Src |
Date (GMT) |
Titre |
Description |
Tags |
Stories |
Notes |
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-07-02 15:56:07 |
(Déjà vu) REvil ransomware hits 1,000+ companies in MSP supply-chain attack (lien direct) |
A massive REvil ransomware attack affects multiple managed service providers and their clients through a reported Kaseya supply-chain attack. [...] |
Ransomware
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-07-02 15:56:07 |
REvil ransomware hits 200 companies in MSP supply-chain attack (lien direct) |
A massive REvil ransomware attack affects multiple managed service providers and their clients through a reported Kaseya supply-chain attack. [...] |
Ransomware
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-07-02 14:11:07 |
Windows 11 may switch to a Black Screen of Death crash screen (lien direct) |
Windows 11 may soon switch to a Black Screen of Death for operating system crash screens rather than the blue screen that has been used for many years. [...] |
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-07-02 13:50:31 |
Actively exploited PrintNightmare zero-day gets unofficial patch (lien direct) |
Free micropatches addressing the actively exploited PrintNightmare zero-day vulnerability in the Windows Print Spooler service are now available through the 0patch platform. [...] |
Vulnerability
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-07-02 11:22:25 |
How to bypass the Windows 11 TPM 2.0 requirement (lien direct) |
Microsoft now requires a computer to have a TPM 2.0 module to install Windows 11. However, new Registry entries have been discovered that allow you to bypass the TPM requirement and minimum memory and secure boot requirements. [...] |
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-07-02 09:20:01 |
Microsoft warns of critical PowerShell 7 code execution vulnerability (lien direct) |
Microsoft warns of a critical .NET Core remote code execution vulnerability in PowerShell 7 caused by how text encoding is performed in in .NET 5 and .NET Core. [...] |
Vulnerability
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-07-02 08:39:59 |
US insurance giant AJG reports data breach after ransomware attack (lien direct) |
Arthur J. Gallagher (AJG), a US-based global insurance brokerage and risk management firm, is mailing breach notification letters to potentially impacted individuals following a ransomware attack that hit its systems in late September. [...] |
Ransomware
Data Breach
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-07-02 02:56:48 |
Microsoft shares mitigations for Windows PrintNightmare zero-day bug (lien direct) |
Microsoft says in a newly released security advisory that the Windows Print Spooler zero-day vulnerability known as PrintNightmare has already been exploited in the wild by threat actors. [...] |
Vulnerability
Threat
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-07-01 19:25:34 |
Babuk ransomware is back, uses new version on corporate networks (lien direct) |
After announcing their exit from the ransomware business in favor of data theft extortion, the Babuk gang appears to have slipped back into their old habit of encrypting corporate networks. [...] |
Ransomware
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-07-01 16:11:15 |
Trickbot cybercrime group linked to new Diavol ransomware (lien direct) |
FortiGuard Labs security researchers have linked a new ransomware strain dubbed Diavol to Wizard Spider, the cybercrime group behind the Trickbot botnet. [...] |
Ransomware
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-07-01 15:16:40 |
VirusTotal ordered to reveal private info of stolen HSE data downloaders (lien direct) |
An Irish court has ordered VirusTotal to provide the information of subscribers who downloaded or uploaded confidential data stolen from Ireland's national health care service during a ransomware attack. [...] |
Ransomware
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-07-01 12:09:54 |
CISA: Disable Windows Print Spooler on servers not used for printing (lien direct) |
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a notification regarding the critical PrintNightmare zero-day vulnerability and advises admins to disable the Windows Print Spooler service on servers not used for printing. [...] |
Vulnerability
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-07-01 11:00:00 |
NSA: Russian GRU hackers use Kubernetes to run brute force attacks (lien direct) |
The National Security Agency (NSA) warns that Russian nation-state hackers are conducting brute force attacks to access US networks and steal email and files. [...] |
|
Uber
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-07-01 08:13:07 |
Google Chrome will get an HTTPS-Only Mode for secure browsing (lien direct) |
Google is working on adding an HTTPS-Only Mode to the Chrome web browser to protect users' web traffic from eavesdropping by upgrading all connections to HTTPS. [...] |
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-07-01 07:37:47 |
Twitter now lets you use security keys as the only 2FA method (lien direct) |
Twitter now lets users use security keys as the only two-factor authentication (2FA) method while having all other methods disabled, as the social network announced three months ago, in March. [...] |
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-30 19:01:14 |
Leaked Babuk Locker ransomware builder used in new attacks (lien direct) |
A leaked tool used by the Babuk Locker operation to create custom ransomware executables is now being used by another threat actor in a very active campaign targeting victims worldwide. [...] |
Ransomware
Tool
Threat
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-30 16:26:33 |
CISA releases new ransomware self-assessment security audit tool (lien direct) |
