Cyberveillecurated by Decio
Nuage de tags
Mur d'images
Quotidien
Flux RSS
  • Flux RSS
  • Daily Feed
  • Weekly Feed
  • Monthly Feed
Filtres

Liens par page

  • 20 links
  • 50 links
  • 100 links

Filtres

Untagged links
page 101 / 206
4101 résultats taggé EN  ✕
Secret Backdoor Codes in Safe Locks https://www.404media.co/email/9c16c892-dc0f-4733-9b50-c0ba846dee47/
13/03/2024 14:42:43
QRCode
archive.org
thumbnail

Senator Ron Wyden has found that the DoD banned the use of such locks for U.S. government systems, but deliberately kept information about the backdoors from the public.

404media EN 2024 Safe backdoor US DoD Safe-Locks
GhostSec’s joint ransomware operation and evolution of their arsenal https://blog.talosintelligence.com/ghostsec-ghostlocker2-ransomware/
13/03/2024 13:24:21
QRCode
archive.org
thumbnail

Cisco Talos observed a surge in GhostSec, a hacking group’s malicious activities since this past year. GhostSec has evolved with a new GhostLocker 2.0 ransomware, a Golang variant of the GhostLocker ransomware.

talosintelligence EN 2024 GhostSec ransomware GhostLocker
World’s first major act to regulate AI passed by European lawmakers https://www.cnbc.com/2024/03/13/european-lawmakers-endorse-worlds-first-major-act-to-regulate-ai.html
13/03/2024 13:23:46
QRCode
archive.org
thumbnail

The European Union Parliament on Wednesday approved the world's first major set of regulatory ground rules to govern the mediatized artificial intelligence at the forefront of tech investment.

cnbc EN 2024 legal EU AI regulation
LockBit ransomware affiliate gets four years in jail, to pay $860k https://www.bleepingcomputer.com/news/security/lockbit-ransomware-affiliate-gets-four-years-in-jail-to-pay-860k/
13/03/2024 13:22:45
QRCode
archive.org
thumbnail

Russian-Canadian cybercriminal Mikhail Vasiliev has been sentenced to four years in prison by an Ontario court for his involvement in the LockBit ransomware operation.
#Canada #Case #Computer #Court #InfoSec #Legal #LockBit #Prison #Ransomware #Security

bleepingcomputer EN 2024 Prison LockBit Court Ransomware Case Legal Canada
Threat actors leverage document publishing sites for ongoing credential and session token theft https://blog.talosintelligence.com/threat-actors-leveraging-document-publishing-sites/
13/03/2024 13:18:16
QRCode
archive.org
thumbnail

Talos IR has responded to several recent incidents in which threat actors used legitimate digital document publishing sites such as Publuu and Marq to host phishing documents as part of ongoing credential and session harvesting attacks.

talosintelligence EN phishing legitimate digital-document Publuu Marq FlipSnack Issuu RelayTo
JetBrains vulnerability exploitation highlights debate over 'silent patching' https://therecord.media/jetbrains-rapid7-silent-patching-dispute
13/03/2024 09:22:58
QRCode
archive.org
thumbnail

Czech software giant JetBrains harshly criticized security company Rapid7 this week following a dispute over two recently-discovered vulnerabilities.

therecord.media EN 2024 JetBrains vulnerability exploitation silent-patching
Incognito Darknet Market Mass-Extorts Buyers, Sellers https://krebsonsecurity.com/2024/03/incognito-darknet-market-mass-extorts-buyers-sellers/
12/03/2024 18:32:19
QRCode
archive.org

Borrowing from the playbook of ransomware purveyors, the darknet narcotics bazaar Incognito Market has begun extorting all of its vendors and buyers, threatening to publish cryptocurrency transaction and chat records of users who refuse to pay a fee ranging from…

krebsonsecurity EN 2024 Incognito Darknet Market Mass-Extorts Buyers
Exploiting CVE-2024-21378 – Remote Code Execution in Microsoft Outlook https://www.netspi.com/blog/technical/red-team-operations/microsoft-outlook-remote-code-execution-cve-2024-21378/
11/03/2024 15:45:31
QRCode
archive.org

Learn how NetSPI discovered that Microsoft Outlook was vulnerable to authenticated remote code execution (RCE) via synced form objects.

netspi EN 2024 CVE-2024-21378 RCE vulnerability Outlook
Magnet Goblin Targets Publicly Facing Servers Using 1-Day Vulnerabilities https://research.checkpoint.com/2024/magnet-goblin-targets-publicly-facing-servers-using-1-day-vulnerabilities/
11/03/2024 11:26:35
QRCode
archive.org
thumbnail
  • Magnet Goblin is a financially motivated threat actor that quickly adopts and leverages 1-day vulnerabilities in public-facing services as an initial infection vector. At least in one case of Ivanti Connect Secure VPN (CVE-2024-21887), the exploit entered the group’s arsenal as fast as within 1 day after a POC for it was published.
  • Campaigns that we were able to attribute to this actor targeted Ivanti, Magento, Qlink Sense and possibly Apache ActiveMQ.
  • Analysis of the actor’s recent Ivanti Connect Secure VPN campaign revealed a novel Linux version of a malware called NerbianRAT, in addition to WARPWIRE, a JavaScript credential stealer.
  • The actor’s arsenal also includes MiniNerbian, a small Linux backdoor, and remote monitoring and management (RMM) tools for Windows like ScreenConnect and AnyDesk.
checkpoint EN 2024 Magnet-Goblin 1-day vulnerability Linux NerbianRAT
CISA forced to take two systems offline last month after Ivanti compromise https://therecord.media/cisa-takes-two-systems-offline-following-ivanti-compromise
08/03/2024 20:07:38
QRCode
archive.org
thumbnail

