Src |
Date (GMT) |
Titre |
Description |
Tags |
Stories |
Notes |
|
2020-03-03 14:02:00 |
Chinese security firm says CIA hacked Chinese targets for the past 11 years (lien direct) |
Qihoo 360 becomes second Chinese security vendor to blame the CIA for hacks against its civil aviation sector. |
|
|
|
|
2020-03-03 00:18:12 |
US government warns foreign actors with sharp consequences if they meddle in Super Tuesday (lien direct) |
DOS, DOJ, DOD, DHS, ODNI, FBI, NSA, and CISA issue joint statement ahead of Super Tuesday primary. |
|
|
|
|
2020-03-02 20:48:42 |
US Treasury sanctions two Chinese nationals for laundering cryptocurrency for North Korean hackers (lien direct) |
Two Chinese men laundered funds from two hacked cryptocurrency exchanges. |
|
|
|
|
2020-03-02 14:31:51 |
Brave deemed most private browser in terms of \'phoning home\' (lien direct) |
The new Microsoft Edge and the Yandex Browser deemed the most data greedy. |
|
|
|
|
2020-03-02 14:09:00 |
UK Home Office breached GDPR 100 times through botched management of EU Settlement Scheme (lien direct) |
ID cards sent to the wrong addresses, third party data disclosures, and lost passports are only some examples of mishandling. |
|
|
|
|
2020-03-02 12:38:16 |
Swiss government submits criminal complaint over CIA Crypto spying scandal (lien direct) |
US and German intelligence deliberately implemented backdoors in Crypto AG systems to eavesdrop on governments worldwide. |
|
|
|
|
2020-03-02 04:43:05 |
Hackers are actively exploiting zero-days in several WordPress plugins (lien direct) |
There's quite the WordPress p0wnage going on right now. |
|
|
|
|
2020-03-01 15:20:32 |
Walgreens says mobile app leaked users\' personal data (lien direct) |
US pharmacy store says mobile app exposed names, prescription details, and shipping addresses. |
|
|
|
|
2020-02-29 08:00:06 |
Meet the white-hat group fighting Emotet, the world\'s most dangerous malware (lien direct) |
A private group of 20+ security researchers and system administrators have been waging a silent war against Emotet, today's most dangerous malware operation. |
Malware
|
|
|
|
2020-02-28 14:34:00 |
Ghostcat bug impacts all Apache Tomcat versions released in the last 13 years (lien direct) |
Ghostcat vulnerability can allow hackers to read configuration files or plant backdoors on Tomcat servers. |
Vulnerability
|
|
|
|
2020-02-28 13:43:22 |
Facebook, Google, Twitter spark mutiny over Pakistan censorship demands (lien direct) |
The companies have joined forces in a threat to abandon the country entirely. |
Threat
|
|
|
|
2020-02-28 12:31:18 |
Scientist sentenced to 2 years behind bars for stealing next-generation battery tech secrets (lien direct) |
The intellectual property had an estimated value of $1 billion to the US company it belonged to. |
|
|
|
|
2020-02-28 06:00:09 |
Report identifies the most dangerous mobile app store on the internet (lien direct) |
And, no! It's not the Google Play Store. |
|
|
|
|
2020-02-27 18:30:00 |
Facebook sues SDK maker for secretly harvesting user data (lien direct) |
Data analytics firm OneAudience allegedly paid app developers to include its SDK in their code so it could harvest data from Facebook users. |
|
|
|
|
2020-02-27 15:31:56 |
Intel fixed 236 bugs in 2019 and only 5% (11 bugs) were CPU vulnerabilities (lien direct) |
Intel says that 60% of all security bugs fixed in 2019 were discovered internally, by employees. |
|
|
|
|
2020-02-27 13:20:06 |
Cisco patches incoming to address Kr00k vulnerability impacting routers, firewall products (lien direct) |
There are no workarounds for the Wi-Fi communications bug. |
Vulnerability
|
|
|
|
2020-02-27 11:02:00 |
US government authorities fail to train employees on ransomware detection, prevention (lien direct) |
