[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Phishers Targeted Financial Services Most During H1 2022
The report found Microsoft was the most impersonated brand overall
> Poor Training and Communications Hindering Cybersecurity Efforts
Over a third (36%) of employees consider security training boring
> CVE-2022-22252: Huawei HWLog Vmalloc Use-After-Free
In this advisory we are disclosing a vulnerability in the Huawei log device that allows any unprivileged process to disclose sensitive information from the kernel. Huawei kernels are shipped with custom log devices (/dev/hwlog_dubai, /dev/hwlog_exception and /dev/hwlog_jank) that facilitate better s...
> Uber Settles 2016 Hacking Case With DoJ
The ride-sharing giant has agreed to help the DoJ prosecute its former chief security officer in exchange for escaping prosecution itself
> Global Malware Volumes Increase for First Time in Three Years
Ransomware dips worldwide but surges in Europe
> CVE-2022-22253: Huawei HWLog Memory Corruption Via Race Condition
In this advisory we are disclosing a memory corruption vulnerability in the Huawei log device that allows any unprivileged process to trigger a kernel crash and reboot the device. Huawei kernels are shipped with custom log devices (/dev/hwlog_dubai, /dev/hwlog_exception and /dev/hwlog_jank) that fac...
> Lockbit Ramps Up Attacks on Public Sector
Ransomware gang hits Canadian town and Italian government
> T-Mobile to Pay $350m Settlement in Breach Case
Tens of millions were impacted by 2021 incident
> WordPress Transposh: Exploiting a Blind SQL Injection via XSS
Introduction You probably have read about my recent swamp of CVEs affecting a WordPress plugin called Transposh Translation Filter, which resulted in more than $30,000 in bounties: [CVE-2021-24910] Transposh <= 1.0.7 “tp_tp” Unauthenticated Reflected Cross-Site Scripting [CVE-2021-24911] Transpos...
> NIST Updates Healthcare Security Guidance
The updated document provides more actionable measures for healthcare organizations
> Indian Insurance Portal Policybazaar Suffers Breach
The company claims that "no significant customer data was exposed" in the incident
> Eglo
Dans la nuit du 18 juillet 2022, le fabricant tyrolien de luminaires Eglo, basé à Pill, a été frappé par une attaque ransomware déclenchée par un groupe ayant acheté sur le darknet un mot de passe Citrix volé ; l'assaillant était en réalité entré dans le réseau dès fin juin et avait silencieusement...
> NCSC Tests Cyber Advisor Program
The Cyber Advisor service will certify individual consultants who can provide practical advice to help secure businesses
> UK Seizes Nearly $27m in Crypto-Assets
Investigators trumpet money laundering crackdown
> Tokyo MOU Port State Control authority
L'autorité de contrôle des ports de Tokyo MOU a révélé que ses données ont été compromises pendant des mois après avoir été victime d'une cyberattaque en juillet dernier. Cette attaque a causé des problèmes avec les données de contrôle des navires, ce qui a pu créer des difficultés pour la prise de...
> Medical Device Maker to Pay $13m in False Claims Case
Biotronik accused of engaging in kickback scheme
> Cyber-Attacks on Port of LA Double
Surge in threats coming from eastern Europe
> G.I.E. Vignerons du Sud-Ouest
Une coopérative agricole a été victime d'une cyberattaque en juillet 2022, plusieurs de ses machines ont été infectées par un logiciel malveillant. Le procès de l'auteur présumé de ces attaques, Ilia D., s'ouvre le 11 février devant la 13e chambre correctionnelle du tribunal judiciaire de Paris. Les...
> Malware-as-a-Service Creating New Cybercrime Ecosystem
It is easier than ever to launch cyber-attacks due to the rise of malware-as-a-service
> Google Brings Back Android App Permissions Section to the Play Store
The Android Developers team said it reversed the decision due to customer feedback