What's new arround internet
| Src | Date (GMT) | Titre | Description | Tags | Stories | Notes |
 |
2019-07-02 13:02:02 | Many Phoenix Contact PLCs Still Vulnerable Months After Researcher Issues Warning (lien direct) | Several months after a researcher issued a warning about over 1,200 Phoenix Contact programmable logic controllers (PLCs) being exposed to remote attacks from the internet, many organizations still haven't taken any measures to secure their systems. | |||
|
2019-07-02 05:57:04 | Firefox Update to Address Antivirus TLS Errors (lien direct) | Mozilla revealed on Monday that the upcoming Firefox 68 will address TLS issues caused by antiviruses by automatically making changes to the browser's configuration when a man-in-the-middle (MitM) error is detected. | |||
|
2019-07-02 04:54:05 | Researchers Analyze Vietnamese Hackers\' Suite of RATs (lien direct) | BlackBerry Cylance security researchers have analyzed a suite of remote access Trojans (RATs) that the Vietnam-linked threat actor OceanLotus has been using in attacks for the past three years. | Threat | APT 32 | |
|
2019-07-02 04:30:00 | Trump Move to Ease Huawei Sanctions Sparks Anger, Confusion (lien direct) | The US trade war truce with China which could ease sanctions on Huawei has prompted a backlash from lawmakers over national security concerns amid confusion over how the deal may impact the Chinese tech giant. | |||
|
2019-07-01 19:28:02 | Hardcoded Credentials Expose SICK Controllers to Remote Attacks (lien direct) | A researcher has discovered that remote hackers could reconfigure or disrupt MSC800 modular system controllers from Germany-based sensor maker SICK due to the existence of hardcoded credentials. | |||
|
2019-07-01 18:20:03 | Smart Home Hacked via Vulnerabilities, Social Engineering (lien direct) | Hacking Smart Homes - the Stuff of Horror Movies | |||
|
2019-07-01 17:22:00 | Risk-Based Vulnerability Management is a Must for Security & Compliance (lien direct) | Vulnerability management and compliance go hand-in-hand. Just as adhering to certain regulatory standards can help an organization manage vulnerabilities more effectively, managing vulnerabilities effectively can make an organization less susceptible to the sorts of security incidents that could render it noncompliant. | Vulnerability | ||
|
2019-07-01 17:15:00 | European Legislation and the American Tech Industry (lien direct) | It may sound far-fetched, but American tech firms could be excused for wondering if the European Union is using consumer-oriented legislation as a form of protectionism for its smaller industry against foreign giants. | |||
|
2019-07-01 15:30:00 | Threat Actor Poisons OpenPGP Certificates (lien direct) | Poisoned certificates are in the OpenPGP SKS keyserver network after an unknown threat actor targeted the OpenPGP certificates of two high-profile community contributors. | Threat | ||
|
2019-07-01 14:59:02 | Cyber Deception Company TrapX Raises $18 Million (lien direct) | TrapX Security, a Silicon Valley-based company that provides cyber defense solutions powered by deception technology, on Monday announced that it raised $18 million in a Series C funding round. | |||
|
2019-07-01 13:44:05 | \'Good Chance\' for More US Exports to Huawei: Trump Aide (lien direct) | As the United States and China pursue trade talks, there is a "good chance" that more US firms will be granted licenses to sell products to controversial Chinese telecoms giant Huawei, White House economic advisor Larry Kudlow said Sunday. | |||
|
2019-07-01 13:05:00 | Dridex Employs Polymorphism in Recent Campaign (lien direct) | A recent campaign featuring the Dridex banking Trojan has shown extensive use of randomly generated variables and URL directories, eSentire's security researchers reveal. | |||
|
2019-07-01 12:52:00 | Trump Hints at Softer Stance on China\'s Huawei (lien direct) | President Donald Trump said on Saturday that US companies could sell equipment to Chinese telecom giant Huawei, indicating a potentially softer position on a key sticking point in the US-China trade war. "US companies can sell their equipment to Huawei," Trump told reporters in Osaka hours after sealing a tariff truce with Chinese President Xi Jinping. | |||
|
2019-07-01 05:34:05 | Singapore Government Announces Third Bug Bounty Program (lien direct) | Singapore on Monday announced its third bug bounty program aimed at testing the security of public-facing government systems. | |||
|
2019-07-01 04:43:03 | Massachusetts City Bans Facial Recognition Technology (lien direct) | A Boston suburb has voted to ban the use of facial recognition technology by police and other city departments. The Somerville City Council on Thursday voted 11-0 to bar the technology that critics say invades privacy and can often be wrong. | |||
|
2019-06-28 16:49:00 | Some Medtronic Insulin Pumps Vulnerable to Hacker Attacks (lien direct) | Medtronic and the US government have warned that some Medtronic MiniMed insulin pumps are vulnerable to hacker attacks that can have serious consequences for their thousands of users. | |||
|
2019-06-28 15:47:04 | Italy Fines Facebook Over Cambridge Analytica Case (lien direct) | Italy's data protection watchdog slammed Facebook Friday with a fine of one million euros ($1.1 million) for violating privacy laws over the Cambridge Analytica scandal. | |||
|
2019-06-28 14:58:01 | "Silexbot" Malware Bricks IoT Devices (lien direct) | A new piece of malware is targeting improperly secured Internet of Things (IoT) devices with the purpose of bricking them, Akamai's security researchers have discovered. | Malware | ||
