❌

Vue normale

Il y a de nouveaux articles disponibles, cliquez pour rafraîchir la page.
Aujourd’hui — 18 juin 2025Securité

Zimperium alerte sur le malware GodFather qui détourne les applis bancaires grâce à la virtualisation furtive

✇UnderNews
Par : UnderNews
18 juin 2025 à 15:30

zLabs, l’équipe de recherche de Zimperium, alerte sur une nouvelle évolution du malware GodFather. Celui-ci utilise désormais une technique avancée de virtualisation embarquée, lui permettant de détourner les applications mobiles bancaires et de cryptomonnaies, directement depuis les smartphones des victimes. Indétectables à l’œil nu, ces attaques redéfinissent les règles de la sécurité mobile. Tribune – […]

The post Zimperium alerte sur le malware GodFather qui détourne les applis bancaires grâce à la virtualisation furtive first appeared on UnderNews.

ChainLink Phishing: How Trusted Domains Become Threat Vectors

✇BleepingComputer
Par : Sponsored by Keep Aware
18 juin 2025 à 16:02
Phishing has evolved—and trust is the new attack vector. ChainLink Phishing uses real platforms like Google Drive & Dropbox to sneak past filters and steal credentials in the browser. Watch Keep Aware's on-demand webinar to see how these attacks work—and how to stop them. [...]

Instagram ads mimicking BMO, EQ Banks are finance scams

✇BleepingComputer
Par : Ax Sharma
17 juin 2025 à 18:52
Instagram ads impersonating financial institutions like Bank of Montreal (BMO) and EQ Bank (Equitable Bank) are being used to target Canadian consumers with phishing scams and investment fraud. Some ads use AI-powered deepfake videos in an attempt to collect your personal information, while others drive traffic to phishing pages. [...]

FedRAMP at Startup Speed: Lessons Learned

✇The Hacker News
Par : info@thehackernews.com (The Hacker News)
18 juin 2025 à 13:00
For organizations eyeing the federal market, FedRAMP can feel like a gated fortress. With strict compliance requirements and a notoriously long runway, many companies assume the path to authorization is reserved for the well-resourced enterprise. But that’s changing. In this post, we break down how fast-moving startups can realistically achieve FedRAMP Moderate authorization without derailing

Water Curse Employs 76 GitHub Accounts to Deliver Multi-Stage Malware Campaign

✇The Hacker News
Par : info@thehackernews.com (The Hacker News)
18 juin 2025 à 12:47
Cybersecurity researchers have exposed a previously unknown threat actor known as Water Curse that relies on weaponized GitHub repositories to deliver multi-stage malware. "The malware enables data exfiltration (including credentials, browser data, and session tokens), remote access, and long-term persistence on infected systems," Trend Micro researchers Jovit Samaniego, Aira Marcelo, Mohamed

Cyberattaque massive sur Taïwan : HoldingHands menace la sécurité nationale

✇Cyberguerre
Par : Amine Baba Aissa
18 juin 2025 à 12:39

Des chercheurs en cybersécurité révèlent que Taïwan subit depuis janvier 2025 une offensive numérique d’ampleur inédite, orchestrée par le groupe HoldingHands. Cette opération d’espionnage et de sabotage cible sans relâche les administrations, entreprises et infrastructures stratégiques de l’île.

CISA Warns of Active Exploitation of Linux Kernel Privilege Escalation Vulnerability

✇The Hacker News
Par : info@thehackernews.com (The Hacker News)
18 juin 2025 à 08:43
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday placed a security flaw impacting the Linux kernel in its Known Exploited Vulnerabilities (KEV) catalog, stating it has been actively exploited in the wild. The vulnerability, CVE-2023-0386 (CVSS score: 7.8), is an improper ownership bug in the Linux kernel that could be exploited to escalate privileges on susceptible

Ex-CIA Analyst Sentenced to 37 Months for Leaking Top Secret National Defense Documents

✇The Hacker News
Par : info@thehackernews.com (The Hacker News)
18 juin 2025 à 08:43
A former U.S. Central Intelligence Agency (CIA) analyst has been sentenced to little more than three years in prison for unlawfully retaining and transmitting top secret National Defense Information (NDI) to people who were not entitled to receive them and for attempting to cover up the malicious activity. Asif William Rahman, 34, of Vienna, has been sentenced today to 37 months on charges of

Veeam Patches CVE-2025-23121: Critical RCE Bug Rated 9.9 CVSS in Backup & Replication

✇The Hacker News
Par : info@thehackernews.com (The Hacker News)
18 juin 2025 à 07:49
Veeam has rolled out patches to contain a critical security flaw impacting its Backup & Replication software that could result in remote code execution under certain conditions. The security defect, tracked as CVE-2025-23121, carries a CVSS score of 9.9 out of a maximum of 10.0. "A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user," the

Iran Slows Internet to Prevent Cyber Attacks Amid Escalating Regional Conflict

✇The Hacker News
Par : info@thehackernews.com (The Hacker News)
18 juin 2025 à 07:35
Iran has throttled internet access in the country in a purported attempt to hamper Israel's ability to conduct covert cyber operations, days after the latter launched an unprecedented attack on the country, escalating geopolitical tensions in the region. Fatemeh Mohajerani, the spokesperson of the Iranian Government, and the Iranian Cyber Police, FATA, said the internet slowdown was designed to

Google Chrome Zero-Day CVE-2025-2783 Exploited by TaxOff to Deploy Trinper Backdoor

✇The Hacker News
Par : info@thehackernews.com (The Hacker News)
17 juin 2025 à 21:16
A now-patched security flaw in Google Chrome was exploited as a zero-day by a threat actor known as TaxOff to deploy a backdoor codenamed Trinper. The attack, observed in mid-March 2025 by Positive Technologies, involved the use of a sandbox escape vulnerability tracked as CVE-2025-2783 (CVSS score: 8.3). Google addressed the flaw later that month after Kaspersky reported in-the-wild

LangSmith Bug Could Expose OpenAI Keys and User Data via Malicious Agents

✇The Hacker News
Par : info@thehackernews.com (The Hacker News)
17 juin 2025 à 19:33
Cybersecurity researchers have disclosed a now-patched security flaw in LangChain's LangSmith platform that could be exploited to capture sensitive data, including API keys and user prompts. The vulnerability, which carries a CVSS score of 8.8 out of a maximum of 10.0, has been codenamed AgentSmith by Noma Security. LangSmith is an observability and evaluation platform that allows users to

Silver Fox APT Targets Taiwan with Complex Gh0stCringe and HoldingHands RAT Malware

✇The Hacker News
Par : info@thehackernews.com (The Hacker News)
17 juin 2025 à 15:28
Cybersecurity researchers are warning of a new phishing campaign that's targeting users in Taiwan with malware families such as HoldingHands RAT and Gh0stCringe. The activity is part of a broader campaign that delivered the Winos 4.0 malware framework earlier this January by sending phishing messages impersonating Taiwan's National Taxation Bureau, Fortinet FortiGuard Labs said in a report

Google Warns of Scattered Spider Attacks Targeting IT Support Teams at U.S. Insurance Firms

✇The Hacker News
Par : info@thehackernews.com (The Hacker News)
17 juin 2025 à 14:53
The notorious cybercrime group known as Scattered Spider (aka UNC3944) that recently targeted various U.K. and U.S. retailers has begun to target major insurance companies, according to Google Threat Intelligence Group (GTIG). "Google Threat Intelligence Group is now aware of multiple intrusions in the U.S. which bear all the hallmarks of Scattered Spider activity," John Hultquist, chief analyst

❌
❌