Src |
Date (GMT) |
Titre |
Description |
Tags |
Stories |
Notes |
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-14 20:58:00 |
Bing recommends piracy tutorial when searching for Office 2019 (lien direct) |
Oh, Bing! Not again! |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-14 16:00:00 |
Facebook bug exposed private photos of 6.8 million users (lien direct) |
Up to 1,500 apps built by 876 developers could have had accessed the private photos of 6.8 million users. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-14 15:09:00 |
Signal: We can\'t include a backdoor in our app for the Australian government (lien direct) |
The Signal app's design and open source code policy makes this impossible. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-14 13:41:04 |
Fancy Bear exploits Brexit to target government groups with Zebrocy Trojan (lien direct) |
A number of former USSR nation states are also on the target list. |
|
APT 28
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-14 08:51:01 |
Trump, Google, United Nations are among 2018\'s worst password offenders (lien direct) |
Some of the biggest names in politics and tech are responsible for this year's worst security gaffes. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-14 07:27:00 |
Save the Children Foundation duped by hackers into paying out $1 million (lien direct) |
The fraudsters broke into an email account to launch an elaborate scheme designed to scam the charity. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-14 05:50:00 |
Logitech app security flaw allowed keystroke injection attacks (lien direct) |
Google security researchers shame Logitech into releasing security update for insecure app. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-13 22:18:00 |
Extortion emails carrying bomb threats cause panic across the US (lien direct) |
Police in New York, Chicago, Detroit, San Francisco, and Washington tell Americans to stay calm. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-13 16:48:00 |
Twitter says it receives half a million of spam reports per month (lien direct) |
Twitter's latest Transparency Report also shows a rise in government requests for user data. |
Spam
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-13 13:33:00 |
Shamoon malware destroys data at Italian oil and gas company (lien direct) |
About a tenth of Saipem's IT infrastructure infected with infamous data-wiping Shamoon malware. |
Malware
|
|
★★
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-13 10:57:02 |
AriseBank execs forced to pay $2.7 million to settle SEC charges of cryptocurrency fraud (lien direct) |
The organization claimed to operate a unique, decentralized bank via the blockchain. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-13 09:06:00 |
WordPress plugs bug that led to Google indexing some user passwords (lien direct) |
WordPress 5.0.1 also fixes seven security vulnerabilities. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-12 23:34:00 |
Bug allowed full takeover of Samsung user accounts (lien direct) |
Samsung awards researcher a $13,300 reward for finding three CSRF issues on its user portal. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-12 22:02:00 |
Rhode Island sues Google after latest Google+ API leak (lien direct) |
Google sued within a day after announcing latest Google+ API leak. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-12 21:50:01 |
Many of 2018\'s most dangerous Android and iOS security flaws still threaten your mobile security (lien direct) |
Bypassing passcodes, malware-laden apps, and inherent design flaws exposing almost all known mobile devices made up part of the security problems found in iOS and Android. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-12 18:21:00 |
Ships infected with ransomware, USB malware, worms (lien direct) |
Ships are the victims of cyber-security incidents more often than people think. Industry groups publish cyber-security guidelines to address issues. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-12 11:10:04 |
Former Mt. Gox CEO could face 10 years behind bars in embezzlement case (lien direct) |
Prosecutors are gunning for a lengthy prison sentence. Mark Karpeles has denied stealing investor funds. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-12 07:47:00 |
China blamed for Marriott data breach (lien direct) |
500 million customers were impacted. Investigators believe that state-sponsored Chinese hackers are to blame. |
Data Breach
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-12 01:45:02 |
Firefox 64 released with a Windows-like task manager (lien direct) |
Firefox 64 also comes with support for multi-tab selections and final distrust of all Symantec SSL certificates. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-12 00:11:04 |
US border agents aren\'t deleting travelers\' data after device searches (lien direct) |
In addition, CBP agents also didn't carry out any software-assisted searches for more than seven months because a manager forgot to renew a license agreement. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-11 19:54:00 |
For the fourth month in a row, Microsoft patches Windows zero-day used in the wild (lien direct) |
Microsoft also fixes 38 other security bugs, 9 of which are rated "Critical." |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-11 16:29:00 |
Android malware steals money from PayPal accounts while users watch helpless (lien direct) |
Android trojan waits for users to enter PayPal credentials and two-factor security code before triggering money transfers. |
Malware
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-11 14:55:00 |
Super Micro says external security audit found no evidence of backdoor chips (lien direct) |
Super Micro sends a letter to customers with the results of a third-party security audit. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-11 12:46:00 |
Over 40,000 credentials for government portals found online (lien direct) |
Malware operators have collected login credentials for government portals in Italy, Saudi Arabia, Portugal, Bulgaria, Romania, more. |
Malware
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-10 23:06:00 |
Hackers ramp up attacks on mining rigs before Ethereum price crashes into the gutter (lien direct) |
