Src |
Date (GMT) |
Titre |
Description |
Tags |
Stories |
Notes |
|
2019-09-17 13:00:04 |
Gootkit malware crew left their database exposed online without a password (lien direct) |
Even cyber-criminal gangs can't secure their MongoDB servers properly. |
Malware
|
|
|
|
2019-09-17 12:20:40 |
Skidmap malware buries into the kernel to hide illicit cryptocurrency mining (lien direct) |
The Linux malware makes use of a rootkit to disguise itself on infected machines. |
Malware
|
|
|
|
2019-09-17 11:10:24 |
Financial asset firm PCI ordered to pay $1.5 million for poor cybersecurity practices (lien direct) |
Phillip Capital Inc. has been penalized for a data breach and failing to disclose the incident to clients quickly. |
Data Breach
|
|
|
|
2019-09-16 20:08:44 |
Data of 24.3 million Lumin PDF users shared on hacking forum (lien direct) |
The person who leaked the data claims it notified Lumin PDF earlier this year but got no reply. |
|
|
|
|
2019-09-16 11:51:00 |
Emotet, today\'s most dangerous botnet, comes back to life (lien direct) |
Emotet botnet resumes malspam operations after going silent for nearly four months. |
|
|
|
|
2019-09-16 11:00:06 |
Popular consumer and enterprise routers, IoT devices contain remote access vulnerabilities (lien direct) |
A new study reveals vulnerability rates are not decreasing in our connected devices -- far from it. |
Vulnerability
|
|
|
|
2019-09-16 08:45:40 |
LastPass bug leaks credentials from previous site (lien direct) |
LastPass has released a fix last week. Vulnerability details are now public. Users advised to update. |
Vulnerability
|
LastPass
|
|
|
2019-09-16 08:00:07 |
US government demands data on thousands of gun scope app users (lien direct) |
Over 10,000 users may be caught in the crossfire of ICE's request. |
|
|
|
|
2019-09-16 08:00:00 |
Database leaks data on most of Ecuador\'s citizens, including 6.7 million children (lien direct) |
Elasticsearch server leaks personal data on Ecuador's citizens, their family trees, and children, but also some users' financial records and car registration information. |
|
|
|
|
2019-09-16 06:19:14 |
Drones attack Saudi Arabia oil production plants, slice output in half (lien direct) |
The price and supply fallout highlights how technology has the potential to threaten core economic systems. |
|
|
|
|
2019-09-16 05:19:37 |
Pen test goes pear-shaped: cybersecurity firm staff arrested over courthouse burglary (lien direct) |
A midnight raid was not what court administrators had in mind for electronic record security tests. |
|
|
|
|
2019-09-16 00:48:04 |
Israeli police arrest execs from vendor of mobile surveillance tech (lien direct) |
Ability execs arrests over the weekend after raids on the company's offices. |
|
|
|
|
2019-09-13 22:36:03 |
Disqus & Kickstarter hacker warns against password reuse (lien direct) |
Former hacker aims for a white-hat career, apologizes to one of his victims, and gives out advice to users. |
|
|
|
|
2019-09-13 16:47:00 |
US Treasury sanctions three North Korean hacking groups (lien direct) |
US wants to seize financial assets associated with the Lazarus Group, Bluenoroff, and Andarial. |
Medical
|
APT 38
|
|
|
2019-09-13 11:58:02 |
InnfiRAT malware lurks in your machine to steal cryptocurrency wallet data (lien direct) |
The new Trojan will also harvest information from open browser sessions. |
Malware
|
|
|
|
2019-09-13 10:54:00 |
Scammer behind sextortion campaigns arrested in France (lien direct) |
Twenty-year-old Frenchman arrested at Paris Airport on Monday for extorting tens of victims. |
|
|
|
|
2019-09-13 10:45:02 |
France will attempt to block Facebook\'s Libra cryptocurrency on European soil (lien direct) |
Country officials say unresolved privacy issues could pose a risk to consumers. |
|
|
|
|
2019-09-12 19:20:03 |
(Déjà vu) Sophos open-sources Sandboxie, an utility for sandboxing any application (lien direct) |
Sandboxie is now a free download. Source code to be open-sourced at a later date. |
|
|
|
|
2019-09-12 19:20:00 |
Sophos open-sources Sandboxie, a utility for sandboxing any application (lien direct) |
Sandboxie is now a free download. Source code to be open-sourced at a later date. |
|
|
|
|
2019-09-12 16:00:00 |
Researchers invent cryptocurrency wallet that eliminates \'entire classes\' of vulnerabilities (lien direct) |
The key? Shifting to hardware isolation and system resets. |
|
|
|
|
2019-09-12 14:25:03 |
Hey Google: What we search for most in cybersecurity .. cyber security? (lien direct) |
Google search data reveals the most popular hacker in the world, alongside the cybersecurity topics we care most about. |
|
|
|
|
2019-09-12 13:30:00 |
(Déjà vu) Simjacker attack exploited in the wild to track users for at least two years (lien direct) |
Simjacker attack abuses STK and S@T Browser technologies installed on some SIM cards. |
|
|
|
|
2019-09-12 13:30:00 |
New Simjacker attack exploited in the wild to track users for at least two years (lien direct) |
Simjacker attack abuses STK and S@T Browser technologies installed on some SIM cards. |
|
|
|
|
2019-09-12 12:18:01 |
California mulls over ban of facial recognition tech in police body cameras (lien direct) |
The state Senate appears to be listening to appeals to reel in the widespread use of biometrics. |
|
|
|
|
2019-09-12 10:20:03 |
Google discloses vulnerability in Chrome OS \'built-in security key\' feature (lien direct) |