New research suggests that the majority of state and local governments are not rising to the challenge of mitigating ransomware threats. |
Ransomware
|
|
|
|
2020-02-27 06:00:07 |
Android malware can steal Google Authenticator 2FA codes (lien direct) |
A new version of the "Cerberus" Android banking trojan will be able to steal one-time codes generated by the Google Authenticator app and bypass 2FA-protected accounts. |
Malware
|
|
|
|
2020-02-26 21:13:00 |
Six suspected drug dealers went free after police lost evidence in ransomware attack (lien direct) |
Seventh incident of its kind when police investigations were impacted by a ransomware infection. |
Ransomware
|
|
|
|
2020-02-26 15:00:07 |
New Kr00k vulnerability lets attackers decrypt WiFi packets (lien direct) |
Kr00k affects devices using Broadcom and Cypress Wi-Fi chips. |
Vulnerability
|
|
★★★★★
|
|
2020-02-26 13:33:00 |
Raccoon malware targets massive range of browsers to steal your data and cryptocurrency (lien direct) |
Every browser you can think of is a target of the popular malware. |
Malware
|
|
|
|
2020-02-26 12:15:30 |
Former Microsoft engineer convicted of 18 felonies for digital currency fraud scam (lien direct) |
After scamming Microsoft, the software expert treated himself to a Tesla vehicle and a lakefront home. |
|
|
|
|
2020-02-26 11:31:24 |
Samsung says Find my Mobile glitch not connected to recent data leak (lien direct) |
The strange Find my Mobile '1' glitch experienced by users is thought to be wholly separate from recent customer data exposure. |
|
|
|
|
2020-02-26 06:00:05 |
Chrome 80 update cripples top cybercrime marketplace (lien direct) |
90% of all stolen credentials on the Genesis Store came from the AZORult malware. Now, the malware doesn't work in Chrome 80. |
Malware
|
|
|
|
2020-02-25 22:17:43 |
Australian banks targeted by DDoS extortionists (lien direct) |
Hackers are sending emails to banks asking for large payments in Monero, and threatening DDoS attacks if their demands aren't met. |
|
|
|
|
2020-02-25 19:21:39 |
(Déjà vu) Stalkerware infections grew by 60% in 2019, says Kaspersky (lien direct) |
Kaspersky says 67,500 unique users had stalkerware apps installed on their phones in 2019. |
|
|
|
|
2020-02-25 19:21:00 |
Stalkerware infections grew by 40% in 2019, says Kaspersky (lien direct) |
Kaspersky says 67,500 unique users had stalkerware apps installed on their phones in 2019. |
|
|
|
|
2020-02-25 14:00:04 |
Firefox for Mac and Linux to get a new security sandbox system (lien direct) |
Firefox's new RLBox sandbox system to ship to Linux users in Firefox 74 and Mac users in Firefox 75. |
|
|
|
|
2020-02-25 13:33:42 |
UK financial watchdog admits to leaking confidential consumer data (lien direct) |
A Freedom of Information Act request published on the FCA website revealed more than it should. |
|
|
|
|
2020-02-25 13:01:27 |
McAfee acquires Light Point Security team to bring browser isolation tech to MVISION UCE (lien direct) |
McAfee's aim is to improve browser protections by isolating potentially malicious code in virtual environments. |
|
|
|
|
2020-02-25 12:42:19 |
Google patches Chrome zero-day under active attacks (lien direct) |
This is the third Chrome zero-day discovered being exploited in the wild in the past year. |
|
|
|
|
2020-02-25 11:00:06 |
Mozilla enables DOH by default for all Firefox users in the US (lien direct) |
The rollout begins today and will continue over the next few weeks to confirm no major issues are discovered as DoH is enabled for Firefox's US-based users. |
|
|
|
|
2020-02-25 00:12:00 |
PayPal accounts are getting abused en-masse for unauthorized payments (lien direct) |
All signs point to an attack exploiting PayPal's Google Pay integration. |
|
|
|
|
2020-02-24 20:35:00 |
Forget passwords: Secure yourself with a passphrase and these tools (lien direct) |