Hackers breached the systems of the Cybersecurity and Infrastructure Security Agency (CISA) in February through vulnerabilities in Ivanti products, officials said.

therecord.media EN 2024 CISA Ivanti Gateway comprimised offline CVE-2023-46805 CVE-2024-21887 CVE-2024-21893
Russian spies keep hacking into Microsoft in 'ongoing attack,' company says https://techcrunch.com/2024/03/08/microsoft-ongoing-cyberattack-russia-apt-29/
08/03/2024 16:21:02
QRCode
archive.org
thumbnail

Microsoft says the ongoing hacking is part of the Russian government's efforts to figure out what information Microsoft has on its hackers.

techcrunch EN 2024 cyberattack hacking microsoft MidnightBlizzard
Update on Microsoft Actions Following Attack by Nation State Actor Midnight Blizzard https://msrc.microsoft.com/blog/2024/03/update-on-microsoft-actions-following-attack-by-nation-state-actor-midnight-blizzard/
08/03/2024 15:29:21
QRCode
archive.org

Update on Microsoft Actions Following Attack by Nation State Actor Midnight Blizzard

Microsoft EN 2024 incident update Midnight MidnightBlizzard
Switzerland: Play ransomware leaked 65,000 government documents https://www.bleepingcomputer.com/news/security/switzerland-play-ransomware-leaked-65-000-government-documents/
07/03/2024 21:30:33
QRCode
archive.org
thumbnail

The National Cyber Security Centre (NCSC) of Switzerland has released a report on its analysis of a data breach following a ransomware attack on Xplain, disclosing that the incident impacted thousands of sensitive Federal government files.

bleepingcomputer EN 2024 Breach Data Ransomware Switzerland PLAY Government Xplain
Flipper Zero WiFi phishing attack can unlock and steal Tesla cars https://www.bleepingcomputer.com/news/security/flipper-zero-wifi-phishing-attack-can-unlock-and-steal-tesla-cars/
07/03/2024 21:27:47
QRCode
archive.org
thumbnail

An easy phishing attack using a Flipper Zero device can lead to compromising Tesla accounts, unlocking cars, and starting them. The attack works on the latest Tesla app, version 4.30.6, and Tesla software version 11.1 2024.2.7.

bleepingcomputer EN 2024 Automotive Car Flipper-Zero Phishing Tesla
The Anatomy of an ALPHA SPIDER Ransomware Attack https://www.crowdstrike.com/blog/anatomy-of-alpha-spider-ransomware/
07/03/2024 11:34:35
QRCode
archive.org
thumbnail

Read this blog on the anatomy of an ALPHA SPIDER ransomware attack to better understand how they operate and how to better protect your business.

crowdstrike EN 2024 Analysis ALPHA SPIDER ransomware
Microsoft AI engineer says Copilot Designer creates disturbing images https://www.cnbc.com/2024/03/06/microsoft-ai-engineer-says-copilot-designer-creates-disturbing-images.html
07/03/2024 08:28:50
QRCode
archive.org
thumbnail
  • Shane Jones, who’s worked at Microsoft for six years, has been testing the company’s AI image generator in his free time and told CNBC he is disturbed by his findings.
  • He’s warned Microsoft of the sexual and violent content that the product, Copilot Designer, is creating, but said the company isn’t taking appropriate action.
  • On Wednesday, Jones escalated the matter, sending letters to FTC Chair Lina Khan and to Microsoft’s board, which were viewed by CNBC.
cnbc EN 2024 Microsoft AI engineer Copilot Designer creates disturbing images
US sanctions founder of spyware maker Intellexa for targeting Americans | TechCrunch https://techcrunch.com/2024/03/05/us-sanctions-founder-of-spyware-maker-intellexa-for-targeting-americans/
06/03/2024 20:38:56
QRCode
archive.org
thumbnail

The U.S. government announced Tuesday sanctions against the founder of the notorious spyware company Intellexa and one of his business partners. This is

techcrunch EN 2024 cytrox intellexa predator sanctions spyware surveillance
Duvel says it has "more than enough" beer after ransomware attack https://www.bleepingcomputer.com/news/security/duvel-says-it-has-more-than-enough-beer-after-ransomware-attack/
06/03/2024 19:20:40
QRCode
archive.org
thumbnail

Duvel Moortgat Brewery was hit by a ransomware attack late last night, bringing to a halt the beer production in the company's bottling facilities

bleepingcomputer EN 2024 Beer Belgium Duvel Ransomware Service-Disruption
Multistage RA World Ransomware Uses Anti-AV Tactics, Exploits GPO https://www.trendmicro.com/en_us/research/24/c/multistage-ra-world-ransomware.html
06/03/2024 19:16:16
QRCode
archive.org
thumbnail

The Trend Micro threat hunting team came across an RA World attack involving multistage components designed to ensure maximum impact.

trendmicro EN 2024 Multistage RA Ransomware Anti-AV TTPs GPO
CISA, FBI, and MS-ISAC Release Advisory on Phobos Ransomware https://www.cisa.gov/news-events/alerts/2024/02/29/cisa-fbi-and-ms-isac-release-advisory-phobos-ransomware
06/03/2024 10:16:10
QRCode
archive.org

Today, CISA, the Federal Bureau of Investigation (FBI), and the Multi-State Information Sharing and Analysis Center (MS-ISAC) released a joint Cybersecurity Advisory (CSA), #StopRansomware: Phobos Ransomware, to disseminate known tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs), which are from incident response investigations tied to Phobos ransomware activity from as recently as February, 2024.

cisa EN 2024 Phobos Ransomware Critical-infrastructure StopRansomware:
page 101 / 206
4678 links
Shaarli - The personal, minimalist, super-fast, database free, bookmarking service par la communauté Shaarli - Theme by kalvn - Curated by Decio