This is the RSS 2.0 feed from www.secnews.physaphae.fr. IT's a simple agragated flow of multiple articles soruces. Liste of sources, can be found on www.secnews.physaphae.fr. 2024-06-03T05:21:49+00:00 www.secnews.physaphae.fr Recorded Future - FLux Recorded Future Les cyber-espions russes derrière la violation de Solarwinds adaptent leurs techniques pour pirater des organisations qui ont déplacé leurs réseaux dans des environnements hébergés dans le cloud, les responsables occidentaux avertissent.L'hébergement cloud a posé un défi pour les pirates, car il a effectivement réduit la surface d'attaque en termes de capacité à exploiter les vulnérabilités logicielles que les organisations

---

The Russian cyber spies behind the SolarWinds breach are adapting their techniques to hack into organizations that have moved their networks into cloud-hosted environments, Western officials are warning. Cloud hosting has posed a challenge to hackers because it has effectively reduced the attack surface in terms of their ability to exploit software vulnerabilities that organizations]]> 2024-02-26T13:56:26+00:00 https://therecord.media/russia-svr-espionage-hacking-cloud-five-eyes-warning www.secnews.physaphae.fr/article.php?IdArticle=8455397 False Hack,Vulnerability,Threat,Cloud None 3.0000000000000000 Schneier on Security - Chercheur Cryptologue Américain recherche : les agents LLM peuvent pirater de manière autonome les sites Web Résumé: Ces dernières années, les modèles de grandes langues (LLM) sont devenus de plus en plus capables et peuvent désormais interagir avec les outils (c'est-à-dire les fonctions d'appel), lire des documents et s'appeler récursivement.En conséquence, ces LLM peuvent désormais fonctionner de manière autonome en tant qu'agents.Avec l'augmentation des capacités de ces agents, les travaux récents ont spéculé sur la façon dont les agents LLM affecteraient la cybersécurité.Cependant, on ne sait pas grand-chose sur les capacités offensives des agents LLM. Dans ce travail, nous montrons que les agents LLM peuvent pirater de manière autonome des sites Web, effectuant des tâches aussi complexes que l'extraction de schéma de base de données aveugle et les injections SQL sans rétroaction humaine.Surtout, l'agent n'a pas besoin de connaître au préalable la vulnérabilité.Cette capacité est de manière unique par des modèles frontières qui sont très capables d'utiliser des outils et de tirer parti du contexte étendu.À savoir, nous montrons que le GPT-4 est capable de ces hacks, mais les modèles open-source existants ne le sont pas.Enfin, nous montrons que GPT-4 est capable de trouver de manière autonome des vulnérabilités dans les sites Web à l'état sauvage.Nos résultats soulèvent des questions sur le déploiement généralisé de LLMS ...

---

New research: LLM Agents can Autonomously Hack Websites Abstract: In recent years, large language models (LLMs) have become increasingly capable and can now interact with tools (i.e., call functions), read documents, and recursively call themselves. As a result, these LLMs can now function autonomously as agents. With the rise in capabilities of these agents, recent work has speculated on how LLM agents would affect cybersecurity. However, not much is known about the offensive capabilities of LLM agents. In this work, we show that LLM agents can autonomously hack websites, performing tasks as complex as blind database schema extraction and SQL injections without human feedback. Importantly, the agent does not need to know the vulnerability beforehand. This capability is uniquely enabled by frontier models that are highly capable of tool use and leveraging extended context. Namely, we show that GPT-4 is capable of such hacks, but existing open-source models are not. Finally, we show that GPT-4 is capable of autonomously finding vulnerabilities in websites in the wild. Our findings raise questions about the widespread deployment of LLMs...]]> 2024-02-23T16:14:27+00:00 https://www.schneier.com/blog/archives/2024/02/ais-hacking-websites.html www.secnews.physaphae.fr/article.php?IdArticle=8454190 False Hack,Tool,Vulnerability None 2.0000000000000000 Bleeping Computer - Magazine Américain US healthcare giant UnitedHealth Group announced that its subsidiary Optum suffered a cyberattack by "nation-state" hackers on the Change Healthcare platform, forcing the company to shut down IT systems and various services. [...]]]> 2024-02-23T04:41:07+00:00 https://www.bleepingcomputer.com/news/security/unitedhealth-confirms-optum-hack-behind-us-healthcare-billing-outage/ www.secnews.physaphae.fr/article.php?IdArticle=8454049 False Hack None 2.0000000000000000 BBC - BBC News - Technology A Chinese company claimed it had the ability to hack the UK\'s Foreign Office, leaked documents suggest.]]> 2024-02-22T21:46:27+00:00 https://www.bbc.co.uk/news/technology-68372568 www.secnews.physaphae.fr/article.php?IdArticle=8453904 False Hack None 2.0000000000000000 SecurityWeek - Security News Des documents divulgués montrent comment les autorités chinoises surveillent les dissidents à l'étranger, piratent d'autres nations et promouvaient des récits pro-beijing en ligne.

