What's new arround internet
| Src | Date (GMT) | Titre | Description | Tags | Stories | Notes |
 |
2017-12-21 13:58:28 | Sednit update: How Fancy Bear Spent the Year (lien direct) | Over the past few years the Sednit group has used various techniques to deploy their various components on targets computers. The attack usually starts with an email containing either a malicious link or malicious attachment. | APT 28 | ||
|
2017-12-21 10:07:16 | What does revoking Net Neutrality mean for security? (lien direct) | Imagine the scenario where an Internet Service Provider (ISP) allows a security company providing malware protection the option to pay for their traffic to be prioritized and a lower the priority level imposed on all other providers. | |||
|
2017-12-20 16:57:24 | Adventures in cybersecurity research: risk, cultural theory, and the white male effect – part 2 (lien direct) | Armed with the cultural theory described in part one as a possible explanation for why some people do not heed expert advice, we fielded a survey that queried US adults about their attitudes to 15 different technology hazards, including six that were cyber-related. | |||
|
2017-12-19 12:57:10 | Why we should fight for Net Neutrality (lien direct) | Granting ISPs the right to shape traffic, allowing for some traffic to be prioritized due to a commercial agreement, may have a negative effect on the outcome of using the service for both the consumer and the company providing the service. | |||
|
2017-12-18 16:58:41 | Adventures in cybersecurity research: risk, cultural theory, and the white male effect (lien direct) | Again and again we have seen security breaches occur because people did not heed advice that we and other people with expertise in security have been disseminating for years, advice about secure system design, secure system operation, and appropriate security strategy. | |||
|
2017-12-15 10:00:25 | UK banks urged to do more to tackle rampant online fraud (lien direct) | Banks are being urged to step up to the plate and to “work together to tackle this problem head onâ€, as their response has been found to be disproportionate to the scale of the problem. | |||
|
2017-12-14 13:55:37 | Cybersecurity Trends 2018: The costs of connection (lien direct) | To help the reader navigate through the maze of such threats, ESET's thought leaders have zeroed in on several areas that top the priority list in our exercise in looking forward. | Guideline | ||
|
2017-12-13 12:58:15 | Memes: the explanation of nearly everything – including computer viruses (lien direct) | We still don't have a solid scientific theory of memes; nonetheless, they already allow us to understand why certain things happen the way they do. Memes are “aliveâ€; they reproduce, mutate, and evolve according to Darwinian laws. | |||
|
2017-12-12 22:31:59 | It\'s time to patch your Microsoft and Adobe software again against vulnerabilities (lien direct) | It's the second Tuesday of the month, and you know what that means... Yep, it's time for another bundle of essential security updates from Microsoft. | |||
|
2017-12-12 14:08:36 | Cryptocurrency in kilowatt hours: Counting the costs of anonymous transactions (lien direct) | The energy costs are not the only charges in a transaction: the bitcoin network itself levies a charge which, according to a blog from Valve, the gaming provider behind the Steam network, has skyrocketed from $0.20 in 2016 to $20 per transaction today | |||
|
2017-12-12 10:48:28 | Enterprise security spend to continue to trend higher (lien direct) | A breakdown of the 'spending pie' shows that the 'security services' segment is projected to make up nearly 60% of the total IT security budgets, followed by the 'infrastructure protection' segment on a little over 18%. | |||
|
2017-12-11 13:58:11 | Banking malware on Google Play targets Polish banks (lien direct) | Besides delivering the promised functionalities, the malicious apps can display fake notifications and login forms seemingly coming from legitimate banking applications, harvest credentials entered into the fake forms, as well as intercept text messages to bypass SMS-based 2-factor authentication. | |||
|
2017-12-11 10:38:06 | Happy holidays, scam spotters! (lien direct) | Businesses are often sent fake invoices and waybills which install ransomware. Teach staff to avoid these. If questionable, ask your IT dept to look at it. E-cards have been a target in the past and may be used again in holiday-themed attacked. | |||
|
2017-12-08 13:58:21 | StrongPity2 spyware replaces FinFisher in MitM campaign – ISP involved? (lien direct) | As we reported in September, in campaigns we detected in two different countries, man-in-the-middle attacks had been used to spread FinFisher, with the “man†in both cases most likely operating at the ISP level. | |||
|
2017-12-07 14:17:07 | Virtual keyboard app exposes personal data of 31 million users (lien direct) | The developer's keyboard apps boast 40 million users across Android and iOS, but “only†Android users were affected by the security lapse. | |||
|
2017-12-06 15:01:41 | Cryptocurrency exchange Bitfinex plagued by DDoS attacks (lien direct) | The cast of characters behind the attacks, or their motives, are unclear. However, the onslaughts come at a time when the bitcoin price hits new highs, possibly triggering efforts on the part of cybercriminals to manipulate and cash in on the price. | |||
|
