Src |
Date (GMT) |
Titre |
Description |
Tags |
Stories |
Notes |
|
2022-11-14 09:30:00 |
Ukrainian CERT Discloses New Data-Wiping Campaign (lien direct) |
Somnia malware hijacks Telegram and VPN accounts |
Malware
|
|
|
|
2022-11-11 18:00:00 |
CISA Releases SSVC Guide to Help Companies Prioritize Vulnerabilities (lien direct) |
Remediation efforts are prioritized based on exploitation status, safety impact and prevalence criteria |
|
|
|
|
2022-11-11 17:00:00 |
Man Arrested in Ontario For Alleged LockBit Ransomware Involvement (lien direct) |
Mikhail Vasiliev was apprehended in Canada and is in custody awaiting extradition to the US |
Ransomware
|
|
|
|
2022-11-11 16:00:00 |
Twitter C-Level Resignations Continue As Blue Program Creates New Cyber-Risks (lien direct) |
They left quoting concerns about the rollout of new features without an FTC consent decree |
|
|
|
|
2022-11-11 14:00:00 |
#IRISSCON: Social Engineering Testers Warned Not to Cross Ethical and Legal Boundaries (lien direct) |
Sharon Conheady discusses the ethical and legal dilemmas often faced by social engineering testers |
|
|
|
|
2022-11-11 12:00:00 |
CISA Says Midterm Voting Uncompromised By Cyber-attacks (lien direct) |
Election workers will continue to work in the days ahead to certify the election results |
|
|
|
|
2022-11-11 11:05:00 |
Ukrainian Cyber Cops Bust $200m Fraud Ring (lien direct) |
Two-year pan-European operation ends in arrests |
|
|
|
|
2022-11-11 11:00:00 |
Only 30% of Cyber-Insurance Holders Say Ransomware is Covered (lien direct) |
Insurers are cutting back on coverage as claims surge |
Ransomware
|
|
|
|
2022-11-11 10:30:00 |
Qatar World Cup Firms Urged to Upgrade Cyber-Threat Model (lien direct) |
Digital Shadows warns of elevated risk from scammers and threat actors |
Threat
|
|
|
|
2022-11-10 17:00:00 |
(Déjà vu) New Lenovo Notebook Models Affected By UEFI Firmware Vulnerabilities (lien direct) |
The flaws affect various Lenovo Yoga, IdeaPad and ThinkBook devices |
|
|
★★★★★
|
|
2022-11-10 16:40:00 |
#IRISSCON: Police Officer Urges More Reporting and Engagement to Tackle Cybercrime (lien direct) |
Ireland's National Cyber Crime Bureau outlines cybercrime trends being observed in law enforcement |
|
|
|
|
2022-11-10 16:00:00 |
Majority of Security Managers Lack Threat Intelligence Skills (lien direct) |
The report suggests threat intelligence is a crucial source for vulnerability detection |
Threat
Vulnerability
|
|
★★★★
|
|
2022-11-10 15:45:00 |
The \'Great Resignation\' Caused Insider Threats to Peak in Q3 2022, Kroll Finds (lien direct) |
Kroll's Q3 2022 Threat Landscape report showed an unprecedented increase in insider threats |
Threat
|
|
★★★★★
|
|
2022-11-10 13:15:00 |
#IRISSCON: Cyber Professionals Now Tasked with Securing Society, Says Mikko Hyppönen (lien direct) |
Mikko Hyppönen discusses how cyber-threats will become even more dangerous as reliance on connectivity grows |
|
|
★★
|
|
2022-11-10 11:00:00 |
Some 98% of Global Firms Suffer Supply Chain Breach in 2021 (lien direct) |
Two-fifths still trust suppliers to handle their own security |
|
|
|
|
2022-11-10 10:00:00 |
Malware Redirects 15,000 Sites in Malicious SEO Campaign (lien direct) |
Campaign designed to improve search engine rankings of spammy sites |
|
|
★★★★
|
|
2022-11-10 09:30:00 |
Couple Get 40 Years for Navy Espionage Plot (lien direct) |
Duo tried to sell secrets of nuclear propulsion |
|
|
★★★★
|
|
2022-11-09 18:00:00 |
High-Risk Vulnerability Found in ABB\'s Flow Computers (lien direct) |
Attackers could exploit it by sending a specially crafted message to an affected system node |
Vulnerability
|
|
|
|
2022-11-09 17:00:00 |
Malicious Package on PyPI Hides Behind Image Files, Spreads Via GitHub (lien direct) |
The findings indicate that PyPI malicious packages and their obfuscation techniques are evolving |
|
|
|
|
2022-11-09 16:00:00 |
Medibank Confirms Data Stolen in Breach is Now Available Online (lien direct) |
The leaked data includes personal data like names, addresses and phone numbers, among others |
|
|
★★
|
|
2022-11-09 10:30:00 |
Advanced RAT AgentTesla Most Prolific Malware in October (lien direct) |
Info-stealers take top three spots, says Check Point |
Malware
|
|
|
|
2022-11-09 10:00:00 |
Instagram Influencer Gets 11 Years for Money Laundering (lien direct) |
Man known as “Hushpuppi” linked to fraud and business email compromise |
|
|
|
|
2022-11-09 09:30:00 |
Microsoft Patches Six Zero-Day Bugs this Month (lien direct) |
Patch Tuesday updates require urgent action from sysadmins |
|
|
|
|
2022-11-08 18:00:00 |
Insider Risk on the Rise: 12% of Employees Take IP When Leaving Jobs (lien direct) |
The data comes from workforce cyber intelligence and security company Dtex |
|
|
|
|
2022-11-08 17:00:00 |