---

>Leaked documents show how Chinese authorities surveil dissidents overseas, hack other nations and promote pro-Beijing narratives online. ]]> 2024-02-22T13:51:39+00:00 https://www.securityweek.com/an-online-dump-of-chinese-hacking-documents-offers-a-rare-window-into-pervasive-state-surveillance/ www.secnews.physaphae.fr/article.php?IdArticle=8453686 False Hack None 3.0000000000000000 Dark Reading - Informationweek Branch Researchers tested their theory on nine chargers, each different and available to consumers, and found them all vulnerable to their attacks.]]> 2024-02-21T21:46:12+00:00 https://www.darkreading.com/vulnerabilities-threats/voltschemer-hack-allows-wireless-charger-takeovers www.secnews.physaphae.fr/article.php?IdArticle=8453380 False Hack None 3.0000000000000000 Ars Technica - Risk Assessment Security Hacktivism Authorities who took down the ransomware group brag about their epic hack.]]> 2024-02-20T21:29:33+00:00 https://arstechnica.com/?p=2004713 www.secnews.physaphae.fr/article.php?IdArticle=8452910 False Ransomware,Hack None 2.0000000000000000 Recorded Future - FLux Recorded Future Un groupe de piratage lié à la Russie exploite un bogue connu dans un serveur de messagerie Web populaire pour espionner les agences gouvernementales et militaires en Europe, ainsi que les ambassades iraniennes en Russie, selon un nouveau rapport.Dans une récente campagne d'espionnage, les pirates ont suivi le TAG-70 ont utilisé une vulnérabilité de script inter-sites (XSS) dans le Web Roundcube

---

A Russia-linked hacking group is exploiting a known bug in a popular webmail server to spy on government and military agencies in Europe, as well as Iranian embassies in Russia, according to a new report. In a recent espionage campaign, the hackers tracked as TAG-70 used a cross-site scripting (XSS) vulnerability in the Roundcube web-based]]> 2024-02-17T08:00:00+00:00 https://therecord.media/russia-aligned-hackers-target-european-and-iranian-embassies-cyber-espionage www.secnews.physaphae.fr/article.php?IdArticle=8451313 False Hack,Vulnerability None 3.0000000000000000 SecurityWeek - Security News A threat actor employed the administrative credentials of a former employee to hack a US government organization. ]]> 2024-02-16T13:53:42+00:00 https://www.securityweek.com/ex-employees-admin-credentials-used-in-us-gov-agency-hack/ www.secnews.physaphae.fr/article.php?IdArticle=8450957 False Hack,Threat None 3.0000000000000000 SecurityWeek - Security News L'existence d'une technique d'infection précédemment inconnue utilisée par la société spyware NSO Group est suggérée par une seule ligne dans un contrat entre NSO et le régulateur des télécommunications du Ghana.

---

>The existence of a previously unknown infection technique used by spyware firm NSO Group is suggested by a single line in a contract between NSO and the telecom regulator of Ghana. ]]> 2024-02-16T13:27:24+00:00 https://www.securityweek.com/mysterious-mms-fingerprint-hack-used-by-spyware-firm-nso-group-revealed/ www.secnews.physaphae.fr/article.php?IdArticle=8450958 False Hack None 3.0000000000000000 SecurityWeek - Security News La production dans cinq usines de fabricant de batteries allemandes Varta a été perturbée par une cyberattaque, peut-être une attaque de ransomware.

---

>Production at five plants of German battery maker Varta has been disrupted by a cyberattack, possibly a ransomware attack. ]]> 2024-02-15T15:03:13+00:00 https://www.securityweek.com/cyberattack-disrupts-production-in-varta-battery-factories/ www.secnews.physaphae.fr/article.php?IdArticle=8450465 False Ransomware,Hack None 3.0000000000000000 SecurityWeek - Security News Les attaques du DDOS ont évolué à partir des manifestations sociales par l'extorsion criminelle, le piratage d'attaques de fumeurs et la suppression des concurrents à la vengeance géopolitique.

---

>DDoS attacks have evolved from social protests through criminal extortion, hack attack smokescreens and competitor suppression to geopolitical vengeance. ]]> 2024-02-15T11:02:32+00:00 https://www.securityweek.com/ddos-hacktivism-is-back-with-a-geopolitical-vengeance/ www.secnews.physaphae.fr/article.php?IdArticle=8450381 False Hack None 2.0000000000000000 IT Security Guru - Blog Sécurité cyber-lacs dans la chaîne d'approvisionnement - Bank of America violé dans un autre fournisseur de cyberattaque est apparu pour la première fois sur gourou de la sécurité informatique .