|
2019-06-28 14:37:01 | Provider of Data Integration Services for Fortune 100 Firms Exposed Sensitive Files (lien direct) | Attunity, a Qlik-owned data integration and big data management company whose solutions are used by over 2,000 enterprises and half of the Fortune 100 firms, exposed a significant amount of sensitive data through unprotected Amazon S3 buckets. | |||
|
2019-06-28 14:07:03 | New Spelevo Exploit Kit Spreads via B2B Website (lien direct) | A newly discovered exploit kit is being disseminated via a compromised business-to-business website, Cisco Talos security researchers report. | |||
|
2019-06-28 13:19:00 | Industry Reactions to Nation-State Hacking of Global Telcos (lien direct) | On June 25, 2019, Cybereason reported that hackers, most likely China's state affiliated APT10 group, had comprehensively hacked numerous telecommunications companies around the world. | APT 10 | ||
|
2019-06-28 12:03:04 | Baltimore Approves $10M in Funding for Cyber Attack Relief (lien direct) | Baltimore City officials approved using $10 million in excess revenue to cover the ongoing cost of the cyber attacks that immobilized some of the city's systems almost two months ago. | |||
|
2019-06-28 05:52:01 | Russian Tech Giant Yandex Targeted With \'Regin\' Malware: Report (lien direct) | Hackers believed to be working for Western intelligence agencies breached the systems of Russian tech giant Yandex last year as part of an attack that involved a new variant of the Regin malware, Reuters reported on Thursday. | |||
|
2019-06-28 04:58:04 | Former Equifax Executive Gets 4 Months for Insider Trading (lien direct) | A former Equifax executive who sold stock a week and a half before the company announced a massive data breach was sentenced Thursday to serve four months in federal prison for insider trading. | Data Breach | Equifax | |
|
2019-06-28 04:45:00 | US Cyber Attack on Iran: Search to Exploit Flaw (lien direct) | 
|
|||
|
2019-06-27 17:14:05 | Many Potential Backdoors Found in Huawei Equipment: Study (lien direct) | A report published this week by US-based firmware and IoT security solutions provider Finite State shows that Huawei equipment is affected by many vulnerabilities, including potential backdoors, and the company's devices are less secure compared to the products of other vendors. | |||
|
2019-06-27 14:56:04 | Iranian Cyberspies Update Infrastructure Following Recent Report (lien direct) | The Iran-linked cyberespionage group APT33 has updated its infrastructure following a March 2019 report detailing its activities, according to researchers from Recorded Future. | APT33 APT 33 | ||
|
2019-06-27 14:46:01 | ENISA Transforms to European Union Agency for Cybersecurity (lien direct) | A New ENISA to Develop New Harmonized European Security Certifications | |||
|
2019-06-27 14:25:01 | Essential IIoT Security Trends for 2020 (lien direct) | Technologies like artificial intelligence (AI), augmented reality (AR) and machine learning (ML) once seemed stranger than fiction, but are now playing a growing role in industrial environments. But the change comes with some risks. Market research firm IoT Analytics forecasts that spending on Industry 4.0 products and services will skyrocket from $119 billion in 2020 to $310 billion in 2023. | |||
|
2019-06-27 14:12:00 | Google Makes DNS Over HTTPS Generally Available (lien direct) | Google this week announced the general availability of its standard DNS over HTTPS (DoH) service, which includes full RFC 8484 support. | |||
|
2019-06-27 13:39:03 | 2nd Florida City Pays Hackers, as 3rd City Faces Breach (lien direct) | A second small Florida city this month has paid hundreds of thousands of dollars to hackers who took over most of its computer operations, an official said Wednesday, while a third Florida city said its data was breached. | |||
|
2019-06-27 13:26:01 | Hackers Steal Millions from Cryptocurrency Exchange Bitrue (lien direct) | Singapore-based cryptocurrency exchange Bitrue revealed on Thursday that hackers managed to access and move the funds of tens of its customers. | |||
|
2019-06-27 11:35:03 | Chrome OS 75 Adds More Mitigations for Intel MDS Flaws (lien direct) | Chrome OS version 75, which Google released on Wednesday in the stable channel, adds more mitigations for recently disclosed Microarchitectural Data Sampling (MDS) vulnerabilities affecting most Intel processors made in the last decade. | |||
|
2019-06-27 05:29:03 | Critical Flaws Found in Cisco Data Center Network Manager (lien direct) | Cisco on Wednesday informed customers that its Data Center Network Manager (DCNM) product is affected by several vulnerabilities, including ones described as “critical” and “high severity.” | |||
|
2019-06-27 04:29:02 | French Consumer Group Launches Class Action Against Google (lien direct) | A French consumer rights group said Wednesday that it has launched a class action lawsuit against US tech giant Google for violating the EU's strict data privacy laws. | |||
|
2019-06-23 01:21:01 | Report: Jet Propulsion Laboratory Hacked for 10 Months (lien direct) | A report says hackers stole data from NASA's Jet Propulsion Laboratory in Southern California for nearly a year without being detected. | |||
|
2019-06-23 01:13:03 | U.S. Launched Cyber Attacks on Iran After Drone Shootdown: Reports (lien direct) | 
The United States launched cyber attacks against Iranian missile control systems and a spy network this week after Tehran downed an American surveillance drone, US media reported on Saturday.
