Cyberveillecurated by Decio
Nuage de tags
Mur d'images
Quotidien
Flux RSS
  • Flux RSS
  • Daily Feed
  • Weekly Feed
  • Monthly Feed
Filtres

Liens par page

  • 20 links
  • 50 links
  • 100 links

Filtres

Untagged links
page 196 / 251
Man stole nearly $18K in electricity in crypto mining operation https://www.dailymail.co.uk/news/article-11790153/Man-stole-nearly-18K-electricity-crypto-mining-operation.html
27/02/2023 21:17:31
QRCode
archive.org

Nadeam Nahas, 39, of Norwell, MA is facing charges of allegedly running a secret cryptocurrency mining operation out of a crawlspace at a middle school.

dailymail EN 2023 Massachusetts school cryptocurrency cryptomining stealing electricity
Hard-to-spot Mac crypto-mining threat, XMRig, hits Pirate Bay https://www.computerworld.com/article/3689149/hard-to-spot-mac-crypto-mining-threat-xmrig-hits-pirate-bay.html
27/02/2023 21:14:56
QRCode
archive.org
thumbnail

Jamf Threat Labs has spotted a family of Mac malware, XMRig, that spreads through pirated versions of Final Cut Pro, Photoshop and Logic Pro X.

computerworld EN 2023 apple macos jamf XMRig malware pirated FinalCutPro
PureCrypter targets government entities through Discord - Blog | Menlo Security https://www.menlosecurity.com/blog/purecrypter-targets-government-entities-through-discord/
27/02/2023 21:13:31
QRCode
archive.org
thumbnail

Menlo Labs has uncovered an unknown threat actor leveraging an evasive threat campaign distributed via Discord featuring the PureCrypter downloader and targeting government entities.

menlosecurity EN 2023 PureCrypter government Discord downloader analysis
Stanford University discloses data breach affecting PhD applicants https://www.bleepingcomputer.com/news/security/stanford-university-discloses-data-breach-affecting-phd-applicants/
27/02/2023 21:11:03
QRCode
archive.org
thumbnail

Stanford University disclosed a data breach after files containing Economics Ph.D. program admission information were downloaded from its website between December 2022 and January 2023.

bleepingcomputer EN 2023 Data-Breach Stanford University breach
Technical Advisory: Various Threat Actors Targeting ManageEngine Exploit CVE-2022-47966 https://businessinsights.bitdefender.com/tech-advisory-manageengine-cve-2022-47966
27/02/2023 21:05:45
QRCode
archive.org
thumbnail

Numerous threat actors were detected abusing a critical CVE-2022-47966 RCE vulnerability affecting products from ManageEngine. Read our advisory.

bitdefender EN 2023 CVE-2022-47966 RCE vulnerability ManageEngine advisory
TA569: SocGholish and Beyond https://www.proofpoint.com/us/blog/threat-insight/ta569-socgholish-and-beyond
27/02/2023 21:01:50
QRCode
archive.org
thumbnail
  • TA569 leverages many types of injections, traffic distribution systems (TDS), and payloads including, but not limited to, SocGholish.
  • In addition to serving as an initial access broker, these additional injects imply TA569 may be running a pay-per-install (PPI) service
  • TA569 may remove injections from compromised websites only to later re-add them to the same websites.
  • There are multiple opportunities for defense against TA569: educating users about the activity, using Proofpoint’s Emerging Threats ruleset to block the payload domains, and blocking .js files from executing in anything but a text editor.
proofpoint EN 2023 SocGholish threat-insight TA569 analysis
EXFILTRATOR-22 - An Emerging Post-Exploitation Framework https://www.cyfirma.com/outofband/exfiltrator-22-an-emerging-post-exploitation-framework/
27/02/2023 20:58:42
QRCode
archive.org
thumbnail

Executive Summary The CYFIRMA Research team has provided a preliminary analysis of a new post- exploitation framework called EXFILTRATOR-22 a.k.a....

cyfirma EN 2023 EXFILTRATOR-22 analysis post-exploitation framework
Cryptomonnaie: arrestation de deux Français suspectés d’avoir piraté la plateforme Platypus https://www.lematin.ch/story/arrestation-de-deux-francais-suspectes-davoir-pirate-la-plateforme-platypus-874095416130
27/02/2023 20:51:15
QRCode
archive.org
thumbnail

Les deux hommes interpellés mercredi en région parisienne, des frères de 18 et 20 ans, ont causé pour 9,5 millions de dollars de préjudice à la société américaine de finance décentralisée.

lematin FR 2023 Cryptomonnaie Platypus Français interpellés piraté cryptomonnaie
OneNote Embedded file abuse https://blog.nviso.eu/2023/02/27/onenote-embedded-file-abuse/
27/02/2023 13:41:35
QRCode
archive.org
thumbnail

In recent weeks OneNote has gotten a lot of media attention as threat actors are abusing the embedded files feature in OneNote in their phishing campaigns.
I first observed this OneNote abuse in the media via Didier’s post. This was later also mentioned in Xavier’s ISC diary and on the podcast. Later, in the beginning of February, the hacker news covered this as well.

nviso EN 2023 OneNote abuse technical report
When Low-Tech Hacks Cause High-Impact Breaches https://krebsonsecurity.com/2023/02/when-low-tech-hacks-cause-high-impact-breaches/
27/02/2023 11:52:55
QRCode
archive.org

