[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Zurich and Mondelez Reach NotPetya Settlement, but Cyber-Risk May Increase
The parties have mutually resolved the matter, but details of the settlement were not provided
> Bot Warning for Retailers Ahead of Busy Shopping Season
Automated threats accounted for 62% of attacks last year
> Everything you need to know about the OpenSSL 3.0.7 Patch (CVE-2022-3602 & CVE-2022-3786)
> UK Security Agency to Scan the Country for Bugs
NCSC wants to determine "the vulnerability of the UK"
> Threat Actor "OPERA1ER" Steals Millions from Banks and Telcos
More than 30 organizations compromised by off-the-shelf tools
> Satys
Le groupe aéronautique Satys, sous-traitant d'Airbus, a été victime d'une cyberattaque massive qui a nécessité la mise en place d'une cellule de crise et la restauration de ses systèmes informatiques. L'attaque a impliqué le ransomware Dagon, une évolution de MountLocker et de Quantum.
> US Hacker Group Indicted For Million-Dollar RICO Conspiracy
The group banded together to engage in a sophisticated cybercrime and tax fraud scheme
> Android Apps With a Million Downloads Led Users to Phishing Sites
Chrome tabs remained open in the background, even while the smartphone was locked
> Stranger Strings: An exploitable flaw in SQLite
Trail of Bits is publicly disclosing CVE-2022-35737, which affects applications that use the SQLite library API. CVE-2022-35737 was introduced in SQLite version 1.0.12 (released on October 17, 2000) and fixed in release 3.39.2 (released on July 21, 2022). CVE-2022-35737 is exploitable on 64-bit syst...
> Dropbox Suffers Breach, 130 GitHub Repositories Compromised
Dropbox believes the actors behind the attack are the same that targeted GitHub users in September
> Mobile Phishing Attacks on Government Staff Soar
Lookout report finds over-reliance on unmanaged devices
> San Diego Unified School District
Des données médicales d'étudiants de San Diego ont été compromises lors d'une cyberattaque en octobre. Les noms et informations médicales des étudiants ont été compromis. Les responsables ont rapidement sécurisé le réseau, lancé une enquête et informé les autorités. Des mesures de sécurité supplémen...
> Twitter Verified Status Users Flooded with Scams
Elon Musk’s arrival has opened the door for fraudsters
> OpenSSL Security Advisory Downgraded to High Severity
Experts still recommend patching affected systems
> SOMDIAA
Une cyberattaque sur ses systèmes d’informations mettant au ralenti les opérations comptables durant une période de trois semaines environ. En date du 31 décembre 2022, l’ensemble des opérations ont pu être faite normalement sans aucune conséquence sur la clôture de l’année 2022.
> A Third of Security Leaders Considering Quitting Their Current Role
Of those thinking of leaving their current organization, a third would do so within the next six months, according to the research
> Osaka Hospital Halts Services After Ransomware Attack
Emergency operations are continuing, but the hospital system failed and cannot be accessed
> PenTest Magazine Open Source Toolkit: ropci
Great news! An article about ropci is in the latest free issue of the Pentest Magazine! The article has a lot more info then my ropci blog post or the info on the ropci Github repo. Get your copy and check it out! It also has an article about Nuclei, one of my favorite tools. Cheers. Link: https://p...
> CISA Publishes Multi-Factor Authentication Guidelines to Tackle Phishing
The guidelines describe methods threat actors use to steal MFA credentials and how to defend against them
> LockBit Dominates Ransomware Campaigns in 2022: Deep Instinct
The figures come from the 2022 Interim Cyber Threat Report by Deep Instinct