Quotidien Hebdomadaire Mensuel

Quotidien Shaarli

Tous les liens d'un jour sur une page.

December 20, 2023

SSH protects the world’s most sensitive networks. It just got a lot weaker

Novel Terrapin attack uses prefix truncation to downgrade the security of SSH channels.

Snikt! Rhysida dumps more than a terabyte of Insomniac Games’ internal data

The Rhysida ransomware gang publishes 98 per cent of leaked data minutes after the ransom deadline passes – Wolverine game files included.

Qakbot's Back, But Don't Y'all Panic: A Southern Tech Talk

Qakbot, a versatile malware threat, returned after a takedown in August. The new campaign targets the hospitality industry with IRS-themed phishing emails containing malicious PDFs. Microsoft identified the attack, offering two IP addresses for blocking and a way to detect the malware's digital signature.

Unveiling VISS: a revolutionary approach to vulnerability impact scoring

Our open-source vulnerability impact scoring system is now available and enhances incident response capabilities. Here's how VISS is unique.

Web injections are back on the rise: 40+ banks affected by new malware campaign

DanaBot is a sophisticated banking trojan targeting financial institutions and their customers. Now, a new global campaign has put more users at risk.

Terrapin attacks can downgrade security of OpenSSH connections

Academic researchers developed a new attack called Terrapin that manipulates sequence numbers during the handshake process to breaks the SSH channel integrity when certain widely-used encryption modes are used.

Xfinity waited to patch critical Citrix Bleed 0-day. Now it’s paying the price

Data for almost 36 million customers now in the hands of unknown hackers.