This is the RSS 2.0 feed from www.secnews.physaphae.fr. IT's a simple agragated flow of multiple articles soruces. Liste of sources, can be found on www.secnews.physaphae.fr. 2024-05-04T02:36:25+00:00 www.secnews.physaphae.fr Dark Reading - Informationweek Branch Government proposes more modern and comprehensive cybersecurity regulations for businesses, government, and critical infrastructures providers Down Under.]]> 2024-03-27T01:00:00+00:00 https://www.darkreading.com/cyber-risk/australian-government-doubles-down-on-cybersecurity-in-wake-of-major-attacks www.secnews.physaphae.fr/article.php?IdArticle=8471072 False None None 3.0000000000000000 WatchGuard - Fabricant Matériel et Logiciels 2024-03-27T00:00:00+00:00 https://www.watchguard.com/fr/wgrd-news/press-releases/le-rapport-du-threat-lab-de-watchguard-revele-une-montee-en-puissance-des www.secnews.physaphae.fr/article.php?IdArticle=8471902 False Ransomware,Threat None 3.0000000000000000 HackRead - Chercher Cyber Par waqas Les hommages sont devenus toxiques alors que les escrocs abusent de l'AI. Ceci est un article de HackRead.com Lire le post original: L'IA a généré de faux sites Web nécrologiques cibles les utilisateurs de deuil

---

>By Waqas Tributes turned toxic as crooks abuse AI. This is a post from HackRead.com Read the original post: AI Generated Fake Obituary Websites Target Grieving Users]]> 2024-03-26T23:36:47+00:00 https://www.hackread.com/ai-generated-fake-obituary-websites-target-users/ www.secnews.physaphae.fr/article.php?IdArticle=8471050 False None None 2.0000000000000000 IndustrialCyber - cyber risk firms for industrial Access Company for Industrial Enterprises Cyolo a annoncé mardi un partenariat avec Synnex, Global Distributor and Solutions Aggregator for ...

---

>Access company for industrial enterprises Cyolo announced Tuesday a partnership with TD SYNNEX, global distributor and solutions aggregator for... ]]> 2024-03-26T23:07:12+00:00 https://industrialcyber.co/news/cyolo-partners-with-td-synnex-to-tap-into-increased-enterprise-demand-for-secure-remote-access/ www.secnews.physaphae.fr/article.php?IdArticle=8471027 False Industrial None 2.0000000000000000 CyberScoop - scoopnewsgroup.com special Cyber Pour surveiller les politiciens et les dissidents soucieux de la sécurité, les pirates liés à Pékin visent de plus en plus leurs conjoints et leurs proches.

---

>To surveil security conscious politicians and dissidents, hackers linked to Beijing are increasingly targeting their spouses and relatives.  ]]> 2024-03-26T22:30:09+00:00 https://cyberscoop.com/china-hacking-family-members/ www.secnews.physaphae.fr/article.php?IdArticle=8471028 False None None 3.0000000000000000 The Hacker News - The Hacker News est un blog de news de hack (surprenant non?) Threat hunters have identified a suspicious package in the NuGet package manager that\'s likely designed to target developers working with tools made by a Chinese firm that specializes in industrial- and digital equipment manufacturing. The package in question is SqzrFramework480, which ReversingLabs said was first published on January 24, 2024. It has been downloaded ]]> 2024-03-26T22:24:00+00:00 https://thehackernews.com/2024/03/malicious-nuget-package-linked-to.html www.secnews.physaphae.fr/article.php?IdArticle=8470884 False Tool,Threat,Industrial None 2.0000000000000000 Global Security Mag - Site de news francais nouvelles commerciales

---

DeNexus and Cipher Partner to Transform Cybersecurity for Industrial and Physical Critical Infrastructure DeNexus and Cipher join forces to solve OT and ICS cyber risk for critical markets - Business News]]> 2024-03-26T21:21:11+00:00 https://www.globalsecuritymag.fr/denexus-and-cipher-partner-to-transform-cybersecurity-for-industrial-and.html www.secnews.physaphae.fr/article.php?IdArticle=8471003 False Industrial None 3.0000000000000000 Dark Reading - Informationweek Branch A new, improved variant on the group\'s malware combines fileless infection, BYOVD, and more to cause havoc in virtual environments.]]> 2024-03-26T21:14:26+00:00 https://www.darkreading.com/cloud-security/agenda-ransomware-vmware-esxi-servers www.secnews.physaphae.fr/article.php?IdArticle=8471002 False Ransomware,Malware None 3.0000000000000000 Global Security Mag - Site de news francais opinion

---

UK SMBs experiencing a tsunami of cybersecurity warnings, up 37% since 2023 Private sector received 18% more cyber warnings than the public sector 32% of security professionals feel unable to cope with cyber demands 41% of SMBs taken offline by cyber incidents in 2023 - Opinion]]> 2024-03-26T21:14:05+00:00 https://www.globalsecuritymag.fr/uk-smbs-experiencing-a-tsunami-of-cybersecurity-warnings-up-37-since-2023.html www.secnews.physaphae.fr/article.php?IdArticle=8471004 False None None 2.0000000000000000 Global Security Mag - Site de news francais Produits]]> 2024-03-26T21:04:27+00:00 https://www.globalsecuritymag.fr/sesame-it-lance-jizo-alert-advisor.html www.secnews.physaphae.fr/article.php?IdArticle=8470977 False None None 2.0000000000000000 Global Security Mag - Site de news francais Interviews / cybersecurite_home_gauche, INCYBER 2024]]> 2024-03-26T21:00:00+00:00 https://www.globalsecuritymag.fr/jerome-notin-cybermalveillance-gouv-fr-les-rssi-devraient-rendre-obligatoire.html www.secnews.physaphae.fr/article.php?IdArticle=8470604 False None None 2.0000000000000000 Global Security Mag - Site de news francais opinion

---

Apple cautious AI approach hints focus on user privacy and security, says GlobalData - Opinion]]> 2024-03-26T20:57:28+00:00 https://www.globalsecuritymag.fr/apple-cautious-ai-approach-hints-focus-on-user-privacy-and-security-says.html www.secnews.physaphae.fr/article.php?IdArticle=8470978 False None None 2.0000000000000000 Recorded Future - FLux Recorded Future Le gros problème, un journal de rue au Royaume-Uni, célèbre pour avoir fourni aux sans-abri un revenu légitime en les payant en tant que vendeurs pour distribuer le magazine, a confirmé être touché par un cyber-incident.La confirmation suit l'entreprise répertoriée sur le site d'extorsion Darknet de Darknet de Qilin, à côté

---

The Big Issue, a street newspaper in the United Kingdom famed for providing homeless people with a legitimate income by paying them as vendors to distribute the magazine, has confirmed being impacted by a cyber incident. The confirmation follows the company being listed on the Qilin ransomware gang\'s darknet extortion site on Sunday, alongside]]> 2024-03-26T20:48:46+00:00 https://therecord.media/ransomware-gang-attacks-big-issue-street-paper www.secnews.physaphae.fr/article.php?IdArticle=8470975 False Ransomware None 3.0000000000000000 Dark Reading - Informationweek Branch CVE-2024-1580 allows remote attackers to execute arbitrary code on affected devices.]]> 2024-03-26T20:42:26+00:00 https://www.darkreading.com/endpoint-security/apple-security-bug-opens-iphone-ipad-rce www.secnews.physaphae.fr/article.php?IdArticle=8470974 False Mobile None 3.0000000000000000 Global Security Mag - Site de news francais Interviews / INCYBER 2024]]> 2024-03-26T20:23:26+00:00 https://www.globalsecuritymag.fr/bertrand-trastour-kaspersky-l-ia-et-le-machine-learning-ml-jouent-depuis.html www.secnews.physaphae.fr/article.php?IdArticle=8470979 False None None 2.0000000000000000 Fortinet - Fabricant Materiel Securite There are five critical SASE trends Fortinet foresees impacting organizations over the next 9 to 12 months. Learn more.]]> 2024-03-26T19:45:16+00:00 https://www.fortinet.com/blog/business-and-technology/top-5-sase-trends-in-2024 www.secnews.physaphae.fr/article.php?IdArticle=8470976 False None None 2.0000000000000000 Global Security Mag - Site de news francais rapports spéciaux

