Cyberveillecurated by Decio
Nuage de tags
Mur d'images
Quotidien
Flux RSS
  • Flux RSS
  • Daily Feed
  • Weekly Feed
  • Monthly Feed
Filtres

Liens par page

  • 20 links
  • 50 links
  • 100 links

Filtres

Untagged links
page 65 / 231
How Lazarus Group laundered $200M from 25+ crypto hacks to fiat … https://zachxbt.mirror.xyz/B0-UJtxN41cJhpPtKv0v2LZ8u-0PwZ4ecMPEdX4l8vE
17/09/2024 20:35:11
QRCode
archive.org
thumbnail

Bluenoroff or APT38, more commonly referred to as Lazarus Group is a threat group which has been tied to the North Korean government since as early as 2009 primarily being financially motivated utilizing malware custom built for each target.

Early on, the threat group gained notoriety for cyberattacks such as Sony Pictures Hack in 2014 and $81M Bangladesh Bank heist in 2016 and in more recent years has shifted focus to targets in the cryptocurrency industry.

Analytics firms such as TRM and Chainalysis release annual reports summarizing crypto related incidents linked to DPRK and since 2017 they estimate between $3B to $4.1B has been stolen.

zachxbt EN 2024 Bluenoroff APT38 LazarusGroup NorthKorean laundering money
IoT Thermostat Bug Allows Hackers to Turn Up the Heat | by NewSky Security | NewSky Security https://blog.newskysecurity.com/iot-thermostat-bug-allows-hackers-to-turn-up-the-heat-948e554e5e8b
17/09/2024 19:20:08
QRCode
archive.org

With the ever-increasing impact of smart and connected devices in our daily lives, Cybersecurity has a variety of security challenges to deal with. The field of traditional computer security deals…

An Offer You Can Refuse: UNC2970 Backdoor Deployment Using Trojanized PDF Reader https://cloud.google.com/blog/topics/threat-intelligence/unc2970-backdoor-trojanized-pdf-reader/?hl=en
17/09/2024 16:34:58
QRCode
archive.org
thumbnail

UNC2970 is a cyber espionage group suspected to have a North Korea nexus.

Mandiant 2024 UNC2970 Backdoor PDF PDF-Reader North North-Korea
Qilin ransomware attack on Synnovis impacted over 900K patients https://securityaffairs.com/168480/data-breach/qilin-attack-on-synnovis-impacted-900000-patients.html
17/09/2024 09:54:46
QRCode
archive.org
thumbnail

The personal information of a million individuals was leaked online following a ransomware attack that in June hit NHS hospitals in London.

securityaffairs EN 2024 Qilin Synnovis PII NHS ransomware data-leak London Healthcare London UK
Microsoft working on OS update to prevent another IT outage https://www.theregister.com/2024/09/13/microsoft_is_updating_windows_to/
16/09/2024 16:02:05
QRCode
archive.org
thumbnail

Existing low-level access for security solutions will undergo a rework

theregister EN 2024 crowdstrike cyberincident microsoft Kernel EDR update
Hadooken Malware Targets Weblogic Applications https://www.aquasec.com/blog/hadooken-malware-targets-weblogic-applications/
16/09/2024 15:59:33
QRCode
archive.org
thumbnail

Nautilus researchers identified a new Linux malware targeting Weblogic servers with running Hadooken malware

aquasec EN 2024 Hadooken Malware Weblogic Applications Oracle weak-password
Apple is well on its way to making iPhones theft-proof https://9to5mac.com/2024/09/13/making-iphones-theft-proof/
16/09/2024 15:56:24
QRCode
archive.org
thumbnail

Apple’s latest theft-prevention measure went live for beta testers yesterday: Activation Lock for iPhone components. The move is likely to...

9to5mac EN 2024 Apple iPhone Activation-Lock parts components theft-proof
SolarWinds fixed critical RCE CVE-2024-28991 in Access Rights Manager https://securityaffairs.com/168456/security/solarwinds-fixed-rce-cve-2024-28991.html
16/09/2024 15:50:10
QRCode
archive.org
thumbnail

SolarWinds addressed a critical remote code execution vulnerability, tracked as CVE-2024-28991, in Access Rights Manager.

securityaffairs EN 2024 SolarWinds RCE CVE-2024-28991 ARM Access Rights Manager
Multiple attacks forces CISA to order agencies to upgrade or remove end-of-life Ivanti appliance https://therecord.media/cisa-urges-federal-agencies-remove-ivanti-product
16/09/2024 15:48:50
QRCode
archive.org
thumbnail

The nation’s top cyber watchdogs urged federal agencies to either remove or upgrade an Ivanti appliance that is no longer being updated and has been exploited in attacks.

therecord.media EN 2024 CISA Ivanti remove appliances End-of-Life
German radio station forced to broadcast 'emergency tape' following cyberattack https://therecord.media/germany-cyberattack-radio-geretsried
16/09/2024 15:46:10
QRCode
archive.org
thumbnail

Radio Geretsried, a local station in Bavaria, said it was trying to save music files and restore systems after an apparent ransomware attack.

therecord.media EN 2024 Radio Geretsried Germany ransomware
23andMe Agrees To $30 Million Settlement For Last Year's Data Breach https://au.pcmag.com/security/107248/23andme-agrees-to-30-million-settlement-for-last-years-data-breach
16/09/2024 15:32:39
QRCode
archive.org
thumbnail

