Src |
Date (GMT) |
Titre |
Description |
Tags |
Stories |
Notes |
|
2019-06-09 14:45:05 |
Microsoft warns about email spam campaign abusing Office vulnerability (lien direct) |
Dangerous spam campaign targets European users with backdoor trojan. |
Spam
Vulnerability
|
|
|
|
2019-06-08 07:00:00 |
Diebold Nixdorf warns customers of RCE bug in older ATMs (lien direct) |
ATM vendor rolls out software update, says no attacks detected in the wild, low chance of exploitation. |
|
|
|
|
2019-06-07 19:41:00 |
For two hours, a large chunk of European mobile traffic was rerouted through China (lien direct) |
It was China Telecom, again. The same ISP accused last year of "hijacking the vital internet backbone of western countries." |
|
|
|
|
2019-06-07 15:30:04 |
Ancient ICEFOG APT malware spotted again in new wave of attacks (lien direct) |
ICEFOG malware resurfaces in the arsenal of multiple Chinese cyber-espionage groups, not just one. |
Malware
|
|
|
|
2019-06-07 10:59:00 |
Windows 10 zero-day details published on GitHub (lien direct) |
SandboxEscaper details new "ByeBear" zero-day impacting Windows 10 and Server 2019. |
|
|
|
|
2019-06-07 10:39:00 |
Fortune 500 company leaked 264GB in client, payment data (lien direct) |
The data leak impacted Tech Data's client servers, SAP systems, and more. |
|
|
|
|
2019-06-07 09:10:04 |
Facebook to stop Huawei pre-installing apps on smartphones (lien direct) |
Huawei may be left reeling from the latest blow against its reputation and products. |
|
|
|
|
2019-06-06 22:14:04 |
A botnet is brute-forcing over 1.5 million RDP servers all over the world (lien direct) |
Furthermore, statistics show that despite BlueKeep, most RDP attacks today are brute-force attempts. |
|
|
|
|
2019-06-06 17:51:03 |
Hackers steal $9.5 million from GateHub cryptocurrency wallets (lien direct) |
Unofficial investigation puts the number of victims between 80 and 90 users. Unknown how hackers stole users' funds. |
|
|
|
|
2019-06-06 16:16:01 |
Germany: Backdoor found in four smartphone models; 20,000 users infected (lien direct) |
German cyber-security agency warns against buying or using four low-end smartphone models. |
|
|
|
|
2019-06-06 11:05:00 |
Cryptocurrency startup hacks itself before hacker gets a chance to steal users funds (lien direct) |
Backdoor discovered in Agama cryptocurrency wallet. Unconventional tactic saves users from getting robbed. |
|
|
|
|
2019-06-06 10:53:02 |
Platinum APT hides backdoor communication in text (lien direct) |
The hackers use steganographic techniques to hide their activities. |
|
|
|
|
2019-06-06 09:39:01 |
Remote attack flaw found in IPTV streaming service (lien direct) |
The bug could be used by hackers to intercept your streaming and steal your information. |
|
|
|
|
2019-06-06 09:14:01 |
Cryptojacking campaign strikes China with fileless attacks (lien direct) |
Mining for Monero is the campaign's ultimate goal. |
|
|
|
|
2019-06-05 21:07:02 |
New RCE vulnerability impacts nearly half of the internet\'s email servers (lien direct) |
Exim vulnerability lets attackers run commands as root on remote email servers. |
Vulnerability
|
|
★★★★★
|
|
2019-06-05 19:07:01 |
Apple deprecates SHA-1 certificates in iOS 13 and macOS Catalina (lien direct) |
Apple joins Google, Firefox, and Microsoft in banning SHA-1-signed TLS certs. |
|
|
|
|
2019-06-05 17:11:04 |
Two-thirds of iOS apps disable ATS, an iOS security feature (lien direct) |
Three and a half years after its launch, ATS is still not widely adopted. |
|
|
|
|
2019-06-05 11:35:05 |
440 million Android users installed apps with an aggressive advertising plugin (lien direct) |
New BeiTaAd adware found in 238 apps available on the official Google Play Store. |
|
|
|
|
2019-06-05 10:15:02 |
Malboard: Hackers can now pose as victims through their keyboards (lien direct) |
Our keystrokes can verify who we are but researchers show behavioral verification systems can be easily fooled. |
|
|
|
|
2019-06-05 10:00:00 |
This is how hackers make money from your stolen medical data (lien direct) |
Stolen medical information can sell for up to six times as much as PII, and there are reasons for that. |
|
|
|
|
2019-06-04 22:51:01 |
Google Chrome 75 released with secret Reader Mode (lien direct) |
Chrome 75 comes with a hidden Reader Mode, bug fixes, and nothing much. |
|
|
|
|
2019-06-04 21:21:00 |
Even the NSA is urging Windows users to patch BlueKeep (CVE-2019-0708) (lien direct) |
NSA issues ominous security advisory after Microsoft published two similar warnings last month. |
|
|
|
|
2019-06-04 19:30:05 |
Only 5.5% of all vulnerabilities are ever exploited in the wild (lien direct) |
Most vulnerabilities that are exploited in the wild have a CVSS severity score of 9 or 10. |
|
|
|
|
2019-06-04 14:32:01 |
WWDC 2019: \'Sign in with Apple\' will be mandatory for all apps using third-party login systems (lien direct) |
Apple wants users to have a privacy-focused login system at their disposal at any time. |
|
|
|
|
2019-06-04 11:42:01 |
New research shows personalized ads are just barely more efficient than dumb ads (lien direct) |
