This is the RSS 2.0 feed from www.secnews.physaphae.fr. IT's a simple agragated flow of multiple articles soruces. Liste of sources, can be found on www.secnews.physaphae.fr. 2025-05-12T13:03:10+00:00 www.secnews.physaphae.fr Recorded Future - FLux Recorded Future The damages stemming from the use of the Israeli spyware maker\'s Pegasus tool to hack into WhatsApp users\' devices are likely to be onerous - but unlikely to put an end to its use, observers said.]]> 2025-04-30T18:12:04+00:00 https://therecord.media/nso-whatsapp-damages-spyware-case www.secnews.physaphae.fr/article.php?IdArticle=8670035 False Hack,Tool,Prediction None 3.0000000000000000 Recorded Future - FLux Recorded Future The announcement coincides with public concerns about the ways in which AI service providers can access users\' interactions with their tools, potentially giving providers additional material to train their models.]]> 2025-04-29T17:13:46+00:00 https://therecord.media/whatsapp-in-app-tools-secret-messages www.secnews.physaphae.fr/article.php?IdArticle=8669602 False Tool None 2.0000000000000000 Recorded Future - FLux Recorded Future North Korean IT workers illicitly gaining employment at U.S. and European tech companies are increasingly using generative artificial intelligence in a variety of ways to assist them throughout the job application and interview process.]]> 2025-04-24T19:05:03+00:00 https://therecord.media/north-korean-it-workers-seen-using-ai-recruitment-scams www.secnews.physaphae.fr/article.php?IdArticle=8667308 False Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future A new payment card scam uses malware disguised as a security tool or verification utility to capture card details and access funds.]]> 2025-04-18T14:53:27+00:00 https://therecord.media/new-payment-card-scam-involves-malware-tap www.secnews.physaphae.fr/article.php?IdArticle=8664519 False Malware,Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future Car rental giant Hertz has been notifying state regulators of a data breach that occurred through third-party file sharing software. Tens of thousands of people are affected, but the company hasn\'t specified a total number.]]> 2025-04-16T16:20:51+00:00 https://therecord.media/hertz-data-breach-notifications-cleo-vulnerability www.secnews.physaphae.fr/article.php?IdArticle=8663636 False Data Breach,Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future The makers of the popular file transfer tool CrushFTP say a responsibly disclosed vulnerability in the software has been weaponized. CISA and cyber researchers are sounding alarm bells.]]> 2025-04-08T18:03:56+00:00 https://therecord.media/crushftp-vulnerability-exploited www.secnews.physaphae.fr/article.php?IdArticle=8660995 False Ransomware,Tool,Vulnerability None 2.0000000000000000 Recorded Future - FLux Recorded Future This week in Paris, the diplomatic initiative formerly known as the Pall Mall Process will continue to look for international agreement on thorny issues related to hacking tools known as commercial cyber intrusion capabilities (CCICs).]]> 2025-04-02T12:56:34+00:00 https://therecord.media/paris-pall-mall-process-meeting-commercial-hacking-tools www.secnews.physaphae.fr/article.php?IdArticle=8659821 False Tool,Commercial None 3.0000000000000000 Recorded Future - FLux Recorded Future The Kremlin-linked hacking group Gamaredon appears to be behind a recent campaign that aims to install a malicious version of the Remcos tool on Ukrainian computers.]]> 2025-03-31T18:26:36+00:00 https://therecord.media/gamaredon-phishing-campaign-fake-ukraine-documents-remcos www.secnews.physaphae.fr/article.php?IdArticle=8659456 False Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future The French Competition Authority found that Apple exploited its dominance in the mobile app advertising market through a tool that allows iPhone and iPad users to determine when apps can monitor their online activity.]]> 2025-03-31T14:56:41+00:00 https://therecord.media/french-anticompetitive-fine-ad-tracking www.secnews.physaphae.fr/article.php?IdArticle=8659401 False Tool,Mobile None 3.0000000000000000 Recorded Future - FLux Recorded Future OKX said it detected a coordinated effort by one of North Korea\'s most prolific hacking outfits to misuse its decentralized finance (DeFi) services.]]> 2025-03-17T23:24:41+00:00 https://therecord.media/crypto-okx-shuts-down-exchange www.secnews.physaphae.fr/article.php?IdArticle=8656349 False Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future GitHub was forced to take action this weekend to help users after a threat actor compromised a popular open source package used by more than 23,000 organizations.]]> 2025-03-17T20:36:44+00:00 https://therecord.media/github-restores-code-malicious-tj-actions-changes www.secnews.physaphae.fr/article.php?IdArticle=8656315 False Tool,Threat None 3.0000000000000000 Recorded Future - FLux Recorded Future Researchers at phishing defense company Cofense say hackers are spreading a malicious remote access tool through a fake Binance page that offers access to the TRUMP coin.]]> 2025-03-10T16:35:47+00:00 https://therecord.media/email-scam-spoofs-binance-offers-trump-coin-connectwise-rat www.secnews.physaphae.fr/article.php?IdArticle=8654903 False Malware,Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future Dark Caracal, a group suspected of cyber mercenary activities, appeared to shift to a new espionage tool in a campaign aimed at Latin American targets, according to researchers.]]> 2025-03-04T13:51:25+00:00 https://therecord.media/dark-caracal-hackers-poco-rat-bandook www.secnews.physaphae.fr/article.php?IdArticle=8653427 False Malware,Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future Microsoft outed four foreign and two U.S. developers who it said illicitly used AI services - including the company\'s own - in a celebrity deepfake scheme.]]> 2025-02-27T18:51:51+00:00 https://therecord.media/microsoft-names-developers-behind-illicit-ai-used-in-deepfake-scheme www.secnews.physaphae.fr/article.php?IdArticle=8651713 False Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future Federal civilian agencies have been ordered to patch a vulnerability impacting Trimble Cityworks - a popular tool used by many governments to manage public infrastructure.]]> 2025-02-07T22:17:56+00:00 https://therecord.media/hackers-exploiting-trimble-cityworks-bug-used-by-local-govs www.secnews.physaphae.fr/article.php?IdArticle=8647508 False Tool,Vulnerability None 3.0000000000000000 Recorded Future - FLux Recorded Future Rep. Josh Gottheimer (D-N.J.) called the emergence of DeepSeek\'s AI tools "a five alarm national security fire.”]]> 2025-02-06T22:02:54+00:00 https://therecord.media/lawmakers-push-for-deepseek-ban www.secnews.physaphae.fr/article.php?IdArticle=8647294 False Tool None 2.0000000000000000 Recorded Future - FLux Recorded Future Cloud storage tools used by military, government and even cybersecurity organizations around the world have been left abandoned by their users, exposing them to a wide variety of security risks.]]> 2025-02-05T02:28:20+00:00 https://therecord.media/researchers-warn-of-risks-tied-to-abandoned-cloud-storage-buckets www.secnews.physaphae.fr/article.php?IdArticle=8646931 False Tool,Cloud None 3.0000000000000000 Recorded Future - FLux Recorded Future Italy\'s data protection authority on Thursday announced it has banned DeepSeek from operating in the country after the Chinese artificial intelligence company told regulators it does not fall under the purview of European data privacy laws.]]> 2025-01-31T17:16:12+00:00 https://therecord.media/italy-blocks-chinese-ai-tool-deepseek-over-privacy-concerns www.secnews.physaphae.fr/article.php?IdArticle=8645354 False Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future Law enforcement seized dozens of domains linked to a group known as Saim Raza, or HeartSender, which has been selling hacking tools since at least 2020.]]> 2025-01-31T15:17:53+00:00 https://therecord.media/pakistan-cybercrime-busted-dutch-doj www.secnews.physaphae.fr/article.php?IdArticle=8645308 False Tool,Legislation None 2.0000000000000000 Recorded Future - FLux Recorded Future An Ohio judge threw out key evidence in a murder case earlier this month because the prosecution improperly relied on facial recognition technology, highlighting the limitations of a tool being widely adopted by police departments across the country.]]> 2025-01-28T20:23:35+00:00 https://therecord.media/prosecutors-cant-obtain-murder-conviction-after-judge-throws-out-facial-recognition-evidence www.secnews.physaphae.fr/article.php?IdArticle=8643984 False Tool,Legislation None 3.0000000000000000 Recorded Future - FLux Recorded Future Brazil\'s National Data Protection Authority (ANPD) is blocking Tools for Humanity - a company co-founded by OpenAI\'s Sam Altman - from offering individuals cryptocurrency in return for iris scans intended for an online identity program.]]> 2025-01-27T18:33:23+00:00 https://therecord.media/brazil-iris-scan-data-privacy-tools-for-humanity www.secnews.physaphae.fr/article.php?IdArticle=8643448 False Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future The data breach at the educational software company may affect millions of students at Toronto public schools - one of thousands of districts using PowerSchool tools.]]