---

IT and Cybersecurity Sectors Lead in Generative AI Use, with 46% of Professionals Using the Technology in 2024 - Special Reports]]> 2024-03-26T19:44:54+00:00 https://www.globalsecuritymag.fr/it-and-cybersecurity-sectors-lead-in-generative-ai-use-with-46-of-professionals.html www.secnews.physaphae.fr/article.php?IdArticle=8470950 False None None 2.0000000000000000 RiskIQ - cyber risk firms (now microsoft) #### Description A new malware campaign called Sign1 has been discovered by Sucuri and GoDaddy Infosec. The malware has been found on over 2,500 sites in the past two months. The malware is injected into WordPress custom HTML widgets that the attackers add to compromised websites. The malware is injected using a legitimate Simple Custom CSS and JS plugin. The malware is designed to redirect visitors to scam sites. The malware is time-based and uses dynamic JavaScript code to generate URLs that change every 10 minutes. The malware is specifically looking to see if the visitor has come from any major websites such as Google, Facebook, Yahoo, Instagram etc. If the referrer does not match to these major sites, then the malware will not execute. #### Reference URL(s) 1. https://blog.sucuri.net/2024/03/sign1-malware-analysis-campaign-history-indicators-of-compromise.html #### Publication Date March 20, 2024 #### Author(s) Ben Martin ]]> 2024-03-26T19:39:28+00:00 https://community.riskiq.com/article/063f7fac www.secnews.physaphae.fr/article.php?IdArticle=8470965 False Malware Yahoo 2.0000000000000000 Global Security Mag - Site de news francais nouvelles commerciales

---

Cyolo Security Announces Partnership with TD SYNNEX TD SYNNEX Partners can now move their clients beyond mere "accessing" to "operating" safely and securely - Business News]]> 2024-03-26T19:36:52+00:00 https://www.globalsecuritymag.fr/cyolo-security-announces-partnership-with-td-synnex.html www.secnews.physaphae.fr/article.php?IdArticle=8470951 False None None 2.0000000000000000 IndustrialCyber - cyber risk firms for industrial The 12th annual Cyber Security for Critical Assets (CS4CA) USA Summit began Tuesday in Houston, Texas bringing together... ]]> 2024-03-26T19:13:22+00:00 https://industrialcyber.co/events/cs4ca-usa-summit-2024-it-and-ot-security-leaders-share-insights-on-cyberattack-mitigation-and-recovery-strategies/ www.secnews.physaphae.fr/article.php?IdArticle=8470947 False Industrial None 2.0000000000000000 IndustrialCyber - cyber risk firms for industrial U.S. security agencies published Monday a joint Secure by Design (SbD) alert in response to a recent, exploitation... ]]> 2024-03-26T19:12:15+00:00 https://industrialcyber.co/secure-by-design/cisa-fbi-release-secure-by-design-alert-to-urge-manufacturers-to-eliminate-sql-injection-vulnerabilities/ www.secnews.physaphae.fr/article.php?IdArticle=8470948 False Vulnerability None 2.0000000000000000 IndustrialCyber - cyber risk firms for industrial Denexus, fournisseur de quantification et de gestion de la cyber-risque pour la technologie opérationnelle (OT) avec les entreprises industrielles et la critique physique ...

---

>DeNexus, vendor of cyber risk quantification and management for operational technology (OT) with industrial enterprises and physical critical... ]]> 2024-03-26T19:10:15+00:00 https://industrialcyber.co/news/denexus-cipher-partner-to-transform-cybersecurity-for-industrial-physical-critical-infrastructure/ www.secnews.physaphae.fr/article.php?IdArticle=8470949 False Industrial None 3.0000000000000000 ZD Net - Magazine Info Updated: A new critical vulnerability impacting Exchange Server is being exploited in the wild.]]> 2024-03-26T18:57:00+00:00 https://www.zdnet.com/article/everything-you-need-to-know-about-microsoft-exchange-server-hack/#ftag=RSSbaffb68 www.secnews.physaphae.fr/article.php?IdArticle=8470942 False Hack,Vulnerability None 2.0000000000000000 Recorded Future - FLux Recorded Future Les chercheurs avertissent que les pirates exploitent activement une vulnérabilité contestée dans un cadre d'IA à source ouverte populaire connue sous le nom de Ray.Cet outil est couramment utilisé pour développer et déployer des applications Python à grande échelle, en particulier pour les tâches telles que l'apprentissage automatique, l'informatique scientifique et le traitement des données.Selon le développeur de Ray \\, tous les domaines, le cadre est utilisé par major

---

Researchers are warning that hackers are actively exploiting a disputed vulnerability in a popular open-source AI framework known as Ray. This tool is commonly used to develop and deploy large-scale Python applications, particularly for tasks like machine learning, scientific computing and data processing. According to Ray\'s developer, Anyscale, the framework is used by major]]> 2024-03-26T18:46:40+00:00 https://therecord.media/thousands-exposed-to-ray-framework-vulnerability www.secnews.physaphae.fr/article.php?IdArticle=8470918 False Tool,Vulnerability None 3.0000000000000000 HackRead - Chercher Cyber Par waqas Une vulnérabilité non corrigée expose le cadre Ray AI à l'attaque "Shadowray"! Ceci est un article de Hackread.com Lire le post original: La nouvelle campagne Shadowray cible le cadre Ray AI dans Global Attack

---

>By Waqas An unpatched vulnerability is exposing the Ray AI framework to the "ShadowRay" attack! This is a post from HackRead.com Read the original post: New ShadowRay Campaign Targets Ray AI Framework in Global Attack]]> 2024-03-26T18:45:20+00:00 https://www.hackread.com/shadowray-attack-targets-ray-ai-framework/ www.secnews.physaphae.fr/article.php?IdArticle=8470916 False Vulnerability None 2.0000000000000000 Global Security Mag - Site de news francais Points de Vue]]> 2024-03-26T18:36:14+00:00 https://www.globalsecuritymag.fr/securite-les-entreprises-laissent-leurs-conteneurs-kubernetes-exposes-aux.html www.secnews.physaphae.fr/article.php?IdArticle=8470919 False Ransomware None 2.0000000000000000 Zataz - Magazine Francais de secu 2024-03-26T18:31:39+00:00 https://www.zataz.com/piratage-dent-un-papa-raconte/ www.secnews.physaphae.fr/article.php?IdArticle=8470933 False Threat None 2.0000000000000000 MitnickSecurity - Former Hacker Services 2024-03-26T18:18:31+00:00 https://www.mitnicksecurity.com/blog/ai-in-cyber-security www.secnews.physaphae.fr/article.php?IdArticle=8470914 False None None 2.0000000000000000 ComputerWeekly - Computer Magazine 2024-03-26T18:06:00+00:00 https://www.computerweekly.com/news/366575475/Qilin-ransomware-gang-claims-cyber-attack-on-the-Big-Issue www.secnews.physaphae.fr/article.php?IdArticle=8471026 False Ransomware None 3.0000000000000000 Team Cymru - Equipe de Threat Intelligence Insights into Internet Outages along Africa\'s Western Coast About Team Cymru: Internet Weather Reports Our Internet weather reports are...]]> 2024-03-26T17:53:43+00:00 https://www.team-cymru.com/post/team-cymru-internet-weather-report www.secnews.physaphae.fr/article.php?IdArticle=8470883 False None None 3.0000000000000000 The Hacker News - The Hacker News est un blog de news de hack (surprenant non?) The U.S. Department of Justice (DoJ) on Monday unsealed indictments against seven Chinese nationals for their involvement in a hacking group that targeted U.S. and foreign critics, journalists, businesses, and political officials for about 14 years. The defendants include Ni Gaobin (倪高彬), Weng Ming (翁明), Cheng Feng (程锋), Peng Yaowen (彭耀文), Sun Xiaohui (孙小辉), Xiong Wang (熊旺), and Zhao Guangzong (]]> 2024-03-26T17:36:00+00:00 https://thehackernews.com/2024/03/us-charges-7-chinese-nationals-in-major.html www.secnews.physaphae.fr/article.php?IdArticle=8470735 False None None 3.0000000000000000 Bleeping Computer - Magazine Américain The Finnish Police confirmed on Tuesday that the APT31 hacking group linked to the Chinese Ministry of State Security (MSS) was behind a breach of the country\'s parliament disclosed in March 2021. [...]]]> 2024-03-26T17:23:54+00:00 https://www.bleepingcomputer.com/news/security/finland-confirms-apt31-hackers-behind-2021-parliament-breach/ www.secnews.physaphae.fr/article.php?IdArticle=8471001 False Legislation APT 31 3.0000000000000000 Global Security Mag - Site de news francais rapports spéciaux

