What's new arround internet
| Src | Date (GMT) | Titre | Description | Tags | Stories | Notes |
 |
2022-05-23 18:53:52 | GM credential stuffing attack exposed car owners\' personal info (lien direct) | US car manufacturer GM disclosed that it was the victim of a credential stuffing attack last month that exposed customer information and allowed hackers to redeem rewards points for gift cards. [...] | |||
|
2022-05-23 16:12:01 | Fake Windows exploits target infosec community with Cobalt Strike (lien direct) | A threat actor targeted security researchers with fake Windows proof-of-concept exploits that infected devices with the Cobalt Strike backdoor. [...] | Threat | ||
|
2022-05-23 14:30:55 | Photos of abused victims used in new ID verification scam (lien direct) | Scammers are now leveraging dating apps like Tinder and Grindr to pose themselves as former victims of physical abuse to gain your trust and sympathy and sell you "ID verification" services. BleepingComputer came across multiple instances of users on online dating apps being approached by these catfishing profiles. [...] | |||
|
2022-05-23 13:02:01 | Hackers can hack your online accounts before you even register them (lien direct) | Security researchers have revealed that hackers can hijack your online accounts before you even register them by exploiting flaws that have been already been fixed on popular websites, including Instagram, LinkedIn, Zoom, WordPress, and Dropbox. [...] | Hack | ||
|
2022-05-23 12:26:19 | New RansomHouse group sets up extortion market, adds first victims (lien direct) | Yet another data-extortion cybercrime operation has appeared on the darknet named 'RansomHouse' where threat actors publish evidence of stolen files and leak data of organizations that refuse to make a ransom payment. [...] | Threat | ||
|
2022-05-23 09:14:43 | Russian hackers perform reconnaissance against Austria, Estonia (lien direct) | In a new reconnaissance campaign, the Russian state-sponsored hacking group Turla was observed targeting the Austrian Economic Chamber, a NATO platform, and the Baltic Defense College. [...] | |||
|
2022-05-22 14:22:09 | (Déjà vu) Elon Musk deep fakes promote new BitVex cryptocurrency scam (lien direct) | Cryptocurrency scammers are using deep fake videos of Elon Musk and other prominent cryptocurrency advocates to promote a BitVex trading platform scam that steals deposited currency. [...] | |||
|
2022-05-22 14:22:09 | Elon Musk deep fakes promote new cryptocurrency scam (lien direct) | Cryptocurrency scammers are using deep fake videos of Elon Musk and other prominent cryptocurrency advocates to promote a BitVex trading platform scam that steals deposited currency. [...] | |||
|
2022-05-22 12:15:10 | PDF smuggles Microsoft Word doc to drop Snake Keylogger malware (lien direct) | Threat analysts have discovered a recent malware distribution campaign using PDF attachments to smuggle malicious Word documents that infect users with malware. [...] | Malware Threat | ||
|
2022-05-22 11:07:14 | Microsoft tests new Windows 11 Desktop search that only works with Edge (lien direct) | Microsoft is testing a new feature in the latest Windows 11 preview build that displays an Internet search box directly on the desktop. The problem is that it does not honor your default browser and only uses Bing and Microsoft Edge instead. [...] | |||
|
2022-05-22 10:00:00 | Google: Predator spyware infected Android devices using zero-days (lien direct) | Google's Threat Analysis Group (TAG) says that state-backed threat actors used five zero-day vulnerabilities to install Predator spyware developed by commercial surveillance developer Cytrox. [...] | Threat | ||
|
2022-05-21 13:32:30 | Ransomware attack exposes data of 500,000 Chicago students (lien direct) | The Chicago Public Schools has suffered a massive data breach that exposed the data of almost 500,000 students and 60,000 employee after their vendor, Battelle for Kids, suffered a ransomware attack in December. [...] | Ransomware Data Breach | ||
|
2022-05-21 11:16:08 | Malicious PyPI package opens backdoors on Windows, Linux, and Macs (lien direct) | Yet another malicious Python package has been spotted in the PyPI registry performing supply chain attacks to drop Cobalt Strike beacons and backdoors on Windows, Linux, and macOS systems. [...] | |||
|
2022-05-21 10:00:00 | Windows 11 hacked three more times on last day of Pwn2Own contest (lien direct) | On the third and last day of the 2022 Pwn2Own Vancouver hacking contest, security researchers successfully hacked Microsoft's Windows 11 operating system three more times using zero-day exploits. [...] | |||
|
2022-05-20 20:08:20 | The Week in Ransomware - May 20th 2022 - Another one bites the dust (lien direct) | Ransomware attacks continue to slow down, likely due to the invasion of Ukraine, instability in the region, and subsequent worldwide sanctions against Russia. [...] | Ransomware | ||
|
2022-05-20 16:39:13 | Cisco urges admins to patch IOS XR zero-day exploited in attacks (lien direct) | Cisco has addressed a zero-day vulnerability in its IOS XR router software that allowed unauthenticated attackers to remotely gain access to Redis instances running in NOSi Docker containers. [...] | Vulnerability | ||
|