> 2025-01-21T19:40:15+00:00 https://therecord.media/disciplinary-special-records-toronto-powerschool www.secnews.physaphae.fr/article.php?IdArticle=8640739 False Data Breach,Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future On several occasions recently, hackers have gone after Amazon Web Services\' cloud storage products known as S3 buckets and used the company\'s own encryption tools to lock customers out of their data.]]> 2025-01-13T18:18:00+00:00 https://therecord.media/hackers-encrypting-amazon-cloud-buckets www.secnews.physaphae.fr/article.php?IdArticle=8636821 False Tool,Cloud None 3.0000000000000000 Recorded Future - FLux Recorded Future As of Wednesday, a total of 36 Chrome extensions injected with data-stealing code have been detected, mostly related to artificial intelligence tools and virtual private networks.]]> 2025-01-02T19:56:51+00:00 https://therecord.media/hackers-target-vpn-ai-extensions-google-chrome-malicious-updates www.secnews.physaphae.fr/article.php?IdArticle=8632842 False Tool None 2.0000000000000000 Recorded Future - FLux Recorded Future Researchers at Kaspersky said they found the Lazarus Group using “a complex infection chain that included multiple types of malware, such as a downloader, loader, and backdoor, demonstrating the group\'s evolved delivery and improved persistence methods.”]]> 2024-12-23T19:32:18+00:00 https://therecord.media/lazarus-group-new-tools-kaspersky www.secnews.physaphae.fr/article.php?IdArticle=8629232 False Malware,Tool APT 38 2.0000000000000000 Recorded Future - FLux Recorded Future The Cybersecurity and Infrastructure Security Agency (CISA) issued a binding directive on Tuesday giving federal agencies a series of deadlines to identify cloud systems, implement assessment tools and abide by the agency\'s Secure Cloud Business Applications (SCuBA) secure configuration baselines.]]> 2024-12-18T01:31:04+00:00 https://therecord.media/cisa-orders-federal-agencies-to-secure-microsoft-cloud-systems www.secnews.physaphae.fr/article.php?IdArticle=8626827 False Tool,Cloud None 3.0000000000000000 Recorded Future - FLux Recorded Future A Kremlin-backed group tracked as Secret Blizzard or Turla recently used existing cybercrime infrastructure for an espionage campaign aimed at Ukrainian military devices.]]> 2024-12-12T13:32:59+00:00 https://therecord.media/turla-secret-blizzard-russia-espionage-ukraine-cybercrime-tools www.secnews.physaphae.fr/article.php?IdArticle=8624045 False Tool None 2.0000000000000000 Recorded Future - FLux Recorded Future The researchers said development of the EagleMsgSpy tool has continued throughout 2024, with the company behind it adding new capabilities and obfuscation features.]]> 2024-12-11T20:38:30+00:00 https://therecord.media/chinese-provincial-security-teams-use-spyware-collect-texts-location www.secnews.physaphae.fr/article.php?IdArticle=8623645 False Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future The cybersecurity firm did not name the company but said the attack was “likely carried out by a China-based threat actor, since some of the tools used in this attack have been previously associated with Chinese attackers.”]]> 2024-12-05T21:18:49+00:00 https://therecord.media/us-org-with-presence-in-china-hacked-symantec www.secnews.physaphae.fr/article.php?IdArticle=8620292 False Tool,Threat None 3.0000000000000000 Recorded Future - FLux Recorded Future The group known as Gamaredon has been observed using Cloudflare Tunnels - a tool that helps hide the real location of servers or infrastructure - to infect their targets with custom GammaDrop malware and stay undetected.]]> 2024-12-05T18:39:10+00:00 https://therecord.media/russian-state-hackers-abuse-cloudflare-tunnels-spy-on-ukraine www.secnews.physaphae.fr/article.php?IdArticle=8620213 False Malware,Tool None 2.0000000000000000 Recorded Future - FLux Recorded Future Recently released court documents appear to show that spyware maker NSO Group plays a greater role in loading its surveillance tools onto targets\' devices than previously understood.]]> 2024-11-19T14:55:45+00:00 https://therecord.media/nso-group-whatsapp-case-documents www.secnews.physaphae.fr/article.php?IdArticle=8614134 False Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future 2024-11-13T15:31:47+00:00 https://therecord.media/bitdefender-releases-decryptor-shrinklocker www.secnews.physaphae.fr/article.php?IdArticle=8610464 False Ransomware,Tool None 2.0000000000000000 Recorded Future - FLux Recorded Future In a blog post on Friday, Google said it believes the bug is the first public example of an AI tool finding a previously unknown exploitable memory-safety issue in widely used real-world software.]]> 2024-11-04T01:36:00+00:00 https://therecord.media/google-llm-sqlite-vulnerability-artificial-intelligence www.secnews.physaphae.fr/article.php?IdArticle=8605726 False Tool,Vulnerability None 3.0000000000000000 Recorded Future - FLux Recorded Future Paris-based Free said intruders targeted an internal management tool and that the unauthorized access involved “personal data associated with the accounts of certain subscribers.”]]> 2024-10-28T12:19:07+00:00 https://therecord.media/france-telecom-free-cyberattack www.secnews.physaphae.fr/article.php?IdArticle=8602815 False Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future Companies that use third parties to analyze and compile information harvested from digital badges, artificial intelligence and other electronic workplace surveillance tools could be violating the Fair Credit Reporting Act (FCRA), according to new guidance issued by the agency.]]> 2024-10-24T20:42:17+00:00 https://therecord.media/cfpb-warns-industry-against-workplace-surveillance www.secnews.physaphae.fr/article.php?IdArticle=8601605 False Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future Kroger\'s plans to roll out facial recognition tools at its grocery stores is attracting increased criticism from lawmakers, who warn that it could be exploited to increase the prices certain individuals pay for food and put customers\' personal data at risk.]]> 2024-10-17T15:44:12+00:00 https://therecord.media/kroger-facial-recognition-lawmakers-concerns www.secnews.physaphae.fr/article.php?IdArticle=8599296 False Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future The state-sponsored group\'s targets include a South Asian embassy in Belarus and an unnamed European Union government organization, according to a report published Monday by Slovakia-based cybersecurity firm ESET.]]> 2024-10-08T15:17:22+00:00 https://therecord.media/goldenjackal-hackers-target-government-diplomatic-entities www.secnews.physaphae.fr/article.php?IdArticle=8594384 False Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future Transnational criminal groups in Southeast Asia are incorporating new tools like artificial intelligence and deepfake technology to expand their cyber fraud capabilities, the United Nations Office on Drugs and Crime said Monday.]]> 2024-10-08T01:05:40+00:00 https://therecord.media/southeast-asian-cyber-fraud-outpaces-crackdown-efforts-united-nations www.secnews.physaphae.fr/article.php?IdArticle=8593927 False Tool,Legislation None 3.0000000000000000 Recorded Future - FLux Recorded Future 2024-08-12T13:02:48+00:00 https://therecord.media/united-kingdom-france-pall-mall-process-cyber-intrusion-tools www.secnews.physaphae.fr/article.php?IdArticle=8556359 False Tool,Commercial None 2.0000000000000000 Recorded Future - FLux Recorded Future 2024-07-18T13:50:00+00:00 https://therecord.media/forewarn-app-real-estate-homebuyer-data www.secnews.physaphae.fr/article.php?IdArticle=8539591 False Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future 2024-07-18T12:21:48+00:00 https://therecord.media/tag-100-espionage-hacking-backdoors-asia-pacific www.secnews.physaphae.fr/article.php?IdArticle=8539552 False Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future 2024-07-17T16:56:57+00:00 https://therecord.media/fin7-selling-avneutralizer-tool-darknet-cybercrime www.secnews.physaphae.fr/article.php?IdArticle=8538985 False Tool None 2.0000000000000000 Recorded Future - FLux Recorded Future 2024-07-10T18:24:30+00:00 https://therecord.media/russian-researchers-identify-alleged-rat-developer www.secnews.physaphae.fr/article.php?IdArticle=8534460 False Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future 2024-07-03T15:24:52+00:00 https://therecord.media/cobalt-strike-law-enforcement-takedown www.secnews.physaphae.fr/article.php?IdArticle=8529995 False Tool,Legislation None 3.0000000000000000 Recorded Future - FLux Recorded Future 2024-04-26T16:20:45+00:00 https://therecord.media/kaiser-permanente-potential-third-party-data-exposure www.secnews.physaphae.fr/article.php?IdArticle=8489155 False Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future 2024-04-22T21:16:14+00:00 https://therecord.media/crushftp-file-transfer-vulnerability-patch-asap www.secnews.physaphae.fr/article.php?IdArticle=8487035 False Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future 2024-04-17T19:17:10+00:00 https://therecord.media/cheap-ransomware-for-sale-dark-web www.secnews.physaphae.fr/article.php?IdArticle=8484322 False Ransomware,Tool None 2.0000000000000000 Recorded Future - FLux Recorded Future La Federal Communications Commission (FCC) a annoncé lundi qu'elle lançait une procédure officielle pour étudier les moyens d'empêcher les agresseurs d'utiliser des outils de connectivité automobile pour harceler les survivants de la violence domestique.L'agence a déclaré avoir publié un avis de réglementation proposée qui abritera comment s'assurer que les constructeurs automobiles et les services sans fil

