Src |
Date (GMT) |
Titre |
Description |
Tags |
Stories |
Notes |
 |
2023-11-28 20:42:54 |
XM Cyber Launches New Kubernetes Exposure Management (lien direct) |
XM Cyber Launches New Kubernetes Exposure Management to Intelligently Protect Critical Container Environments
Extending its industry-leading XM Attack Graph Analysis™ to Kubernetes, XM Cyber is the first and only exposure management solution that works across hybrid environments
-
Product Reviews |
|
|
|
 |
2023-11-28 20:35:00 |
Dark Reading Debuts Fresh New Site Design (lien direct) |
Check out our new look - it's crisp, fast, and more reader-friendly. |
|
|
|
 |
2023-11-28 20:21:00 |
Slovenian Electrical Utility HSE Suffers Ransomware Attack (lien direct) |
The company's power production remains in operation, and authorities have been notified of the attack. |
|
|
★★★
|
 |
2023-11-28 20:19:58 |
Digital Car Keys Are Coming (lien direct) |
Soon we will be able to unlock and start our cars from our phones. Let’s hope people are thinking about security. |
|
|
★★
|
 |
2023-11-28 20:02:19 |
Georgia Supreme Court Blocks GOP Attack on Trump Prosecutor - For Now (lien direct) |
>The Republicans who orchestrated the Georgia commission to remove elected DAs said they will keep fighting to see Fani Willis removed.
|
|
|
|
 |
2023-11-28 19:57:00 |
Former Uber CISO Speaks Out, After 6 Years, on Data Breach, SolarWinds (lien direct) |
Joe Sullivan, spared prison time, weighs in on the lessons learned from the 2016 Uber breach and the import of the SolarWinds CISO case. |
|
|
|
 |
2023-11-28 19:51:36 |
Ransomware gang broken up in Ukraine as a result of international operation (lien direct) |
>Police in Ukraine arrested a 32-year-old man they say was the "leader" of a group, as well as "his four most active accomplices," according to a Google translation of a statement issued by the Ukrainian Cyber Police.
|
|
|
|
 |
2023-11-28 19:44:36 |
Ukraine Hacks Russia\'s Aviation Agency, Claims “Aviation Cannibalism” (lien direct) |
By Deeba Ahmed
In a press release, Ukraine's intelligence agency referred to the hacking as a “successful complex special operation in cyberspace.”
This is a post from HackRead.com Read the original post: Ukraine Hacks Russia’s Aviation Agency, Claims “Aviation Cannibalism” |
|
|
|
 |
2023-11-28 19:00:00 |
Fight or Flight: How to Keep Cyberattacks From Taking Off (lien direct) |
As industries around the world act to mitigate the increase in cyber threats, the aviation sector should be leading the cybersecurity uprising, explains William "Hutch" Hutchison, CEO of SimSpace. |
|
|
|
 |
2023-11-28 18:51:00 |
Senate proposes surveillance bill without FBI warrant requirement (lien direct) |
A bipartisan group of U.S. senators on Tuesday introduced legislation to renew a powerful electronic spying program for a dozen more years, while eschewing some of the reforms sought by privacy advocates. The measure marks the third bill introduced in the past month that would extend a law known as Section 702 of the Foreign |
|
|
|
 |
2023-11-28 18:49:46 |
Etude Opengear : Quelle est la perception des DSI et ingénieurs français en matière de cybersécurité ? (lien direct) |
Etude Opengear : Quelle est la perception des DSI et ingénieurs français
en matière de cybersécurité ?
• 9 DSI sur 10 estiment qu'elle constitue la principale menace actuelle pour leur organisation.
• 51 % des ingénieurs jugent les investissements de leur entreprise insuffisant.
• Un ingénieur sur dix est prêt à quitter ses fonctions à défaut de financement de cybersécurité adéquat.
-
Investigations |
|
|
|
 |
2023-11-28 18:20:05 |
Verizon Business 2023 Mobile Security Index : Équilibrer la sécurité et les impératifs de l\'entreprise (lien direct) |
Verizon Business 2023 Mobile Security Index : Équilibrer la sécurité et les impératifs de l'entreprise
Ce qu'il faut retenir :
• Les utilisateurs sont 6 à 10 fois plus susceptibles d'être victimes d'une attaque de phishing par SMS que d'une attaque par courrier électronique.
• 90 % des cyberattaques réussies et jusqu'à 70 % des violations de données réussies trouvent leur origine dans les dispositifs d'extrémité.
• Plus de la moitié des entreprises (62 %) ont subi une violation au moins partiellement imputable au travail à distance au cours des trois dernières années.
