Threat Intelligence : RansomLook facilite le suivi et la surveillance des groupes de ransomware grâce à l'agrégation des données sur une plateforme unique.
Le post RansomLook : l’agrégateur open source pour surveiller les ransomwares a été publié sur IT-Connect.
Itron confirmed a cyber incident but does not believe it is likely to have a material impact on the company
Understand where short-lived credentials reduce risk in agentic systems and where operational complexity requires stronger monitoring and governance controls.
The post Short-Lived Credentials in Agentic Systems: A Practical Trade-off Guide appeared first on Security Boulevard.
Medical device giant Medtronic disclosed last week that hackers breached its network and accessed data in "certain corporate IT systems." [...]
Several security issues were fixed in nginx.
Pillow could be made to crash if it opened a specially crafted file.
A Chinese national posed as a U.S. researcher, tricking NASA staff in a phishing campaign to steal sensitive data tied to defense software and exports. A Chinese national ran a spear-phishing campaign by posing as a U.S. researcher and tricked NASA employees into sharing sensitive information. The N...
HAProxy could be made to expose sensitive information over the network.
Little CMS could be made to crash or run programs if it opened a specially crafted ICC profile.
Hackers are impersonating Microsoft Teams help desk workers to trick victims into installing data-stealing malware, researchers found.
ClamAV could be made to crash if it opened a specially crafted HTML file.
Several security issues were fixed in strongSwan.
BrowserGate claims LinkedIn secretly fingerprints users via extensions and device data, sending encrypted results to third parties for tracking. BrowserGate is an investigation conducted by Fairlinked (https://browsergate.eu/), an association of commercial LinkedIn users, which documents what it des...
PackageKit could be made to install packages as the administrator.
Several security issues were fixed in NTFS-3G.
Dozens of browser extensions openly sell user data via privacy policy disclosures
Everything is dumb again. This week feels broken in a very familiar way. Old tricks are back. New tools are doing shady crap. Supply chains got hit. Fake help desks worked. Weird research showed how easy some attacks still are.
Most of it feels like stuff we should have fixed years ago. Bad extensio...
The initial vulnerability was exploited by Russia-linked APT28 in attacks against Ukraine and EU countries.
The post Incomplete Windows Patch Opens Door to Zero-Click Attacks appeared first on SecurityWeek.
The American technology giant provides water and energy monitoring and utility meters to hundreds of millions of homes and businesses.
Space Force awards 11 firms prototype deals to build orbital interceptors The United States Space Force (USSF) has awarded eleven companies contracts to develop space-based interceptors for President Trump's Golden Dome program, in agreements worth up to $3.2 billion.…