---

AI and automation have helped organizations respond to security incidents up to 99% faster than last year, according to new study from ReliaQuest With social engineering still the biggest threat to organizations, AI is being leveraged on both sides to increase the threat and the speed of defense; Organizations fully leveraging AI and automation can respond to threats within 7 minutes or less - Special Reports]]> 2024-03-26T17:21:58+00:00 https://www.globalsecuritymag.fr/ai-and-automation-have-helped-organizations-respond-to-security-incidents-up-to.html www.secnews.physaphae.fr/article.php?IdArticle=8470888 False Threat,Studies None 3.0000000000000000 Global Security Mag - Site de news francais rapports spéciaux

---

Keeper Security Insight Report reveals IT leaders are unprepared for the new wave of threat vectors - Special Reports]]> 2024-03-26T17:19:21+00:00 https://www.globalsecuritymag.fr/keeper-security-insight-report-reveals-it-leaders-are-unprepared-for-the-new.html www.secnews.physaphae.fr/article.php?IdArticle=8470889 False Threat None 2.0000000000000000 Global Security Mag - Site de news francais nouvelles commerciales

---

Claroty and Axonius Partner to Bring Enterprise Attack Surface Management to Cyber-Physical Systems Combined Solution Enables Organizations to Protect the Entire Attack Surface Across Cloud, IT and XIoT Assets - Business News]]> 2024-03-26T17:15:33+00:00 https://www.globalsecuritymag.fr/claroty-and-axonius-partner.html www.secnews.physaphae.fr/article.php?IdArticle=8470890 False Cloud None 2.0000000000000000 IT Security Guru - Blog Sécurité Détails de millions d'électeurs et de plusieurs députés ciblés dans une cyberattaque par l'État chinois est apparu pour la première fois sur Guru de sécurité .

---

The UK has officially attributed a major cyberattack on the Electoral Commission to China. The attack compromised the personal data of approximately 40 million voters, marking the first direct implication of China since the breach came to light. The breach, disclosed by the Electoral Commission in August of the previous year, was initially identified in […] The post Details of Millions of Voters and Several MPs Targeted in a Cyberattack by the Chinese State first appeared on IT Security Guru. ]]> 2024-03-26T17:13:06+00:00 https://www.itsecurityguru.org/2024/03/26/details-of-millions-of-voters-and-several-mps-targeted-in-a-cyberattack-by-the-chinese-state/?utm_source=rss&utm_medium=rss&utm_campaign=details-of-millions-of-voters-and-several-mps-targeted-in-a-cyberattack-by-the-chinese-state www.secnews.physaphae.fr/article.php?IdArticle=8470887 False None None 3.0000000000000000 Global Security Mag - Site de news francais Points de Vue]]> 2024-03-26T17:12:55+00:00 https://www.globalsecuritymag.fr/a-l-approche-de-l-entree-en-vigueur-de-la-directive-nis-2-hexatrust-lance-sa.html www.secnews.physaphae.fr/article.php?IdArticle=8470891 False None None 2.0000000000000000 RiskIQ - cyber risk firms (now microsoft) #### Description StrelaStealer is a malware that targets email clients to steal login data, sending it to the attacker\'s server for potential further attacks. Since StrelaStealer\'s emergence in 2022, the threat actor has launched multiple large-scale email campaigns, with its most recent campaigns impacting over 100 organizations across the EU and U.S. Attackers have targeted organizations in a variety of industries, but organizations in the high tech industry have been the biggest target. Technical analysis of StrelaStealer reveals an evolving infection chain using ZIP attachments, JScript files, and updated DLL payloads, demonstrating the malware\'s adaptability and the challenge it poses to security analysts and products. #### Reference URL(s) 1. https://unit42.paloaltonetworks.com/strelastealer-campaign/ #### Publication Date March 22, 2024 #### Author(s) Benjamin Chang, Goutam Tripathy, Pranay Kumar Chhaparwal, Anmol Maurya, and Vishwa Thothathri]]> 2024-03-26T17:11:47+00:00 https://community.riskiq.com/article/82785858 www.secnews.physaphae.fr/article.php?IdArticle=8470906 False Malware,Threat,Technical None 2.0000000000000000 Silicon - Site de News Francais 2024-03-26T17:11:09+00:00 https://www.silicon.fr/docaposte-pack-cybersecurite-pme-477168.html www.secnews.physaphae.fr/article.php?IdArticle=8470886 False None None 3.0000000000000000 Global Security Mag - Site de news francais rapports spéciaux

---

Companies With Advanced Cybersecurity Performance Deliver Nearly Four Times\' Higher Shareholder Return Than Their Peers, According to Diligent and Bitsight New research shows cybersecurity is an organization-wide issue, and stronger board oversight practices lead to better cybersecurity performance - Special Reports]]> 2024-03-26T17:09:00+00:00 https://www.globalsecuritymag.fr/companies-with-advanced-cybersecurity-performance-deliver-nearly-four-times.html www.secnews.physaphae.fr/article.php?IdArticle=8470892 False None None 3.0000000000000000 Global Security Mag - Site de news francais Produits]]> 2024-03-26T17:01:44+00:00 https://www.globalsecuritymag.fr/docaposte-lance-une-offre-de-cybersecurite-pour-les-pme-tpe-eti-des.html www.secnews.physaphae.fr/article.php?IdArticle=8470856 False None None 2.0000000000000000 Global Security Mag - Site de news francais revues de produits

---

Invicti Launches New Integration with ServiceNow to Deliver Automated Workflows for Vulnerability Discovery through Remediation The partnership leverages integrations in application vulnerability response and issue management - Product Reviews]]> 2024-03-26T16:59:58+00:00 https://www.globalsecuritymag.fr/invicti-launches-new-integration-with-servicenow.html www.secnews.physaphae.fr/article.php?IdArticle=8470857 False Vulnerability None 2.0000000000000000 The Hacker News - The Hacker News est un blog de news de hack (surprenant non?) Minecraft, with over 500 million registered users and 166 million monthly players, faces significant risks from distributed denial-of-service (DDoS) attacks, threatening server functionality, player experience, and the game\'s reputation. Despite the prevalence of DDoS attacks on the game, the majority of incidents go unreported, leaving a gap in awareness and protection. This article explains]]> 2024-03-26T16:59:00+00:00 https://thehackernews.com/2024/03/crafting-shields-defending-minecraft.html www.secnews.physaphae.fr/article.php?IdArticle=8470736 False None None 3.0000000000000000 Global Security Mag - Site de news francais Investigations]]> 2024-03-26T16:52:10+00:00 https://www.globalsecuritymag.fr/barometre-de-la-cybersecurite-2023-une-prise-de-conscience-croissante-mais.html www.secnews.physaphae.fr/article.php?IdArticle=8470858 False None None 2.0000000000000000 Global Security Mag - Site de news francais rapports spéciaux