-
Investigations |
|
|
|
 |
2023-11-28 18:20:00 |
Transform Your Data Security Posture – Learn from SoFi\'s DSPM Success (lien direct) |
As cloud technology evolves, so does the challenge of securing sensitive data. In a world where data duplication and sprawl are common, organizations face increased risks of non-compliance and unauthorized data breaches.
Sentra's DSPM (Data Security Posture Management) emerges as a comprehensive solution, offering continuous discovery and accurate classification of sensitive data in the cloud. |
|
|
★★
|
 |
2023-11-28 18:17:40 |
Pradeo remporte le hackathon organisé par le Campus Cyber et la DGSE (lien direct) |
Pradeo remporte le hackathon organisé par le Campus Cyber et la DGSE.
Picture of Caroline Borriello
By Caroline Borriello on novembre, 22 2023
Photo des lauréats du hackathon de la DGSE et du Campus Cyber
-
Business |
|
|
|
 |
2023-11-28 18:13:40 |
La nouvelle directive NIS2 frappe aux portes de l\'Europe : pourquoi l\'automatisation pilotée par l\'observabilité est essentielle pour s\'y conformer (lien direct) |
La nouvelle directive NIS2 frappe aux portes de l'Europe : pourquoi l'automatisation pilotée par l'observabilité est essentielle pour s'y conformer
Par Ben Todd, RVP Security Solutions, EMEA, chez Dynatrace
-
Points de Vue |
|
|
|
 |
2023-11-28 18:13:00 |
Cyber Monday Kicks Off Holiday Shopping Season With E-Commerce Security Risks (lien direct) |
Online shopping websites often lack basic security protections when it comes to PII, allowing malicious actors to capitalize on consumer data or perpetuate retail and hospitality scams. |
|
|
|
 |
2023-11-28 18:08:22 |
Immuta Announces New Integration Between Its Data Security Platform and Amazon S3 Access Grants (lien direct) |
Immuta Announces New Integration Between Its Data Security Platform and Amazon S3 Access Grants
New integration scales and simplifies data access control, enabling organizations to get more value from their Amazon S3 data
-
Product Reviews |
|
|
|
 |
2023-11-28 18:04:00 |
Design Flaw in Google Workspace Could Let Attackers Gain Unauthorized Access (lien direct) |
Cybersecurity researchers have detailed a "severe design flaw" in Google Workspace's domain-wide delegation (DWD) feature that could be exploited by threat actors to facilitate privilege escalation and obtain unauthorized access to Workspace APIs without super admin privileges.
"Such exploitation could result in theft of emails from Gmail, data exfiltration from Google Drive, or other |
|
|
★★
|
 |
2023-11-28 18:00:00 |
Name That Toon: Slam Dunk (lien direct) |
Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card. |
|
|
|
 |
2023-11-28 17:57:10 |
CyberSecura officialise son partenariat avec Serenys Assurances (lien direct) |
CyberSecura officialise son partenariat avec Serenys Assurances, société de courtage
en assurances couvrant les risques cyber
Serenys Assurances, courtiers en assurances, sera ainsi en mesure d'accompagner les
clients de CyberSecura dans la définition des garanties de leur contrat d'assurance cyber,
tout en leur faisant bénéficier de réductions exclusives.
-
Business |
|
|
|
 |
2023-11-28 17:55:00 |
Attacks Against South African ICS and IoT Systems Steadily Decrease (lien direct) |
All African nations saw a reduced number of cyberattacks on industrial and IoT systems in the third quarter of 2023 compared with earlier this year. |
|
|
|
 |
2023-11-28 17:49:44 |
Infinigate UK&I Launches Next-Gen Cyber Observability Solution (lien direct) |
Infinigate UK&I Launches Next-Gen Cyber Observability Solution
Infinigate UK&I is launching a composite, multi-vendor offering to provide reseller partners with a complete cyber-observability package to face today's escalating cyber-threat.
-
Product Reviews |
|
|
|
 |
2023-11-28 17:49:06 |
News alert: AppDirect poll reveals company leaders losing sleep over cyber risks, compliance (lien direct) |
San Francisco, Calif., Nov. 28, 2023 – AppDirect, the world’s leading B2B subscription commerce platform, today released key findings from its IT Business Leaders 2024 Outlook Report.
The study, conducted by independent research firm Propeller Insights, dives into … (more…) |
|
|
|
 |
2023-11-28 17:46:50 |
Stormshield et le groupe Itancia signent un accord de distribution au Maroc (lien direct) |
Stormshield et le groupe Itancia signent un accord de distribution au Maroc. Le groupe Itancia renforce son activité Itancia Technology sur le marché de la Cybersécurité en Afrique, en signant un accord de distribution avec la marque Stormshield
-
Business |
|
|
|
 |
2023-11-28 17:44:32 |
Cybersécurité : cinq tendances à suivre en 2024 (lien direct) |
Cybersécurité : cinq tendances à suivre en 2024 par Netwrix
Les attaques assistées par l'IA vont accélérer la cybercriminalité, tandis que les entreprises rencontreront de plus en plus de difficultés pour souscrire des polices de cyberassurance.
