conti, as described by the employees themselves. Conti's shifting organizational structure, wracked by high attrition, is fascinating.

krebsonsecurity.com/2022/03/co

SAIP : Système d'Alerte et d'Information des Populations

Proofpoint has identified a likely nation-state sponsored phishing campaign using a possibly compromised Ukrainian armed service member's email account to target European government personnel involved in managing the logistics of refugees fleeing Ukraine.

proofpoint.com/us/blog/threat-

🇧🇪 Les ministres de la Défense et des Affaires étrangères optent pour la prudence en l'absence d'éléments probants qui permettraient de déterminer le(s) responsable(s) et l'impact réels. « L'enquête du Service Général du Renseignement et de la Sécurité est toujours en cours, il est encore trop tôt pour tirer des conclusions » ( Ludivine Dedonder )

🇫🇷 « Dans un contexte de risques accrus, nous avons constaté une cyberattaque de l'ENT. Par mesure de sécurité, nous vous demandons de changer votre mot de passe pour un mot de passe plus robuste. »

lemondeinformatique.fr/actuali

🇺🇦 Several ISPs/ASes operating in 6 different regions of Ukraine with outages : Merlin, TVCOM, CDS, TVP Format, Interphone, Trinity, Arhat, Lanet and Triolan.

ioda.inetintel.cc.gatech.edu/r

🇬🇧 La multinationale britannique, le Groupe Aon (aon.com), acteur majeur dans les domaines de la gestion des risques, du courtage d'assurance victime d'une attaque informatique

theregister.com/2022/03/01/aon

Group Diaries, Part I : Evasion. This is the first of several stories about the inner workings of Conti, based on the leaked chat records. Part II will be told through the private messages exchanged by Conti employees working in different operational units, and it explores some of the more unique and persistent challenges facing large-scale cybercriminal organizations today.

krebsonsecurity.com/2022/03/co

Plus anciens