Mur d'images - Cyberveille

curated by Decio

CISA extends funding to ensure 'no lapse in critical CVE services'

Europcar GitLab breach exposes data of up to 200,000 customers

Someone is trying to recruit security researchers in bizarre hacking campaign | TechCrunch

TCCing is Believing

Fake "Security Alert" issues on GitHub use OAuth app to hijack accounts

Orange Group confirms breach after hacker leaks company documents

CISA and FBI: Ghost ransomware breached orgs in 70 countries

Microsoft spots XCSSET macOS malware variant used for crypto theft

BSI analysis shows: Nextcloud server stored passwords in plain text | heise online

Hackers spoof Microsoft ADFS login pages to steal credentials

Subaru Starlink flaw let hackers hijack cars in US and Canada

Government and university websites targeted in ScriptAPI[.]dev client-side attack - c/side

Ransomware abuses Amazon AWS feature to encrypt S3 buckets

Microsoft: macOS bug lets hackers install malicious kernel drivers

Malicious ads push Lumma infostealer via fake CAPTCHA pages

Ascension: Health data of 5.6 million stolen in ransomware attack

Stop Calling Online Scams ‘Pig Butchering,’ Interpol Warns

What a new threat report says about Mac malware in 2024

AWS launches an incident response service to combat cybersecurity threats | TechCrunch

Microsoft 365 Admin portal abused to send sextortion emails

Anyone Can Buy Data Tracking US Soldiers and Spies to Nuclear Vaults and Brothels in Germany | WIRED

T-Mobile confirms it was hacked in recent wave of telecom breaches

Windows infected with backdoored Linux VMs in new phishing attacks

D-Link won’t fix critical flaw affecting 60,000 older NAS devices

Meet Interlock — The new ransomware targeting FreeBSD servers

DocuSign's Envelopes API abused to send realistic fake invoices

Nokia says hackers leaked third-party app source code

Schneider Electric confirms dev platform breach after hacker steals data

Inside Sophos' 5-Year War With the Chinese Hackers Hijacking Its Devices

POLITICO Europe

New Windows Driver Signature bypass allows kernel rootkit installs

Microsoft creates fake Azure tenants to pull phishers into honeypots

USDoD hacker behind National Public Data breach arrested in Brazil

Jetpack fixes critical information disclosure flaw existing since 2016

MoneyGram says hackers stole customers' personal information and transaction data | TechCrunch

Ivanti warns of three more CSA zero-days exploited in attacks

Critical flaw in NVIDIA Container Toolkit allows full host takeover

Global infostealer malware operation targets crypto users, gamers

Transport for London confirms customer data stolen in cyberattack

Sextortion scams now use your "cheating" spouse’s name as a lure

Making progress on routing security: the new White House roadmap

Germany's Sovereign Tech Fund Puts Over $750K Into FreeBSD Infrastructure Projects

