Regulator also has words of caution for emerging tech providers
ISP Rostelecom says longest attack lasted three months
English version : 🇬🇧 Dans son « Panorama de la cybermenace 2022 », l’Agence nationale de la sécurité des systèmes d’information (ANSSI) fait état des grandes tendances de la menace cyber ayant rythmé 2022. Les tendances observées l’année précédente se sont confirmées et ce malgré...
Sliver is gaining popularity due to its modular capabilities and cross-platform support
Both issues reportedly affected only Samsung devices running Android 12 and below
Identification While using signal, it was observed that the preview of an image was still visible even after having deleted the image because the image had been “replied” to. After looking through multiple files, the culprit directory was identified.
C:\Users\foo\AppData\Roaming\Signal\attachments.n...
Out of the 335 public recommendations issued since 2010, 190 still needed to be implemented
Vastflux operation injected obfuscated JavaScript into ads
During my internship at Trail of Bits, I prototyped a harness that improves the testability of the eBPF verifier, simplifying the testing of eBPF programs. My eBPF harness runs in user space, independently of any locally running kernel, and thus opens the door to testing of eBPF programs across diff...
Compromise impacts developer's ability to release updates
NCSC report warns of surging threat to the third sector
A new tool for Windows RPC research. Trail of Bits is releasing a new tool for exploring RPC clients and servers on Windows. RPC Investigator is a .NET application that builds on the NtApiDotNet platform for enumerating, decompiling/parsing and communicating with arbitrary RPC servers. We’ve added v...
The case raised disagreements between Ireland's DPC and the European Data Protection Board
Thanks to technical “workarounds,” Royal Mail has been able to resume “limited” export services one week after being hit by cyber-attack
AerCap Holdings, acteur majeur dans le secteur de la location d'avions, a été victime d'une attaque par ransomware le 17 janvier, mais a affirmé avoir le plein contrôle de ses systèmes informatiques sans perte financière immédiate. La société, partiellement détenue par General Electric, qui a vu sa...
Researchers see another sophisticated attempt to obfuscate links
Carrier says attack began in November 2022
Des hackers ont réussi à s'introduire dans le système informatique du département de l'éducation de Bâle, en Suisse, pour voler environ 1,2 téraoctet de données. Les hackers ont tenté d'extorquer de l'argent en échange de la restitution des données, mais le département n'a pas cédé à leur demande. L...
Payments giant says attacks happened in early December
The new feature can infiltrate WiFi routers and undertake DNS hijacking