---

Third-party cyber-attacks remain one of the most significant threats facing organisations across the globe. Most recently, Bank of America, a multinational investment banking and financial services corporation, began notifying customers that a November 2023 hack against one of its service vendors resulted in the exposure of personally identifiable information (PII).  The breach occurred following a […] The post Cyber gaps in the supply chain - Bank of America breached in another vendor cyberattack first appeared on IT Security Guru. ]]> 2024-02-14T15:42:55+00:00 https://www.itsecurityguru.org/2024/02/14/cyber-gaps-in-the-supply-chain-bank-of-america-breached-in-another-vendor-cyberattack/?utm_source=rss&utm_medium=rss&utm_campaign=cyber-gaps-in-the-supply-chain-bank-of-america-breached-in-another-vendor-cyberattack www.secnews.physaphae.fr/article.php?IdArticle=8450042 False Hack None 3.0000000000000000 Wired Threat Level - Security News It\'s so simple: Axe 26 words from the Communications Decency Act. Welcome to a world without Section 230.]]> 2024-02-13T11:00:00+00:00 https://www.wired.com/story/the-one-internet-hack-that-could-save-everything-section-230/ www.secnews.physaphae.fr/article.php?IdArticle=8449534 False Hack None 2.0000000000000000 Korben - Bloger francais 2024-02-13T08:00:00+00:00 https://korben.info/police-de-caractere-hack-optimisee-pour-le-code-source.html www.secnews.physaphae.fr/article.php?IdArticle=8449526 False Hack,General Information None 2.0000000000000000 The Security Ledger - Blog Sécurité The Chinese government is taking an aggressive approach to countering stories of Chinese cyber offensive campaigns: promoting tales of US hacks on Chinese organizations, but without the data to back them up. ]]> 2024-02-13T02:40:43+00:00 https://feeds.feedblitz.com/~/869727380/0/thesecurityledger~China-Calls-Out-US-For-Hacking-The-Proof-TBD/ www.secnews.physaphae.fr/article.php?IdArticle=8449445 False Hack None 2.0000000000000000 Bleeping Computer - Magazine Américain Bank of America is warning customers of a data breach exposing their personal information after one of its service providers was hacked last year. [...]]]> 2024-02-12T18:32:03+00:00 https://www.bleepingcomputer.com/news/security/bank-of-america-warns-customers-of-data-breach-after-vendor-hack/ www.secnews.physaphae.fr/article.php?IdArticle=8449418 False Data Breach,Hack None 2.0000000000000000 TroyHunt - Blog Security Exploit works on PCs with discrete TPM chips, which are rarer in modern systems.]]> 2024-02-12T17:58:21+00:00 https://arstechnica.com/?p=2002304 www.secnews.physaphae.fr/article.php?IdArticle=8449325 False Hack,Threat None 3.0000000000000000 Silicon - Site de News Francais 2024-02-12T08:49:09+00:00 https://www.silicon.fr/tiers-payant-ch-armentieres-situation-12-fevrier-475811.html www.secnews.physaphae.fr/article.php?IdArticle=8449177 False Ransomware,Hack None 2.0000000000000000 SecurityWeek - Security News AnyDesk a fourni plus d'informations sur le hack récent, y compris lorsque l'attaque a commencé et son impact.

---

>AnyDesk has provided more information on the recent hack, including when the attack started and its impact. ]]> 2024-02-09T11:17:11+00:00 https://www.securityweek.com/anydesk-shares-more-information-on-recent-hack/ www.secnews.physaphae.fr/article.php?IdArticle=8448351 False Hack None 3.0000000000000000 Recorded Future - FLux Recorded Future Kyiv, Ukraine - Après l'invasion russe, les responsables de la cybersécurité de l'Ukraine ont reconsidéré leur approche pour répondre aux menaces numériques et ont fait l'offensive.Maintenant, au lieu de simplement défendre ses systèmes, l'Ukraine tente de pirater l'État russe et les entreprises privées pour rassembler des renseignements précieux.Ces informations peuvent aider à contrecarrer les cyberattaques prévues par ses adversaires

---

KYIV, UKRAINE - After the Russian invasion, Ukraine\'s cybersecurity officials reconsidered their approach to responding to digital threats and went on the offensive. Now, instead of merely defending its systems, Ukraine is attempting to hack into Russian state and private companies to gather valuable intelligence. This information can help thwart cyberattacks planned by its adversaries]]> 2024-02-08T18:24:25+00:00 https://therecord.media/ukraine-cyberattacks-aiding-ground-war-russia www.secnews.physaphae.fr/article.php?IdArticle=8448118 False Hack None 3.0000000000000000 InfoSecurity Mag - InfoSecurity Magazine The French data privacy regulator has opened an investigation following a data breach affecting two major health insurance firms]]> 2024-02-08T14:30:00+00:00 https://www.infosecurity-magazine.com/news/france-33-million-social-security/ www.secnews.physaphae.fr/article.php?IdArticle=8448043 False Data Breach,Hack None 3.0000000000000000 InfoSecurity Mag - InfoSecurity Magazine Dutch intelligence services have blamed China for an attack last year targeting FortiGuard devices]]> 2024-02-07T09:30:00+00:00 https://www.infosecurity-magazine.com/news/chinese-spies-hack-dutch-1/ www.secnews.physaphae.fr/article.php?IdArticle=8447583 False Malware,Hack None 3.0000000000000000 Recorded Future - FLux Recorded Future Les responsables du gouvernement israélien n'assistent pas à une conférence à Londres cette semaine axée sur la lutte contre les abus des logiciels espions, malgré la part importante du marché du pays, selon une liste des participants vus par les nouvelles enregistrées.Organisé conjointement par le Royaume-Uni et la France, la Cyber Conference de Lancaster House entend

