❌

Vue normale

Il y a de nouveaux articles disponibles, cliquez pour rafraîchir la page.
Hier — 23 avril 2024Securité

Un hacker s’est infiltré dans Wizz, l’app des ados, pour révéler ses failles béantes

✇Cyberguerre
Par : Bogdan Bodnar
23 avril 2024 à 13:53

Un hacker éthique a découvert de nombreuses failles de cybersécurité sur Wizz App, une application pointée du doigt pour des affaires de sextorsion. Ses recherches incluent des captures de discussions privées.

Webinar: Learn Proactive Supply Chain Threat Hunting Techniques

✇The Hacker News
Par : [email protected] (The Hacker News)
23 avril 2024 à 13:28
In the high-stakes world of cybersecurity, the battleground has shifted. Supply chain attacks have emerged as a potent threat, exploiting the intricate web of interconnected systems and third-party dependencies to breach even the most formidable defenses. But what if you could turn the tables and proactively hunt these threats before they wreak havoc? We invite you to join us for an

Police Chiefs Call for Solutions to Access Encrypted Data in Serious Crime Cases

✇The Hacker News
Par : [email protected] (The Hacker News)
23 avril 2024 à 12:45
European Police Chiefs said that the complementary partnership between law enforcement agencies and the technology industry is at risk due to end-to-end encryption (E2EE). They called on the industry and governments to take urgent action to ensure public safety across social media platforms. "Privacy measures currently being rolled out, such as end-to-end encryption, will stop tech companies

Unmasking the True Cost of Cyberattacks: Beyond Ransom and Recovery

✇The Hacker News
Par : [email protected] (The Hacker News)
23 avril 2024 à 12:22
Cybersecurity breaches can be devastating for both individuals and businesses alike. While many people tend to focus on understanding how and why they were targeted by such breaches, there's a larger, more pressing question: What is the true financial impact of a cyberattack? According to research by Cybersecurity Ventures, the global cost of cybercrime is projected to reach

German Authorities Issue Arrest Warrants for Three Suspected Chinese Spies

✇The Hacker News
Par : [email protected] (The Hacker News)
23 avril 2024 à 12:16
German authorities said they have issued arrest warrants against three citizens on suspicion of spying for China. The full names of the defendants were not disclosed by the Office of the Federal Prosecutor (aka Generalbundesanwalt), but it includes Herwig F., Ina F., and Thomas R. "The suspects are strongly suspected of working for a Chinese secret service since an unspecified

U.S. Imposes Visa Restrictions on 13 Linked to Commercial Spyware Misuse

✇The Hacker News
Par : [email protected] (The Hacker News)
23 avril 2024 à 08:43
The U.S. Department of State on Monday said it's taking steps to impose visa restrictions on 13 individuals who are allegedly involved in the development and sale of commercial spyware or who are immediately family members of those involved in such businesses. "These individuals have facilitated or derived financial benefit from the misuse of this technology, which

Des hackers extorquent des pédophiles pris au piège d’un simple logiciel malveillant

✇Cyberguerre
Par : Bogdan Bodnar
22 avril 2024 à 18:27

Des chercheurs en cybersécurité ont détecté la copie malveillante d'une plateforme connue pour être fréquentée par des pédophiles. Le site clone installait un logiciel malveillant qui demandait une rançon à la cible.

GitLab affected by GitHub-style CDN flaw allowing malware hosting

✇BleepingComputer
Par : Ax Sharma
22 avril 2024 à 17:05
BleepingComputer recently reported how a GitHub flaw, or possibly a design decision, is being abused by threat actors to distribute malware using URLs associated with Microsoft repositories, making the files appear trustworthy. It turns out, GitLab is also affected by this issue and could be abused in a similar fashion. [...]

Russia's APT28 Exploited Windows Print Spooler Flaw to Deploy 'GooseEgg' Malware

✇The Hacker News
Par : [email protected] (The Hacker News)
23 avril 2024 à 06:23
The Russia-linked nation-state threat actor tracked as APT28 weaponized a security flaw in the Microsoft Windows Print Spooler component to deliver a previously unknown custom malware called GooseEgg. The post-compromise tool, which is said to have been used since at least June 2020 and possibly as early as April 2019, leveraged a now-patched flaw that allowed for

ToddyCat Hacker Group Uses Advanced Tools for Industrial-Scale Data Theft

✇The Hacker News
Par : [email protected] (The Hacker News)
22 avril 2024 à 17:11
The threat actor known as ToddyCat has been observed using a wide range of tools to retain access to compromised environments and steal valuable data. Russian cybersecurity firm Kaspersky characterized the adversary as relying on various programs to harvest data on an "industrial scale" from primarily governmental organizations, some of them defense related, located in

À partir d’avant-hierSecurité

Pentera's 2024 Report Reveals Hundreds of Security Events per Week, Highlighting the Criticality of Continuous Validation

✇The Hacker News
Par : [email protected] (The Hacker News)
22 avril 2024 à 13:30
Over the past two years, a shocking 51% of organizations surveyed in a leading industry report have been compromised by a cyberattack. Yes, over half.  And this, in a world where enterprises deploy an average of 53 different security solutions to safeguard their digital domain.  Alarming? Absolutely. A recent survey of CISOs and CIOs, commissioned by Pentera and

MITRE Corporation Breached by Nation-State Hackers Exploiting Ivanti Flaws

✇The Hacker News
Par : [email protected] (The Hacker News)
22 avril 2024 à 13:05
The MITRE Corporation revealed that it was the target of a nation-state cyber attack that exploited two zero-day flaws in Ivanti Connect Secure appliances starting in January 2024. The intrusion led to the compromise of its Networked Experimentation, Research, and Virtualization Environment (NERVE), an unclassified research and prototyping network. The unknown adversary "performed reconnaissance

Ransomware Double-Dip: Re-Victimization in Cyber Extortion

✇The Hacker News
Par : [email protected] (The Hacker News)
22 avril 2024 à 12:22
Between crossovers - Do threat actors play dirty or desperate? In our dataset of over 11,000 victim organizations that have experienced a Cyber Extortion / Ransomware attack, we noticed that some victims re-occur. Consequently, the question arises why we observe a re-victimization and whether or not this is an actual second attack, an affiliate crossover (meaning an affiliate has gone to

❌
❌