Mur d'images - Cyberveille

curated by Decio

SSL/TLS certificates will last 47 days max by 2029

Don't open that file in WhatsApp for Windows just yet

Apple belatedly fixes exploited flaws in older OSes

Ransomware crews add EDR killers to their arsenal

OpenSSH bugs threaten enterprise security, uptime

Mysterious backdoor found on select Juniper routers

Okta security bug affects those with really long usernames

China's Volt Typhoon breached Singtel, reports say

The story behind HISAA

Cisco fixes bug under exploit in brute-force attacks

Apple fixes password-blurting VoiceOver bug

Rackspace systems hit by zero-day exploit of third-party app • The Register

10 security bugs put fuel storage tanks at risk of attacks

Insecure software makers are the real cyber villains – CISA

Thousands of orgs at risk of ServiceNow KB data leaks

Microsoft working on OS update to prevent another IT outage

TfL confirms 5,000 customers' bank data exposed

Chipmaker Microchip reveals cyber attack

ICANN approves use of .internal domain for your network

Mozilla follows Google in distrusting Entrust’s TLS certs • The Register

'Error' in Microsoft's DDoS defenses amplified Azure outage

CrowdStrike blames a test software bug for Windows wipeout

Microsoft fixes hack-me-via-Wi-Fi Windows security hole • The Register

Ransomware attack hits major London hospitals

Analysts join the call for Microsoft to recall Recall

Crooks threaten to leak 2.9B records of personal info

How Apple Wi-Fi Positioning System can be abused to track people around the globe

Op Pandora puts suspected phone fraudsters back in the box

Easy privilege escalation exploit lands for Linux kernels

AI bots hallucinate software packages and devs download them

Over 170K users hit by poisoned Python package ruse

IT helpdeskers increasingly targeted by cybercriminals

Rapid7 flames JetBrains over vulnerability disclosure

Ubiquiti owners warned Moscow may build another botnet • The Register

Raspberry Pi Pico cracks BitLocker in under a minute

45,000 Jenkins servers remain vulnerable to RCE attacks

HPE reveals Russian attackers accessed internal emails

Atlassian Confluence Server RCE attacks underway

178,000 SonicWall firewalls are vulnerable to old DoS bugs

Weak password and infostealer blamed for Orange Spain outage

One in four apps remain exposed to Log4Shell

How to bypass Windows Hello, log into vulnerable laptops

Rhysida ransomware gang claims attack on British Library • The Register

ICBC hit by ransomware impacting global trades

Casio keyed up after data loss hits customers in 149 countries • The Register

CIA exposed to intelligence interception due to X's URL bug

Routers have been rooted by Chinese spies US and Japan warn

US-Canada water commission confirms 'cybersecurity incident"

Ransomware flingers hit Manchester cops in the supply chain • The Register

Ransomware crew hits Save The Children, steals 7TB of data

Attackers access military data through fencing supplier

Ransomware infection wipes all CloudNordic servers

Want to pwn a satellite? Turns out it's surprisingly easy

Nearly every AMD CPU since 2017 vulnerable to Inception bug

JumpCloud says 'nation state' gang hit some customers

Dump these Cisco phone adapters because it's not fixing them

Black Basta claims it's selling off stolen Capita data

Linux kernel logic allowed Spectre attack on major cloud

Data-leak flaw in Qualcomm, HiSilicon-based Wi-Fi AP chips

France bans all recreational apps from government devices

German airport websites downed by DDoS attacks

Cisco warns of critical flaw in ClamAV antivirus

Hyundai and Kia issue software upgrades to thwart theft hack

Apple sued for promising privacy, failing at it

Threat groups are using Windows LNK files to gain access

Twitter leak: 200m+ account database now free to download

Operation Jackal: Interpol arrests Black Axe fraud suspects

Palo Alto bug used for DDoS attacks and there's no fix yet

Vulnerability discovered in Apple M1 chip

Web ad firms scrape email addresses before you know it

DoS attacks hit Finnish websites during Zelenskyy address • The Register

Chinese cyber-attackers 'targeted Taiwanese financial firms'

Cyberattack takes Ukraine military, bank websites offline