Security issue fixed in late June, with the release of Chrome OS 75. Additional remediation steps below. |
Vulnerability
|
|
|
|
2019-09-12 10:08:00 |
Most consumers will refuse to work with enterprises that won\'t keep their data secure (lien direct) |
There are ramifications for enterprise customer retention as an understanding of data protection increases. |
|
|
|
|
2019-09-11 23:14:02 |
Infamous surveillance tech vendor makes pledge to follow UN human rights policy (lien direct) |
Facing legal assault, NSO Group pledges to fight customers abusing its tools to spy on innocents, political opponents. |
|
|
|
|
2019-09-11 20:48:00 |
Most Android flashlight apps request an absurd number of permissions (lien direct) |
Two Android flashlight apps, in particular, are requesting 77 permissions... for some reason. |
|
|
|
|
2019-09-11 12:14:05 |
Telegram fixes privacy-breaking bug that stopped recipient message and image deletion (lien direct) |
Even after deletion, images would remain in storage on user devices. |
|
|
|
|
2019-09-11 10:28:01 |
Adobe Flash, Application Manager patch update squashes critical code execution bugs (lien direct) |
Two bugs could lead to arbitrary code being let loose on infected systems. |
Guideline
|
|
|
|
2019-09-11 09:37:00 |
Google to run DNS-over-HTTPS (DoH) experiment in Chrome (lien direct) |
Starting with Chrome 78, the browser will automatically switch to DoH-compatible servers for certain DNS providers. |
|
|
|
|
2019-09-10 22:47:01 |
281 suspects arrested in massive crackdown against BEC scammers (lien direct) |
Operation reWired: 167 suspects arrested in Nigeria, 74 in the US. |
|
|
|
|
2019-09-10 20:38:00 |
Intel server-grade CPUs impacted by new NetCAT attack (lien direct) |
Academics develop new network-based attack that steals keystrokes from an active SSH session. |
|
|
|
|
2019-09-10 19:07:04 |
(Déjà vu) Microsoft patches two zero-days in massive September 2019 Patch Tuesday (lien direct) |
Microsoft's September 2019 Patch Tuesday comes with 80 fixes, 17 of which are for critical bugs. |
|
|
|
|
2019-09-10 17:28:00 |
Mozilla launches Firefox VPN extension for US users (lien direct) |
New Firefox VPN extension expected to become Mozilla's first commercial service. |
|
|
|
|
2019-09-10 14:39:00 |
51 tech CEOs send open letter to Congress asking for a federal data privacy law (lien direct) |
CEOs who signed: Amazon, AT&T, Dell, IBM, SAP, Salesforce, Visa, Mastercard, and JP Morgan Chase. |
|
|
|
|
2019-09-10 12:12:04 |
Kaspersky launches anti-cheat solution for pro e-sports tournaments (lien direct) |
Because gaming cheats are not all that different from malware, Kaspersky launches e-sports anti-cheat solution. |
|
|
|
|
2019-09-10 11:30:00 |
PsiXBot malware upgraded with Google DNS over HTTPS, sexploitation kit (lien direct) |
The malware has been shaken up with new infrastructure and attack methods. |
Malware
|
|
|
|
2019-09-10 08:54:03 |
Student pleads guilty to IRS hack attempt for Trump tax returns (lien direct) |
Prosecutors call him a mastermind. Defenders say it was Wayne's World gone awry. |
Hack
|
|
|
|
2019-09-10 07:55:02 |
European police arrest Dark Web counterfeit currency traders (lien direct) |
Over €1 million in fake notes has been seized across Europe. |
|
|
|
|
2019-09-09 18:33:02 |
(Déjà vu) Security researchers expose another instance of Chrome patch gaping (lien direct) |
Security bug patched in Chrome's V8 JavaScript engine, but the fix will only reach Chrome tomorrow. |
|
|
|
|
2019-09-09 18:33:00 |
Security researchers expose another instance of Chrome patch gapping (lien direct) |
Security bug patched in Chrome's V8 JavaScript engine, but the fix will only reach Chrome tomorrow. |
|
|
|
|
2019-09-09 11:04:03 |
Newly discovered cyber-espionage malware abuses Windows BITS service (lien direct) |
New backdoor trojan uses Windows BITS service to hide traffic to and from its command-and-control servers. |
Malware
|
|
|
|
2019-09-09 10:35:01 |
Telnet backdoor vulnerabilities impact over a million IoT radio devices (lien direct) |
Devices can be remotely exploited as root without any need for user interaction. |
|
|
|
|
2019-09-09 09:01:00 |
Malicious Android apps containing Joker malware set up shop on Google Play (lien direct) |
Apps infected with the Trojan managed to circumvent Google store protections. |
Malware
|
|
|
|
2019-09-09 08:27:02 |
Cyber-security incident at US power grid entity linked to unpatched firewalls (lien direct) |
Hackers used a DoS flaw to reboot firewalls at an electric power grid operator for hours. |
|
|
|
|
2019-09-09 08:17:01 |
HackerOne bug bounty platform closes new $36.4m funding round (lien direct) |
The Series D round brings overall funding to $110.4 million. |
|
|
|
|
2019-09-08 22:49:00 |
(Déjà vu) How to enable DNS-over-HTTPS (DoH) in Google Chrome (lien direct) |
A step by step guide to enable DNS-over-HTTPS (DoH) support in the Firefox browser. |
|
|
|
|
2019-09-07 20:39:04 |
Millions of Exim servers vulnerable to root-granting exploit (lien direct) |
The internet's most popular email server impacted by second major bug this summer. |
|
|
|
|
2019-09-07 11:53:00 |
No municipality paid ransoms in \'coordinated ransomware attack\' that hit Texas (lien direct) |
More than half of impacted cities and towns are now operating as normal. |
Ransomware
|
|
|