|
|||
|
2019-06-21 18:07:00 | New Botnet Exploits Android Debug Bridge and SSH (lien direct) | A newly discovered crypto-currency mining botnet can spread via open ADB (Android Debug Bridge) ports and Secure Shell (SSH), Trend Micro reports. | |||
|
2019-06-21 17:21:04 | Data on Patients Taking Vascepa Prescription Medication Exposed (lien direct) | 78,000 Patient Healthcare Records Exposed in Unsecured MongoDB Database | |||
|
2019-06-21 14:46:02 | macOS Crypto-Miner Emulates Linux (lien direct) | New crypto-currency mining malware is targeting systems running macOS, and works by emulating Linux, Malwarebytes security researchers have discovered. | Malware | ||
|
2019-06-21 13:58:04 | Millions of Devices Exposed to Attacks Due to Flaw in PC-Doctor Software (lien direct) | More than 100 million computers from Dell and other vendors may have been exposed to hacker attacks due to a serious vulnerability in software made by hardware diagnostic tools provider PC-Doctor. | Vulnerability | ||
|
2019-06-21 11:54:04 | Massive Data Breach at Canada Credit Union Giant Desjardins (lien direct) | Canada's Desjardins credit union announced Thursday that the personal banking information of 2.9 million customers had been stolen by an employee and distributed to outside parties. | Data Breach | ||
|
2019-06-21 11:04:03 | UK Regulator Calls Out Compliance Failures in Targeted Advertising Industry (lien direct) | The UK regulator for data protection and privacy (the Information Commissioner's Office -- ICO) has published a report on its ongoing investigation into the adtech and real-time bidding (RTB) industries. This is a work in progress, but it is clear that the ICO is not confident that the collection of personal data and subsequent processing of that data by RTB conforms with current legislation. | |||
|
2019-06-21 10:55:01 | Phishing Campaign Impersonates DHS Alerts (lien direct) | The Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert on a phishing campaign using attachments that impersonate the Department of Homeland Security (DHS). In an effort to make their attack successful, the phishers spoofed the sender email address to appear as a National Cyber Awareness System (NCAS) alert. | |||
|
2019-06-21 10:33:01 | Cloud Data Protection Firm Druva Raises $130 Million (lien direct) | Cloud data protection and management provider Druva on Thursday announced $130 million in new funding, which brings the total raised by the company to date to $328 million. | |||
|
2019-06-21 07:56:03 | Mozilla Patches Second Firefox Zero-Day Used in Cryptocurrency Attacks (lien direct) | Mozilla on Thursday patched a second zero-day vulnerability in Firefox that has been exploited by malicious actors to deliver Mac malware to cryptocurrency exchanges. | Malware Vulnerability | ||
|
2019-06-20 21:20:04 | Google Open-Sources Cryptographic Protocol (lien direct) | Google this week rolled out a new type of multi-party computation (MPC) to help organizations better collaborate with confidential data sets. | |||
|
2019-06-20 18:11:01 | Russia-Linked Hackers Hijack Infrastructure of Iranian Threat Group (lien direct) | Russia-Linked Hackers Use New Toolset and Likely Took Over Servers Operated by Iran-Linked "OilRig" Threat Group | Threat | APT 34 | |
|
2019-06-20 15:36:04 | Firefox Zero-Day Exploited to Deliver Malware to Cryptocurrency Exchanges (lien direct) | The recently patched Firefox vulnerability tracked as CVE-2019-11707 has been exploited to deliver Mac (and possibly Windows) malware to the employees of cryptocurrency exchanges. | Malware | ||
|
2019-06-20 14:06:05 | Indegy Launches Industrial Cybersecurity-as-a-Service Offering (lien direct) | Indegy on Thursday announced the general availability of CIRRUS, a new industrial cybersecurity-as-a-service (ICSaaS) offering. CIRRUS is designed to help organizations of all sizes monitor and protect their operational technology (OT) environments using cloud technologies and real-time threat intelligence sharing. | Threat |
To see everything:
Our RSS (filtrered)