The US Cybersecurity and Infrastructure Security Agency (CISA) has released the Ransomware Readiness Assessment (RRA), a new module for its Cyber Security Evaluation Tool (CSET). [...] |
Ransomware
Tool
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-30 15:43:11 |
Windows 11 makes TPM Diagnostics tool its first optional feature (lien direct) |
Windows 11 comes with a new optional feature called 'TPM Diagnostics' that allows administrators to query the data stored on a device's TPM security processor. [...] |
Tool
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-30 14:14:03 |
Microsoft finds Netgear router bugs enabling corporate breaches (lien direct) |
Attackers could use critical firmware vulnerabilities discovered by Microsoft in some NETGEAR router models as a stepping stone to move laterally within enterprise networks. [...] |
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-30 13:20:38 |
Public Windows PrintNightmare 0-day exploit allows domain takeover (lien direct) |
Technical details and proof-of-concept (PoC) exploit have been accidentally leaked for a currently unpatched vulnerability in Windows that allows remote code execution. [...] |
Vulnerability
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-30 12:31:54 |
Facebook sues hackers who hijacked advertising agencies\' accounts (lien direct) |
Facebook has filed lawsuits against two groups of suspects who took over advertising agency employees' accounts and abused its ad platform to run unauthorized or deceptive ads. [...] |
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-30 08:12:27 |
Windows 10 KB5004760 emergency update fixes PDF opening issue (lien direct) |
Microsoft has released an optional out-of-band update for all supported Windows 10 versions to address an issue preventing customers from opening PDF documents using some applications. [...] |
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-29 20:59:31 |
Lorenz ransomware decryptor recovers victims\' files for free (lien direct) |
Dutch cybersecurity firm Tesorion has released a free decryptor for the Lorenz ransomware, allowing victims to recover some of their files for free without paying a ransom. [...] |
Ransomware
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-29 18:38:03 |
The known Windows 11 issues and how you can fix them (lien direct) |
The first Windows 11 preview build was released yesterday, and with it came a variety of bugs that are sure to frustrate testers. Below we have listed the most noticeable issues and how you can fix them. [...] |
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-29 17:28:58 |
Hackers use zero-day to mass-wipe My Book Live devices (lien direct) |
A zero-day vulnerability in Western Digital My Book Live NAS devices allowed a threat actor to perform mass-factory resets of devices last week, leading to data loss. [...] |
Vulnerability
Threat
Guideline
|
|
★★★★
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-29 14:00:47 |
Windows 11 includes the DNS-over-HTTPS privacy feature - How to use (lien direct) |
Microsoft has added a privacy feature to Windows 11 called DNS-over-HTTPS, allowing users to perform encrypted DNS lookups to bypass censorship and Internet activity. [...] |
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-29 13:48:21 |
Russian hackers had months-long access to Denmark\'s central bank (lien direct) |
Russian state hackers compromised Denmark's central bank (Danmarks Nationalbank) and planted malware that gave them access to the network for more than half a year without being detected. [...] |
Malware
|
|
★★★★
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-29 12:23:47 |
DoubleVPN servers, logs, and account info seized by law enforcement (lien direct) |
Law enforcement has seized the servers and customer logs for DoubleVPN, a double-encryption service commonly used by threat actors to evade detection while performing malicious activities. [...] |
Threat
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-29 03:40:52 |
(Déjà vu) Microsoft\'s Halo dev site breached using dependency hijacking (lien direct) |
Microsoft has once again been successfully hit by a dependency hijacking attack. This month, another researcher found an npm internal dependency being used by an open-source project. After publishing a public dependency by the same name, he began receiving messages from Microsoft's Halo game dev servers. [...] |
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-29 03:40:52 |
Microsoft successfully hit by dependency hijacking again (lien direct) |
Microsoft has once again been successfully hit by a dependency hijacking attack. This month, another researcher found an npm internal dependency, after squatting which, he began receiving messages from Microsoft's servers. [...] |
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-28 19:07:38 |
Windows 11 may support Intel 7th gen, AMD Zen 1 CPUs in the future (lien direct) |
Microsoft announced today that they might lower the Windows 11 system requirements to allow Intel 7th generation and AMD Zen 1 CPUs to use the new operating system. [...] |
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-28 17:26:32 |
REvil ransomware\'s new Linux encryptor targets ESXi virtual machines (lien direct) |
The REvil ransomware operation is now using a Linux encryptor that targets and encrypts Vmware ESXi virtual machines. [...] |
Ransomware
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-28 14:55:53 |
Ransomware gangs now creating websites to recruit affiliates (lien direct) |
Ever since two prominent Russian-speaking cybercrime forums banned ransomware-related topics [1, 2], criminal operations have been forced to promote their service through alternative methods. [...] |
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-28 14:47:16 |