2022-05-20 14:20:26 | Microsoft disables telemetry in Windows 11 Subsystem for Android by default (lien direct) | Microsoft has updated the Windows Subsystem for Android in Windows 11 to make telemetry collection optional and announced an upgrade to Android 12.1. [...] | |||
|
2022-05-20 14:02:19 | Backdoor baked into premium school management plugin for WordPress (lien direct) | Security researchers have discovered a backdoor in a premium WordPress plugin built as a complete management solution for schools. The malicious code enables a threat actor to execute PHP code without authenticating. [...] | Threat | ||
|
2022-05-20 11:21:28 | Emergency Windows 10 updates fix Microsoft Store app issues (lien direct) | Microsoft has released out-of-band (OOB) updates on Thursday evening to address a newly acknowledged issue impacting Microsoft Store apps. [...] | |||
|
2022-05-20 08:10:00 | Windows 11 hacked again at Pwn2Own, Telsa Model 3 also falls (lien direct) | During the second day of the Pwn2Own Vancouver 2022 hacking competition, contestants hacked Microsoft's Windows 11 OS again and demoed zero-days in Tesla Model 3's infotainment system. [...] | |||
|
2022-05-20 07:53:39 | Russian Sberbank says it\'s facing massive waves of DDoS attacks (lien direct) | Sberbank's vice president and director of cybersecurity, Sergei Lebed, has told participants of the Positive Hack Days forum that the company is going through a period of unprecedented targeting by hackers. [...] | Hack | ||
|
2022-05-20 06:35:47 | Canada bans Huawei and ZTE from 5G networks over security concerns (lien direct) | The Government of Canada announced its intention to ban the use of Huawei and ZTE telecommunications equipment and services across the country's 5G and 4G networks. [...] | ★★ | ||
|
2022-05-19 19:32:59 | Conti ransomware shuts down operation, rebrands into smaller units (lien direct) | The notorious Conti ransomware gang has officially shut down their operation, with infrastructure taken offline and team leaders told that the brand is no more. [...] | Ransomware Guideline | ||
|
2022-05-19 19:08:58 | Netgear fixes bad Orbi firmware update that locked admin console (lien direct) | Netgear is pushing out fixes for a bad Orbi firmware update released earlier this month that prevents users from accessing the device's admin console. [...] | |||
|
2022-05-19 17:41:47 | Microsoft emergency updates fix Windows AD authentication issues (lien direct) | Microsoft has released emergency out-of-band (OOB) updates to address Active Directory (AD) authentication issues after installing Windows Updates issued during the May 2022 Patch Tuesday on domain controllers. [...] | |||
|
2022-05-19 14:26:06 | Media giant Nikkei\'s Asian unit hit by ransomware attack (lien direct) | Publishing giant Nikkei disclosed that the group's headquarters in Singapore was hit by a ransomware attack almost one week ago, on May 13th. [...] | Ransomware | ||
|
2022-05-19 13:45:00 | Microsoft detects massive surge in Linux XorDDoS malware activity (lien direct) | A stealthy and modular malware used to hack into Linux devices and build a DDoS botnet has seen a massive 254% increase in activity during the last six months, as Microsoft revealed today. [...] | Malware Hack | ★★★★★ | |
|
2022-05-19 13:24:57 | U.S. DOJ will no longer prosecute ethical hackers under CFAA (lien direct) | The U.S. Department of Justice (DOJ) has announced a revision of its policy on how federal prosecutors should charge violations of the Computer Fraud and Abuse Act (CFAA), carving out "good-fath" security research from being prosecuted. [...] | ★★★★ | ||
|
2022-05-19 11:24:04 | Lazarus hackers target VMware servers with Log4Shell exploits (lien direct) | The North Korean hacking group known as Lazarus is exploiting the Log4J remote code execution vulnerability to inject backdoors that fetch information-stealing payloads on VMware Horizon servers. [...] | Vulnerability | APT 38 | |
|
2022-05-19 09:00:00 | Phishing websites now use chatbots to steal your credentials (lien direct) | Threat analysts have observed a new trend in the phishing space which is to incorporate interactive chatbots on sites that guide visitors through the process of losing their sensitive data. [...] | Threat | ★★★ | |
|
2022-05-19 07:39:11 | Microsoft Teams, Windows 11 hacked on first day of Pwn2Own (lien direct) | During the first day of Pwn2Own Vancouver 2022, contestants won $800,000 after successfully exploiting 16 zero-day bugs to hack multiple products, including Microsoft's Windows 11 operating system and the Teams communication platform. [...] | |||
|
2022-05-19 06:38:26 | QNAP alerts NAS customers of new DeadBolt ransomware attacks (lien direct) | Taiwan-based network-attached storage (NAS) maker QNAP warned customers on Thursday to secure their devices against attacks pushing DeadBolt ransomware payloads. [...] | Ransomware | ||
|
2022-05-19 05:36:56 | Ransomware gangs rely more on weaponizing vulnerabilities (lien direct) | Security researchers are warning that external remote access services continue to be the main vector for ransomware gangs to breach company networks. [...] | Ransomware | ||
|