---

The Federal Communications Commission (FCC) announced Monday that it is launching a formal proceeding to study ways to prevent abusers from using car connectivity tools to harass domestic violence survivors. The agency said it has issued a notice of proposed rulemaking which will home in on how to make sure automakers and wireless service]]> 2024-04-09T00:37:43+00:00 https://therecord.media/fcc-connected-car-stalking-rulemaking www.secnews.physaphae.fr/article.php?IdArticle=8478392 False Tool,Studies None 2.0000000000000000 Recorded Future - FLux Recorded Future Les cybercriminels prennent le contrôle des pages Facebook et les utilisent pour annoncer de faux logiciels d'intelligence artificielle générative chargés de logiciels malveillants. & Nbsp;Selon des chercheurs de la société de cybersécurité Bitdefender, les CyberCrooks profitent de la popularité des nouveaux outils génératifs d'IA et utilisent «malvertising» pour usurper l'identité de produits légitimes comme MidJourney, Sora AI, Chatgpt 5 et

---

Cybercriminals are taking over Facebook pages and using them to advertise fake generative artificial intelligence software loaded with malware.  According to researchers at the cybersecurity company Bitdefender, the cybercrooks are taking advantage of the popularity of new generative AI tools and using “malvertising” to impersonate legitimate products like Midjourney, Sora AI, ChatGPT 5 and]]> 2024-04-04T17:04:16+00:00 https://therecord.media/cybercriminals-plant-malware-facebook-ai-brands www.secnews.physaphae.fr/article.php?IdArticle=8476032 False Malware,Tool ChatGPT 2.0000000000000000 Recorded Future - FLux Recorded Future La société de logiciels Red Hat et la principale agence de cybersécurité de la nation \\ ont publié un avertissement du Vendredi Saint concernant le code malveillant intégré dans un outil Linux populaire.Le problème - tagué sous le nom de CVE-2024-3094 - affecte XZ Utils, un outil qui aide à compresser les formats de fichiers grands en plus petits plus gérables pour le partage via le transfert de fichiers.

---

The software company Red Hat and the nation\'s top cybersecurity agency released a Good Friday warning about malicious code being embedded in a popular Linux tool. The issue - tagged as CVE-2024-3094 - affects XZ Utils, a tool that helps compress large file formats into smaller more manageable ones for sharing via file transfer.]]> 2024-03-29T20:28:35+00:00 https://therecord.media/malicious-backdoor-code-linux-red-hat-cisa www.secnews.physaphae.fr/article.php?IdArticle=8472756 False Tool None 2.0000000000000000 Recorded Future - FLux Recorded Future Les chercheurs avertissent que les pirates exploitent activement une vulnérabilité contestée dans un cadre d'IA à source ouverte populaire connue sous le nom de Ray.Cet outil est couramment utilisé pour développer et déployer des applications Python à grande échelle, en particulier pour les tâches telles que l'apprentissage automatique, l'informatique scientifique et le traitement des données.Selon le développeur de Ray \\, tous les domaines, le cadre est utilisé par major

---

Researchers are warning that hackers are actively exploiting a disputed vulnerability in a popular open-source AI framework known as Ray. This tool is commonly used to develop and deploy large-scale Python applications, particularly for tasks like machine learning, scientific computing and data processing. According to Ray\'s developer, Anyscale, the framework is used by major]]> 2024-03-26T18:46:40+00:00 https://therecord.media/thousands-exposed-to-ray-framework-vulnerability www.secnews.physaphae.fr/article.php?IdArticle=8470918 False Tool,Vulnerability None 3.0000000000000000 Recorded Future - FLux Recorded Future La décision de Meta \\ de fermer sa division Crowdtangle - un outil qui suit le contenu sur les réseaux sociaux - a augmenté la colère de plus de 100 groupes de recherche et de défense qui disent qu'il rendra plus difficile la lutte contre la désinformation.Des groupes tels que la Fondation Mozilla, le Center for Democracy and Technology and Access maintenant envoyés

---

Meta\'s decision to close its CrowdTangle division - a tool that tracks content across social media - has raised the ire of more than 100 research and advocacy groups who say it will make it harder to fight disinformation. Groups including the Mozilla Foundation, the Center for Democracy and Technology and Access Now sent]]> 2024-03-22T16:46:46+00:00 https://therecord.media/meta-to-shutter-crowdtangle-disinformation-tracking-tool-before-election www.secnews.physaphae.fr/article.php?IdArticle=8468584 False Tool None 2.0000000000000000 Recorded Future - FLux Recorded Future Des milliers de nouvelles infections impliquant l'outil d'accryptor - qui permet aux pirates de obscurcir les logiciels malveillants et de les glisser dans des systèmes sans être détectés par des logiciels antivirus - ont été découverts dans le cadre d'une campagne ciblant des organisations à travers l'Europe. & NBSP;Des chercheurs de l'ESET ont passé des années à suivre l'accryptor, et ils ont déclaré mercredi que le

---

Thousands of new infections involving the AceCryptor tool - which allows hackers to obfuscate malware and slip it into systems without being detected by anti-virus software - have been discovered as part of a campaign targeting organizations across Europe.  Researchers at ESET have spent years tracking AceCryptor, and they said on Wednesday that the]]> 2024-03-20T19:59:09+00:00 https://therecord.media/acecryptor-malware-surge-europe-remcos www.secnews.physaphae.fr/article.php?IdArticle=8467498 False Malware,Tool None 2.0000000000000000 Recorded Future - FLux Recorded Future Selon un récent rapport, les logiciels malveillants smokeloder utilisés par les cybercriminels liés à la Russie restent l'un des principaux outils pour les hacks financiers en Ukraine.Entre mai et novembre 2023, les chercheurs ont identifié 23 campagnes de smokeloder visant divers objectifs en Ukraine, notamment des institutions financières et des organisations gouvernementales.Les pirates étaient les plus actifs en août et octobre, lancement

---

Smokeloader malware used by Russia-linked cybercriminals remains one of the major tools for financial hacks in Ukraine, according to a recent report. Between May and November 2023, researchers identified 23 Smokeloader campaigns aimed at various targets in Ukraine, including financial institutions and government organizations. The hackers were most active in August and October, launching]]> 2024-03-20T16:33:26+00:00 https://therecord.media/smokeloader-malware-russia-ukraine-financial-institutions www.secnews.physaphae.fr/article.php?IdArticle=8467422 False Malware,Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future Microsoft aurait suspendu l'accès à ses services cloud pour les utilisateurs russes ce mois-ci en raison des sanctions européennes imposées à la Russie après son invasion de l'Ukraine.La société de technologie russe Softline, l'un des plus grands distributeurs de produits Microsoft du pays, a déclaré dans un communiqué la semaine dernière que les utilisateurs locaux

---

Microsoft will reportedly suspend access to its cloud services for Russian users this month as a result of European sanctions imposed on Russia after its invasion of Ukraine. The Russian tech firm Softline, one of the largest distributors of Microsoft products in the country, said in a statement last week that local users will]]> 2024-03-19T15:33:07+00:00 https://therecord.media/russians-losing-access-microsoft-cloud-amazon www.secnews.physaphae.fr/article.php?IdArticle=8466767 False Tool,Cloud None 3.0000000000000000 Recorded Future - FLux Recorded Future Cette semaine, le podcast Click Here a décroché une entrevue rare avec le prétendu leader du groupe Ransomware Lockbit - il porte le nom LockbitsUpp.Il est sous pression parce que le mois dernier, une opération de police internationale a infiltré le groupe et a saisi non seulement leur plate-forme, mais aussi leurs outils de piratage, les comptes de crypto-monnaie et le code source