Web hosting giant GoDaddy made headlines this month when it disclosed that a multi-year breach allowed intruders to steal company source code, siphon customer and employee login credentials, and foist malware on customer websites. Media coverage understandably focused on GoDaddy's…

krebsonsecurity EN 2023 GoDaddy Hacks intruders employee malware
Suspect in major data theft case linked to Dutch-subsidized cybersecurity org https://nltimes.nl/2023/02/24/suspect-major-data-theft-case-linked-dutch-subsidized-cybersecurity-org-report
26/02/2023 17:56:54
QRCode
archive.org
thumbnail

One of three hackers recently arrested for large-scale data theft was active for cyber security organization DIVD, sources told NOS. DIVD is a government-subsidized association of Dutch security experts that researches unsafe computer systems.

nltimes EN 2023 DIVD arrsted hackers Dutch NL
Dole Experiences Cybersecurity Incident https://www.dole.com/en/press/2023/dole-experiences-cybersecurity-incident
25/02/2023 16:46:17
QRCode
archive.org

Charlotte, NC – February 22, 2023– Dole plc (DOLE:NYSE) announced today that the company recently experienced a cybersecurity incident that has been identified as ransomware.

dole 2023 En incident Security-Incident ransomware
A year after Russia's invasion, the scope of cyberwar in Ukraine comes into focus https://cyberscoop.com/ukraine-russia-cyberwar-anniversary/
25/02/2023 10:33:15
QRCode
archive.org
thumbnail

The Ukraine war has inspired a defensive cyber effort that government officials and technology executives describe as unprecedented.

cyberscoop EN 2023 russia-ukraine-war cyber-effort unprecedented Ukraine cyberwar
Beware of macOS cryptojacking malware. https://www.jamf.com/blog/cryptojacking-macos-malware-discovered-by-jamf-threat-labs/
24/02/2023 23:10:33
QRCode
archive.org
thumbnail

You may have heard about the cryptojacking malware on macOS. Read about a new one spotted by Jamf Threat Labs.

jamf EN 2023 macOS cryptojacking malware
Valve bans 40,000 Dota 2 cheaters through ‘honeypot’ patch https://www.polygon.com/23610095/valve-dota-2-huge-ban-trap
24/02/2023 16:22:26
QRCode
archive.org
thumbnail

Valve fixed an exploit cheaters were used, and used that patch to catch them in the act. More than 40,000 people were banned for using the third-party cheat.

polygon 2023 EN Valve cheaters Dota anticheat
"Fobo" Trojan distributed as ChatGPT client for Windows https://www.kaspersky.com/blog/chatgpt-stealer-win-client/47274/
23/02/2023 09:00:46
QRCode
archive.org
thumbnail

Attackers are distributing malware disguised as a ChatGPT desktop client for Windows offering “precreated accounts”

kaspersky EN 2023 threats ChatGPT artificial-intelligence AI fraud scam OpenAI chatbot Trojan-stealer TrojanPSW
The Growing Threat of ChatGPT-Based Phishing Attacks https://blog.cyble.com/2023/02/22/the-growing-threat-of-chatgpt-based-phishing-attacks/
23/02/2023 08:53:07
QRCode
archive.org
thumbnail

Cyble analyzes how Threat Actors are using the recent buzz around ChatGPT to launch Phishing attacks using various methods.

Cyble 2023 EN ChatGPT ChatGPT-Based Phishing Attacks
Google Delivers Record-Breaking $12M in Bug Bounties https://www.darkreading.com/endpoint/google-delivers-record-breaking-12m-in-bug-bounties
22/02/2023 20:43:20
QRCode
archive.org
thumbnail

Google's Android and Chrome Vulnerability Reward Programs (VRPs) in particular saw hundreds of valid reports and payouts for security vulnerabilities discovered by ethical hackers.

darkreading 2023 EN BugBounties Google Record-Breaking Bounties
Activision's Data Breach Contains Employee Information, Call of Duty and More, Report https://metacurity.substack.com/p/activisions-data-breach-contains
22/02/2023 19:29:27
QRCode
archive.org
thumbnail

Insider Gaming has been able to obtain the entirety of the gaming giant Activision’s data breach initially reported by vx-underground and confirmed the data contains plans for Modern Warfare 2’s upcoming DLCs, Call of Duty 2023 (Codenamed Jupiter) and Call of Duty 2024 (Codenamed Cerberus), as well as sensitive employee information.

metacurity EN 2023 Activision breach DataBreach Report
Fortinet FortiNAC CVE-2022-39952 Deep-Dive and IOCs https://www.horizon3.ai/fortinet-fortinac-cve-2022-39952-deep-dive-and-iocs/
22/02/2023 08:56:38
QRCode
archive.org
thumbnail

Fortinet FortiNAC CVE-2022-39952 Deep-Dive and IOCs. This vulnerability allows remote code execution as the root user.

(advisory https://www.fortiguard.com/psirt?date=02-2023)

horizon3 EN 2023 PoC Fortinet FortiNAC CVE-2022-39952 Deep-Dive IoCs
page 196 / 251
5001 links
Shaarli - Le gestionnaire de marque-pages personnel, minimaliste, et sans base de données par la communauté Shaarli - Theme by kalvn