---

Website categories American employers don\'t want you to visit Cybersecurity experts say that blocking certain websites lowers the risk of cyberattacks and removes distractions Up to 72% of employers block malware and adult websites. Phishing websites are blocked by 70% of employers, while gambling ones – by 43%. IT managers in North America restrict their employees from eight website categories on average. - Special Reports]]> 2024-03-26T16:47:40+00:00 https://www.globalsecuritymag.fr/website-categories-american-employers-don-t-want-you-to-visit.html www.secnews.physaphae.fr/article.php?IdArticle=8470859 False Malware None 2.0000000000000000 Global Security Mag - Site de news francais Investigations]]> 2024-03-26T16:42:12+00:00 https://www.globalsecuritymag.fr/les-cyberattaques-sont-plus-sophistiquees-que-jamais-les-attaques-basees-sur-l.html www.secnews.physaphae.fr/article.php?IdArticle=8470860 False Threat None 2.0000000000000000 Global Security Mag - Site de news francais revues de produits

---

CybeReady Adds SMS Text Phishing (Smishing) Simulations to Cybersecurity Learning Platform Smishing Simulations & Learning Now Part of Social Engineering Suite to Ensure Employee Readiness in Defense Against Fraudulent Text Messages - Product Reviews]]> 2024-03-26T16:33:02+00:00 https://www.globalsecuritymag.fr/cybeready-adds-sms-text-phishing-smishing-simulations-to-cybersecurity-learning.html www.secnews.physaphae.fr/article.php?IdArticle=8470861 False None None 3.0000000000000000 SecurityWeek - Security News La startup dit que la formation simple de sensibilisation n'est pas suffisante & # 8211;Les utilisateurs doivent pratiquer le comportement \\ 'bon \' au-delà de la simple reconnaissance du mauvais comportement et de la mauvaise intention.

---

>Startup says simple awareness training is not sufficient – users need to practice \'good\' behavior beyond simply acknowledging poor behavior and bad intent. ]]> 2024-03-26T16:32:23+00:00 https://www.securityweek.com/uk-firm-think-cyber-raises-3-8-million-for-staff-security-nudging/ www.secnews.physaphae.fr/article.php?IdArticle=8470853 False None None 3.0000000000000000 Recorded Future - FLux Recorded Future Dans les cercles de la crypto-monnaie et des forces de l'ordre, Tigran Gambaryan est un peu une légende.En tant qu'agent spécial de l'Internal Revenue Service, il a enquêté sur les délits financiers et il est venu se spécialiser dans quelque chose que beaucoup d'agents, au moins initialement, ne comprenaient pas très bien: la blockchain. & Nbsp;Gambaryan est devenu le zelig des démontages du marché sombre,

---

In cryptocurrency and law enforcement circles, Tigran Gambaryan is a bit of a legend. As a special agent with the Internal Revenue Service he investigated financial crimes and he came to specialize in something a lot of agents, at least initially, didn\'t quite understand: the blockchain.  Gambaryan became the Zelig of dark market takedowns,]]> 2024-03-26T16:22:26+00:00 https://therecord.media/binance-executives-nigeria-click-here-podcast-feature www.secnews.physaphae.fr/article.php?IdArticle=8470855 False Legislation None 2.0000000000000000 IT Security Guru - Blog Sécurité # MIWIC2024: Samantha Humphries, directrice principale de la stratégie de sécurité internationale à Exabeam , est apparue pour la première fois sur guru de sécurité .

---

Organised by Eskenzi PR in media partnership with the IT Security Guru, the Most Inspiring Women in Cyber Awards aim to shed light on the remarkable women in our industry. The following is a feature on one of 2024\'s Top 20 women selected by an esteemed panel of judges. Presented in a Q&A format, the nominee\'s answers are […] The post #MIWIC2024: Samantha Humphries, Senior Director of International Security Strategy at Exabeam first appeared on IT Security Guru. ]]> 2024-03-26T16:21:14+00:00 https://www.itsecurityguru.org/2024/03/26/miwic2024-samantha-humphries-senior-director-of-international-security-strategy-at-exabeam/?utm_source=rss&utm_medium=rss&utm_campaign=miwic2024-samantha-humphries-senior-director-of-international-security-strategy-at-exabeam www.secnews.physaphae.fr/article.php?IdArticle=8470854 True None None 3.0000000000000000 Global Security Mag - Site de news francais vulnérabilité de sécurité

---

An attacker can bypass access restrictions to data of AccountsService, in order to get the password fingerprints. - Security Vulnerability]]> 2024-03-26T16:03:21+00:00 https://www.globalsecuritymag.fr/vigilance-vulnerability-alerts-accountsservice-obtain-hashed-passwords-analyzed.html www.secnews.physaphae.fr/article.php?IdArticle=8470830 False Vulnerability None 2.0000000000000000 InfoSecurity Mag - InfoSecurity Magazine The Diligent and Bitsight report found that stronger cybersecurity measures equate to significantly higher financial performance for businesses]]> 2024-03-26T16:00:00+00:00 https://www.infosecurity-magazine.com/news/boards-cyber-expertise-financial/ www.secnews.physaphae.fr/article.php?IdArticle=8470825 False None None 3.0000000000000000 knowbe4 - cybersecurity services Un nouveau rapport sur l'état de la sécurité des e-mails met en lumière la façon dont les organisations consultent et abordent la cyber-assurance alors qu'elles déplacent la stratégie vers la cyber-résilient.

---

A new report on the state of email security sheds some light on how organizations are viewing and approaching cyber insurance as they shift strategy toward being cyber resilient.]]> 2024-03-26T15:38:51+00:00 https://blog.knowbe4.com/cyber-insurance-no-longer-seen-safety-net www.secnews.physaphae.fr/article.php?IdArticle=8470818 False None None 3.0000000000000000 Krebs on Security - Chercheur Américain Several Apple customers recently reported being targeted in elaborate phishing attacks that involve what appears to be a bug in Apple\'s password reset feature. In this scenario, a target\'s Apple devices are forced to display dozens of system-level prompts that prevent the devices from being used until the recipient responds "Allow" or "Don\'t Allow" to each prompt. Assuming the user manages not to fat-finger the wrong button on the umpteenth password reset request, the scammers will then call the victim while spoofing Apple support in the caller ID, saying the user\'s account is under attack and that Apple support needs to "verify" a one-time code.]]> 2024-03-26T15:37:54+00:00 https://krebsonsecurity.com/2024/03/recent-mfa-bombing-attacks-targeting-apple-users/ www.secnews.physaphae.fr/article.php?IdArticle=8470817 False None None 3.0000000000000000 The Register - Site journalistique Anglais SA Special Investigating Unit orders payment within 7 days following alleged breach of public finance laws A Special Tribunal in South Africa has ordered the German software giant SAP to pay a R500 million ($26.4 million, £20.9 million) settlement within a week following a long-running investigation into compliance with public finance laws.…]]> 2024-03-26T15:32:10+00:00 https://go.theregister.com/feed/www.theregister.com/2024/03/26/sap_ordered_to_pay_264/ www.secnews.physaphae.fr/article.php?IdArticle=8470824 False None None 3.0000000000000000 Dark Reading - Informationweek Branch A proof-of-concept exploit released last week has spurred attacks on the vulnerability, which the CISA has flagged as an urgent patch priority.]]> 2024-03-26T15:13:15+00:00 https://www.darkreading.com/cloud-security/patch-critical-fortinet-rce-bug-active-attack www.secnews.physaphae.fr/article.php?IdArticle=8470826 False Vulnerability,Threat None 2.0000000000000000 IndustrialCyber - cyber risk firms for industrial The Foundation for Defense of Democracies (FDD) published a study highlighting a mismatch in the U.S. military\'s failure... ]]> 2024-03-26T15:12:18+00:00 https://industrialcyber.co/threat-landscape/fdd-study-reveals-gaps-in-us-militarys-cyber-talent-recruitment-and-retention-calls-for-reforms/ www.secnews.physaphae.fr/article.php?IdArticle=8470828 False Studies None 3.0000000000000000 Recorded Future - FLux Recorded Future Le gouverneur de la Floride, Ron DeSantis, a signé lundi un projet de loi interdisant aux enfants de moins de 14 ans de détenir des comptes de médias sociaux et n'autant que 14 et 15 ans à ouvrir des comptes avec consentement de leurs parents.En vertu de la législation, les comptes déjà détenus par les adolescents de 14 et 15 ans doivent être effacés à moins qu'un parent ou un tuteur ne consent