Litespeed Cache bug exposes millions of WordPress sites to takeover attacks

stardom dreams, stalking devices and the secret conglomerate selling both

Want to Win a Bike Race? Hack Your Rival’s Wireless Shifters | WIRED

NIST's Post-Quantum Cryptography Standards Are Here - IEEE Spectrum

USPS Text Scammers Duped His Wife, So He Hacked Their Operation | WIRED

Google ads push fake Google Authenticator site installing malware

Meta nukes massive Instagram sextortion network of 63,000 accounts

BIND updates fix high-severity DoS bugs in the DNS software suite

Hackers target WordPress calendar plugin used by 150,000 sites

Microsoft June 2024 Patch Tuesday fixes 51 flaws, 18 RCEs

New ShrinkLocker ransomware uses BitLocker to encrypt your files

PoC exploit released for RCE zero-day in D-Link EXO AX4800 routers

VMware fixes three zero-day bugs exploited at Pwn2Own 2024

2023 Kaspersky Incident Response report

Europol confirms web portal breach, says no operational data stolen

Dell API abused to steal 49 million customer records in data breach

Microsoft needs to win back trust

'ArcaneDoor' Cyberspies Hacked Cisco Firewalls to Access Government Networks

DDoS platform shut down by international law enforcement agencies

Microsoft: APT28 hackers exploit Windows flaw reported by NSA

MITRE says state hackers breached its network via Ivanti zero-days

840-bed hospital in France postpones procedures after cyberattack

Targus discloses cyberattack after hackers detected on file servers

Ivanti fixes VPN gateway vulnerability allowing RCE, DoS attacks

Finland confirms APT31 hackers behind 2021 parliament breach

US sanctions APT31 hackers behind critical infrastructure attacks

Apple Sued for Prioritizing Market Dominance Over Security

Ivanti fixes critical Standalone Sentry bug reported by NATO

Microsoft Copilot for Security: General Availability details

LockBit ransomware affiliate gets four years in jail, to pay $860k

Russian hackers hijack Ubiquiti routers to launch stealthy attacks

Apple iOS 17.4: iMessage Gets Post-Quantum Encryption in New Update

Hackers exploit Ivanti SSRF flaw to deploy new DSLog backdoor

Ivanti: Patch new Connect Secure auth bypass bug immediately

Security Researcher Allegedly Hacked Apple’s Backend, Scammed $2.5 Million

Government hackers targeted iPhones owners with zero-days, Google says

Apple fixes zero-day bug in Apple Vision Pro that 'may have been exploited'

Malicious PyPI Packages Slip WhiteSnake InfoStealer Malware onto Windows Machines

23andMe data breach: Hackers stole raw genotype data, health reports

Over 5,300 GitLab servers exposed to zero-click account takeover attacks

MacOS info-stealers quickly evolve to evade XProtect detection

iShutdown scripts can help detect iOS spyware on your iPhone

ShinyHunters member gets 3 years in prison for breaching 60 firms

Hackers hijack govt and business accounts on X for crypto scams

Lockbit ransomware disrupts emergency care at German hospitals

Iranian Hackers Claim They Disrupted Albanian Institutions

QNAP VioStor NVR vulnerability actively exploited by malware botnet

Supply chain attack targeting Ledger crypto wallet leaves users hacked

Kelvin Security hacking group leader arrested in Spain

Apple Releases Security Updates to Patch Critical iOS and macOS Security Flaws

Windows 10 gets three more years of security updates, if you can afford them | Ars Technica

Lumma Stealer malware now uses trigonometry to evade detection

Google’s new Titan Security Keys let you store passkeys

Discord will switch to temporary file links to block malware delivery

Massive cybercrime URL shortening service uncovered via DNS data

Atlassian warns of critical Confluence flaw leading to data loss

23andMe User Data Stolen in Targeted Attack on Ashkenazi Jews

Cisco urges admins to fix IOS software zero-day exploited in attacks

Active North Korean campaign targeting security researchers

North Korea-backed hackers target security researchers with 0-day

Last Week on My Mac: How quickly can Apple release a security update?

TSMC confirms data breach after LockBit cyberattack on third-party supplier

A simple bug exposed access to thousands of smart security alarm systems

Suspected LockBit ransomware affiliate arrested, charged in US

Terminator antivirus killer is a vulnerable Windows driver in disguise

Millions of Gigabyte Motherboards Were Sold With a Firmware Backdoor | WIRED

Barracuda identified a vulnerability (CVE-2023-2868) in our Email Security Gateway appliance (ESG) on May 19, 2023.

infosec company owned completely by 4chan user

Meet Akira — A new ransomware operation targeting the enterprise

Mercenary spyware hacked iPhone victims with rogue calendar invites, researchers say | TechCrunch

Stopping cybercriminals from abusing security tools

3CX Security Alert for Electron Windows App

Ransomware Attacks Have Entered a ‘Heinous’ New Phase

Czech cybersecurity office labels TikTok a security threat

Apple launches major security updates around the world

Sustaining Digital Certificate Security - TrustCor Certificate Distrust

Slack Security Update

Jenkins discloses dozens of zero-day bugs in multiple plugins

Apple fixes 'actively exploited' zero-day security vulnerability affecting most iPhones

Scammers Are Scamming Other Scammers Out of Millions of Dollars

Why would you want to hack Electric Vehicle Charging Stations?

Cryptex: how a custom iPhone is changing macOS updates – The Eclectic Light Company

Last Week on My Mac: Home truths about macOS

The Apple security landscape: Moving into the world of enterprise risk

Microsoft finds Raspberry Robin worm in hundreds of Windows networks

Last Week on My Mac: Introducing XProtect Remediator, successor to MRT – The Eclectic Light Company

The Linux Foundation and Open Source Software Security Foundation (OpenSSF) Gather Industry and Government Leaders for Open Source Software Security Summit II