Affected users can try to claim up to $10,000 if the breach at 23andMe led to financial fraud or paying up for security or mental health services.

pcmag EN 2024 23andMe Settlement Data-Breach
Scammers advertise fake AppleCare+ service via GitHub repos https://www.malwarebytes.com/blog/scams/2024/09/scammers-advertise-fake-applecare-service-via-github-repos
14/09/2024 21:30:04
QRCode
archive.org
thumbnail

Beware before calling Apple for assistance as scammers are creating malicious ads and fake pages to lure you in.

malwarebytes EN 2024 Scammers AppleCare+ GitHub repos
'Vo1d' Trojan Malware Infects 1.3 Million Android-Based TV Boxes Globally https://www.pcmag.com/news/vo1d-trojan-malware-infects-13-million-android-tv-boxes-globally
14/09/2024 21:27:36
QRCode
archive.org

Antivirus firm Dr.Web has flagged a type of Android malware known as Android.Vo1d that has infected about 1.3 million TV boxes across 197 countries.

The malware effectively enables a backdoor into the TV box's system that allows an attacker to download and install malicious third-party software. The R4 TV box model running Android 7.1.2, a TV Box running Android 12.1, and the KJ-SMART4KVIP TV box running Android 10.1 were the types of devices reportedly impacted.

pcmag EN 2024 Vo1d EN 2024 androidTV TV Box KJ-SMART4KVIP Trojan Malware
UK arrests teen linked to Transport for London cyber attack https://www.bleepingcomputer.com/news/security/uk-arrests-teen-linked-to-transport-for-london-cyber-attack/
14/09/2024 21:20:32
QRCode
archive.org
thumbnail

U.K.'s National Crime Agency says it arrested a 17-year-old teenager who is suspected of being connected to the cyberattack on Transport for London, the city's public transportation agency.

bleepingcomputer EN 2024 Arrest Cyberattack London Teenager TfL Transport-for-London United-Kingdom UK
Zero-Click Calendar invite — Critical zero-click vulnerability chain in macOS https://mikko-kenttala.medium.com/zero-click-calendar-invite-critical-zero-click-vulnerability-chain-in-macos-a7a434fc887b
14/09/2024 21:10:30
QRCode
archive.org

I found a zero-click vulnerability in macOS Calendar, which allows an attacker to add or delete arbitrary files inside the Calendar sandbox environment. This could lead to many bad things including malicious code execution which can be combined with security protection evasion with Photos to compromise users’ sensitive Photos iCloud Photos data. Apple has fixed all of the vulnerabilities between October 2022 and September 2023.

mikko-kenttala EN 2024 Critical zero-click macos vulnerability
Distributed Denial of Truth (DDoT): The Mechanics of Influence Operations and The Weaponization of Social Media https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/distributed-denial-of-truth-ddot-the-mechanics-of-influence-operations-and-the-weaponization-of-social-media/
14/09/2024 14:56:50
QRCode
archive.org
thumbnail

With the US election on the horizon, it’s a good time to explore the concept of social media weaponization and its use in manipulating public opinion.

trustwave EN 2024 DDoT Distributed Denial Truth US election manipulating disinformation
Apple Suddenly Drops NSO Group Spyware Lawsuit https://www.securityweek.com/apple-suddenly-drops-nso-group-spyware-lawsuit/
14/09/2024 13:21:00
QRCode
archive.org

Apple said there’s “too significant a risk” of exposing the anti-exploit work needed to fend off the very adversaries involved in the case.

securityweek EN 2024 Apple NSO Group Spyware Lawsuit
Ils réclament 3 millions à la Banque cantonale de Zurich: 4 jeunes arrêtés https://www.bluewin.ch/fr/infos/faits-divers/quatre-arrestations-apr-s-un-chantage-contre-la-zkb-zurich-2365153.html
14/09/2024 12:53:08
QRCode
archive.org
thumbnail

Quatre jeunes Suisses ont été arrêtés pour avoir tenté de faire chanter la Banque cantonale de Zurich (ZKB). Ils ont exigé des bitcoins d'une valeur de trois millions de francs, faute de quoi les données de clients de la banque seraient publiées.

bluewin FR 2024 zurich banque chantage suisse
Chinese APT Abuses VSCode to Target Government in Asia https://unit42.paloaltonetworks.com/stately-taurus-abuses-vscode-southeast-asian-espionage/
14/09/2024 12:35:33
QRCode
archive.org
thumbnail

A first in our telemetry: Chinese APT Stately Taurus uses Visual Studio Code to maintain a reverse shell in victims' environments for Southeast Asian espionage. A first in our telemetry: Chinese APT Stately Taurus uses Visual Studio Code to maintain a reverse shell in victims' environments for Southeast Asian espionage.

unit42 EN 2024 China APT StatelyTaurus VisualStudio
In Wake of Durov Arrest, Some Cybercriminals Ditch Telegram https://www.404media.co/in-wake-of-durov-arrest-some-cybercriminals-ditch-telegram/
14/09/2024 12:33:22
QRCode
archive.org
thumbnail

Hackers, fraudsters, and drug dealers are all leaving the platform in one way or another. Some are worried that Telegram may start providing user data to the authorities.

404media EN 2024 Telegram Hackers fraudsters Durov leaving
page 65 / 231
4617 links
Shaarli - The personal, minimalist, super-fast, database free, bookmarking service par la communauté Shaarli - Theme by kalvn - Curated by Decio