---

Officials from the Israeli government are not attending a conference in London this week focused on tackling the abuses of spyware, despite the country\'s significant share of the export market, according to a list of attendees seen by Recorded Future News. Jointly hosted by the United Kingdom and France, the Lancaster House cyber conference intends]]> 2024-02-06T13:09:44+00:00 https://therecord.media/israel-absent-from-london-spyware-conference-and-pledge www.secnews.physaphae.fr/article.php?IdArticle=8447285 False Hack,Conference None 3.0000000000000000 HackRead - Chercher Cyber Par owais sultan La cybersécurité est un champ de bataille constant où les pirates conçoivent continuellement de nouvelles stratégies pour violer les défenses, daçant les informations sensibles et & # 8230; Ceci est un article de HackRead.com Lire le post original: Solutions synthétiques: redéfinir la cybersécurité grâce à la génération de données face au piratage

---

>By Owais Sultan Cybersecurity is a constant battleground where hackers continuously devise new strategies to breach defences, jeopardizing sensitive information and… This is a post from HackRead.com Read the original post: Synthetic Solutions: Redefining Cybersecurity Through Data Generation in the Face of Hacking]]> 2024-02-05T12:23:40+00:00 https://www.hackread.com/synthetic-solutions-cybersecurity-data-generation-hacking/ www.secnews.physaphae.fr/article.php?IdArticle=8446904 False Hack None 3.0000000000000000 InfoSecurity Mag - InfoSecurity Magazine The cyber-attack that hit the remote tool provider could have a more significant impact than initially expected]]> 2024-02-05T12:15:00+00:00 https://www.infosecurity-magazine.com/news/anydesk-hit-cyberattack-customer/ www.secnews.physaphae.fr/article.php?IdArticle=8446905 False Data Breach,Hack,Tool None 2.0000000000000000 SecurityWeek - Security News AnyDesk révoque des certificats et des mots de passe en réponse à une violation de sécurité récemment découverte impactant les systèmes de production.

---

>AnyDesk is revoking certificates and passwords in response to a recently discovered security breach impacting production systems. ]]> 2024-02-05T09:48:39+00:00 https://www.securityweek.com/anydesk-revokes-passwords-certificates-in-response-to-hack/ www.secnews.physaphae.fr/article.php?IdArticle=8446872 False Hack None 3.0000000000000000 CyberScoop - scoopnewsgroup.com special Cyber The Iranian attack targeted a device manufactured by an Israeli company. ]]> 2024-02-02T18:00:07+00:00 https://cyberscoop.com/u-s-government-sanctions-iranian-officials-over-pennsylvania-water-facility-hack/ www.secnews.physaphae.fr/article.php?IdArticle=8446064 False Hack None 3.0000000000000000 SecurityWeek - Security News Un acteur de menace nationale a accédé aux systèmes internes de cloudflare à l'aide d'identification volées pendant le piratage d'Okta.

---

>A nation-state threat actor accessed internal Cloudflare systems using credentials stolen during the Okta hack. ]]> 2024-02-02T11:15:47+00:00 https://www.securityweek.com/cloudflare-hacked-by-suspected-state-sponsored-attacker/ www.secnews.physaphae.fr/article.php?IdArticle=8445943 False Hack,Threat None 3.0000000000000000 Recorded Future - FLux Recorded Future Blackbaud, une société de services de données et de logiciels, sera tenu de supprimer des données personnelles dont il n'a pas besoin dans le cadre d'un règlement de la Federal Trade Commission tenant la société responsable des pratiques de données qui ont permis à un pirate d'exfiltrer des informations sensibles appartenant à des millionsdes clients, a annoncé jeudi l'agence.La société basée à la Caroline du Sud \ \ \ est faible

---

Blackbaud, a data and software services company, will be required to delete personal data it doesn\'t need as part of a Federal Trade Commission settlement holding the company responsible for poor data practices which allowed a hacker to exfiltrate sensitive information belonging to millions of customers, the agency announced Thursday. The South Carolina-based company\'s weak]]> 2024-02-01T22:25:43+00:00 https://therecord.media/ftc-settles-with-blackbaud-over-data-handling-breach www.secnews.physaphae.fr/article.php?IdArticle=8445745 False Hack None 3.0000000000000000 SecurityWeek - Security News Les logiciels espions de Pegasus du groupe NSO ont été utilisés en Jordanie pour pirater les téléphones portables des journalistes, des avocats, des droits de l'homme et des militants politiques.