---

Florida Governor Ron DeSantis on Monday signed a bill barring children younger than 14 from holding social media accounts and only allowing 14- and 15-year-olds to open accounts with consent from their parents. Under the legislation, accounts already held by teens aged 14 and 15 must be erased unless a parent or guardian consents]]> 2024-03-26T15:11:12+00:00 https://therecord.media/florida-enacts-social-media-law-bars-minors www.secnews.physaphae.fr/article.php?IdArticle=8470822 False Legislation None 3.0000000000000000 Korben - Bloger francais 2024-03-26T15:08:12+00:00 https://korben.info/42-parquet-bombe-zip-big-data.html www.secnews.physaphae.fr/article.php?IdArticle=8470820 False None None 3.0000000000000000 IndustrialCyber - cyber risk firms for industrial Honeywell a récemment annoncé que Petr & Oacute; Leos del Per & Uacute;S.A. (PETROPER & UACUTE;), l'un des plus grands producteurs d'hydrocarbures, raffineurs et distributeurs ...

---

>Honeywell announced recently that Petróleos del Perú S.A. (Petroperú), one of the largest hydrocarbon producers, refiners and distributors... ]]> 2024-03-26T15:07:26+00:00 https://industrialcyber.co/news/honeywell-to-enhance-cyber-resilience-at-petroperu-with-cybersecurity-solutions/ www.secnews.physaphae.fr/article.php?IdArticle=8470795 False None None 3.0000000000000000 IndustrialCyber - cyber risk firms for industrial La société de protection des systèmes cyber-physiques (CPS) Claroty et Axonius, fournisseur de gestion des actifs de cybersécurité et de gestion du SaaS, ont annoncé mardi ...

---

>Cyber-physical systems (CPS) protection company Claroty and Axonius, vendor of cybersecurity asset management and SaaS management, announced Tuesday... ]]> 2024-03-26T15:06:56+00:00 https://industrialcyber.co/news/claroty-axonius-partner-to-bring-enterprise-attack-surface-management-to-cyber-physical-systems/ www.secnews.physaphae.fr/article.php?IdArticle=8470796 False Cloud None 3.0000000000000000 Checkpoint - Fabricant Materiel Securite lundi, l'administration Biden a annoncé un acte d'accusation criminel et des sanctions contre un groupe de pirates chinois pour leur rôle dans la conduite prétendument des hacks contre les entreprises aux États-Unis, ainsi que des représentants du gouvernement.Le gouvernement américain a inculpé sept pirates, du groupe connu sous le nom d'APT31;Dans une décision connexe, le gouvernement britannique a annoncé des sanctions contre une entreprise de front, ainsi que deux personnes en lien avec une violation à la Commission électorale du Royaume-Uni.Le gouvernement américain a noté que le groupe avait passé environ 14 ans à cibler les entreprises américaines et étrangères et les responsables politiques.«Aujourd'hui, les gouvernements du Royaume-Uni et des États-Unis [& # 8230;]

---

>On Monday, the Biden administration announced a criminal indictment and sanctions against a group of Chinese hackers for their role in allegedly conducting hacks against companies in the US, as well as government officials. The US government charged seven hackers, from the group known as APT31; in a related move, the British government announced sanctions on a front company, as well as two individuals in connection with a breach at the UK\'s Electoral Commission. The US government noted that the group spent about 14 years targeting US and foreign businesses and political officials. “Today both the UK and US governments […] ]]> 2024-03-26T14:57:51+00:00 https://blog.checkpoint.com/security/us-and-uk-governments-take-stand-against-apt31-state-affiliated-hacking-group/ www.secnews.physaphae.fr/article.php?IdArticle=8470789 False None APT 31 3.0000000000000000 Bleeping Computer - Magazine Américain A new hacking campaign dubbed "ShadowRay" targets an unpatched vulnerability in Ray, a popular open-source AI framework, to hijack computing power and leak sensitive data from thousands of companies. [...]]]> 2024-03-26T14:51:32+00:00 https://www.bleepingcomputer.com/news/security/hackers-exploit-ray-framework-flaw-to-breach-servers-hijack-resources/ www.secnews.physaphae.fr/article.php?IdArticle=8470917 False Vulnerability,Threat None 2.0000000000000000 Veracode - Application Security Research, News, and Education Blog In the last blog on fixing vulnerabilities with Veracode Fix, we looked at SQL Injection remediation in a Java application. Since then, we have released Fix support for Python (and PHP) and launched a new VS Code plugin that includes support for Fix. It seems appropriate, therefore, to look at resolving a problem in a Python app using Veracode Fix in the VS Code IDE. This time let\'s examine a simple cross-site scripting (XSS) weakness. What is an XSS Vulnerability? An XSS vulnerability occurs when an attacker injects malicious code into a trusted website, which is then executed by unsuspecting users. This can lead to unauthorized access, data theft, or manipulation of user sessions. XSS vulnerabilities are commonly found in input fields, comments sections, or poorly validated user-generated content.  A simple demonstration example is often to enter the following text in a user input field: If an application does not sanitize…]]> 2024-03-26T14:45:35+00:00 https://www.veracode.com/blog/intro-appsec/resolving-simple-cross-site-scripting-flaws-veracode-fix www.secnews.physaphae.fr/article.php?IdArticle=8471406 False Vulnerability None 3.0000000000000000 CybeReason - Vendor blog Cybearason Problèmes de menace Alertes pour informer les clients de l'émergence des menaces impactantes, y compris les vulnérabilités critiques.Les alertes de menaces de cyberéasie résument ces menaces et fournissent des recommandations pratiques pour se protéger contre elles.

---

Cybereason issues Threat Alerts to inform customers of emerging impacting threats, including critical vulnerabilities. Cybereason Threat Alerts summarize these threats and provide practical recommendations for protecting against them.]]> 2024-03-26T14:39:15+00:00 https://www.cybereason.com/blog/threat-alert-the-anydesk-breach-aftermath www.secnews.physaphae.fr/article.php?IdArticle=8470864 False Vulnerability,Threat None 3.0000000000000000 IT Security Guru - Blog Sécurité Plus d'un tiers des dirigeants informatiques sont mal équipés pour faire face aux attaques alimentées par l'IA C'est apparu pour la première fois sur Sécurité informatique en matière de sécurité informatiqueGuru .

