[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Swiss Government Wants to Implement Mandatory Duty to Report Cyber-Attacks
The move would shed light on hackers and sound the alarm more widely on cyber-threats in the country.
> Threat Actors Use Malicious File Systems to Scale Crypto-Mining Operations
The hackers used PRoot to increase the scope of their operations to several Linux distributions
> Loot Public EBS Snapshots
How to find and take advantage of exposed EBS snapshots.
> Gen Z Internet Users "Normalize" Cybercrime - Report
EU-funded study finds concerning levels of risky behavior
> Russian Hackers Use Western Networks to Attack Ukraine
Lupovis used decoys to find out more about threat actors
> ChatGPT: Imagine you are a database server
After reading this post about ChatGPT imitating Linux, I wanted it to be a database server. Let’s try it out! Imagine you are a Microsoft SQL Server. I type commands, and you reply with the result, and no other information or descriptions. Just the result. Start with exec xp_cmdshell ‘whoami’; Wow,...
> Prolific Chinese Hackers Stole US COVID funds
Secret Service says discovery may be the tip of the iceberg
> Rackspace Admits Security Incident, Helps Customers Migrate to Microsoft 365 Accounts
The known impact was isolated to a portion of the firm's Hosted Exchange platform
> From Zero to Hero Part 2: From SQL Injection to RCE on Intel DCM (CVE-2022-21225)
Introduction You’ve probably enjoyed my previous post about bypassing Intel DCM’s authentication mechanism to gain unauthorized access. This gave us the lowest possible “Guest” privileges in the DCM console. The second part will now show you a possible way to get Remote Code Execution on the underly...
> 'Team Mysterious Bangladesh' Hackers Target Indian Education Entity
The hackers allegedly stole PII, including names, Aadhar numbers and IFSC codes
> Cyber Extortion Growing Exponentially in Africa, Middle East and China, Finds Orange
Businesses are getting better at preventing cyber incidents, Orange Cybedefense’s head of Security Research Center said
> Specialized Zero-Knowledge Proof failures
Zero-knowledge (ZK) proofs are useful cryptographic tools that have seen an explosion of interest in recent years, largely due to their applications to cryptocurrency. The fundamental idea of a ZK proof is that a person with a secret piece of information (a cryptographic key, for instance) can prove...
> Google Releases Chrome Emergency Fix For Ninth Zero-Day This Year
The flaw relates to a type confusion bug in the V8 JavaScript engine
> Manufacturers Struggle to Manage Cyber-Threats from New Tech Deployments
42% of UK manufacturers have been a victim of cybercrime in the past 12 months, according to new research
> DotHouse Health
DotHouse Health experienced a data breach due to suspicious activity on their computer systems, potentially impacting patient information. The breach occurred between October 31, 2022, and November 27, 2022. It was claimed under the Alphv/BlackCat brand on July 26th, 2023.
> Digital Giant ABB to Pay $315m in Bribery Case
Firm pleads guilty in major South Africa conspiracy
> Microsoft: Beware Russian Winter Cyber-Offensive
Ukraine's allies may be in the firing line for destructive attacks
> Prophete-Gruppe
La société Prophete, fabricant de vélos, a été victime d'une cyberattaque le 25 novembre 2022, qui a paralysé sa production, sa facturation et ses livraisons pendant environ trois semaines, contribuant ainsi à sa faillite. L'attaque a été immédiatement signalée au Landeskriminalamt (police criminell...
> French Hospital Halts Operations After Cyber-Attack
André-Mignot hospital shuts down computer systems
> Google Increases Android Security With Memory-Safe Programming Languages
The number of memory safety vulnerabilities in Android dropped from 223 in 2019 to 85 in 2022