Attackers scan for Ethereum wallets and mining rigs that have carelessly exposed port 8545 on the Internet. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-10 19:20:00 |
Google+ hit by second API bug impacting 52.5 million users (lien direct) |
Google moves Google+ sunset date forward, from August 2019 to April 2019. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-10 16:47:00 |
Half of the Tor Project\'s funding now comes from the private sector (lien direct) |
Tor Project reports $4.2 million income in 2017, of which only 51 percent came from government funds. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-10 05:30:00 |
Android adware tricks ad networks into thinking it\'s an iPhone to make more money (lien direct) |
New Android adware discovered in 22 apps downloaded over two million times. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-09 10:39:03 |
Cybercrime and malware, 2019 predictions (lien direct) |
Experts weigh in on what they believe will happen to the world of cybercrime, malware, and botnets in the coming year. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-08 23:44:04 |
Malicious sites abuse 11-year-old Firefox bug that Mozilla failed to fix (lien direct) |
Bug dealt with in Chrome and Edge, but still a problem for Firefox users. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-08 08:30:00 |
Those annoying sextortion scams are redirecting users to ransomware now (lien direct) |
Sextortion emails take a dark turn and are now trying to infect users with the GandCrab ransomware. |
Ransomware
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-07 22:34:00 |
Senator blasts FTC for failing to crack down on Google\'s ad fraud problems (lien direct) |
US Senator says Google is profiting off advertising fraud and has no interest in addressing it. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-07 18:38:00 |
DHS looking into tracking Monero and Zcash transactions (lien direct) |
DHS has had great success with tracking and analyzing Bitcoin transactions already. They are now looking for similar solutions for tracking "privacy coins." |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-07 17:04:03 |
OpSec mistake brings down network of Dark Web money counterfeiter (lien direct) |
European law enforcement conducts 300 house searches and makes 235 arrests. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-07 14:53:04 |
Marriott to reimburse some guests for new passports after massive data breach (lien direct) |
Hotel chain responds to US senator. Says it will foot the bill for some users' passport replacement costs. |
Data Breach
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-07 01:24:04 |
Eastern European banks lose tens of millions of dollars in Hollywood-style hacks (lien direct) |
Cybercriminals leave laptops, Raspberry Pi boards, and USB thumb drives connected to banks IT networks. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-07 00:06:00 |
Industrial espionage fears arise over Chrome extension caught stealing browsing history (lien direct) |
Company test runs own traffic analysis service and finds malicious Chrome extension in its own backyard. Ooops! |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-06 15:05:03 |
ESET discovers 21 new Linux malware families (lien direct) |
All malware strains are trojanized versions of the OpenSSH server or client apps that include keylogger and backdoor capabilities. |
Malware
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-06 01:41:01 |
Twelve US states join for the first time to file multistate data breach lawsuit (lien direct) |
Lawsuit details a long list of security fails on MIE's part. |
Data Breach
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-05 23:44:00 |
A botnet of over 20,000 WordPress sites is attacking other WordPress sites (lien direct) |
Botnet is still up and running but law enforcement has been notified. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-05 18:55:01 |
BeatStars discloses security breach in Twitter live stream (lien direct) |
BeatStars website mass-defaced after hacker intrusion. Website back up and running again. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-05 15:26:00 |
Adobe releases out-of-band security update for newly discovered Flash zero-day (lien direct) |
Zero-day spotted embedded in malicious Office documents uploaded on VirusTotal. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-05 15:00:00 |
Cyber-espionage group uses Chrome extension to infect victims (lien direct) |
Suspected North Korean APT uses Google Chrome extension to infect victims in the academic sector. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-05 04:13:00 |
The CoAP protocol is the next big thing for DDoS attacks (lien direct) |
CoAP DDoS attacks have already been detected in the wild, some clocking at 320Gbps. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-04 21:35:01 |
Google releases Chrome 71 with a focus on security features (lien direct) |
Google improves Chrome's ability to filter abusive ads and detect shady mobile subscription forms. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-04 15:44:00 |
(Déjà vu) Over 100,000 PCs infected with new ransomware strain in China (lien direct) |
Ransomware authors might have shot themselves in the foot by handling payments via WeChat. Local law enforcement could track ransom payments. |
Ransomware
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-04 15:44:00 |
(Déjà vu) Over 20,000 PCs infected with new ransomware strain in China (lien direct) |
Ransomware authors might have shot themselves in the foot by handling payments via WeChat. Local law enforcement could track ransom payments. |
Ransomware
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-04 02:17:00 |
Quora discloses mega breach impacting 100 million users (lien direct) |
Account info, passwords, emails, private messages, and user votes were exposed. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-04 01:36:03 |
Researchers discover SplitSpectre, a new Spectre-like CPU attack (lien direct) |
Spectre-like variations continue to be discovered, just as academics predicted at the start of 2018. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2018-12-03 20:19:02 |
Two iOS fitness apps tricked users into making TouchID payments (lien direct) |
Both apps -"Fitness Balance app" and "Calories Tracker app"- removed from the Apple App Store. |
|
|
|