Santos defended differential privacy against prominent researchers
Zero-knowledge (ZK) proofs are useful cryptographic tools that have seen an explosion of interest in recent years, largely due to their applications to cryptocurrency. The fundamental idea of a ZK proof is that a person with a secret piece of information (a cryptographic key, for instance) can prove...
Fourteen detained as part of Europol operation
The fine followed an inquiry into data processing by Meta in response to a major data breach
DotHouse Health experienced a data breach due to suspicious activity on their computer systems, potentially impacting patient information. The breach occurred between October 31, 2022, and November 27, 2022. It was claimed under the Alphv/BlackCat brand on July 26th, 2023.
Social media ads and accounts help to drive traffic
Data and credentials at risk in the vertical
La société Prophete, fabricant de vélos, a été victime d'une cyberattaque le 25 novembre 2022, qui a paralysé sa production, sa facturation et ses livraisons pendant environ trois semaines, contribuant ainsi à sa faillite. L'attaque a été immédiatement signalée au Landeskriminalamt (police criminell...
The E2EE feature was first spotted by mobile researcher Jane Manchun Wong earlier this month
New cluster of phishing domains registered using similar naming schemes discovered
Common misconfigurations of resource-based policies and how they can be abused.
The breach affected any account with the "Let others find you by your phone" option enabled
The cybersecurity arm of Orange Business Services (OBS) organized a launch event at its Lyon campus, in France, for its latest annual threat report
How to take advantage of misconfigured AWS ECR private repositories.
Crime reports dating back 15 years are made public
Ukrainian targets are on the receiving end of RansomBoggs variant
This small series of two blog posts covers an entire vulnerability chain to go from unauthenticated user to full remote code execution against Intel's Data Center Manager (up to version 4.1.1.45749).The chain's first vulnerability bypasses DCM's entire authentication process.
International operation lasted four months
Threat actors could exploit the flaw to take complete control of the ConnectWise platform
English version : 🇬🇧 De nombreux cadres réglementaires étrangers imposent l’utilisation de logiciels spécifiques aux entreprises présentes sur leur territoire. Si leur intégration ne pose généralement pas de problèmes techniques particuliers, ces logiciels peuvent être utilisés par des attaquants...