---

Today zero-trust, zero-knowledge and password pros at Keeper Security have released the findings of their 2024 Keeper Security Insight Report, The Future of Defence: IT Leaders Brace for Unprecedented Cyber Threats. The report found that emerging attack vectors were presenting significant risk, with business leaders feeling a lack of confidence in their ability to defeat threats […] The post Over A Third of IT Leaders Are Ill-Equipped to Cope With AI-Powered Attacks first appeared on IT Security Guru. ]]> 2024-03-26T14:39:07+00:00 https://www.itsecurityguru.org/2024/03/26/over-a-third-of-it-leaders-are-ill-equipped-to-cope-with-ai-powered-attacks/?utm_source=rss&utm_medium=rss&utm_campaign=over-a-third-of-it-leaders-are-ill-equipped-to-cope-with-ai-powered-attacks www.secnews.physaphae.fr/article.php?IdArticle=8470793 False None None 3.0000000000000000 Korben - Bloger francais 2024-03-26T14:32:34+00:00 https://korben.info/street-fighter-iii-gpt-3-5-openai-champion-llm-colosseum.html www.secnews.physaphae.fr/article.php?IdArticle=8470821 False None None 2.0000000000000000 UnderNews - Site de news "pirate" francais Les cybermenaces devenant de plus en plus fréquentes, sophistiquées et importantes, les conseils d'administration sont soumis à une pression croissante pour préserver les intérêts de leur organisation face à ces défis. Tribune – Pour les aider à identifier les points de vigilance et intérêts à développer une approche cyber, l’Institut Diligent et Bitsight ont entrepris de mieux […] The post 10% des entreprises du CAC 40 ont engagé un cyber-expert, bien plus que leurs homologues dans le monde first appeared on UnderNews.]]> 2024-03-26T14:12:02+00:00 https://www.undernews.fr/reseau-securite/10-des-entreprises-du-cac-40-ont-engage-un-cyber-expert-bien-plus-que-leurs-homologues-dans-le-monde.html www.secnews.physaphae.fr/article.php?IdArticle=8470787 False None None 3.0000000000000000 The Hacker News - The Hacker News est un blog de news de hack (surprenant non?) The U.S. Department of the Treasury\'s Office of Foreign Assets Control (OFAC) sanctioned three cryptocurrency exchanges for offering services used to evade economic restrictions imposed on Russia following its invasion of Ukraine in early 2022. This includes Bitpapa IC FZC LLC, Crypto Explorer DMCC (AWEX), and Obshchestvo S Ogranichennoy Otvetstvennostyu Tsentr Obrabotki Elektronnykh Platezhey (]]> 2024-03-26T14:01:00+00:00 https://thehackernews.com/2024/03/us-sanctions-3-cryptocurrency-exchanges.html www.secnews.physaphae.fr/article.php?IdArticle=8470632 False None None 2.0000000000000000 Dark Reading - Informationweek Branch Staying up to date and informed on threat-actor group behavior is one way both organizations and individuals can best navigate the continually changing security landscape.]]> 2024-03-26T14:00:00+00:00 https://www.darkreading.com/cyberattacks-data-breaches/how-new-age-hackers-are-ditching-old-ethics www.secnews.physaphae.fr/article.php?IdArticle=8470764 False None None 3.0000000000000000 InfoSecurity Mag - InfoSecurity Magazine The cryptocurrency-powered iris-scanning project led by OpenAI CEO Sam Altman must halt collecting data for 90 days in Portugal]]> 2024-03-26T13:45:00+00:00 https://www.infosecurity-magazine.com/news/portugal-worldcoin-stop-biometric/ www.secnews.physaphae.fr/article.php?IdArticle=8470762 False None None 3.0000000000000000 SecurityWeek - Security News Une nouvelle attaque Rowhammer nommée Zenhammer a été démontrée contre DRAM sur des systèmes avec des processeurs AMD, y compris DDR5.

---

>A new Rowhammer attack named ZenHammer has been demonstrated against DRAM on systems with AMD CPUs, including DDR5. ]]> 2024-03-26T13:40:11+00:00 https://www.securityweek.com/zenhammer-attack-targets-dram-on-systems-with-amd-cpus/ www.secnews.physaphae.fr/article.php?IdArticle=8470792 False None None 3.0000000000000000 The Register - Site journalistique Anglais ARPA-H joins the challenge, adds $20M to cash rewards Interview  As ransomware gangs target critical infrastructure – especially hospitals and other healthcare organizations – DARPA has added another government agency partner to its Artificial Intelligence Cyber Challenge (AIxCC).…]]> 2024-03-26T13:15:12+00:00 https://go.theregister.com/feed/www.theregister.com/2024/03/26/aixcc_healthcare/ www.secnews.physaphae.fr/article.php?IdArticle=8470761 False Ransomware,Medical None 3.0000000000000000 Dark Reading - Informationweek Branch The startup\'s AI-powered data streaming platform separates security analytics from compliance data. Detecting is faster while also reducing computing and storage costs.]]> 2024-03-26T13:00:53+00:00 https://www.darkreading.com/cybersecurity-analytics/abstract-security-brings-ai-to-next-gen-siem www.secnews.physaphae.fr/article.php?IdArticle=8470827 False None None 2.0000000000000000 TechRepublic - Security News US The GoFetch vulnerability, which affects Apple\'s M series of chips, allows an attacker to steal secret keys from the Mac under certain conditions. Read tips on mitigating the GoFetch security threat.]]> 2024-03-26T13:00:38+00:00 https://www.techrepublic.com/article/gofetch-vulnerability-apple-m-chips/ www.secnews.physaphae.fr/article.php?IdArticle=8470734 False Vulnerability,Threat None 2.0000000000000000 Security Intelligence - Site de news Américain Alors que nous travaillons au premier trimestre de 2024, divers secteurs s'adaptent continuellement aux menaces de cybersécurité de plus en plus complexes.Des secteurs comme les soins de santé, la finance, l'énergie et le transport élargissent régulièrement leur infrastructure numérique, entraînant des surfaces d'attaque plus importantes et une plus grande exposition aux risques.Kaspersky vient de publier leurs prédictions ICS CERT pour cette année, décrivant la clé [& # 8230;]

---

>As we work through the first quarter of 2024, various sectors are continuously adapting to increasingly complex cybersecurity threats. Sectors like healthcare, finance, energy and transportation are all regularly widening their digital infrastructure, resulting in larger attack surfaces and greater risk exposure. Kaspersky just released their ICS CERT Predictions for this year, outlining the key […] ]]> 2024-03-26T13:00:00+00:00 https://securityintelligence.com/articles/ics-cert-predictions-2024-need-to-know/ www.secnews.physaphae.fr/article.php?IdArticle=8470760 False Industrial,Medical None 4.0000000000000000 Zimperium - cyber risk firms for mobile Dans le lieu de travail dirigée numérique d'aujourd'hui, les applications mobiles (applications) sont devenues des outils indispensables pour améliorer la productivité et fournir aux équipes une communication transparente.Alors que les employés recherchent des fonctionnalités et des fonctionnalités supplémentaires au-delà de ce que les magasins d'applications officiels offrent, ils se tournent souvent vers des magasins d'applications tiers.Alors que l'idée des magasins d'applications tierces peut sembler innocente, [& # 8230;]

---

>In today\'s digitally-driven workplace, mobile applications (apps) have become indispensable tools for enhancing productivity and providing teams with seamless communication. As employees seek additional functionality and features beyond what official app stores offer, they often turn to third-party app stores. While the idea of third-party app stores may seem innocent, […] ]]> 2024-03-26T13:00:00+00:00 https://www.zimperium.com/blog/defending-your-mobile-workspace-mitigating-risks-of-sideloading-apps/ www.secnews.physaphae.fr/article.php?IdArticle=8470733 False Tool,Mobile None 2.0000000000000000 Zimperium - cyber risk firms for mobile Dans le lieu de travail dirigée numérique d'aujourd'hui, les applications mobiles (applications) sont devenues des outils indispensables pour améliorer la productivité et fournir aux équipes une communication transparente.Alors que les employés recherchent des fonctionnalités et des fonctionnalités supplémentaires au-delà de ce que les magasins d'applications officiels offrent, ils se tournent souvent vers des magasins d'applications tiers.Alors que l'idée des magasins d'applications tierces peut sembler innocente, [& # 8230;]