Targeted ads make 4% more revenue than classic (dumb) contextual ads, academics say. |
|
|
|
|
2019-06-04 10:34:00 |
BlackSquid malware uses bag of exploits to drop cryptocurrency miners (lien direct) |
The new malware family infects web servers to mine for cryptocurrency. |
Malware
|
|
|
|
2019-06-04 08:46:04 |
Massive Quest Diagnostics data breach impacts 12 million patients (lien direct) |
Financial and medical information has potentially been exposed. |
Data Breach
|
|
|
|
2019-06-04 08:00:00 |
(Déjà vu) Hollywood lie: Bank hacks take months, not seconds (lien direct) |
A modern bank cyber-heist is methodically planned and usually takes months. |
|
|
|
|
2019-06-04 08:00:00 |
The best beach reads for hackers in 2019 (lien direct) |
Interested in the world of cybersecurity? Consider picking up a copy of these books to enjoy over summer. |
|
|
|
|
2019-06-04 08:00:00 |
(Déjà vu) Hollywood lie: Bank hacks takes months, not seconds (lien direct) |
A modern bank cyber-heist is methodically planned and usually takes months. |
|
|
|
|
2019-06-03 18:32:00 |
WWDC 2019: Apple announces \'Sign in with Apple\' feature (lien direct) |
Apple's new third-party login system will focus on user privacy, preventing user tracking. |
|
|
|
|
2019-06-03 17:33:00 |
New Iranian hacking tool leaked on Telegram (lien direct) |
New Iranian hacking tool is named Jason and can be used to brute-force Microsoft Exchange email servers. |
Tool
|
|
|
|
2019-06-03 15:15:04 |
Russia says Tinder must share user data, private messages (lien direct) |
Russian authorities add Tinder to database that requires company to share user data with the government. |
|
|
|
|
2019-06-03 12:00:00 |
Apple still has problems with stopping synthetic clicks (lien direct) |
Mac security researcher discloses zero-day to bypass ban on synthetic events. |
|
|
|
|
2019-06-03 11:41:05 |
US to demand five years of your social media, email account info in visa application (lien direct) |
The data demand will apply to tourists and potential immigrants. |
|
|
|
|
2019-06-03 01:09:04 |
Wave of SIM swapping attacks hit US cryptocurrency users (lien direct) |
Something strange happened last week, with tens of US-based cryptocurrency users seeing SIM swapping attacks. |
|
|
|
|
2019-06-01 09:22:00 |
GandCrab ransomware operation says it\'s shutting down (lien direct) |
GandCrab crew says it made enough money and plans to retire within a month. |
Ransomware
|
|
|
|
2019-06-01 07:00:00 |
New attack creates ghost taps on modern Android smartphones (lien direct) |
Academics abuse NFC-enabled devices with capacitive touchscreens to induce fake screen taps. |
|
|
|
|
2019-05-31 14:09:03 |
Google threatens to delist Chrome extensions installed by deceptive tactics (lien direct) |
Google cracks down on misleading marketing and extensions with shady descriptions. |
Guideline
|
|
|
|
2019-05-31 11:55:04 |
Developers demand Apple API solution for parental control apps (lien direct) |
Apple's widespread blocking of these applications is at the heart of the chaos. |
|
|
|
|
2019-05-31 11:31:03 |
Microsoft issues second warning about patching BlueKeep as PoC code goes public (lien direct) |
Time's running out on patching older systems against the BlueKeep vulnerability. |
Patching
|
|
|
|
2019-05-31 10:55:02 |
ISPs must now ask for permission before selling your data, Maine rules (lien direct) |
Internet providers will not be able to penalize those who refuse, either. |
|
|
|
|
2019-05-31 10:11:04 |
One of New York\'s largest nonprofits suffers data breach (lien direct) |
People Inc. says an employee email account was the source. |
Data Breach
|
|
|
|
2019-05-30 23:32:05 |
Russian military moves closer to replacing Windows with Astra Linux (lien direct) |
The Chinese military is also working on a similar plan to replace Windows with a custom OS. |
|
|
|
|
2019-05-30 19:41:02 |
Google takes a stance against permission-grabbing Chrome extensions (lien direct) |
Google also limits what types of third-party apps can access a user's Drive files. |
|
|
|
|
2019-05-30 16:50:00 |
I2P network proposed as the next hiding spot for criminal operations (lien direct) |
At least one criminal market has moved from Tor to I2P. Others asked to do so as well. |
|
|
|
|
2019-05-30 14:30:01 |
Unsecured database exposes 85GB in security logs of major hotel chains (lien direct) |
The source of the exposure appears to stem from a management company for Marriott, Plaza, and others. |
|
|
|
|
2019-05-30 11:51:02 |
Turla turns PowerShell into a weapon in attacks against EU diplomats (lien direct) |
The cyberspies have ramped up their efforts with refreshed hacking tools. |
|
|
|
|
2019-05-30 10:17:01 |
CrowdStrike reveals share price ahead of IPO (lien direct) |
The decision comes after the settlement of a court case concerning the CrowdStrike Falcon flagship product. |
|
|
|
|
2019-05-30 09:05:00 |
Checkers restaurant chain discloses card breach (lien direct) |
POS malware discovered installed at 102 Checkers and Rally's restaurants. |
Malware
|
|
|