Src |
Date (GMT) |
Titre |
Description |
Tags |
Stories |
Notes |
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-31 11:51:00 |
At least 13 managed service providers were used to push ransomware this year (lien direct) |
Once hackers compromise an MSP's network, they can use its remote access tools to deploy ransomware to hundreds of companies and thousands of computers. |
Ransomware
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-31 11:09:00 |
This is how malicious Android apps avoid Google\'s security vetting (lien direct) |
Cyberattackers are using a variety of tactics to stop Google spotting suspicious app behavior. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-30 20:55:26 |
Hackers who extorted Uber and LinkedIn plead guilty (lien direct) |
The two hackers stole 57 million user and driver details from Uber and 90,000 Lynda.com user details from LinkedIn. They then tried to extort the companies for "bug bounties." |
|
Uber
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-30 18:05:34 |
Ubisoft reports 93% drop in DDoS attacks after pushing back against attackers (lien direct) |
Ubisoft said it sent cease-and-desist letters to DDoS service providers, filed complaints against offending players. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-30 12:06:54 |
Confirmed: North Korean malware found on Indian nuclear plant\'s network (lien direct) |
Two days after rumors of a malware infection at the Kudankulam Nuclear Power Plant surfaced on Twitter, the plant's parent company confirms the security breach. |
Malware
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-30 11:38:04 |
Corellium hits back against Apple lawsuit, claims iOS virtualization is for the common good (lien direct) |
The company also says that Apple's attitude to security research is “harmful.” |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-30 10:35:08 |
Zealcon software firm owner sentenced for tax fraud (lien direct) |
Cash was withheld from staff wages but did not end up in IRS coffers. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-29 21:52:00 |
Facebook sues Israeli surveillance vendor over WhatsApp zero-day (lien direct) |
Facebook says NSO Group developed WhatsApp zero-day used in May 2019 attacks against attorneys, journalists, human rights activists, political dissidents, diplomats, and government officials. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-29 18:50:29 |
Valve says that nearly all CS:GO key resales are being used to launder money (lien direct) |
Valve disables CS:GO container key resales in an effort against "worldwide fraud networks." |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-29 16:05:56 |
New \'unremovable\' xHelper malware has infected 45,000 Android devices (lien direct) |
Factory resets aren't helping. Neither are mobile antivirus solutions. Malware keeps reinstalling itself. |
Malware
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-29 10:13:00 |
Major vulnerability patched in the EU\'s eIDAS authentication system (lien direct) |
Exclusive: Vulnerability would have allowed attackers to pose as any EU citizen or business. |
Vulnerability
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-29 09:18:50 |
Fortinet acquires enSilo in endpoint security portfolio push (lien direct) |
The deal centers around enSilo's endpoint detection and response technology. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-29 00:17:41 |
Details for 1.3 million Indian payment cards put up for sale on Joker\'s Stash (lien direct) |
Exclusive: Today's Indian card dump considered one of the largest of its kind; prized at more than $130 million. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-28 21:21:36 |
Microsoft: Russian hackers are targeting sporting organizations ahead of Tokyo Olympics (lien direct) |
Microsoft said APT28 targeted "at least 16 national and international sporting and anti-doping organizations." |
|
APT 28
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-28 20:02:16 |
Largest cyber-attack in Georgia\'s history linked to hacked web hosting provider (lien direct) |
A hacker has defaced over 15,000 websites hosted on the infrastructure of Pro-Service, a Georgian web hosting provider, including government sites, local newspapers, and TV stations. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-28 16:43:15 |
Most system administrators prefer firewall GUIs over CLIs (lien direct) |
Almost 60% of respondents said they preferred managing a firewall via a GUI, rather than a clunky CLI. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-28 12:20:00 |
Industrial equipment to come under fire at the world\'s largest hacking contest (lien direct) |
Pwn2Own hacking contest to feature ICS SCADA equipment for the first time. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-28 10:41:35 |
UniCredit reveals data breach exposing 3 million customer records (lien direct) |
The Italian bank says that a single file is to blame. |
Data Breach
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-28 06:30:05 |
(Déjà vu) Security researcher gets access to all Xiaomi pet feeders around the world (lien direct) |
Russian security researcher finds API and firmware bugs impacting around 10,950 Xiaomi FurryTail pet feeders. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-28 06:30:00 |
Security researcher gets access to all FurryTail pet feeders around the world (lien direct) |
Russian security researcher finds API and firmware bugs impacting around 10,950 FurryTail pet feeders. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-28 05:45:07 |
The scariest hacks and vulnerabilities of 2019 (lien direct) |
This year's biggest and scariest security incidents, data breaches, and vulnerabilities. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-26 15:52:37 |
Adobe left 7.5 million Creative Cloud user records exposed online (lien direct) |
Exposed data primarily includes emails, but not passwords or financial information. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-26 07:00:05 |
Nasty PHP7 remote code execution bug exploited in the wild (lien direct) |
New PHP7 bug CVE-2019-11043 can allow even non-technical attackers to take over servers. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-25 18:49:19 |
AWS to sponsor Rust project (lien direct) |