---

>Pegasus spyware from NSO Group was used in Jordan to hack the cellphones of journalists, lawyers, human rights and political activists. ]]> 2024-02-01T12:51:07+00:00 https://www.securityweek.com/at-least-30-journalists-lawyers-and-activists-hacked-with-pegasus-in-jordan-forensic-probe-finds/ www.secnews.physaphae.fr/article.php?IdArticle=8445568 False Hack None 3.0000000000000000 HackRead - Chercher Cyber deeba ahmed Le co-fondateur de Ripple \\ Chris Larsen a reconnu que son portefeuille XRP personnel était piraté. Ceci est un article de HackRead.com Lire le post original: Le portefeuille XRP personnel de Ripple a été violé dans un piratage de 112 millions de dollars

---

By Deeba Ahmed Ripple\'s co-founder Chris Larsen has acknowledged that his personal XRP wallet was hacked. This is a post from HackRead.com Read the original post: Ripple Co-Founder’s Personal XRP Wallet Breached in $112 Million Hack]]> 2024-02-01T12:24:44+00:00 https://www.hackread.com/ripple-co-founders-xrp-wallet-breached-hack/ www.secnews.physaphae.fr/article.php?IdArticle=8445547 False Hack None 3.0000000000000000 We Live Security - Editeur Logiciel Antivirus ESET An AI chatbot inadvertently kindles a cybercrime boom, ransomware bandits plunder organizations without deploying ransomware, and a new botnet enslaves Android TV boxes]]> 2024-01-31T10:30:00+00:00 https://www.welivesecurity.com/en/eset-research/eset-research-podcast-chatgpt-moveit-hack-pandora/ www.secnews.physaphae.fr/article.php?IdArticle=8445436 False Ransomware,Hack,Mobile ChatGPT 3.0000000000000000 ComputerWeekly - Computer Magazine 2024-01-30T11:16:00+00:00 https://www.computerweekly.com/opinion/Microsoft-hack-Five-questions-enterprises-should-ask-their-IT-leaders www.secnews.physaphae.fr/article.php?IdArticle=8445116 False Hack None 2.0000000000000000 Recorded Future - FLux Recorded Future Un théâtre populaire de Washington, D.C.Le Gala Hispanic Theatre - un centre national pour les arts du spectacle latino - a été piraté le 11 janvier et tout son compte bancaire a été vidé en un éclair.Exécutif

---

A popular theater in Washington, D.C. had more than $250,000 in stolen funds returned after hackers managed to siphon the money out of their bank account. The GALA Hispanic Theatre - a national center for Latino performing arts - was hacked on January 11 and its entire bank account was emptied in a flash. Executive]]> 2024-01-26T22:11:10+00:00 https://therecord.media/washington-dc-theater-whole-again-hack www.secnews.physaphae.fr/article.php?IdArticle=8444110 False Hack None 2.0000000000000000 Bleeping Computer - Magazine Américain The Main Intelligence Directorate of Ukraine\'s Ministry of Defense claims that pro-Ukrainian hacktivists breached the Russian Center for Space Hydrometeorology, aka "planeta" (планета), and wiped 2 petabytes of data. [...]]]> 2024-01-26T11:59:06+00:00 https://www.bleepingcomputer.com/news/security/ukraine-hack-wiped-2-petabytes-of-data-from-russian-research-center/ www.secnews.physaphae.fr/article.php?IdArticle=8443464 False Hack None 3.0000000000000000 Dark Reading - Informationweek Branch The Russian APT behind the SolarWinds attacks exfiltrated data from HPE email accounts last May.]]> 2024-01-25T19:05:00+00:00 https://www.darkreading.com/threat-intelligence/midnight-blizzard-breached-hpe-email-before-microsoft-hack www.secnews.physaphae.fr/article.php?IdArticle=8443105 False Hack None 3.0000000000000000 SecurityWeek - Security News Plus d'un million de dollars versés au cours des deux premiers jours de PWN2OWN Automotive pour Tesla, Infodiveral et EV Charger Hacks.

---

>Over $1 million paid out in the first two days of Pwn2Own Automotive for Tesla, infotainment and EV charger hacks. ]]> 2024-01-25T12:32:18+00:00 https://www.securityweek.com/tesla-infotainment-hack-earns-researchers-100000-at-pwn2own-automotive/ www.secnews.physaphae.fr/article.php?IdArticle=8442981 False Hack None 3.0000000000000000 Global Security Mag - Site de news francais Événements]]> 2024-01-25T00:00:00+00:00 https://www.globalsecuritymag.fr/passe-ton-hack-d-abord-pres-de-1-200-equipes-de-lyceens-prets-a-se-glisser-dans.html www.secnews.physaphae.fr/article.php?IdArticle=8442616 False Hack None 3.0000000000000000 Recorded Future - FLux Recorded Future Un «parti non autorisé» a détourné le numéro de téléphone portable de la personne qui exécute le compte SEC \\ de la SEC \\ avant de reprendre le flux de médias sociaux et de publier des messages.Dans un déclaration lundi, un porte-parole de la SEC a expliqué que deux jours après le le 9 janvier le rachat du compte , l'agence gouvernementale a parlé à son transporteur de télécommunications et a découvert que