Windows 11 preview build installs failing due to system requirements (lien direct) |
The first Windows 11 preview build has been released, and users are reporting being unable to install it for not meeting minimum system requirements. [...] |
|
|
★★★★★
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-28 13:07:29 |
Windows 11 preview build 22000.51 released - here\'s how to download (lien direct) |
Microsoft has released the first preview build of Windows 11 today, build 22000.51, to Insiders in the Dev channel of the Windows Insider program. [...] |
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-28 10:28:48 |
Leaked Windows 11 screenshots show new File Explorer, Settings app (lien direct) |
Leaked screenshots of an internal Microsoft build of Windows 11 have given us a glimpse of the upcoming changes coming to File Explorer and the Settings app. [...] |
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-27 18:40:39 |
(Déjà vu) Microsoft teases new design for Windows 11 native apps (lien direct) |
As it turns out, native Windows apps are also getting a major redesign as part of the new operating system. The new look for native apps was highlighted during the event video and there's a chance we might see these new apps in the upcoming preview builds. [...] |
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-27 18:40:39 |
Windows 11\'s new design previewed through pictures and videos (lien direct) |
As it turns out, native Windows apps are also getting a major redesign as part of the new operating system. The new look for native apps was highlighted during the event video and there's a chance we might see these new apps in the upcoming preview builds. [...] |
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-27 12:31:07 |
Cisco ASA vulnerability actively exploited after exploit released (lien direct) |
Hackers are scanning for and actively exploiting a vulnerability in Cisco ASA devices after a PoC exploit was published on Twitter. [...] |
Vulnerability
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-26 14:55:28 |
WhyNotWin11 is a better replacement for Windows 11\'s PC Health Check (lien direct) |
An open-source application called WhyNotWin11 acts as a better drop-in replacement for Microsoft's PC Health Check app to determine if your hardware is compatible with Windows 11. [...] |
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-26 12:11:31 |
Nobelium hackers accessed Microsoft customer support tools (lien direct) |
Microsoft says they have discovered new attacks conducted by the Russian state-sponsored Nobelium hacking group, including a hacked Microsoft support agent's computer that exposed customer's subscription information. [...] |
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-26 05:16:04 |
Microsoft admits to signing rootkit malware in supply-chain fiasco (lien direct) |
Microsoft has now confirmed signing a malicious driver being distributed within gaming environments. This driver, called "Netfilter," is in fact a rootkit that was observed communicating with Chinese command-and-control IPs. [...] |
Malware
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-25 19:09:49 |
The Week in Ransomware - June 25th 2021 - Back in Business (lien direct) |
It has been relatively quiet this week, with few attacks revealed and few new ransomware variants released. However, some interesting information came out that we have summarized below. [...] |
Ransomware
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-25 15:26:00 |
Mercedes-Benz data breach exposes SSNs, credit card numbers (lien direct) |
Mercedes-Benz USA has just disclosed a data breach impacting under 1,000 customers and potential buyers that exposed their credit card information, social security numbers, and driver license numbers. [...] |
Data Breach
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-25 10:00:00 |
ISPs must provide emergency video service to deaf users: Ofcom (lien direct) |
UK telecom and broadcasting regulator, Ofcom has mandated new requirements for Internet Service Providers (ISPs) and phone companies to provide additional services for users with special needs. [...] |
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-25 09:15:30 |
Windows 11 won\'t work without a TPM - What you need to know (lien direct) |
Windows 11 requires a TPM security processor to install or upgrade to Windows 11. Unfortunately, there has been a lot of confusion about what type of TPM you need and why you need it in the first place. [...] |
|
|
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-24 16:00:59 |
WD My Book NAS devices are being remotely wiped clean worldwide (lien direct) |
Western Digital My Book NAS owners worldwide are finding that their devices have been mysteriously factory reset and all of their files deleted. [...] |
|
|
★★
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-24 15:56:07 |
Binance exchange helped track down Clop ransomware money launderers (lien direct) |
Cryptocurrency exchange service Binance played an important part in the recent arrests of Clop ransomware group members, helping law enforcement in their effort to identify, and ultimately detain the suspects. [...] |
Ransomware
|
|
★★
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-24 14:44:03 |
RIP: Internet Explorer will be disabled in Windows 11 (lien direct) |
Windows 11 has officially signed the death sentence for Internet Explorer as it will be disabled when users upgrade to the new operating system. [...] |
|
|
★★★★
|
![bleepingcomputer.webp](./Ressources/img/bleepingcomputer.webp) |
2021-06-24 13:44:58 |
These features are going away with Windows 11 (lien direct) |
Microsoft has published a list of Windows 10 features that will be removed or changed when you upgrade to Windows 11. [...] |
|
|
|