---

This week, the Click Here podcast landed a rare interview with the purported leader of the LockBit ransomware group - he goes by the name LockBitSupp. He\'s under pressure because last month an international police operation infiltrated the group and seized not just their platform, but their hacking tools, cryptocurrency accounts and source code]]> 2024-03-15T13:45:16+00:00 https://therecord.media/after-lockbit-takedown-its-purported-leader-vows-to-hack-on www.secnews.physaphae.fr/article.php?IdArticle=8464369 False Ransomware,Hack,Tool,Legislation None 3.0000000000000000 Recorded Future - FLux Recorded Future La Chine a augmenté ses renseignementsavecMpaignes contre la Lituanie, recruter des espions locaux et utiliser des cyber-outils pour recueillir des informations sur les affaires internes du pays et la politique étrangère du pays, selon Un nouveau rapport publié par les services de sécurité lituaniens.Leur activité dans le cyberespace du pays \\ a particulièrement augmenté depuis 2021 lorsque la Lituanie a annoncé l'ouverture des Taïwanais

---

China has escalated its intelligence сampaigns against Lithuania, recruiting local spies and using cyber tools to gather information on the country\'s internal affairs and foreign policy, according to a new report released by Lithuanian security services. Their activity in the country\'s cyberspace has especially increased since 2021 when Lithuania announced the opening of the Taiwanese]]> 2024-03-07T16:25:13+00:00 https://therecord.media/lithuania-warns-china-cyber-espionage-increase www.secnews.physaphae.fr/article.php?IdArticle=8460405 False Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future Le gouvernement américain a annoncé mardi des sanctions contre deux personnes et cinq entités liées aux logiciels espions de Predator, quelques jours seulement après l'entreprise derrière l'outil a supprimé l'infrastructure en réponse à Nouvelles recherches sur ses opérations .Le département du Trésor a déclaré qu'il sanctionnait des personnes et des entités liées au consortium d'impression commerciale Intellexa - une tenue

---

The U.S. government announced sanctions on Tuesday against two people and five entities tied to Predator spyware, just days after the company behind the tool took down infrastructure in response to new research about its operations. The Treasury Department said it sanctioned people and entities connected to the Intellexa Commercial Spyware Consortium - a holding]]> 2024-03-05T15:58:00+00:00 https://therecord.media/predator-spyware-makers-sanctioned-for-targeting-government-officials www.secnews.physaphae.fr/article.php?IdArticle=8459384 False Tool,Legislation,Commercial None 3.0000000000000000 Recorded Future - FLux Recorded Future Les outils d'intelligence artificielle seront vigoureusement réglementés par la Federal Trade Commission (FTC), en tenant compte de la vie privée des consommateurs, a déclaré mardi sa présidente Lina Khan à un audience des dirigeants de la technologie et des fondateurs de startup lors d'une conférence."Nous réalisons des remèdes facilement administrables avec des règles de ligne lumineuse sur le développement, l'utilisation et la gestion des entrées d'IA", a déclaré Khan

---

Artificial intelligence tools will be vigorously regulated by the Federal Trade Commission (FTC), with an eye on consumer privacy, its Chair Lina Khan told an audience of tech executives and startup founders at a conference Tuesday. “We\'re crafting easily administrable remedies with bright-line rules on the development, use and management of AI inputs,” Khan said]]> 2024-02-27T19:12:51+00:00 https://therecord.media/ftc-warns-tech-industry-ai-data-privacy www.secnews.physaphae.fr/article.php?IdArticle=8456034 False Tool,Conference None 2.0000000000000000 Recorded Future - FLux Recorded Future Une vulnérabilité de sécurité dans un outil d'accès à distance disponible dans le commerce est exploitée par des criminels de ransomware quelques jours seulement après la première fois.La vulnérabilité spécifique, affectant certaines versions du produit ScreenConnect de ConnectWise \\, a reçu le maximum score CVSS de 10 , indiquantqu'il représente une menace critique pour les organisations qui n'ont pas corrigé leur logiciel.

---

A security vulnerability in a commercially available remote access tool is being exploited by ransomware criminals just days after first being disclosed. The specific vulnerability, affecting some versions of ConnectWise\'s ScreenConnect product, has been given the maximum CVSS score of 10, indicating that it poses a critical threat to organizations that haven\'t patched their software.]]> 2024-02-23T12:53:03+00:00 https://therecord.media/connectwise-screenconnect-bug-cybercrime-exploitation www.secnews.physaphae.fr/article.php?IdArticle=8454106 False Ransomware,Tool,Vulnerability,Threat None 2.0000000000000000 Recorded Future - FLux Recorded Future Mercredi, la maison dirigée par les républicains a abandonné ses derniers efforts pour faire avancer la législation pour réautoriser un outil majeur de surveillance étrangère, le dernier reflet des divisions profondes parmi les législateurs du GOP.La décision abrupte a été prise car le comité des règles de la Chambre était tenue d'une audience sur un projet de loi àrenouveler L'article 702 de la Foreign Intelligence Surveillance Act,

---

The Republican-led House on Wednesday ditched its latest effort to advance legislation to reauthorize a major foreign surveillance tool, the latest reflection of deep divisions among GOP lawmakers. The abrupt decision was made as the House Rules Committee was holding a hearing on a bill to renew Section 702 of the Foreign Intelligence Surveillance Act,]]> 2024-02-14T21:46:11+00:00 https://therecord.media/house-republicans-punt-section-702-fisa-renewal www.secnews.physaphae.fr/article.php?IdArticle=8450154 False Tool,Legislation None 3.0000000000000000 Recorded Future - FLux Recorded Future La société de logiciels de surveillance et de gestion à distance populaire, AnyDesk, a déclaré que toutes les versions de son outil obtenues à partir de «sources officielles» sont sûres à utiliser à la suite d'une cyberattaque qui a provoqué des jours de pannes et de préoccupations parmi les utilisateurs.La cyberattaque a affecté les serveurs en Espagne et au Portugal, mais nulle part ailleurs, a déclaré Anydesk.L'entreprise a confirmé vendredi dernier qu'un quatre jours

---

Popular remote monitoring and management software company AnyDesk said all versions of its tool obtained from “official sources” are safe to use following a cyberattack that caused days of outages and concern among users. The cyberattack affected servers in Spain and Portugal but nowhere else, AnyDesk said. The company confirmed last Friday that a four-day]]> 2024-02-06T19:39:29+00:00 https://therecord.media/anydesk-software-safe-to-use-cyberattack www.secnews.physaphae.fr/article.php?IdArticle=8447394 False Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future Google a déclaré mardi qu'il suivait au moins 40 entreprises impliquées dans la création de logiciels espions et d'autres outils de piratage qui sont vendus aux gouvernements et déployés contre les utilisateurs «à haut risque», y compris les journalistes, les défenseurs des droits de l'homme et les dissidents.Les vendeurs - qui ont développé des dizaines d'outils et d'astuces pour pénétrer dans les téléphones, les ordinateurs portables,

---

Google said Tuesday that it is tracking at least 40 companies involved in the creation of spyware and other hacking tools that are sold to governments and deployed against “high risk” users, including journalists, human rights defenders and dissidents. The vendors - which have developed dozens of tools and tricks to break into phones, laptops,]]> 2024-02-06T14:30:47+00:00 https://therecord.media/google-spyware-vendors-are-behind-half-of-all-zero-days www.secnews.physaphae.fr/article.php?IdArticle=8447306 False Tool None 4.0000000000000000 Recorded Future - FLux Recorded Future Le Royaume-Uni et la France organisent conjointement une conférence diplomatique à Lancaster House à Londres cette semaine pour lancer un nouvel accord international concernant «la prolifération des outils commerciaux de cyber-intrusion».Selon le ministère des Affaires étrangères, 35 nations seront représentées lors de la conférence, aux côtés de «Big Tech Leaders, d'experts juridiques et de droits de l'homme

---

The United Kingdom and France are to jointly host a diplomatic conference at Lancaster House in London this week to launch a new international agreement addressing “the proliferation of commercial cyber intrusion tools.” According to the Foreign Office, 35 nations will be represented at the conference, alongside “big tech leaders, legal experts, and human rights]]> 2024-02-05T23:00:35+00:00 https://therecord.media/britain-france-assemble-diplomats-international-agreement www.secnews.physaphae.fr/article.php?IdArticle=8447092 False Tool,Conference,Commercial None 2.0000000000000000 Recorded Future - FLux Recorded Future Vendredi, toutes les agences civiles fédérales des États-Unis ont été condamnées à déconnecter les produits Secure et Policy Secure et Policy Secure après que d'autres vulnérabilités aient été trouvées dans les outils cette semaine.Dans un Directive mise à jour publiée mercredi, l'agence de sécurité de cybersécurité et d'infrastructure (CISA) a donné aux agences jusqu'à vendredi à minuit pour supprimer les outils