Passphrases are much stronger than ordinary passwords -- and a heck of a lot easier to remember. But that's only the start to securing yourself on today's hostile internet. Here's how to protect yourself. |
|
|
|
|
2020-02-24 11:00:04 |
Cybersecurity alliance launches first open source messaging framework for security tools (lien direct) |
OpenDXL Ontology is designed for data and command sharing between cybersecurity software. |
|
|
|
|
2020-02-24 10:00:27 |
LTE security flaw can be abused to take out subscriptions at your expense (lien direct) |
Researchers say the vulnerability impacts “virtually all” smartphones on the market. |
Vulnerability
|
|
|
|
2020-02-24 08:52:33 |
Slickwraps says customer trust was \'violated\' in data breach caused by glaring security holes (lien direct) |
A security researcher's warnings were reportedly ignored. |
Data Breach
|
|
|
|
2020-02-21 20:06:43 |
FBI recommends passphrases over password complexity (lien direct) |
Longer passwords, even consisting of simpler words or constructs, are better than short passwords with special characters. |
|
|
|
|
2020-02-21 16:28:20 |
Google to put a muzzle on Android apps accessing location data in the background (lien direct) |
Google will also update Android's location access permission prompt (again). |
|
|
|
|
2020-02-21 13:56:43 |
ObliqueRAT linked to threat group launching attacks against government targets (lien direct) |
The new Trojan is attacking organizations across Southeast Asia. |
Threat
|
|
|
|
2020-02-21 12:31:00 |
Google denies claims that free school Chromebooks are illegally collecting student data (lien direct) |
A lawsuit filed in New Mexico alleges the free devices are serving a nefarious purpose -- data collection without parental consent. |
|
|
|
|
2020-02-21 00:00:05 |
DOD DISA discloses data breach (lien direct) |
The Defense Information Systems Agency (DISA) handles IT and telecommunications support for the White House and military troops. |
Data Breach
|
|
|
|
2020-02-20 21:08:21 |
Google removes 600 Android apps in Play Store adware crackdown (lien direct) |
Google removes Android apps and bans app developers who used out-of-app ads to spam users. |
Spam
|
|
|
|
2020-02-20 16:55:00 |
Coronavirus kills MWC, IBM withdraws from RSA: What about Kaspersky\'s Security Analyst Summit? (lien direct) |
Kaspersky has revealed its position on the potential cancellation of the Security Analyst Summit, due to take place in April. |
|
|
|
|
2020-02-20 16:06:37 |
Croatia\'s largest petrol station chain impacted by cyber-attack (lien direct) |
A ransomware attack is believed to have impaired the chain's ability to issue invoices and accept loyalty cards. |
Ransomware
|
|
|
|
2020-02-20 14:02:00 |
US, UK formally blame Russia for mass-defacement of Georgian websites (lien direct) |
US State Department and UK Foreign Office say Russia's military intelligence agency was behind October 2019 attack on Georgian web portals. |
|
|
|
|
2020-02-20 10:27:39 |
Adobe releases out-of-band patch for critical code execution vulnerabilities (lien direct) |
The severe security problems can be exploited to launch code execution attacks. |
|
|
|
|
2020-02-19 23:27:41 |
Exclusive: Details of 10.6 million of MGM hotel guests posted on a hacking forum (lien direct) |
MGM Resorts said security incident took place last summer and notified impacted guests last year. |
|
|
|
|
2020-02-19 17:39:34 |
(Déjà vu) WordPress botnet deploys anti-adblocker script to make sure their spammy ads are profitable (lien direct) |
WP-VCD botnet operators are having the same problems all site operators are having: Ad blockers! |
|
|
|
|
2020-02-19 17:39:00 |
WordPress botnet deploys anti-adblocker script to make sure its spammy ads are profitable (lien direct) |
WP-VCD botnet operators are having the same problems all site operators are having: Ad blockers! |
|
|
|