2017-12-06 12:59:09 | Six things to consider before implementing an ISMS (lien direct) | These factors can be key to the success or failure of the ISMS implementation, due to the day-to-day activities in the organization and the resources required for system operation. | |||
|
2017-12-05 13:01:01 | ISF predicts increasing impact of data breaches next year (lien direct) | The association expects the increased costs incurred in security breaches to come both from traditional areas, such as network cleanup and customer notification, and newer areas such as litigation. | |||
|
2017-12-04 18:02:14 | ESET helps law enforcement worldwide to disrupt Gamarue botnet (lien direct) | Throughout its monitoring of the threat, ESET found dozens of C&C servers every month. The bulk of ESET's research was conducted late last year, with the peak of Wauchos's activity going back approximately to that time. | |||
|
2017-12-04 18:01:20 | ESET takes part in global operation to disrupt Gamarue (lien direct) | Wauchos is an extensible bot that allows its owner to create and use custom plugins. However, there are some plugins that are widely available and that are used by many different botnets. | |||
|
2017-12-01 12:13:10 | NHS\'s cyber-defenses to get a £20 million shot in the arm (lien direct) | The health service is now on the lookout for a partner to help run the project, having invited interested parties to tender for a contract that is set to run for three to five years. The new center is set to be based in the English city of Leeds. | |||
|
2017-11-30 12:58:18 | Firefox to warn users when visiting breached websites (lien direct) | The extension currently includes an input field that users can use to subscribe an email address in order to receive an alert when they may be affected by a future breach. | |||
|
2017-11-29 23:59:45 | Shipping giant refuses to pay hackers ransom after data stolen (lien direct) | Clarksons, the global shipping firm, has turned the tables on criminal hackers who attempted to extort a ransom payment after stealing confidential information from the company's network. | |||
|
2017-11-29 13:58:40 | ESET malware researchers awarded prize in open-source memory forensics competition (lien direct) | The Volatility Foundation, the non-profit organization behind the Volatility Framework, sponsors the yearly Volatility Plugin Contest to acknowledge the best forensic tools built on the Volatility platform. | |||
|
2017-11-29 10:59:47 | Keyless convenience or security risk? Car theft in action (lien direct) | Exactly how does the attack work and is it expensive to create? The attack, while seeming to be technology voodoo, is actually rather simple. It requires a transmitting relay near the key and a second relay near the car to receive the relayed signals and mimic the key. | |||
|
2017-11-28 14:07:15 | Mr. Robot: Now we know where Tyrell was hiding (lien direct) | Since nothing is what is seems, it's hard to be sure who was really behind the attacks shown in the series. The world still believes fsociety was responsible (and they themselves do too, to an extent), but the truth is that there is a group in the shadows that is pulling all the strings. | |||
|
2017-11-27 00:06:51 | Imgur hackers stole 1.7 million email addresses and passwords (lien direct) | Image-hosting website Imgur discovered at the end of last week that hackers broke into its systems in 2014, and stole the account details of some 1.7 million registered users. | |||
|
2017-11-24 12:57:44 | New reality in European banking looming large: the lowdown (lien direct) | At the heart of the regulation is the requirement for banks to allow licensed third-party providers (TPPs) of financial services to access securely their customer-account data, as long as the customer has given their prior consent. | |||
|
2017-11-24 09:58:19 | Busy Browsers attract Black Friday Burglars (lien direct) | Just as in past decades when cash drawers and bank vaults were targeted for theft, today's e-shops and online banks have fallen under the scope of cybercriminals. Their “digital-focus†is just an evolutionary step beyond robbing stagecoaches in the Wild West, and banks in the 20th century. | |||
|
2017-11-23 12:58:22 | Smartphone adoption among older Americans continues growth spurt (lien direct) | Some three-quarters of users up to 34 years of age reported that they “definitely†or “probably†use their phone too much. Almost half (47 percent) of all ages said they make a conscious effort to pare back their mobile phone time, most commonly by keeping their devices in their bag or pocket or by switching off notifications. | |||
|
2017-11-23 08:56:14 | US indicts alleged culprit of HBO hack-and-extort campaign (lien direct) | Between approximately July 23 and 29, Mesri reportedly engaged in his blackmail campaign. After the TV network didn't pay the required $6 million in digital cryptocurrency, he began leaking portions of the stolen data on July 30. | |||
|
2017-11-22 12:57:59 | Girls Inc. in the spotlight: Nonprofit Pitch Fest contest grand prize winner (lien direct) | Girls Inc. of San Diego County was founded 50 years ago as a local affiliate of the national Girls Inc. The national organization was started as the Girls Club of America more than 150 years ago, to help young women who had migrated from rural communities in search of job opportunities. | |||
|
2017-11-21 13:55:20 | New campaigns spread banking malware through Google Play (lien direct) | For a user, it can be difficult to figure out whether an app is malicious. First off it is always good only to install applications from the Google Play store, since most malware is still mainly spread through alternative stores. | |||