---

An “unauthorized party” hijacked the cell phone number of the person running the SEC\'s X account before taking over the social media feed and posting messages. In a statement on Monday, an SEC spokesperson explained that two days after the January 9 account takeover, the government agency spoke to its telecom carrier and discovered that]]> 2024-01-24T00:29:00+00:00 https://therecord.media/sec-x-account-takeover-sim-swapping www.secnews.physaphae.fr/article.php?IdArticle=8441893 False Hack None 3.0000000000000000 Recorded Future - FLux Recorded Future L'Australie, le Royaume-Uni et les États-Unis ont imposé des sanctions financières et des interdictions de voyager sur un pirate russe pour son rôle présumé dans l'attaque de 2022 contre le fournisseur d'assurance maladie Medibank.Aleksandr Ermakov, 33, aurait été impliqué dans la version et publication non autorisés sur le Web Dark Web of Medibank Customer Data après octobre 2022

---

Australia, the U.K. and the U.S. have imposed financial sanctions and travel bans on a Russian hacker over his alleged role in the 2022 attack on the health insurance provider Medibank. Aleksandr Ermakov, 33, was allegedly involved in the unauthorized release and publication on the dark web of Medibank customer data following an October 2022]]> 2024-01-23T16:45:00+00:00 https://therecord.media/uk-us-australia-sanction-russian-ermakov-medibank www.secnews.physaphae.fr/article.php?IdArticle=8442188 False Hack None 2.0000000000000000 Bleeping Computer - Magazine Américain The Australian government has announced sanctions for Aleksandr Gennadievich Ermakov, a Russian national considered responsible for the 2022 Medibank hack and a member of the REvil ransomware group. [...]]]> 2024-01-23T08:40:23+00:00 https://www.bleepingcomputer.com/news/security/us-uk-australia-sanction-revil-hacker-behind-medibank-data-breach/ www.secnews.physaphae.fr/article.php?IdArticle=8442300 False Ransomware,Data Breach,Hack None 3.0000000000000000 ComputerWeekly - Computer Magazine 2024-01-23T06:10:00+00:00 https://www.computerweekly.com/news/366567197/SEC-Bitcoin-hack-was-result-of-SIM-swapping www.secnews.physaphae.fr/article.php?IdArticle=8442073 False Hack None 3.0000000000000000 Zataz - Magazine Francais de secu 2024-01-22T18:32:04+00:00 https://www.zataz.com/passe-ton-hack-dabord/ www.secnews.physaphae.fr/article.php?IdArticle=8441781 False Hack None 2.0000000000000000 TroyHunt - Blog Security "Our long-term objective is to make printing a subscription."]]> 2024-01-22T17:44:28+00:00 https://arstechnica.com/?p=1997422 www.secnews.physaphae.fr/article.php?IdArticle=8441800 False Hack None 2.0000000000000000 The Register - Site journalistique Anglais 2024-01-17T11:45:13+00:00 https://go.theregister.com/feed/www.theregister.com/2024/01/17/windows_server_2022_patch_breaks/ www.secnews.physaphae.fr/article.php?IdArticle=8439847 False Hack None 3.0000000000000000 SecurityWeek - Security News Les Ivanti VPN Zero-Days récemment divulgués ont été exploités pour pirater au moins 1 700 appareils, notamment le gouvernement, les télécommunications, la défense et la technologie

---

>The recently disclosed Ivanti VPN zero-days have been exploited to hack at least 1,700 devices, including government, telecoms, defense, and tech. ]]> 2024-01-16T09:59:49+00:00 https://www.securityweek.com/governments-military-targeted-as-widespread-exploitation-of-ivanti-zero-days-begins/ www.secnews.physaphae.fr/article.php?IdArticle=8439504 False Hack None 3.0000000000000000 InfoSecurity Mag - InfoSecurity Magazine US senators have accused the SEC of failing to properly secure its social media accounts after hackers comprised its X account and posted a fake Bitcoin announcement]]> 2024-01-15T16:50:00+00:00 https://www.infosecurity-magazine.com/news/senators-probe-sec-hack-bitcoin/ www.secnews.physaphae.fr/article.php?IdArticle=8439286 False Hack None 2.0000000000000000 HackRead - Chercher Cyber Par deeba ahmed Les attaques, potentiellement liées au ver de sable russe, ont exploité les vulnérabilités dans les pare-feu zyxel. Ceci est un article de HackRead.com Lire le post original: Le rapport de ForeScout découvre les nouveaux détails dans le piratage de l'énergie danoise