---

>In today\'s digitally-driven workplace, mobile applications (apps) have become indispensable tools for enhancing productivity and providing teams with seamless communication. As employees seek additional functionality and features beyond what official app stores offer, they often turn to third-party app stores. While the idea of third-party app stores may seem innocent, […] ]]> 2024-03-26T13:00:00+00:00 https://zimpstage.wpengine.com/blog/defending-your-mobile-workspace-mitigating-risks-of-sideloading-apps/ www.secnews.physaphae.fr/article.php?IdArticle=8470943 False Tool,Mobile None 2.0000000000000000 Recorded Future - FLux Recorded Future L'Autorité nationale britannique pour les comptoirs (UK NACE) a été critiquée par le chien de surveillance des pouvoirs d'enquête de la Grande-Bretagne après avoir tenté illégalement (et sans succès) de écouter une source journalistique.Le Royaume-Uni Nace est chargé de protéger les informations et les sites les plus sensibles du pays en Grande-Bretagne et dans les ambassades du monde entier.Dans le cadre de

---

The UK National Authority for Counter-Eavesdropping (UK NACE) has been criticized by Britain\'s investigatory powers watchdog after unlawfully (and unsuccessfully) attempting to eavesdrop to uncover a journalistic source. UK NACE is tasked with protecting the country\'s most sensitive information and sites both in Britain itself and in embassies around the world. As part of]]> 2024-03-26T12:39:00+00:00 https://therecord.media/uk-nace-unlawful-surveillance-journalistic-source www.secnews.physaphae.fr/article.php?IdArticle=8470737 False None None 2.0000000000000000 Bleeping Computer - Magazine Américain Over 15 free VPN apps on Google Play were found using a malicious software development kit that turned Android devices into unwitting residential proxies, likely used for cybercrime and shopping bots. [...]]]> 2024-03-26T12:33:00+00:00 https://www.bleepingcomputer.com/news/security/free-vpn-apps-on-google-play-turned-android-phones-into-proxies/ www.secnews.physaphae.fr/article.php?IdArticle=8470852 False Mobile None 3.0000000000000000 Dragos - CTI Society Résumé de l'exécutif: Une nouvelle intégration avec la plate-forme DRAGOS pour la surveillance et la visibilité du réseau OT et la turbine de Swinklane permet aux clients de ... Le post prolongez la protection de l'infrastructure OT avec automatisationDe Dragos et du Swimlane est apparu pour la première fois sur dragos .

---

>Executive Summary: New integration with the Dragos Platform for OT network monitoring and visibility and Swimlane Turbine enables customers to... The post Extend Protection for OT Infrastructure with Automation from Dragos and Swimlane first appeared on Dragos.]]> 2024-03-26T12:30:00+00:00 https://www.dragos.com/blog/extend-protection-for-ot-infrastructure-with-automation-from-dragos-and-swimlane/ www.secnews.physaphae.fr/article.php?IdArticle=8470732 False Industrial None 3.0000000000000000 Silicon - Site de News Francais 2024-03-26T12:26:14+00:00 https://www.silicon.fr/atos-donne-rendez-vous-fin-juillet-pour-envisager-son-avenir-477159.html www.secnews.physaphae.fr/article.php?IdArticle=8470763 False None None 3.0000000000000000 Cisco - Security Firm Blog Understanding the tricky way that subdomain attacks use your email authentication against you.]]> 2024-03-26T12:00:55+00:00 https://feedpress.me/link/23535/16631864/hiding-in-plain-sight-how-subdomain-attacks-use-your-email-authentication-against-you www.secnews.physaphae.fr/article.php?IdArticle=8470705 False None None 3.0000000000000000 Dark Reading - Informationweek Branch A .NET package available for download right now is either a stealthy industrial systems backdoor or nothing at all.]]> 2024-03-26T12:00:00+00:00 https://www.darkreading.com/ics-ot-security/dubious-nuget-package-chinese-industrial-espionage www.secnews.physaphae.fr/article.php?IdArticle=8470708 False Industrial None 3.0000000000000000 ComputerWeekly - Computer Magazine 2024-03-26T12:00:00+00:00 https://www.computerweekly.com/news/366575459/Shareholders-win-when-businesses-do-better-at-cyber www.secnews.physaphae.fr/article.php?IdArticle=8470819 False None None 3.0000000000000000 HackRead - Chercher Cyber Par uzair amir Avec la popularité croissante d'Apache Kafka en tant que plate-forme de streaming distribuée, garantissant que sa haute disponibilité est devenue & # 8230; Ceci est un article de HackRead.com Lire le post original: Meilleures pratiques pour la direction de Kafka pour garantir la haute disponibilité

---

>By Uzair Amir With the increasing popularity of Apache Kafka as a distributed streaming platform, ensuring its high availability has become… This is a post from HackRead.com Read the original post: Best Practices for Kafka Management to Ensure High Availability]]> 2024-03-26T11:54:02+00:00 https://www.hackread.com/kafka-management-best-practices-high-availability/ www.secnews.physaphae.fr/article.php?IdArticle=8470710 False None None 3.0000000000000000 IT Security Guru - Blog Sécurité Award Cyber Start-up Rauses & Pound; 3M dirigée par Fuel Ventures pour permettre aux employés de se protéger pour la première fois sur gourou de la sécurité informatique .

---

Today, Think Cyber Security Ltd has announced that it has raised a £3 million late seed funding round to deliver measurable secure behaviour change. The multi-award winning, National Cyber Security Centre recognised firm offers an innovative and uniquely real-time Redflags® subscription software solution which gently guides and nudges staff to secure behaviours, with measurable impact. UK […] The post Award Winning Cyber Start-up Raises £3m Led By Fuel Ventures To Empower Employees To Protect Themselves first appeared on IT Security Guru. ]]> 2024-03-26T11:48:42+00:00 https://www.itsecurityguru.org/2024/03/26/award-winning-cyber-start-up-raises-3m-led-by-fuel-ventures-to-empower-employees-to-protect-themselves/?utm_source=rss&utm_medium=rss&utm_campaign=award-winning-cyber-start-up-raises-3m-led-by-fuel-ventures-to-empower-employees-to-protect-themselves www.secnews.physaphae.fr/article.php?IdArticle=8470706 False None None 3.0000000000000000 Recorded Future - FLux Recorded Future La Commission européenne a publié une gamme de nouvelles règles pour les plus grandes plateformes technologiques pour respecter les élections par le Parlement européen en juin.Les lignes directrices en vertu de la loi sur les services numériques ne s'appliquent que aux plus grandes plateformes et moteurs de recherche - ceux avec plus de 45 millions d'utilisateurs actifs dans le

---

The European Commission has published a range of new rules for the largest technology platforms to abide by, ahead of the European Parliament elections in June. The guidelines under the Digital Services Act only apply to the very largest platforms and search engines - those with more than 45 million active users in the]]> 2024-03-26T11:38:08+00:00 https://therecord.media/european-parliament-elections-interferance-big-tech-rules www.secnews.physaphae.fr/article.php?IdArticle=8470709 False None None 2.0000000000000000 Silicon - Site de News Francais 2024-03-26T11:24:13+00:00 https://www.silicon.fr/mustafa-suleyman-monsieur-ia-de-microsoft-477149.html www.secnews.physaphae.fr/article.php?IdArticle=8470707 False None None 2.0000000000000000 HackRead - Chercher Cyber Par uzair amir Découvrez les trois principaux outils de cybersécurité conçus pour protéger vos données commerciales à partir de menaces et de violations en ligne, assurant un transfert de données sécurisé. Ceci est un article de HackRead.com Lire le post original: Top 3 des outils de cybersécurité pour protéger les données de l'entreprise

---

>By Uzair Amir Discover the top three cybersecurity tools designed to safeguard your business data from online threats and breaches, ensuring secure data transfer. This is a post from HackRead.com Read the original post: Top 3 Cybersecurity Tools to Protect Business Data]]> 2024-03-26T11:10:00+00:00 https://www.hackread.com/3-cybersecurity-tools-to-protect-business-data/ www.secnews.physaphae.fr/article.php?IdArticle=8470738 False Tool None 3.0000000000000000 Schneier on Security - Chercheur Cryptologue Américain Commentaire public & # 8212; Signé par vingt experts en cybersécurité électorale, y compris moi-même & # 8212; sur les meilleures pratiques pour les appareils de marquage des bulletins de vote et la tabulation de vote.Il a été écrit pour la législature de Pennsylvanie, mais il est de nature générale. . du résumé de l'exécutif: Nous pensons qu'aucun système n'est parfait, chacun ayant des compromis.Les bulletins de vote à la main et à la main enlèvent l'incertitude introduite par l'utilisation de machines électroniques et la capacité des mauvais acteurs à exploiter les vulnérabilités électroniques pour modifier à distance les résultats.Cependant, une partie des électeurs marquent à tort les bulletins de vote en papier d'une manière qui ne sera pas comptée dans la façon dont l'électeur voulait, ou qui annule même le bulletin de vote.Les comptages à main retardent la déclaration en temps opportun des résultats et introduisent la possibilité d'erreur humaine, de biais ou d'interprétation erronée ...