---

All federal civilian agencies in the U.S. have been ordered to disconnect Ivanti Connect Secure and Policy Secure products by Friday after more vulnerabilities were found in the tools this week. In an updated directive published on Wednesday, the Cybersecurity and Infrastructure Security Agency (CISA) gave agencies until Friday at midnight to remove the tools]]> 2024-02-01T15:55:03+00:00 https://therecord.media/federal-civilian-agencies-ordered-to-disconnect-at-risk-ivanti-products-cisa www.secnews.physaphae.fr/article.php?IdArticle=8445610 False Tool,Vulnerability None 3.0000000000000000 Recorded Future - FLux Recorded Future Le ministère américain de la Justice a confirmé mercredi qu'il avait perturbé un botnet géré par une opération de piratage du gouvernement chinois prolifique connu sous le nom de Volt Typhoon.Les nouvelles du démontage du botnet ont émergé mardi pour la première fois, lorsque Reuters a rapporté que le ministère de la Justice et le FBI ont obtenu l'autorisation légale d'un tribunal américain pour désactiver à distance les outils implantés

---

The U.S. Justice Department confirmed on Wednesday that it disrupted a botnet run by a prolific Chinese government hacking operation known as Volt Typhoon. News of the botnet takedown first emerged on Tuesday, when Reuters reported that the Justice Department and FBI got legal authorization from a U.S. court to remotely disable the tools implanted]]> 2024-01-31T19:25:01+00:00 https://therecord.media/china-run-botnet-takedown-fbi-doj-routers www.secnews.physaphae.fr/article.php?IdArticle=8445296 False Tool Guam 3.0000000000000000 Recorded Future - FLux Recorded Future La multinationale française Schneider Electric a déclaré que sa division commerciale de durabilité avait souffert d'une attaque de ransomware au début du mois.La société a confirmé l'incident dans un communiqué cette semaine que l'attaque a affecté son produit de conseil en ressources - un outil de visualisation des données pour les informations sur la durabilité - ainsi que d'autres «systèmes spécifiques à la division».Schneider Electric a dit qu'ils

---

French multinational Schneider Electric said its Sustainability Business division suffered from a ransomware attack earlier this month. The company confirmed the incident in a statement this week that the attack affected its Resource Advisory product - a data visualization tool for sustainability information - as well as other “division specific systems.” Schneider Electric said they]]> 2024-01-30T17:39:33+00:00 https://therecord.media/schneider-electric-ransomware-attack-sustainability-division www.secnews.physaphae.fr/article.php?IdArticle=8444874 False Ransomware,Tool None 2.0000000000000000 Recorded Future - FLux Recorded Future Les pirates russes ont abusé d'un outil d'authentification populaire pour accéder aux comptes de messagerie des cadres supérieurs de Microsoft, selon une nouvelle déclaration du géant de la technologie.Microsoft a été serré à propos d'un incident - annoncé vendredi après-midi La semaine dernière - la semaine dernière - la semaine dernière -Le fait qu'ils aient dit impliquant le compromis de plusieurs mois des comptes de messagerie d'entreprise.

---

Russian hackers abused a popular authentication tool to gain access to the email accounts of senior executives at Microsoft, according to a new statement from the tech giant. Microsoft has been tightlipped about an incident - announced late on Friday afternoon last week - that they said involved the months-long compromise of corporate email accounts.]]> 2024-01-26T17:02:23+00:00 https://therecord.media/microsoft-says-russian-hackers-used-previously-identified-technique-to-breach-executive-emails www.secnews.physaphae.fr/article.php?IdArticle=8443465 False Tool None 2.0000000000000000 Recorded Future - FLux Recorded Future Amazon a annoncé mercredi qu'ils rendront plus difficile pour les services de police de demander des images générées par des sonnettes vidéo et des caméras de surveillance des clients.La pratique était depuis longtemps sous le feu des groupes de libertés civiles et Certains politiciens .Eric Kuhn, qui dirige la plate-forme de voisins de la société, a déclaré la fonction de «demande d'assistance» controversée de Ring \\

---

Amazon announced Wednesday that they will make it harder for police departments to ask for footage generated from customers\' Ring video doorbells and surveillance cameras. The practice had long been under fire from civil liberties groups and some politicians. Eric Kuhn, who helms the company\'s Neighbors Platform, said Ring\'s controversial “Request for Assistance” (RFA) function]]> 2024-01-25T16:32:42+00:00 https://therecord.media/amazon-sunsets-ring-tool-law-enforcement-obtain-video www.secnews.physaphae.fr/article.php?IdArticle=8443043 False Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future Un juge fédéral a rejeté une requête du Group Spyware Maker NSO pour rejeter une action en justice Apple alléguant que le puissant outil de Pegasus de la société a violé les lois sur la fraude informatique et a injustement profité d'Apple et de ses clients, selon une décision de justice déposée mardi. groupe NSO , un fournisseur très controversé de logiciels espions qui a été

---

A federal judge has denied a motion from spyware maker NSO Group to dismiss an Apple lawsuit alleging the company\'s powerful Pegasus tool has violated computer fraud laws and unfairly profited off of Apple and its customers, according to a court ruling filed Tuesday. NSO Group, a highly controversial purveyor of spyware which has been]]> 2024-01-24T17:00:00+00:00 https://therecord.media/judge-rejects-nso-effort-to-dismiss-apple-lawsuit www.secnews.physaphae.fr/article.php?IdArticle=8442633 False Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future Les agences civiles du gouvernement américain sont condamnées à réparer immédiatement deux vulnérabilités affectant un outil populaire de la société informatique Ivanti après que le meilleur chien de garde de la cybersécurité de la nation \\ a mis en garde contre une exploitation généralisée.L'Agence de sécurité de la cybersécurité et de l'infrastructure (CISA) a sonné l'alarme vendredi à propos de CVE-2023-46805 et CVE-2024-21887 - Deux bogues affectant la politique d'Ivanti Secu

---

Civilian agencies across the U.S. government are being ordered to immediately patch two vulnerabilities affecting a popular tool from IT company Ivanti after the nation\'s top cybersecurity watchdog warned of widespread exploitation. The Cybersecurity and Infrastructure Security Agency (CISA) sounded the alarm on Friday about CVE-2023-46805 and CVE-2024-21887 - two bugs affecting Ivanti Policy Secure]]> 2024-01-19T19:46:00+00:00 https://therecord.media/ivanti-vulnerabilities-cisa-emergency-directive www.secnews.physaphae.fr/article.php?IdArticle=8440747 False Tool,Vulnerability None 2.0000000000000000 Recorded Future - FLux Recorded Future Le régulateur de protection des données de la Grande-Bretagne, le bureau du commissaire à l'information (ICO), examine la légalité du grattage Web pour collecter des données pour former des modèles d'IA génératifs.Il a annoncé lundi le Première consultation Dans une série se concentrant sur les modèles d'IA génératifs - les outils qui créent du texte ou des images basées sur une invite après avoir été formé sur

---

Britain\'s data protection regulator, the Information Commissioner\'s Office (ICO), is scrutinizing the legality of web scraping to collect data to train generative AI models. It announced on Monday the first consultation in a series focusing on generative AI models - the tools that create text or images based on a prompt after being trained on]]> 2024-01-15T13:59:00+00:00 https://therecord.media/uk-ico-examines-privacy-concerns-data-scraping-artificial-intelligence-llms www.secnews.physaphae.fr/article.php?IdArticle=8439239 False Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future La Federal Communications Commission (FCC) exhorte les constructeurs automobiles et les prestataires sans fil à faire plus pour protéger les survivants de la violence domestique contre les outils de traque rendus les voitures connectées et la demande des détails de leurs pratiques de partage de données de localisation.Les voitures connectées sont maintenant chargées de capteurs et d'autres outils qui permettent le suivi de la géolocalisation en temps réel.A Rapport récent de Reuters révélé

---

The Federal Communications Commission (FCC) is urging automakers and wireless providers to do more to protect domestic abuse survivors from stalking tools enabled by connected cars and requesting the details of their location data-sharing practices. Connected cars are now loaded with sensors and other tools which allow real-time geolocation tracking. A recent Reuters report revealed]]> 2024-01-11T20:30:00+00:00 https://therecord.media/fcc-presses-carmakers-stalking-tools www.secnews.physaphae.fr/article.php?IdArticle=8438003 False Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future Mercredi, l'Agence de sécurité de la cybersécurité et de l'infrastructure (CISA) a exhorté les clients de la société informatique Ivanti pour corriger deux vulnérabilités qui sont activement exploitées.Cisa \\ 's Avis suit un Avertissement De Ivanti qu'au moins 10 de ses clients ont été touchés par les vulnérabilités.Les problèmes concernent Ivanti Connect Secure - un outil VPN largement utilisé.

