Quotidien Hebdomadaire Mensuel

Quotidien Shaarli

Tous les liens d'un jour sur une page.

Hier - April 20, 2025

Silicon Valley crosswalk buttons hacked to imitate Musk, Zuckerberg's voices

The crosswalk buttons, which include audio alerts, were hacked over the weekend.

Threat Actor Allegedly Selling Fortinet Firewall Zero-Day Exploit

A threat actor claims to offer a zero-day exploit for an unauthenticated remote code execution vulnerability in Fortinet firewalls.

Is Ivanti the problem or a symptom of a systemic issue with network devices?

Exploited vulnerabilities have turned up in Ivanti products 16 times since 2024. That’s more than any other vendor in the network edge device space.

Threat actors misuse Node.js to deliver malware and other malicious payloads | Microsoft Security Blog

Since October 2024, Microsoft Defender Experts has observed and helped multiple customers address campaigns leveraging Node.js to deliver malware and other payloads that ultimately lead to information theft and data exfiltration.

Kidney Dialysis Services Provider DaVita Hit by Ransomware

DaVita has not named the ransomware group behind the incident or share details on the attacker’s ransom demands

Ransomware Group Claims Hacking of Oregon Regulator After Data Breach Denial

The Rhysida ransomware gang claims to have stolen 2.5 Tb of files from the Oregon Department of Environmental Quality.

1961406 - SSL.com: DCV bypass and issue fake certificates for any MX hostname

SSL.com before 2025-04-19, when domain validation method 3.2.2.4.14 is used, processes certificate requests such that a trusted TLS certificate may be issued for the domain name of a requester's email address, even when the requester does not otherwise establish administrative control of that domain