[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Regulator Stress Test Highlights Cyber Insurance Concerns
Bank of England warns greater cross-industry consensus is needed
> New Cheats May Emerge After Riot Games Hack
Ransomware actors stole source code, company reveals
> Middleburg
La ville de Middleburg a été victime d'une cyberattaque fin janvier. Un employé a eu son compte Outlook piraté par un acteur malveillant ayant tenté de se faire passer pour un fournisseur demandant un paiement à la ville. 102 personnes ont été contactées car leurs informations personnelles ont pu êt...
> Just Half of Firms Have Sufficient Cybersecurity Budget
One in 10 can only protect critical assets, says Neustar
> Claro
L'opérateur téléphonique Claro a été victime d'une cyberattaque de type ransomware qui a entraîné des activités anormales dans certains de ses systèmes depuis le 25 janvier. La société a isolé et éteint les équipements affectés comme mesure de précaution et travaille à rétablir les services. Claro a...
> CannonDesign
La société d'architecture et d'ingénierie Cannon Corporation, également connue sous le nom de CannonDesign, a été victime d'une cyberattaque début 2023, entraînant la violation des données de plus de 13 000 clients. Les hackers ont eu accès à des informations personnelles sensibles, notamment des no...
> DragonSpark Hackers Evade Detection With SparkRAT and Golang
The new string of attacks mostly targeted East Asian organizations
> FBI Confirms Lazarus Group Was Behind $100m Harmony Hack
The North Korean cyber actors laundered over $60m worth of Ethereum stolen during the heist
> Panorama de la cybermenace 2022 (24 janvier 2023)
English version : 🇬🇧 Dans son « Panorama de la cybermenace 2022 », l’Agence nationale de la sécurité des systèmes d’information (ANSSI) fait état des grandes tendances de la menace cyber ayant rythmé 2022. Les tendances observées l’année précédente se sont confirmées et ce malgré...
> #DataPrivacyWeek: Consumers Already Concerned About AI’s Impact on Data Privacy
There is significant disconnect between consumer expectations and organizations’ approaches around privacy, a new report has found
> Microsoft to Block Excel XLL Add-Ins to Stop Malware Delivery
The tech giant confirmed it intends to implement these plans by March 2023
> CVE-2023-24068 && CVE-2023-24069: Abusing Signal Desktop Client for fun and for Espionage
Identification While using signal, it was observed that the preview of an image was still visible even after having deleted the image because the image had been “replied” to. After looking through multiple files, the culprit directory was identified. C:\Users\foo\AppData\Roaming\Signal\attachments.n...
> Gartner: Zero Trust Will Not Mitigate Over Half of Attacks
Analyst claims only 10% of firms will have a program in place by 2026
> #DataPrivacyWeek: ICO Offers Data Protection Advice to SMBs
Regulator also has words of caution for emerging tech providers
> Harnessing the eBPF Verifier
During my internship at Trail of Bits, I prototyped a harness that improves the testability of the eBPF verifier, simplifying the testing of eBPF programs. My eBPF harness runs in user space, independently of any locally running kernel, and thus opens the door to testing of eBPF programs across diff...
> Record-Breaking Year for DDoS Attacks Targeting Russia
ISP Rostelecom says longest attack lasted three months
> Hackers Deploy Open-Source Tool Sliver C2, Replacing Cobalt Strike, Metasploit
Sliver is gaining popularity due to its modular capabilities and cross-platform support
> Introducing RPC Investigator
A new tool for Windows RPC research. Trail of Bits is releasing a new tool for exploring RPC clients and servers on Windows. RPC Investigator is a .NET application that builds on the NtApiDotNet platform for enumerating, decompiling/parsing and communicating with arbitrary RPC servers. We’ve added v...
> Two Vulnerabilities Found in Galaxy App Store
Both issues reportedly affected only Samsung devices running Android 12 and below
> Most Federal Agencies Ignored GAO's Cybersecurity Recommendations
Out of the 335 public recommendations issued since 2010, 190 still needed to be implemented