---

The Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday urged customers of IT company Ivanti to patch two vulnerabilities that are being actively exploited. CISA\'s notice follows a warning from Ivanti that at least 10 of its customers were impacted by the vulnerabilities. The issues relate to Ivanti Connect Secure - a widely-used VPN tool.]]> 2024-01-10T21:00:00+00:00 https://therecord.media/ivanti-customers-patch-chinese-hackers www.secnews.physaphae.fr/article.php?IdArticle=8437630 False Tool,Vulnerability None 2.0000000000000000 Recorded Future - FLux Recorded Future Un groupe de pirates lié aux opérations de cyber-espionnage contre l'Ukraine améliore ses tactiques pour devenir plus secrètes et efficaces, selon un nouveau rapport.Suivi en tant que UAC-0050, le groupe déploie principalement l'outil de surveillance à distance Remcos pour cibler les agences gouvernementales en Ukraine.Les chercheurs de la société de cybersécurité Uptycs ont découvert une nouvelle méthode que

---

A hacker group linked to cyber espionage operations against Ukraine is improving its tactics to become more secretive and effective, according to a new report. Tracked as UAC-0050, the group primarily deploys the remote surveillance tool Remcos to target government agencies in Ukraine. Researchers at the cybersecurity firm Uptycs have discovered a new method that]]> 2024-01-04T18:15:00+00:00 https://therecord.media/hackers-using-remcos-getting-stealthier www.secnews.physaphae.fr/article.php?IdArticle=8434591 False Malware,Tool None 2.0000000000000000 Recorded Future - FLux Recorded Future Les agents de sécurité de l'Ukraine \\ ont déclaré avoir éliminé deux caméras de surveillance en ligne qui auraient été piratées par la Russie pour espionner les forces aériennes de défense et les infrastructures critiques dans la capitale de l'Ukraine \\, Kiev.Les caméras ont été installées sur des bâtiments résidentiels de Kiev et ont été initialement utilisés par les résidents pour surveiller les environs et le parking.Après piratage

---

Ukraine\'s security officers said they took down two online surveillance cameras that were allegedly hacked by Russia to spy on air defense forces and critical infrastructure in Ukraine\'s capital, Kyiv. The cameras were installed on residential buildings in Kyiv and were initially used by residents to monitor the surrounding area and parking lot. After hacking]]> 2024-01-02T21:20:00+00:00 https://therecord.media/ukraine-says-russia-hacked-web-cameras-to-spy-on-kyiv-targets www.secnews.physaphae.fr/article.php?IdArticle=8433200 False Tool,Threat None 3.0000000000000000 Recorded Future - FLux Recorded Future Les forces de l'ordre allemandes ont saisi les serveurs du marché du royaume du marché Darknet, un bazar pour la drogue, les logiciels malveillants, les faux documents et d'autres outils pour les cybercriminels.Dans un Relexe de presse Mercredi, la police a déclaré un avis de tubas sur le pointle site Web et analysent désormais l'infrastructure du serveur de Kingdom Market \\ pour identifier les personnes derrière

---

German law enforcement has seized the servers of the darknet marketplace Kingdom Market, a bazaar for drugs, malware, fake documents and other tools for cybercriminals. In a press release on Wednesday, the police said they posted a takedown notice on the website and are now analyzing Kingdom Market\'s server infrastructure to identify the people behind]]> 2023-12-20T18:12:00+00:00 https://therecord.media/german-police-take-down-kingdom-market www.secnews.physaphae.fr/article.php?IdArticle=8426274 False Malware,Tool,Legislation None 3.0000000000000000 Recorded Future - FLux Recorded Future Deux vulnérabilités affectant un outil d'analyse de données populaires ont été ajoutées à la liste des bogues exploités de la Cybersecurity and Infrastructure Security Agency \\ Agency (CISA).Jeudi, cisa ajouté CVE-2023-41265 et CVE-2023-41266 à son catalogue, donnant le fédéralagences civiles jusqu'au 28 décembre pour corriger les problèmes.Les deux bogues étaient TrouvéCet été au sens Qlik -

---

Two vulnerabilities affecting a popular data analytics tool were added to the Cybersecurity and Infrastructure Security Agency\'s (CISA) list of exploited bugs this week. On Thursday, CISA added CVE-2023-41265 and CVE-2023-41266 to its catalog, giving federal civilian agencies until December 28 to patch the issues. Both bugs were found this summer in Qlik Sense -]]> 2023-12-08T22:00:00+00:00 https://therecord.media/cisa-adds-qlik-bugs-to-kev-list www.secnews.physaphae.fr/article.php?IdArticle=8420304 False Tool,Vulnerability None 3.0000000000000000 Recorded Future - FLux Recorded Future La vie des outils d'espionnage étrangers qui devrait expirer dans quelques semaines pourrait être brièvement prolongée jusqu'au 19 avril après que les dirigeants du Congrès ont inséré un renouvellement à court terme dans le projet de loi annuel sur la politique de défense.La décision d'attacher un renouvellement temporaire de l'article 702 de la Foreign Intelligence Surveillance Act au plan de politique massive vient

---

The life of foreign spying tools set to expire in a few weeks could be briefly extended until April 19 after congressional leaders inserted a short-term renewal into the annual defense policy bill. The decision to attach a temporary renewal of Section 702 of the Foreign Intelligence Surveillance Act to the massive policy blueprint comes]]> 2023-12-06T22:30:00+00:00 https://therecord.media/congressional-leaders-seek-to-extend-surveillance-program-until-april www.secnews.physaphae.fr/article.php?IdArticle=8419703 False Tool None 2.0000000000000000 Recorded Future - FLux Recorded Future Mercredi, le comité judiciaire de la Chambre a approuvé une massification massivement un projet de loi bipartite qui obligerait toutes les agences de renseignement aux États-Unis pour obtenir un mandat judiciaire avant de rechercher des informations sur les Américains récupérés par de puissants outils d'espionnage électronique.Les législateurs ont voté 35 à 2 en faveur du Protéger la liberté et finir la loi de surveillance sans mandat

---

The House Judiciary Committee on Wednesday overwhelmingly approved a bipartisan bill that would require all U.S. intelligence agencies to obtain a court warrant before searching for information about Americans retrieved by powerful electronic spying tools. Lawmakers voted 35 to 2 in favor of the Protect Liberty and End Warrantless Surveillance Act that would amend and]]> 2023-12-06T18:15:00+00:00 https://therecord.media/house-judiciary-committee-clears-bill-to-renew-surveillance-tools www.secnews.physaphae.fr/article.php?IdArticle=8419649 False Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future Le dernier projet de loi de la Chambre pour renouveler un outil de sécurité nationale controversé proposerait les restrictions les plus serrées sur le programme de surveillance gouvernementale.Le comité judiciaire de la Chambre lundi a dévoilé sa propre législation pour réautoriser L'article 702 de la Foreign Intelligence Surveillance Act, qui expirera dans quelques semaines sans approbation du Congrès, pour trois autres

---

The latest House bill to renew a controversial national security tool would propose the tightest restrictions yet on the government surveillance program. The House Judiciary Committee on Monday unveiled its own legislation to reauthorize Section 702 of the Foreign Intelligence Surveillance Act, which will expire in a few weeks without congressional approval, for another three]]> 2023-12-05T15:25:00+00:00 https://therecord.media/house-judiciary-section-702-markup www.secnews.physaphae.fr/article.php?IdArticle=8419315 False Tool,Legislation None 3.0000000000000000 Recorded Future - FLux Recorded Future Le gouvernement fédéral avertit que les pirates ciblent un outil spécifique utilisé par les systèmes d'eau et d'eaux usées après que deux services publics ont annoncé des attaques cette semaine.L'Agence de sécurité de la cybersécurité et de l'infrastructure (CISA) a déclaré qu'elle répondait au Exploitation active des contrôleurs logiques programmables unitroniques (PLC) utilisés par de nombreuses organisations du secteur de l'eau.Cisa

---

The federal government is warning that hackers are targeting a specific tool used by water and wastewater systems after two utilities announced attacks this week. The Cybersecurity and Infrastructure Security Agency (CISA) said it is responding to the active exploitation of Unitronics programmable logic controllers (PLCs) used by many organizations in the water sector. CISA]]> 2023-11-29T21:05:00+00:00 https://therecord.media/cisa-water-utilities-unitronics-plc-vulnerability www.secnews.physaphae.fr/article.php?IdArticle=8417909 False Tool,Industrial None 3.0000000000000000 Recorded Future - FLux Recorded Future Les législateurs américains devraient joindre une prolongation à court terme d'un outil de surveillance controversé au projet de loi final de politique de défense de cette année, a déclaré une source de future nouvelle enregistrée.En atteignant un renouvellement temporaire de l'article 702 de la Foreign Intelligence Surveillance Act - qui devrait expirer à la fin de l'année civile