|
2017-11-21 12:58:59 | Cybersecurity for journalists and the news media (lien direct) | In journalism, having good contacts is key and this is true when it comes to defending your digital assets. The following are some sources – of information and, possibly, assistance – that you might want to cultivate. | |||
|
2017-11-21 11:26:55 | Only…zero days left until the holiday shopping season! (lien direct) | The holidays are a time when people purchase gifts for their friends, families, and yes, even for themselves. Increasingly, children are using and accessing more and more digital devices - making it important for everyone to work together to secure these devices. | |||
|
2017-11-20 14:38:47 | Kids\' smartwatches banned in Germany over spying concerns (lien direct) | German parents are being told to destroy smartwatches they have bought for their children after the country's telecoms regulator put a blanket ban in place to prevent sale of the devices, amid growing privacy concerns. | |||
|
2017-11-20 12:46:56 | UK\'s ICO issues stark reminder of backlash for privacy invasion (lien direct) | The Information Commissioner's Office (ICO) in the United Kingdom has issued a stark reminder and straight-to-the-point warning for all employees who might be tempted to snoop on others' personal data. | |||
|
2017-11-20 09:33:25 | Is your business ready for the Holiday Season? (lien direct) | Unfortunately, as with every opportunity, there are people who want to benefit from your success without putting in the hard work. Cybercriminals will view the increase in traffic and spending as opportunities to make extra money. | |||
|
2017-11-17 10:00:07 | One-third of internet pounded by DoS attacks (lien direct) | Simple DoS attacks, which are a one-on-one affair, have been all but supplanted by DDoS attacks. The latter involve concerted campaigns from armies of devices conscripted into botnets which, as if lined up and marching in lockstep, aim to knock the unlucky target offline. | |||
|
2017-11-16 13:33:24 | Think you deleted that embarrassing WhatsApp message you sent? Think again (lien direct) | If there's one thing we should all have learnt from our years on the internet it should be this: once you say something somewhere, it's very hard to take it back and pretend it never happened. | |||
|
2017-11-16 13:24:06 | Tips for buying and sending gift cards (lien direct) | In a world where money is often represented as numbers moving from one place to another, the difference between types of payment cards may seem a bit nebulous. | |||
|
2017-11-15 20:39:14 | US Vulnerability Equities Policy: transparency welcome, but serious questions remain (lien direct) | Commentary on government struggles to protect internet security while stockpiling cyber vulnerabilities in order to launch attacks and gain intelligence. | |||
|
2017-11-15 13:58:21 | Multi-stage malware sneaks into Google Play (lien direct) | In all the cases we investigated, the final payload was a mobile banking trojan. Once installed, it behaves like a typical malicious app of this kind: it may present the user with fake login forms to steal credentials or credit card details. | |||
|
2017-11-15 12:33:38 | US rules on reporting cybersecurity flaws set to change according to source (lien direct) | Currently the US government employs an inter-agency review, created under former President Barack Obama. Known as the Vulnerability Equities Process, it is tasked with deciding what happens to any cybersecurity flaws that is discovered by the National Security Agency (NSA). | |||
|
2017-11-14 12:57:41 | Americans\' unease about cybercrime towers over conventional crimes (lien direct) | The high level of fear of cybercrime dovetails with the self-reported rates of victimization, as 25% of the respondents reported that their personal information or that of their household member has been stolen by hackers over the past 12 months. | |||
|
2017-11-13 12:57:00 | Transparency of ML algorithms is a double-edged sword (lien direct) | Unless companies processing citizens' personal data fully understand the reasoning behind the decisions made based on their machine-learning models, they will find themselves between a rock and a hard place. | |||
|
2017-11-10 12:59:41 | Experts share perspective on the state of journalists\' cybersafety (lien direct) | These days, journalists and publishers are increasingly concerned about protecting themselves, their work, and their sources. Rightfully so, for we live in a time when nearly every aspect of publishing occurs online. | |||
|
2017-11-10 09:57:21 | Fighting persistent malware with a UEFI scanner (lien direct) | The biggest news in malware so far this year has been WannaCryptor a.k.a. WannaCry, and one reason that particular ransomware spread so fast was because it used a “top secret†exploit developed by the NSA, an agency known to have dabbled in UEFI compromise. | Wannacry | ||
|
2017-11-09 14:01:08 | Windows Movie Maker Scam spreads massively due to high Google ranking (lien direct) | ESET detected a modified version of Windows Movie Maker that aims to collect money from unaware users. The spread has been boosted by SEO. | |||
|
2017-11-08 12:58:33 | Five tips for keeping your database secure (lien direct) | In general, these are the most basic and essential precautions any systems manager must consider. However, depending on the system you want to protect, there are some additional issues to take into account. |
To see everything:
Our RSS (filtrered)