-
Points de Vue |
|
|
|
 |
2023-11-28 17:38:09 |
Five cybersecurity trends to expect in 2024 (lien direct) |
Five cybersecurity trends to expect in 2024
AI-powered attacks will accelerate cybercrime and cyber insurance will be harder to get.
-
Opinion |
|
|
|
 |
2023-11-28 17:30:00 |
macOS Malware Mix & Match: North Korean APTs Stir Up Fresh Attacks (lien direct) |
Lazarus and its cohorts are switching loaders and other code between RustBucket and KandyKorn macOS malware to fool victims and researchers. |
|
|
|
 |
2023-11-28 17:28:14 |
Utimaco introduces u.trust LAN Crypt Cloud (lien direct) |
Utimaco introduces u.trust LAN Crypt Cloud, a cloud-based file encryption management solution for easy, strong data protection
With ransomware and other cyber-attacks at an all-time high in 2023, it is more important than ever for organizations to protect their data
-
Product Reviews |
|
|
|
 |
2023-11-28 17:23:14 |
Rapport Active Adversary de Sophos : Des fichiers ont été désactivés ou effacés dans 82 % des cyberattaques où les données télémétriques sont absentes, dans les cas analysés (lien direct) |
Des fichiers ont été désactivés ou effacés dans 82 % des cyberattaques où les données télémétriques sont absentes, dans les cas analysés pour le rapport Active Adversary de Sophos
38 % des attaques de ransomwares " rapides " recensées dans cette étude ont eu lieu dans les 5 jours suivant l'accès initial
La rapidité de ces attaques empêche les cyberdéfenseurs de répondre
-
Investigations |
|
|
|
 |
2023-11-28 17:20:44 |
Le CESIN dévoile un rapport inédit sur la résilience au stress des Responsables de la Cybersécurité (lien direct) |
Le CESIN dévoile un rapport inédit sur la résilience au stress des Responsables de la Cybersécurité
L'association s'empare de la question du stress et de la charge mentale du RSSI qui soulèvent des défis importants pour la profession. Ce nouveau rapport explore les sources de stress spécifiques et propose des pistes de solutions.
-
Investigations |
|
|
|
 |
2023-11-28 17:20:00 |
Egyptian E-Payment Vendor Recovering From LockBit Ransomware Attack (lien direct) |
Fawry confirms addresses, phone numbers, and dates of birth, leaked online. |
|
|
|
 |
2023-11-28 17:18:04 |
Eviden annonce la disponibilité d\'AIsaac Cyber Mesh (lien direct) |
Eviden annonce la disponibilité d'AIsaac Cyber Mesh
La nouvelle solution phare d'Eviden combine la puissance de Cybersecurity Mesh, d'Amazon Security Lake et d'Amazon Bedrock Gen AI pour offrir une cyber-résilience inégalée.
-
Produits |
|
|
|
 |
2023-11-28 17:16:04 |
SentinelOne® and Pax8 double down on partnership to secure SMBs (lien direct) |
SentinelOne® and Pax8 double down on partnership to secure SMBs
Long-time partners expand relationship to deliver more market-leading, enterprise-class AI security solutions to large and fast-growing segment more quickly
-
Business News |
|
|
|
 |
2023-11-28 17:00:35 |
Comment OVHcloud va concrétiser sa stratégie edge (lien direct) |
Portées par l'acquisition de gridscale, les Local Zones seront le véhicule d'OVHcloud dans l'edge computing. Les premières doivent ouvrir début 2024. |
|
|
|
 |
2023-11-28 17:00:00 |
North Texas water utility serving 2 million hit with cyberattack (lien direct) |
A water utility serving two million people in North Texas is dealing with a cybersecurity incident that caused operational issues. With more than 850 employees, North Texas Municipal Water District (NTMWD) provides wholesale water, wastewater and solid waste management services to more than 13 cities in the state, including Plano and Frisco. Alex Johnson, director |
|
|
|
 |
2023-11-28 17:00:00 |
Undetected Android Trojan Expands Attack on Iranian Banks (lien direct) |
Zimperium's latest findings include the identification of 245 new app variants |
|
|
★★
|
 |
2023-11-28 16:58:46 |
New BLUFFS attack lets attackers hijack Bluetooth connections (lien direct) |
Researchers at Eurecom have developed six new attacks collectively named 'BLUFFS' that can break the secrecy of Bluetooth sessions, allowing for device impersonation and man-in-the-middle (MitM) attacks. [...] |
|
|
★★
|
 |
2023-11-28 16:57:32 |
La saison des Fêtes, une aubaine pour les cybercriminels ! (lien direct) |
La saison des Fêtes, une aubaine pour les cybercriminels !