---

>By Deeba Ahmed The attacks, potentially linked to Russian APT Sandworm, exploited vulnerabilities in Zyxel firewalls. This is a post from HackRead.com Read the original post: Forescout Report Uncovers New Details in Danish Energy Hack]]> 2024-01-15T11:23:03+00:00 https://www.hackread.com/forescout-report-new-details-danish-energy-hack/ www.secnews.physaphae.fr/article.php?IdArticle=8439203 False Hack,Vulnerability,Industrial,Technical None 4.0000000000000000 Dark Reading - Informationweek Branch Senators from both parties called the Securities and Exchange Commission\'s lack of MFA "inexcusable" and demand investigation into the regulator\'s cybersecurity lapse.]]> 2024-01-12T22:33:00+00:00 https://www.darkreading.com/cyberattacks-data-breaches/sec-x-account-crypto-hack-draws-senate-ire- www.secnews.physaphae.fr/article.php?IdArticle=8438417 False Hack None 2.0000000000000000 The Register - Site journalistique Anglais It\'s taken months for crims to hack together a working exploit chain Security experts claim ransomware criminals have got their hands on a functional exploit for a nearly year-old critical Microsoft SharePoint vulnerability that was this week added to the US\'s must-patch list.…]]> 2024-01-12T19:34:07+00:00 https://go.theregister.com/feed/www.theregister.com/2024/01/12/microsoft_sharepoint_vuln_exploit/ www.secnews.physaphae.fr/article.php?IdArticle=8438371 False Ransomware,Hack,Vulnerability,Threat None 2.0000000000000000 We Live Security - Editeur Logiciel Antivirus ESET The cryptocurrency rollercoaster never fails to provide a thrilling ride – this week it was a drama surrounding the hack of SEC\'s X account right ahead of the much-anticipated decision about Bitcoin ETFs]]> 2024-01-12T14:17:04+00:00 https://www.welivesecurity.com/en/videos/lessons-sec-x-account-hack-week-security-tony-anscombe/ www.secnews.physaphae.fr/article.php?IdArticle=8438495 False Hack None 3.0000000000000000 Global Security Mag - Site de news francais mise à jour malveillant

---

Exploring FBot – Python-Based Malware Targeting Cloud and Payment Services The cloud hack tool scene is highly intertwined, with many tools relying on one another\'s code. This is particularly true for malware families like AlienFox, Greenbot, Legion, and Predator, which share code from a credential-scraping module called Androxgh0st. - Malware Update]]> 2024-01-12T13:16:14+00:00 https://www.globalsecuritymag.fr/sentinellabs-exploring-fbot-python-based-malware-targeting-cloud-and-payment.html www.secnews.physaphae.fr/article.php?IdArticle=8438278 False Malware,Hack,Tool,Cloud None 3.0000000000000000 Recorded Future - FLux Recorded Future Les républicains du comité des services financiers de la Chambre souhaitent que la SEC les informe sur le récent hack du compte de médias sociaux de l'agence \\ au plus tard la semaine prochaine.In a letter sent Wednesday to SEC Chairman Gary Gensler, the lawmakers noted that, X, formerly Twittera déclaré [un pirate a utilisé un numéro de téléphone associé au

---

Republicans on the House Financial Services Committee want the SEC to brief them on the recent hack of the agency\'s social media account no later than next week. In a letter sent Wednesday to SEC Chairman Gary Gensler, the lawmakers noted that, X, formerly Twitter, said [a hacker used a phone number associated with the]]> 2024-01-11T14:26:00+00:00 https://therecord.media/sec-social-media-account-takeover-house-republicans-respond www.secnews.physaphae.fr/article.php?IdArticle=8437895 False Hack None 2.0000000000000000 The Hacker News - The Hacker News est un blog de news de hack (surprenant non?) The compromise of Mandiant\'s X (formerly Twitter) account last week was likely the result of a "brute-force password attack," attributing the hack to a drainer-as-a-service (DaaS) group. "Normally, [two-factor authentication] would have mitigated this, but due to some team transitions and a change in X\'s 2FA policy, we were not adequately protected," the threat intelligence firm said ]]> 2024-01-11T11:40:00+00:00 https://thehackernews.com/2024/01/mandiants-x-account-was-hacked-using.html www.secnews.physaphae.fr/article.php?IdArticle=8437756 False Hack,Threat None 3.0000000000000000 CyberScoop - scoopnewsgroup.com special Cyber Une violation du compte de la Securities and Exchange Commission \\ sur la plate-forme anciennement connue sous le nom de Twitter a provoqué des prix du bitcoin.