---

U.S. lawmakers are expected to attach a short-term extension of a controversial surveillance tool to this year\'s final defense policy bill, a congressional source told Recorded Future News. By hitching a temporary renewal of Section 702 of the Foreign Intelligence Surveillance Act - which is set to expire at the end of the calendar year]]> 2023-11-29T17:45:00+00:00 https://therecord.media/surveillance-extension-attached-to-defense-bill www.secnews.physaphae.fr/article.php?IdArticle=8417858 False Tool None 2.0000000000000000 Recorded Future - FLux Recorded Future Les autorités britanniques et américaines de la cybersécurité ont publié lundi des conseils sur la façon de développer des systèmes d'intelligence artificielle d'une manière qui minimisera les risques auxquels ils sont confrontés des méfaits aux pirates parrainés par l'État.«Les systèmes d'IA sont soumis à de nouveaux types de vulnérabilités», les 20 pagesDocument prévient - se référant spécifiquement aux outils d'apprentissage automatique.Les nouvelles directives ont

---

British and U.S. cybersecurity authorities published guidance on Monday about how to develop artificial intelligence systems in a way that will minimize the risks they face from mischief-makers through to state-sponsored hackers. “AI systems are subject to new types of vulnerabilities,” the 20-page document warns - specifically referring to machine-learning tools. The new guidelines have]]> 2023-11-27T22:00:00+00:00 https://therecord.media/ai-subject-to-new-vulnerabilities www.secnews.physaphae.fr/article.php?IdArticle=8417334 False Tool,Vulnerability None 3.0000000000000000 Recorded Future - FLux Recorded Future Un groupe de piratage qui cible l'Ukraine depuis un certain temps a lancé une nouvelle campagne sur les agences gouvernementales en utilisant un outil de surveillance familier - Remcos.Le logiciel sophistiqué d'accès à distance, commercialisé comme un outil administratif légitime, peut être abusé par des pirates pour prendre le contrôle total d'un système infecté.Dans une récente campagne, les pirates

---

A hacking group that has been targeting Ukraine for a while has launched a new campaign on government agencies using a familiar surveillance tool - Remcos. The sophisticated remote access software, marketed as a legitimate administrative tool, can be abused by hackers to gain full control over an infected system. In a recent campaign, hackers]]> 2023-11-17T13:46:00+00:00 https://therecord.media/remcos-phishing-ukraine-government-agencies www.secnews.physaphae.fr/article.php?IdArticle=8413406 False Tool None 2.0000000000000000 Recorded Future - FLux Recorded Future Un contrat signé l'année dernière par les douanes et la patrouille frontalière des États-Unis (CBP) semble donner à l'agence le package le plus agressif et le plus vaste d'outils de surveillance qu'il ait jamais utilisés, selon un groupe de plaidoyer.L'accord avec le courtier de données LexisNexis Risk Solutions a fourni à CBP des capacités telles que la collecte de données de géolocalisation, la surveillance sociale

---

A contract signed last year by U.S. Customs and Border Patrol (CBP) appears to give the agency the most aggressive and expansive package of surveillance tools it has ever used, according to an advocacy group. The deal with the data broker LexisNexis Risk Solutions provided CBP with capabilities such as collecting geolocation data, monitoring social]]> 2023-11-16T21:32:00+00:00 https://therecord.media/cbp-lexisnexis-risk-solutions-contract-surveillance www.secnews.physaphae.fr/article.php?IdArticle=8413084 False Tool None 2.0000000000000000 Recorded Future - FLux Recorded Future La société de logiciels financiers Meridianlink a confirmé qu'elle faisait face à une cyberattaque après que les pirates derrière l'incident aient pris des mesures extraordinaires pour faire pression sur l'entreprise pour payer une rançon.Meridianlink, qui a déclaré plus de 76 millions de dollars de revenus au dernier trimestre, fournit des outils aux banques, aux coopératives de crédit, aux prêteurs hypothécaires et aux agences de rapports de consommation aux États-Unis

---

Financial software company MeridianLink confirmed that it is dealing with a cyberattack after the hackers behind the incident took extraordinary measures to pressure the company into paying a ransom. MeridianLink, which reported more than $76 million in revenue last quarter, provides tools to banks, credit unions, mortgage lenders and consumer reporting agencies in the United]]> 2023-11-16T17:30:00+00:00 https://therecord.media/meridianlink-confirms-cyberattack-after-sec-threat www.secnews.physaphae.fr/article.php?IdArticle=8412991 False Ransomware,Tool None 2.0000000000000000 Recorded Future - FLux Recorded Future Pour la deuxième fois en autant de semaines, un groupe de législateurs américains a dévoilé jeudi une législation pour renouveler un puissant outil d'espionnage avant une date limite critique et de fin d'année.Le comité du renseignement de la Chambre dirigée par les républicains a lancé une introduction aux réformes réautoriser l'article 702 du

---

For the second time in as many weeks, a group of U.S. lawmakers on Thursday unveiled legislation to renew a powerful spy tool before a critical, year-end deadline. The Republican-led House Intelligence Committee rolled out a primer on the reforms that will be proposed in a forthcoming bipartisan measure to reauthorize Section 702 of the]]> 2023-11-16T17:00:00+00:00 https://therecord.media/house-intelligence-committee-section-702-proposal www.secnews.physaphae.fr/article.php?IdArticle=8412963 False Tool,Legislation None 2.0000000000000000 Recorded Future - FLux Recorded Future Le gang de ransomes russes derrière l'exploitation de plusieurs outils de transfert de fichiers populaires exploite désormais une nouvelle vulnérabilité dans le logiciel de support informatique SYSAID, selon un nouveau rapport.Mercredi soir, les responsables de la sécurité à Microsoft a déclaré le gang ransomware declop - qu'ils appellent Lance Tempest - vise de nouvelles victimes à travers

---

The Russian ransomware gang behind the exploitation of several popular file transfer tools is now exploiting a new vulnerability in SysAid IT support software, according to a new report. On Wednesday night, security officials at Microsoft said the Clop ransomware gang - which they refer to as Lance Tempest - is targeting new victims through]]> 2023-11-09T17:45:00+00:00 https://therecord.media/clop-ransomware-gang-targets-new-zero-day www.secnews.physaphae.fr/article.php?IdArticle=8408637 False Ransomware,Tool,Vulnerability None 2.0000000000000000 Recorded Future - FLux Recorded Future Cette année, la première législation majeure de \\ pour étendre les autorités de surveillance du gouvernement américain expirées est un effort bipartite qui comprendrait certaines des bordures les plus substantielles depuis des années sur ces outils et autres pouvoirs de renseignement.Un groupe de législateurs de la Chambre et du Sénat a introduit la mesure mardi pour renouveler l'article 702 de la Foreign Intelligence Act,

---

This year\'s first major legislation to extend expiring U.S. government surveillance authorities is a bipartisan effort that would include some of the most substantial curbs in years on those tools and other intelligence powers. A group of House and Senate lawmakers introduced the measure on Tuesday to renew Section 702 of the Foreign Intelligence Act,]]> 2023-11-07T15:26:00+00:00 https://therecord.media/bipartisan-legislation-congress-renew-overhaul-surveillance-section-702 www.secnews.physaphae.fr/article.php?IdArticle=8407321 False Tool,Legislation None 2.0000000000000000 Recorded Future - FLux Recorded Future Un groupe de longue date lié au gouvernement iranien a ciblé au moins deux entités israéliennes avec une campagne de piratage au cours du dernier mois, ont déclaré des chercheurs.Dans un effort continu détecté fin octobre, le groupe connu sous le nom de Muddywater a utilisé des tactiques familières avec de légers modifications à ses outils précédents, selon un Rapport par l'entreprise de cybersécurité

---

A long-running group connected to the Iranian government targeted at least two Israeli entities with a hacking campaign in the last month, researchers said. In an ongoing effort detected in late October, the group known as MuddyWater used familiar tactics with slight changes to its previous tools, according to a report by the cybersecurity firm]]> 2023-11-03T12:35:00+00:00 https://therecord.media/muddywater-campaign-iran-israel-social-engineering www.secnews.physaphae.fr/article.php?IdArticle=8405299 False Tool None 2.0000000000000000 Recorded Future - FLux Recorded Future Le Département du commerce a mis en œuvre de nouvelles politiques pour arrêter la promotion des technologies de surveillance aux gouvernements étrangers.Dans un lettre au sénateur Ron (D-or) Wyden, qui a exprimé la préoccupation de l'agence sur le spreadParmi les outils en mai, le Département du commerce a fixé les mesures que son Administration du commerce international (ITA) a prises pour freiner

