Quotidien Hebdomadaire Mensuel

Quotidien Shaarli

Tous les liens d'un jour sur une page.

March 1, 2023

West ill-prepared to deal with evolving cyber threats, report concludes

Hacking and disinformation operation has continued to expand its activity, despite separate interventions in several European countries
PDF

TCG TPM2.0 implementations vulnerable to memory corruption

Two buffer overflow vulnerabilities were discovered in the Trusted Platform Module (TPM) 2.0 reference library specification, currently at Level 00, Revision 01.59 November 2019. An attacker who has access to a TPM-command interface can send maliciously-crafted commands to the module and trigger these vulnerabilities. This allows either read-only access to sensitive data or overwriting of normally protected data that is only available to the TPM (e.g., cryptographic keys).

Iron Tiger’s SysUpdate Reappears, Adds Linux Targeting

We detail the update that advanced persistent threat (APT) group Iron Tiger made on the custom malware family SysUpdate. In this version, we also found components that enable the malware to compromise Linux systems.

Hunting for Honkbox | Multistage macOS Cryptominer May Still Be Hiding

A cryptominer that uses the Invisible Internet protocol, Honkbox variants could still be evading some detection solutions.

Lumma Stealer targets YouTubers via Spear-phishing Email | by S2W | S2W BLOG | Feb, 2023 | Medium

Lumma Stealer sellers use the name “LummaC” on an underground forum called XSS, which is based in Russia. The seller has been actively promoting the malware since April 2022. In August of that year…

Intrusion dans les systèmes d'information de la Ville de Lille : le point sur la situation

A cette heure, le diagnostic technique est toujours en cours pour déterminer l'origine et la gravité de l'intrusion.
L'ensemble des services publics est maintenu, à l'Hôtel de Ville, dans les mairies de quartiers et l'ensemble de nos équipements avec un fonctionnement adapté.

Selon les informations dont nous disposons à ce stade, aucune difficulté n'a été constatée sur les données stockées sur le système et les serveurs.