Several cyberattacks against French diplomatic entities can be linked to the Nobelium intrusion set. Nobelium is an intrusion set active since at least October 2020, used against high-value targets, most likely for espionage purposes. Western diplomatic entities, such as embassies and Ministries...
🇬🇧 The following indicators of compromise are associated with the phishing campaigns by the Nobelium intrusion set described in the CERTFR-2024-CTI-006 report. These technical elements are provided to help detecting malicious activities in logs or inside live network trafic.
A Barracuda report found that 92% of organizations experienced an average of six credential compromises caused by email-based social engineering attacks in 2023
Recorded Future has found that Vortax, a purported virtual meeting software, is actually malicious software spreading three information stealers
In March, Trail of Bits engineers traveled to the vibrant (and only slightly chilly) city of Toronto to attend Real World Crypto 2024, a three-day event that hosted hundreds of brilliant minds in the field of cryptography. We also attended three associated events: the Real World Post-Quantum Cryptog...
VMware has disclosed critical vulnerabilities impacting its VMware vSphere and VMware Cloud Foundation products, with patches available for customers
Salt Security study finds 23% of organizations suffered a breach via production APIs in 2023
Le district scolaire de Hudson a été victime d'une cyberattaque qui a mis hors service son réseau et ses systèmes téléphoniques. Les détails de l'incident ne sont pas encore connus, mais les autorités ont déclaré qu'elles enquêtaient sur l'affaire. Les activités scolaires ont été perturbées en raiso...
Action1 reveals cybercriminals are increasingly targeting NGINX and Citrix load balancers
Los Angeles County Department of Public Health revealed a data breach impacting more than 200,000 individuals, with personal, medical and financial data potentially stolen
Fuzzing—a testing technique that tries to find bugs by repeatedly executing test cases and mutating them—has traditionally been used to detect segmentation faults, buffer overflows, and other memory corruption vulnerabilities that are detectable through crashes. But it has additional uses you may no...
Researchers from the Rochester Institute of Technology introduced a benchmark designed to assess large language models’ performance in cyber threat intelligence applications
Meta has delayed plans to train its LLMs using public content shared by adults on Facebook and Instagram following a request by Ireland’s data protection regulator
L'hôpital Agatharied, un hôpital allemand, a été victime d'une cyberattaque, ce qui a entraîné des problèmes d'accès aux données et des perturbations dans le fonctionnement de l'hôpital. Un comité de crise a été mis en place pour gérer les conséquences de l'attaque. Les détails sur les répercussions...
New report reveals China’s attempts to access leading AI research for military purposes
Ransomware attack on an NHS supplier forced the health service to rearrange 1000+ operations and appointments
Une cyberattaque a mis hors service la distribution de Rekah, une importante entreprise pharmaceutique israélienne produisant des médicaments, des cosmétiques, des vitamines et des suppléments nutritionnels. L'entreprise travaille à contenir l'incident, à localiser et à contrer l'attaque, et à resta...
Le système en ligne de MARINA (Maritime Industry Authority) a été compromis lors d'une cyberattaque. Les détails de l'incident ne sont pas encore disponibles, mais l'enquête est en cours. La portée et l'impact de la cyberattaque sur les données et les systèmes de MARINA restent à déterminer.
Australian Racing Club Ransomware Attack, 16 June 2024: The Victoria Racing Club has been hit by ransomware. Medusa group claiming credit for gaining access to the organisation's network stealing 128.1GB of data and demanding US$700,000.
The post Incident: Medusa ransomware group hits Victoria Racin...
Les autorités de l'État de l'Alabama enquêtent sur une cyberattaque contre le Département de l'éducation de l'État, qui a entraîné une violation de données et la perturbation de services. Les hackers ont pu accéder à des informations personnelles de étudiants et d'employés, mais les autorités travai...