SEC Announces \'Enforcement Action\' For SolarWinds Over 2020 Hack (lien direct) |
In a recent 8-K filing with the SEC, the firm said it reached an agreement with shareholders |
Hack
|
|
|
|
2022-11-08 16:00:00 |
Conti Affiliates Black Basta, BlackByte Continue to Attack Critical Infrastructure (lien direct) |
Between February and July, 81 victim organizations were listed on the groups' data leak sites |
|
|
|
|
2022-11-08 10:45:00 |
SMBs Fear Security Budget Cuts as Inflation Bites (lien direct) |
Concerns come amid worries over ransomware surge |
Ransomware
|
|
|
|
2022-11-08 10:15:00 |
Swiss Re: Cyber-Insurance Industry Must Reform (lien direct) |
Some 90% of risk is still uninsured, warns industry giant |
|
|
|
|
2022-11-08 09:40:00 |
Silk Road Thief Pleads Guilty to $3.4bn Raid (lien direct) |
Man stole 50,000 Bitcoin from notorious dark web marketplace |
|
|
|
|
2022-11-07 18:00:00 |
Vultur Android Banking Trojan Reaches 100,000+ Downloads on Google Play Store (lien direct) |
The dropper hides behind a fake utility app with limited permissions and a small footprint |
|
|
|
|
2022-11-07 17:16:00 |
Medibank Refuses to Pay Ransom After Data Breach (lien direct) |
Medibank believes there is a limited chance paying a ransom would return customers' data |
Data Breach
|
|
|
|
2022-11-07 16:03:00 |
Android RAT Group Targets Indian Defense Personnel (lien direct) |
The app asked for several permissions, including camera, microphone, internet and storage |
|
|
|
|
2022-11-07 14:00:00 |
Cyber Insurance Market Stabilizing as Security Awareness Improves (lien direct) |
The cyber insurance market is beginning to stabilize following several years of steep rate increases, according to a recent report |
|
|
|
|
2022-11-07 10:30:00 |
Japan Joins Key NATO Cyber Agency (lien direct) |
Another show of strength for the Cooperative Cyber Defence Centre of Excellence |
|
|
|
|
2022-11-07 10:00:00 |
ICO: Department for Education Should Have Been Fined £10m (lien direct) |
DfE oversight leads to misuse of data on 28 million children |
Guideline
|
|
|
|
2022-11-07 09:30:00 |
FBI: Beware of Cyber-Threat from Russian Hacktivists (lien direct) |
Feds claim DDoS attacks are being aimed at critical infrastructure |
|
|
|
|
2022-11-04 17:00:00 |
Black Basta Ransomware Attacks Linked to FIN7 Threat Actor (lien direct) |
The hacker behind a tool used by Black Basta had access to the source code used by FIN7 |
Threat
Ransomware
Tool
|
|
|
|
2022-11-04 16:00:00 |
LockBit Claims Ransomware Attack on Continental (lien direct) |
The ransomware gang made the announcement on its leak site |
Ransomware
|
|
|
|
2022-11-04 15:00:00 |
BEC Group Crimson Kingsnake Linked to 92 Malicious Domains (lien direct) |
The group impersonated 19 law firms and debt collection agencies in the US, UK and Australia |
|
|
|
|
2022-11-04 10:30:00 |
ICO Slashes Government Data Breach Fine (lien direct) |
UK regulator reduces penalty by 90% |
Data Breach
|
|
|
|
2022-11-04 10:00:00 |
Phishers Abuse Microsoft Voicemail Service to Trick Users (lien direct) |
Avanan spots campaign leveraging Dynamic 365 Customer Voice |
|
|
|
|
2022-11-04 09:30:00 |
World\'s Most Expensive Observatory Floored by Cyber-Attack (lien direct) |
ALMA suspends astronomical observations |
|
|
|
|
2022-11-03 17:00:00 |
Cyber Threat Landscape Shaped by Ukraine Conflict, ENISA Report Reveals (lien direct) |
The EU cybersecurity agency released its 10th annual threat landscape report on November 3, 2022 |
Threat
|
|
|
|
2022-11-03 17:00:00 |
TikTok Confirms Chinese Staff Can Access UK and EU User Data (lien direct) |
The news comes from the social media giant's head of privacy in Europe, Elaine Fox |
|
|
|
|
2022-11-03 16:00:00 |
RomCom Weaponized KeePass and SolarWinds Instances to Target Ukraine, Maybe UK (lien direct) |
The discovery comes from the BlackBerry Research & Intelligence Team |
|
|
|
|
2022-11-03 15:00:00 |
Zurich and Mondelez Reach NotPetya Settlement, but Cyber-Risk May Increase (lien direct) |
The parties have mutually resolved the matter, but details of the settlement were not provided |
|
NotPetya
NotPetya
|
|
|
2022-11-03 12:00:00 |
Bot Warning for Retailers Ahead of Busy Shopping Season (lien direct) |
Automated threats accounted for 62% of attacks last year |
|
|
★★★★★
|
|
2022-11-03 10:15:00 |
UK Security Agency to Scan the Country for Bugs (lien direct) |
NCSC wants to determine "the vulnerability of the UK" |
Vulnerability
|
|
|
|
2022-11-03 09:30:00 |
Threat Actor "OPERA1ER" Steals Millions from Banks and Telcos (lien direct) |
More than 30 organizations compromised by off-the-shelf tools |
|
|
|
|
2022-11-02 17:00:00 |
US Hacker Group Indicted For Million-Dollar RICO Conspiracy (lien direct) |
The group banded together to engage in a sophisticated cybercrime and tax fraud scheme |
|
|
|