Crime reports dating back 15 years are made public
Ukrainian targets are on the receiving end of RansomBoggs variant
DotHouse Health experienced a data breach due to suspicious activity on their computer systems, potentially impacting patient information. The breach occurred between October 31, 2022, and November 27, 2022. It was claimed under the Alphv/BlackCat brand on July 26th, 2023.
International operation lasted four months
Threat actors could exploit the flaw to take complete control of the ConnectWise platform
La société Prophete, fabricant de vélos, a été victime d'une cyberattaque le 25 novembre 2022, qui a paralysé sa production, sa facturation et ses livraisons pendant environ trois semaines, contribuant ainsi à sa faillite. L'attaque a été immédiatement signalée au Landeskriminalamt (police criminell...
The high-severity vulnerability refers to a heap buffer overflow in the GPU component
The discovered vulnerabilities could have been exploited to target almost 1000 systems
Common misconfigurations of resource-based policies and how they can be abused.
Shared devices can present corporate security risk
Shared repository is also a hidden source of malware
How to take advantage of misconfigured AWS ECR private repositories.
Almost 1000 arrested in Haechi III operation
The app used as part of the campaign was a trojanized version of SoftVPN or OpenVPN
This small series of two blog posts covers an entire vulnerability chain to go from unauthenticated user to full remote code execution against Intel's Data Center Manager (up to version 4.1.1.45749).The chain's first vulnerability bypasses DCM's entire authentication process.
The apps are no longer available on the Play Store, but can be found in third-party stores
The company reportedly learned of unauthorized access to one of its systems on November 14
English version : 🇬🇧 De nombreux cadres réglementaires étrangers imposent l’utilisation de logiciels spécifiques aux entreprises présentes sur leur territoire. Si leur intégration ne pose généralement pas de problèmes techniques particuliers, ces logiciels peuvent être utilisés par des attaquants...
UK best practice security framework to offer new guidance
Over 100 admins and users of iSpoof site arrested