2022-05-18 18:27:02 | Microsoft releases first ISO image for new Windows 11 Dev builds (lien direct) | Microsoft has released the first ISO image for the new Windows 11 Preview builds in the Dev channel, allowing Windows Insiders to perform clean installs of the operating system. [...] | |||
|
2022-05-18 17:36:18 | Spanish police dismantle phishing gang that emptied bank accounts (lien direct) | The Spanish police have announced the arrest of 13 people and the launch of investigations on another 7 for their participation in a phishing ring that defrauded at least 146 people. [...] | |||
|
2022-05-18 17:12:57 | Critical Jupiter WordPress plugin flaws let hackers take over sites (lien direct) | WordPress security analysts have discovered a set of vulnerabilities impacting the Jupiter Theme and JupiterX Core plugins for WordPress, one of which is a critical privilege escalation flaw. [...] | |||
|
2022-05-18 16:13:12 | National bank hit by ransomware trolls hackers with dick pics (lien direct) | After suffering a ransomware attack by the Hive operation, the Bank of Zambia made it clear that they were not going to pay by posting a picture of male genitalia and telling the hackers to s… (well, you can use your imagination). [...] | Ransomware | ||
|
2022-05-18 14:37:51 | US recovers $15 million from global Kovter ad fraud operation (lien direct) | The US government has recovered over $15 million from Swiss bank accounts belonging to operators behind the '3ve' online advertising fraud scheme. [...] | |||
|
2022-05-18 13:38:57 | DHS orders federal agencies to patch VMware bugs within 5 days (lien direct) | The Department of Homeland Security's cybersecurity unit ordered Federal Civilian Executive Branch (FCEB) agencies today to urgently update or remove VMware products from their networks by Monday due to an increased risk of attacks. [...] | |||
|
2022-05-18 12:01:42 | VMware patches critical auth bypass flaw in multiple products (lien direct) | VMware warned customers today to immediately patch a critical authentication bypass vulnerability "affecting local domain users" in multiple products that can be exploited to obtain admin privileges. [...] | Vulnerability | ||
|
2022-05-18 11:20:56 | CISA shares guidance to block ongoing F5 BIG-IP attacks (lien direct) | In a joint advisory issued today, CISA and the Multi-State Information Sharing and Analysis Center (MS-ISAC) warned admins of active attacks targeting a critical F5 BIG-IP network security vulnerability (CVE-2022-1388). [...] | Vulnerability | ||
|
2022-05-18 10:54:14 | Fake crypto sites lure wannabe thieves by spamming login credentials (lien direct) | Threat actors are luring potential thieves by spamming login credentials for other people account's on fake crypto trading sites, illustrating once again, that there is no honor among thieves. [...] | Threat | ||
|
2022-05-18 09:27:23 | Microsoft warns of brute-force attacks targeting MSSQL servers (lien direct) | Microsoft warned of brute-forcing attacks targeting Internet-exposed and poorly secured Microsoft SQL Server (MSSQL) database servers using weak passwords. [...] | |||
|
2022-05-17 18:16:00 | (Déjà vu) North Korean devs pose as US freelancers to aid DRPK govt hackers (lien direct) | The U.S. government is warning that the Democratic People's Republic of Korea (DPRK) is dispatching its IT workers to get freelance jobs at companies across the world to obtain privileged access that is sometimes used to facilitate cyber intrusions. [...] | |||
|
2022-05-17 18:16:00 | North Korean devs pose as US freelancers and aid DRPK govt hackers (lien direct) | The U.S. government is warning that the Democratic People's Republic of Korea (DPRK) is dispatching its IT workers to get freelance jobs at companies across the world to obtain privileged access that is sometimes used to facilitate cyber intrusions. [...] | |||
|
2022-05-17 16:22:43 | Microsoft: Windows Server 20H2 reaches end of service in August (lien direct) | Microsoft has reminded customers today that Windows Server, version 20H2 will be reaching the end of service (EOS) on August 9, 2022. [...] | |||
|
2022-05-17 15:12:06 | NVIDIA fixes ten vulnerabilities in Windows GPU display drivers (lien direct) | NVIDIA has released a security update for a wide range of graphics card models, addressing four high-severity and six medium-severity vulnerabilities in its GPU drivers. [...] | |||
|
2022-05-17 14:47:48 | Microsoft Defender for Endpoint gets new troubleshooting mode (lien direct) | Microsoft says Defender for Endpoint now comes with a new 'troubleshooting mode' that will help Windows admins test Defender Antivirus performance and run compatibility scenarios without getting blocked by tamper protection. [...] | |||
|
2022-05-17 11:33:32 | Cybersecurity agencies reveal top initial access attack vectors (lien direct) | A joint security advisory issued by multiple national cybersecurity authorities revealed today the top 10 attack vectors most exploited by threat actors for breaching networks. [...] | Threat | ||
|
2022-05-17 10:30:19 | Hackers can steal your Tesla Model 3, Y using new Bluetooth attack (lien direct) | Security researchers at the NCC Group have developed a tool to carry out a Bluetooth Low Energy (BLE) relay attack that bypasses all existing protections to authenticate on target devices. [...] | Tool |
To see everything:
Our RSS (filtrered)