Désormais, bien avant le Black Friday, les évènements promotionnels débutent et deviennent le rituel les temps forts qui rythment l'année ! explique Wipro
-
Malwares |
|
|
★★★
|
 |
2023-11-28 16:43:00 |
How Hackers Phish for Your Users\' Credentials and Sell Them (lien direct) |
Account credentials, a popular initial access vector, have become a valuable commodity in cybercrime. As a result, a single set of stolen credentials can put your organization's entire network at risk.
According to the 2023 Verizon Data Breach Investigation Report, external parties were responsible for 83 percent of breaches that occurred between November 2021 and October 2022. Forty-nine |
|
|
★★
|
 |
2023-11-28 16:30:00 |
Ardent Health Services Grapples With Ransomware Disruption (lien direct) |
Non-urgent procedures are being rescheduled, emergency room patients redirected to other hospitals |
|
|
★★
|
 |
2023-11-28 16:13:43 |
These 123 Last-Chance Cyber Monday Deals Are Still Going Strong Right Now (lien direct) |
The sale extravaganza may be over, but many of the same discounts are alive, including deals on office chairs and TCL TVs. |
|
|
★★
|
 |
2023-11-28 16:09:43 |
KPMG France se renforce sur Salesforce avec l\'acquisition d\'iCom Cloud (lien direct) |
KPMG France annonce l'acquisition d'iCom Cloud, pure player français des technologies Salesforce. |
|
|
★★
|
 |
2023-11-28 16:03:00 |
Key Cybercriminals Behind Notorious Ransomware Families Arrested in Ukraine (lien direct) |
A coordinated law enforcement operation has led to the arrest of key individuals in Ukraine who are alleged to be a part of several ransomware schemes.
"On 21 November, 30 properties were searched in the regions of Kyiv, Cherkasy, Rivne, and Vinnytsia, resulting in the arrest of the 32-year-old ringleader," Europol said in a statement today. "Four of the ringleader's most active accomplices were |
|
|
★★
|
 |
2023-11-28 16:00:45 |
Palo Alto Networks Advises U.S. Government on AI and Cybersecurity (lien direct) |
>Testimony before the Energy and Commerce Committee in the House of Representatives on the critical role of artificial intelligence (AI) in cybersecurity defense.
|
|
|
★★
|
 |
2023-11-28 16:00:00 |
Understanding OT Cybersecurity Risks in the Energy Sector (lien direct) |
Get insights from a new survey that shows where oil and gas companies are in their cybersecurity efforts. Read more. |
Studies
Industrial
|
|
★★★
|
 |
2023-11-28 15:57:38 |
ID Theft Service Resold Access to USInfoSearch Data (lien direct) |
One of the cybercrime underground's more active sellers of Social Security numbers, background and credit reports has been pulling data from hacked accounts at the U.S. consumer data broker USinfoSearch, KrebsOnSecurity has learned. |
|
|
★★
|
 |
2023-11-28 15:54:00 |
Stop Identity Attacks: Discover the Key to Early Threat Detection (lien direct) |
Identity and Access Management (IAM) systems are a staple to ensure only authorized individuals or entities have access to specific resources in order to protect sensitive information and secure business assets.
But did you know that today over 80% of attacks now involve identity, compromised credentials or bypassing the authentication mechanism? Recent breaches at MGM and Caesars have |
|
|
★★
|
 |
2023-11-28 15:53:00 |
Hackers Can Exploit \'Forced Authentication\' to Steal Windows NTLM Tokens (lien direct) |
Cybersecurity researchers have discovered a case of "forced authentication" that could be exploited to leak a Windows user's NT LAN Manager (NTLM) tokens by tricking a victim into opening a specially crafted Microsoft Access file.
The attack takes advantage of a legitimate feature in the database management system solution that allows users to link to external data sources, such as a remote SQL |
|
|
★★★
|
 |
2023-11-28 15:41:00 |
THREAT ALERT: DJvu Variant Delivered by Loader Masquerading as Freeware (lien direct) |
|
|
|
|
 |
2023-11-28 15:39:31 |
Intelligence Insights: November 2023 (lien direct) |
LummaC2 and FakeBat flutter in, Yellow Cockatoo ascends, and Qbot lingers in this month's edition of Intelligence Insights |
|
|
★★
|