Quotidien Hebdomadaire Mensuel

Hebdomadaire Shaarli

Tous les liens d'un semaine sur une page.

Semaine 08 (February 20, 2023)

Suspect in major data theft case linked to Dutch-subsidized cybersecurity org

One of three hackers recently arrested for large-scale data theft was active for cyber security organization DIVD, sources told NOS. DIVD is a government-subsidized association of Dutch security experts that researches unsafe computer systems.

Dole Experiences Cybersecurity Incident

Charlotte, NC – February 22, 2023– Dole plc (DOLE:NYSE) announced today that the company recently experienced a cybersecurity incident that has been identified as ransomware.

A year after Russia's invasion, the scope of cyberwar in Ukraine comes into focus

The Ukraine war has inspired a defensive cyber effort that government officials and technology executives describe as unprecedented.

Beware of macOS cryptojacking malware.

You may have heard about the cryptojacking malware on macOS. Read about a new one spotted by Jamf Threat Labs.

Valve bans 40,000 Dota 2 cheaters through ‘honeypot’ patch

Valve fixed an exploit cheaters were used, and used that patch to catch them in the act. More than 40,000 people were banned for using the third-party cheat.

"Fobo" Trojan distributed as ChatGPT client for Windows

Attackers are distributing malware disguised as a ChatGPT desktop client for Windows offering “precreated accounts”

The Growing Threat of ChatGPT-Based Phishing Attacks

Cyble analyzes how Threat Actors are using the recent buzz around ChatGPT to launch Phishing attacks using various methods.

Google Delivers Record-Breaking $12M in Bug Bounties

Google's Android and Chrome Vulnerability Reward Programs (VRPs) in particular saw hundreds of valid reports and payouts for security vulnerabilities discovered by ethical hackers.

Activision's Data Breach Contains Employee Information, Call of Duty and More, Report

Insider Gaming has been able to obtain the entirety of the gaming giant Activision’s data breach initially reported by vx-underground and confirmed the data contains plans for Modern Warfare 2’s upcoming DLCs, Call of Duty 2023 (Codenamed Jupiter) and Call of Duty 2024 (Codenamed Cerberus), as well as sensitive employee information.

Fortinet FortiNAC CVE-2022-39952 Deep-Dive and IOCs

Fortinet FortiNAC CVE-2022-39952 Deep-Dive and IOCs. This vulnerability allows remote code execution as the root user.

(advisory https://www.fortiguard.com/psirt?date=02-2023)

Sensitive US military emails spill online

A security researcher told TechCrunch that a government server was exposing military emails to the internet because no password was set.

Cyber Attacks on Data Center Organizations

Resecurity notified several data center organizations about malicious cyber activity targeting them and their customers. The initial early-warning threat notification about this activity was sent around September 2021 with further updates during 2022 and January, 2023. Recent cyber-attacks on cloud service providers (CSPs) and managed services providers (MSPs) saw bad actors attempt to leverage a weakness in their cybersecurity supply chain with the goal of stealing sensitive data from their target enterprises and government organizations. Data centers are meaningful targets for attackers and an important element of the enterprise supply chain.

Hackers Start Selling Data Center Logins for Some of World’s Largest Corporations

Such credentials in the wrong hands could be dangerous, experts say, potentially allowing physical access to data centers. The affected data center operators say the stolen information didn’t pose risks for customer IT systems.

The Gravediggers: How Eliminalia, a Spanish reputation management firm, buries the truth

“Story Killers” project: Forbidden Stories investigated the seedy clients linked to Eliminalia and the manipulation tactics they use.

Fog of war: how the Ukraine conflict transformed the cyber threat landscape

One year after the Russian invasion of Ukraine, we’re sharing insights into changes in the cyber threat landscape triggered by the war.

Magecart Attack Disguised as Google Tag Manager | Akamai

Magecart skimmers constantly evolve. Recent attacks aimed at stealing sensitive customer information illustrate the need for comprehensive security solutions.

Ransomware pushes City of Oakland into state of emergency

The Interim City Administrator of the City of Oakland declared a state of emergency.after a ransomware attack crippled the city’s services a week ago

German airport websites downed by DDoS attacks

A series of distributed denial-of-service (DDoS) attacks shut down seven German airports' websites on Thursday, a day after a major IT glitch at Lufthansa grounded flights.