AWS offers Rust project promotional credits after the language's adoption grows inside the company's infrastructure. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-25 14:20:01 |
London police software quarantines thousands of cybercrime reports (lien direct) |
Over 9,000 cybercrime reports got quarantined by accident. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-25 13:31:38 |
Scammers are targeting Cash App users hoping for free money (lien direct) |
A trite phrase but true: if it seems too good to be true, it probably is. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-25 12:21:07 |
City of Johannesburg held for ransom by hacker gang (lien direct) |
A group named "Shadow Kill Hackers" is asking local officials for 4 bitcoins or they'll release city data online. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-25 12:21:00 |
City of Johannesburg hit by ransomware, again (lien direct) |
South Africa's largest city falls prey to ransomware for the second time in four months. |
Ransomware
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-25 12:06:54 |
GitLab backs down on telemetry changes and forced tracking - for now (lien direct) |
Negative feedback from the community has forced GitLab to rethink its data collection plans. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-25 11:02:37 |
Google promises to replace Home devices bricked by flawed firmware update (lien direct) |
Your unintended new doorstop will be replaced, the tech giant says. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-24 22:52:00 |
Mozilla: Cloudflare doesn\'t pay us for any DoH traffic (lien direct) |
Mozilla publishes FAQ document detailing its DNS-over-HTTPS implementation plans in greater detail. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-24 19:29:53 |
A DDoS gang is extorting businesses posing as Russian government hackers (lien direct) |
Exclusive: Fake "Fancy Bear" group is demanding money from companies in the financial sector, threatening DDoS attacks. |
|
APT 28
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-24 16:00:00 |
UN, UNICEF, Red Cross officials targeted in recent phishing campaign (lien direct) |
Phishing sites first appeared in March, are not blocked in Google's Safe Browsing, and are still active today. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-24 15:27:55 |
Symantec antivirus crashes something again. This time Chrome 78 browsers (lien direct) |
Fourth time in three months when Symantec's antivirus crashes something. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-24 09:49:58 |
Vietnamese student behind Android adware strain that infected millions (lien direct) |
Hanoi student never hid identity, deployed adware via 42 apps uploaded on the Play Store. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-23 23:15:51 |
Swedish police cleared to deploy spyware against crime suspects (lien direct) |
Spyware should be able to turn on device cameras and microphones, get encrypted chat logs. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-23 19:30:30 |
FBI issues warning about e-skimming (Magecart) attacks (lien direct) |
E-skimming incidents are now on US authorities' radar. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-23 12:54:06 |
FTC takes a stand against stalker apps through Retina-X court settlement (lien direct) |
The agency does not look upon apps that require phone security to be weakened with a friendly eye. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-23 10:53:03 |
Prolific business email scam takedown leads to arrests in Spain (lien direct) |
High-value business employees were impersonated to dupe businesses into handing over millions of euros. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-23 09:44:34 |
Ex-police officer and data breach victim loses court appeal, becomes liable for force\'s costs (lien direct) |
Despite successfully suing the Met, she may now end up homeless. |
Data Breach
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-23 02:29:00 |
CPDoS attack can poison CDNs to deliver error pages instead of legitimate sites (lien direct) |
CloudFront, Cloudflare, Fastly, Akamai, and others impacted by new CPDoS web cache poisoning attack. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-22 23:28:16 |
Bug that grants admin rights to malware found in Maxthon, China\'s favorite browser (lien direct) |
Hundreds of millions of Maxthon users allegedly impacted. |
Malware
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-22 22:03:24 |
Google Chrome 78 is out: Forced dark mode, DoH trials, no more XSS Auditor (lien direct) |
Password Checkup tool makes its debut and the New Tab page gets more customization features. |
Tool
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-22 15:02:08 |
Magecart group linked to Dridex banking Trojan, Carbanak (lien direct) |
Domain tracking has led to connections between different cyberattack campaigns. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-22 13:51:46 |
Czech authorities dismantle alleged Russian cyber-espionage network (lien direct) |
Czech officials said Russian operatives used local companies to launch cyber-attacks against foreign targets. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-22 12:00:08 |
Facebook promises action on 2020 US election fraud, wipes out fake networks from Russia, Iran (lien direct) |
The company will be under more scrutiny than ever with the upcoming US 2020 elections. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-21 23:52:59 |
Avast: No plans to discontinue CCleaner following second hack in two years (lien direct) |
Czech intelligence agency: "Data analysis suggests that the attack came from China." |
Hack
|
CCleaner
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-21 19:15:52 |
Major German manufacturer still down a week after getting hit by ransomware (lien direct) |
Pilz, a German company making automation tool, was infected with the BitPaymer ransomware on October 13. |
Ransomware
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-21 12:59:00 |
Open database leaked 179GB in customer, US government, and military records (lien direct) |
The US Department of Homeland Security has become embroiled in the leak. |
|
|
|
![ZDNet.webp](./Ressources/img/ZDNet.webp) |
2019-10-21 10:19:11 |
Russian APT Turla targets 35 countries on the back of Iranian infrastructure (lien direct) |
The state-backed group's hacking activities are more widespread than previously thought. |
|
|
|