[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Cyber-Incident Causes System Failures at Canadian Children's Hospital
The ongoing incident has impacted clinical and corporate systems, as well as some hospital phone lines and webpages
> US Most Impacted by Data Breaches in the Financial Industry in 2022
While 57% of these breaches were attributed to different types of malware, ATM skimming still accounted for 6.5% of all attacks targeting the financial sector
> What child is this?
A Primer on Process Reparenting in Windows. Process reparenting is a technique used in Microsoft Windows to create a child process under a different parent process than the one making the call to CreateProcess. Malicious actors can use this technique to evade security products or break process ances...
> UK Security Agency Wants Fresh Approach to Combat Phishing
NCSC says "blame and fear" won’t work
> Adult Google Ad Fraud Campaign Garnered Millions of Impressions
Fraudster used "popunders" and obfuscation to generate cash
> Maschinenring Freising
Le Maschinenring Freising a été victime d'une cyberattaque, mais s'en est maintenant remis. Les membres sont satisfaits, mais il y a eu aussi des critiques de la part des responsables. Le système informatique a été paralysé pendant un mois, mais la plupart des données ont été récupérées. Le coût de...
> Godfather Trojan Targets 400 Financial Services Firms
Mobile banking malware designed to steal bank and crypto credentials
> Organizations Warned of New Attack Vector in Amazon Web Services
Researchers warned that threat actors could potentially exploit Elastic IP transfer and compromise an IP address
> Connexus
L'association de logement Connexus a confirmé une cyberattaque impliquant un accès non autorisé à ses systèmes, selon un message publié sur leur page Facebook le 18 décembre. En réaction, Connexus a déconnecté ses systèmes pour protéger les données personnelles des utilisateurs et travaille avec des...
> UK Privacy Regulator Names and Shames Breached Firms
ICO publishes detailed list of complaints and investigations
> Fortnite Dev to Pay $520m in Record-Breaking Settlement
FTC reveals gaming firm's privacy violations and design tricks
> Multiples vulnérabilités dans AMI MegaRAC (16 décembre 2022)
Le 05 décembre 2022, trois vulnérabilités respectivement identifiées par les numéros CVE-2022-40259, CVE-2022-40242 et CVE-2022-2827 ont été signalées dans la solution d’administration à distance MegaRAC de l’éditeur AMI. La solution MegaRAC s’appuie sur un BMC (Baseboard Management Controller) :...
> Ukraine's Delta Military Intel System Hit by Attacks
Phishing campaign spotted by CERT-UA
> Ransomware Groups to Increase Zero-Day Exploit-Based Access Methods in the Future
Trend Micro’s latest research paper analyzed ways in which ransomware groups could evolve to stay on top of strengthened cyber-protection measures
> TikTok is a National Security Risk, Not A Privacy One
An analysis of the threat posed by TikTok and why we need to weigh our options carefully.
> Meta Takes Down Over 200 Covert Influence Operations Since 2017
The most common location for influence operations was Russia, according to Meta
> Mobile App Users at Risk as API Keys of Email Marketing Services Exposed
Leaked API keys allow threat actors to perform a variety of unauthorized actions
> How I gave ManticoreUI a makeover
During my internship at Trail of Bits, I explored the effectiveness of symbolic execution for finding vulnerabilities in native applications ranging from CTF challenges to popular open source libraries like image parsers, focusing on finding ways to enhance ManticoreUI. It is a powerful tool that im...
> NIST to Scrap SHA-1 Algorithm by 2030
The agency said it will stop using SHA-1 in its last remaining specified protocols by December 31 2030
> API Vulnerabilities Discovered in LEGO Marketplace
The vulnerabilities, which are now fixed, could have put sensitive customer data at risk