La société Prophete, fabricant de vélos, a été victime d'une cyberattaque le 25 novembre 2022, qui a paralysé sa production, sa facturation et ses livraisons pendant environ trois semaines, contribuant ainsi à sa faillite. L'attaque a été immédiatement signalée au Landeskriminalamt (police criminell...
Common misconfigurations of resource-based policies and how they can be abused.
How to take advantage of misconfigured AWS ECR private repositories.
The app used as part of the campaign was a trojanized version of SoftVPN or OpenVPN
The apps are no longer available on the Play Store, but can be found in third-party stores
This small series of two blog posts covers an entire vulnerability chain to go from unauthenticated user to full remote code execution against Intel's Data Center Manager (up to version 4.1.1.45749).The chain's first vulnerability bypasses DCM's entire authentication process.
The company reportedly learned of unauthorized access to one of its systems on November 14
UK best practice security framework to offer new guidance
English version : 🇬🇧 De nombreux cadres réglementaires étrangers imposent l’utilisation de logiciels spécifiques aux entreprises présentes sur leur territoire. Si leur intégration ne pose généralement pas de problèmes techniques particuliers, ces logiciels peuvent être utilisés par des attaquants...
Over 100 admins and users of iSpoof site arrested
Parliament had declared Russia a state-sponsor of terrorism
Un 'incident cybernétique' a touché environ 80 entreprises au Royaume-Uni, perturbant les transactions immobilières et empêchant l'accès aux systèmes. Le prestataire de services d'infrastructure spécialisé dans le secteur juridique, CTS, travaille avec des experts en cyberforensique pour résoudre le...
The cybersecurity monitoring firm offers 18 recommendations on security controls to help organizations anticipate tougher cybersecurity regulations
They expand the framework's scope by adding new resources and tools to support SLTT partners
Le fournisseur de soins de santé New-Yorkais Northeast Orthopedics and Sports Medicine a été victime d'une cyberattaque qui a compromis les données personnelles de plus de 177 000 personnes, dont des patients, révélant des informations sensibles telles que les numéros de sécurité sociale, les inform...
The operation relied on many internet services, including Telegram, Twitter, YouTube and others
Threat actors obtained admin access in two hours and then deployed ransomware in under 12 hours
As more organizations move to hardware tokens and password-less auth (e.g. Yubi-keys, Windows Hello for Business,…) attackers will look for other ways to to trick users to gain access to their data.
One novel phishing technique is by using the OAuth2 Device Authorization Grant.
This post describes h...
Another dump of chat records provides insight into threat group
Information commissioner wants to avoid "money-go-round" of government fines