---

The Commerce Department has implemented new policies to stop the promotion of surveillance technologies to foreign governments. In a letter to Senator Ron (D-OR) Wyden, who expressed concern to the agency about the spread of the tools in May, the Commerce Department laid out the steps its International Trade Administration (ITA) has taken to curb]]> 2023-11-01T20:30:00+00:00 https://therecord.media/commerce-safeguards-on-surveillance-tech www.secnews.physaphae.fr/article.php?IdArticle=8404342 False Tool None 2.0000000000000000 Recorded Future - FLux Recorded Future Les cybercriminels utilisent des publicités Facebook pour distribuer des logiciels malveillants et des utilisateurs de détournement de logiciels \\ ', des chercheurs ont révélé des chercheurs.Dans la campagne dite de malvertising, les pirates exploitent des outils légitimes pour la distribution d'annonces en ligne et insérer des liens infectés vers des publicités typiques.Pour inciter les utilisateurs à cliquer, la campagne propose des «attracatifs» - dans ce cas, des images obscènes de jeunes

---

Cybercriminals are using Facebook ads to distribute malware and hijack users\' social media accounts, researchers have found. In the so-called malvertising campaign, hackers exploit legitimate tools for online ad distribution and insert infected links into typical advertisements. To entice users into clicking, the campaign offers “provocative enticements” - in this case, lewd images of young]]> 2023-11-01T18:08:00+00:00 https://therecord.media/nodestealer-malware-campaign-facebook-advertising www.secnews.physaphae.fr/article.php?IdArticle=8404263 False Malware,Tool,Threat None 3.0000000000000000 Recorded Future - FLux Recorded Future Les cybercriminels à faible teneur en compétence utilisent un nouvel outil pour créer des centaines de faux comptes de médias sociaux en quelques secondes, ont découvert des chercheurs.Appelé Kopeechka («Penny» en russe), le service aide à contourner deux «obstacles» principaux pour quelqu'un qui essaie de créer un faux compte - une vérification par e-mail et par téléphone.Les cybercriminels pourraient utiliser Kopeechka pour transporter

---

Low-skill cybercriminals are using a new tool to create hundreds of fake social media accounts in just a few seconds, researchers have discovered. Called Kopeechka (“penny” in Russian), the service helps to bypass two main “hurdles” for someone trying to create a fake account - email and phone verification. Cybercriminals could use Kopeechka to carry]]> 2023-10-30T18:30:00+00:00 https://therecord.media/russian-hacking-tool-creates-bots www.secnews.physaphae.fr/article.php?IdArticle=8402970 False Tool None 3.0000000000000000 Recorded Future - FLux Recorded Future Les pirates liés aux gouvernements de la Russie et de la Chine utiliseraient une vulnérabilité dans un outil Windows populaire pour attaquer des cibles dans le monde, y compris en Ukraine et en Papouasie-Nouvelle-Guinée.Le groupe d'analyse des menaces de Google \\ a déclaré que ces dernières semaines, il a vu plusieurs groupes soutenus par le gouvernement exploitant CVE-2023-38831, une vulnérabilité affectant les fenêtres

---

Hackers connected to the governments of Russia and China are allegedly using a vulnerability in a popular Windows tool to attack targets around the world, including in Ukraine and Papua New Guinea. Google\'s Threat Analysis Group\'s (TAG) said that in recent weeks it has seen multiple government-backed groups exploiting CVE-2023-38831, a vulnerability affecting the Windows]]> 2023-10-18T15:45:00+00:00 https://therecord.media/russia-china-hackers-exploit-winrar-bug www.secnews.physaphae.fr/article.php?IdArticle=8397334 False Tool,Vulnerability,Threat None 2.0000000000000000 Recorded Future - FLux Recorded Future Le bâtiment aura 1 791 lecteurs de plaques d'immatriculation automatisés.3 065 caméras panilon-zoom.74 drones.Les flux en direct des caméras appartenant aux entreprises du quartier et aux résidents.Les filtres biométriques fonctionnant constamment pour soutenir la reconnaissance faciale.Connexions avec les infrastructures dans toute la ville.Ces outils de surveillance et bien d'autres seront intégrés à Torre Centinela du Mexique (tour Sentinel), un presque

---

The building will have 1,791 automated license plate readers. 3,065 pan-tilt-zoom cameras. 74 drones. Live feeds from cameras owned by neighborhood businesses and residents. Biometric filters running constantly to support facial recognition. Connections to infrastructure throughout the city. Those monitoring tools and many others will be embedded in Mexico\'s Torre Centinela (Sentinel Tower), a nearly]]> 2023-10-16T12:00:00+00:00 https://therecord.media/torre-centinela-sentinel-tower-chihuahua-ciudad-juarez-texas-surveillance www.secnews.physaphae.fr/article.php?IdArticle=8396198 False Tool,General Information None 2.0000000000000000 Recorded Future - FLux Recorded Future La société derrière un outil de transfert de fichiers populaire fait face à des dizaines de poursuites et d'enquêtes par plusieurs agences américaines à la suite de l'exploitation d'une vulnérabilité critique en mai.Progress Software & # 8211;L'entreprise qui possède l'outil de transfert de fichiers Moveit & # 8211;a déclaré ses résultats trimestriels cette semaine et a fourni une ventilation détaillée des coûts

---

The company behind a popular file transfer tool is facing dozens of lawsuits and investigations by several U.S. agencies following the exploitation of a critical vulnerability in May. Progress Software – the company that owns the MOVEit file transfer tool – reported its quarterly earnings this week and provided a detailed breakdown of the costs]]> 2023-10-12T19:15:00+00:00 https://therecord.media/progress-facing-lawsuits-sec-action www.secnews.physaphae.fr/article.php?IdArticle=8394858 False Tool,Vulnerability None 2.0000000000000000 Recorded Future - FLux Recorded Future Les mainteneurs d'un outil open source populaire qui sert de support fondamental pour de nombreux protocoles de réseau comme SSL, TLS, HTTP, FTP, SMTP avertissent deux vulnérabilités qui seront annoncées la semaine prochaine.Les problèmes Centre de Curl, un outil de ligne de commande open source qui, selon les chercheurs, est largement utilisé par les développeurs et le système

---

The maintainers of a popular open source tool that serves as a foundational support for many network protocols like SSL, TLS, HTTP, FTP, SMTP are warning of two vulnerabilities that will be announced this coming week. The issues center on curl, an open-source command-line tool that researchers said is used widely by developers and system]]> 2023-10-08T18:00:00+00:00 https://therecord.media/curl-vulnerabilities-to-be-announced-open-source www.secnews.physaphae.fr/article.php?IdArticle=8392876 False Tool,Vulnerability None 3.0000000000000000 Recorded Future - FLux Recorded Future Les attaques de ransomwares opérationnelles humaines ont augmenté de plus de 200% depuis septembre 2022, selon des chercheurs de Microsoft, qui ont averti qu'il pourrait représenter un changement dans la cybercriminalité souterraine.Les attaques axées sur l'human

---

Human-operated ransomware attacks are up more than 200% since September 2022, according to researchers from Microsoft, who warned that it could represent a shift in the cybercrime underground. Human-operated attacks typically involve the active abuse of remote monitoring and management tools that allow hackers to leave behind less evidence - as opposed to automated attacks]]> 2023-10-05T21:08:00+00:00 https://therecord.media/human-operated-ransomware-attacks-report-microsoft www.secnews.physaphae.fr/article.php?IdArticle=8392008 False Ransomware,Tool None 2.0000000000000000 Recorded Future - FLux Recorded Future Internet était moins gratuit et ouvert aux utilisateurs du monde entier l'année dernière, a déclaré mercredi l'organisation de défense des droits humains, une trajectoire qui a le potentiel de s'aggraver si des outils d'intelligence artificielle sont utilisés de manière antidémocratique.Le 13e rapport annuel sur le rapport annuel de l'organisation est un classement mondial d'enquête

---

The internet was less free and open for users around the world last year, the human rights advocacy organization Freedom House said Wednesday - a trajectory that has the potential to worsen if artificial intelligence tools are used in undemocratic ways. The organization\'s 13th annual Freedom on the Net report is a worldwide survey ranking]]> 2023-10-04T04:00:00+00:00 https://therecord.media/global-internet-freedoms-fall-again-as-ai-risk-increases www.secnews.physaphae.fr/article.php?IdArticle=8391246 False Tool,Threat None 3.0000000000000000