---

Andrew Appel shepherded a public comment—signed by twenty election cybersecurity experts, including myself—on best practices for ballot marking devices and vote tabulation. It was written for the Pennsylvania legislature, but it’s general in nature. From the executive summary: We believe that no system is perfect, with each having trade-offs. Hand-marked and hand-counted ballots remove the uncertainty introduced by use of electronic machinery and the ability of bad actors to exploit electronic vulnerabilities to remotely alter the results. However, some portion of voters mistakenly mark paper ballots in a manner that will not be counted in the way the voter intended, or which even voids the ballot. Hand-counts delay timely reporting of results, and introduce the possibility for human error, bias, or misinterpretation...]]> 2024-03-26T11:08:16+00:00 https://www.schneier.com/blog/archives/2024/03/on-secure-voting-systems.html www.secnews.physaphae.fr/article.php?IdArticle=8470682 False Vulnerability,Threat None 3.0000000000000000 Bleeping Computer - Magazine Américain A new variant of "TheMoon" malware botnet has been spotted infecting thousands of outdated small office and home office (SOHO) routers and IoT devices in 88 countries. [...]]]> 2024-03-26T11:00:00+00:00 https://www.bleepingcomputer.com/news/security/themoon-malware-infects-6-000-asus-routers-in-72-hours-for-proxy-service/ www.secnews.physaphae.fr/article.php?IdArticle=8470791 False Malware None 3.0000000000000000 We Live Security - Editeur Logiciel Antivirus ESET Personal loan scams prey on your financial vulnerability and might even trap you in a vicious circle of debt. Here\'s how to avoid being scammed when considering a loan.]]> 2024-03-26T10:30:00+00:00 https://www.welivesecurity.com/en/scams/borrower-beware-common-loan-scams/ www.secnews.physaphae.fr/article.php?IdArticle=8471180 False Vulnerability None 3.0000000000000000 InfoSecurity Mag - InfoSecurity Magazine The US Treasury has designated several Russian blockchain and virtual currency firms for sanctions evasion]]> 2024-03-26T10:30:00+00:00 https://www.infosecurity-magazine.com/news/us-designates-russian-crypto/ www.secnews.physaphae.fr/article.php?IdArticle=8470683 False None None 2.0000000000000000 The Hacker News - The Hacker News est un blog de news de hack (surprenant non?) The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday placed three security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities added are as follows - CVE-2023-48788 (CVSS score: 9.3) - Fortinet FortiClient EMS SQL Injection Vulnerability CVE-2021-44529 (CVSS score: 9.8) - Ivanti]]> 2024-03-26T10:24:00+00:00 https://thehackernews.com/2024/03/cisa-alerts-on-active-exploitation-of.html www.secnews.physaphae.fr/article.php?IdArticle=8470582 False Vulnerability None 2.0000000000000000 AlienVault Lab Blog - AlienVault est un acteur de defense majeur dans les IOC expansion of the attack surface as a significant risk for corporate cyber environments in the upcoming years. The most vulnerable entities include IoT devices, cloud apps, open-source systems, and complex software supply chains. There is an increasing demand for concepts like Cyber Asset Attack Surface Management (CAASM), External Attack Surface Management (EASM), and Cloud Security Posture Management (CSPM) in corporate security frameworks. This trend is also documented in Gartner\'s "hype" chart. Let\'s discuss the concept of CAASM, which is centered on identifying and managing all digital assets within an organization, whether they are internal or external. This approach aims to provide a comprehensive view and control over the organization\'s cyber environment, enhancing security measures and management practices. What Is CAASM CAASM assists IT departments in achieving end-to-end visibility of a company\'s cyber assets. This strategy creates a fuller understanding of the actual state of the infrastructure, enabling the security team to respond promptly to existing threats and potential future ones. CAASM-based products and solutions integrate with a broad array of data sources and security tools. CAASM gathers and aggregates data and analyzes perimeter traffic, providing a continuous, multi-dimensional view of the entire attack surface. Having access to current asset data enables information security officers to visualize the infrastructure and address security gaps promptly. They can prioritize the protection of assets and develop a unified perspective on the organization\'s actual security posture. This sets the stage for proactive risk management strategies. Exploring CAASM\'s Core Functions The CAASM approach equips security professionals with a variety of tools necessary for effectively managing an organization\'s attack surface and addressing risks. Asset Discovery A lack of visibility into all of an organization\'s assets heightens the risk of cyberattacks. Cyber Asset Attack Surface Management products automatically detect and catalog every component of a company\'s digital infrastructure, encompassing local, cloud, and various remote systems, including shadow IT. A company employing CAASM gains a clear overview of all its deployed web applications, servers, network devices, and cloud services. CAASM facilitates a comprehensive inventory of the devices, applications, networks, and users constituting the company\'s attack surface. Vulnerability Detection It is important to understand the risks each asset poses, such as missing the latest security updates or opportunities to access sensitive data. CAASM systems integrate asset data, helping security teams identify misconfigurations, vulnerabilities, and oth]]> 2024-03-26T10:00:00+00:00 https://cybersecurity.att.com/blogs/security-essentials/the-growing-importance-of-caasm-in-company-cybersecurity-strategy www.secnews.physaphae.fr/article.php?IdArticle=8470766 False Ransomware,Tool,Vulnerability,Threat,Prediction,Cloud None 3.0000000000000000 InfoSecurity Mag - InfoSecurity Magazine The US government wants developers to get serious about tackling SQL injection bugs]]> 2024-03-26T10:00:00+00:00 https://www.infosecurity-magazine.com/news/cisa-fbi-renewed-effort-eliminate/ www.secnews.physaphae.fr/article.php?IdArticle=8470659 False None None 3.0000000000000000 Silicon - Site de News Francais 2024-03-26T09:49:07+00:00 https://www.silicon.fr/forum-incyber-2024-ia-477126.html www.secnews.physaphae.fr/article.php?IdArticle=8470657 False None None 2.0000000000000000 Silicon - Site de News Francais 2024-03-26T09:20:52+00:00 https://www.silicon.fr/avis-expert/le-defi-de-la-cybersecurite-des-infrastructures-critiques-du-secteur-de-lenergie www.secnews.physaphae.fr/article.php?IdArticle=8470658 False None None 3.0000000000000000 Schneier on Security - Chercheur Cryptologue Américain Regardez la vidéo sur youtube.com une conversation de 15 minutes par Bruce Schneier.

---

Watch the Video on YouTube.com A 15-minute talk by Bruce Schneier.]]> 2024-03-26T09:01:57+00:00 https://www.schneier.com/blog/archives/2024/03/ai-and-trust-2.html www.secnews.physaphae.fr/article.php?IdArticle=8472464 False None None 3.0000000000000000