---

>A breach of the Securities and Exchange Commission\'s account on the platform formerly known as Twitter caused bitcoin prices to spike. ]]> 2024-01-10T22:09:00+00:00 https://cyberscoop.com/after-hack-x-claims-sec-failed-to-use-two-factor-authentication/ www.secnews.physaphae.fr/article.php?IdArticle=8437652 False Hack None 3.0000000000000000 Dark Reading - Informationweek Branch A fraudulent post was taken down in less than 20 minutes, but that didn\'t stop it from gaining over 1 million views in that short period of time.]]> 2024-01-10T20:00:00+00:00 https://www.darkreading.com/application-security/bitcoin-prices-spike-after-sec-x-account-hack www.secnews.physaphae.fr/article.php?IdArticle=8437619 False Hack None 3.0000000000000000 Wired Threat Level - Security News The US Securities and Exchange Commission is under pressure to explain itself after its X account was compromised, leading to wild swings in the bitcoin market.]]> 2024-01-10T15:55:58+00:00 https://www.wired.com/story/sec-x-account-hack-investigation/ www.secnews.physaphae.fr/article.php?IdArticle=8437547 False Hack None 3.0000000000000000 ComputerWeekly - Computer Magazine 2024-01-10T05:15:00+00:00 https://www.computerweekly.com/news/366565836/SEC-social-media-hack-highlights-value-of-MFA www.secnews.physaphae.fr/article.php?IdArticle=8437465 False Hack None 3.0000000000000000 Dark Reading - Informationweek Branch Reports say M9 Telecom servers were destroyed in retaliation for Russia-backed cyberattack against Kyivstar mobile phone operator.]]> 2024-01-10T03:00:00+00:00 https://www.darkreading.com/ics-ot-security/ukraine-claims-revenge-hack-against-moscow-internet-provider www.secnews.physaphae.fr/article.php?IdArticle=8437299 False Hack,Mobile None 3.0000000000000000 CybeReason - Vendor blog Valdimir Levin est souvent présenté comme "le premier voleur de banque en ligne" et apparaît sur de nombreuses listes des "10 meilleurs pirates de pirates".Mais quelques pirates vétérans russes CLIAM que le tristement célèbre piratage de Levin avait été mutilé par les Journlists qui ont écrit à ce sujet.Quelle est la vérité derrière le hack Citibank de 10,7 millions de dollars en 1994?…

---

Valdimir Levin is often presented as "the first online bank robber," and appeares on many lists of the "Top 10 Greatest Hackers." But a few veteran Russian hackers cliam that Levin\'s infamous hack had been mangled by the journlists who wrote about it. What\'s the truth behind the 1994 $10.7 million Citibank hack?…]]> 2024-01-09T17:57:00+00:00 https://www.cybereason.com/blog/malicious-life-podcast-the-real-story-of-citibanks-10m-hack www.secnews.physaphae.fr/article.php?IdArticle=8442225 False Hack None 3.0000000000000000 Bleeping Computer - Magazine Américain Some organizations victimized by the Royal and Akira ransomware gangs have been targeted by a threat actor posing as a security researcher who promised to hack back the original attacker and delete stolen victim data. [...]]]> 2024-01-09T16:09:01+00:00 https://www.bleepingcomputer.com/news/security/ransomware-victims-targeted-by-fake-hack-back-offers/ www.secnews.physaphae.fr/article.php?IdArticle=8437300 False Ransomware,Hack,Threat None 3.0000000000000000 knowbe4 - cybersecurity services ]]> 2024-01-09T14:00:00+00:00 https://blog.knowbe4.com/cyberheistnews-vol-14-02-ai-breaks-free-new-insights-into-the-latest-chatbot-jailbreak-hack www.secnews.physaphae.fr/article.php?IdArticle=8437135 False Hack None 2.0000000000000000 InfoSecurity Mag - InfoSecurity Magazine AP said departure and arrival screens displayed a message accusing Hezbollah of jeopardizing Lebanon]]> 2024-01-08T16:00:00+00:00 https://www.infosecurity-magazine.com/news/anti-hezbollah-hack-beirut-airport/ www.secnews.physaphae.fr/article.php?IdArticle=8436680 False Hack None 2.0000000000000000 Bleeping Computer - Magazine Américain In the wake of the MGM Resorts service desk hack, it\'s clear that organizations need to rethink their approach to securing their help desks. Learn more from Specops Software on how to prevent such incidents. [...]]]> 2024-01-08T10:02:01+00:00 https://www.bleepingcomputer.com/news/security/securing-helpdesks-from-hackers-what-we-can-learn-from-the-mgm-breach/ www.secnews.physaphae.fr/article.php?IdArticle=8436674 False Hack None 2.0000000000000000 We Live Security - Editeur Logiciel Antivirus ESET From ChatNPT to Game Boys and space apps, this year\'s challenge took us to the Geese Islands for another rollicking romp of fun]]> 2024-01-06T10:30:00+00:00 https://www.welivesecurity.com/en/cybersecurity/cracking-2023-sans-holiday-hack-challenge/ www.secnews.physaphae.fr/article.php?IdArticle=8436040 False Hack None 3.0000000000000000 SecurityWeek - Security News Des histoires remarquables qui auraient pu glisser sous le radar: Rapport sur les attaques de ransomwares américaines, 23andMe blâme les victimes du piratage, la société de déchets nucléaires ciblée.

---

>Noteworthy stories that might have slipped under the radar: report on US ransomware attacks, 23andMe blames victims for hack, nuclear waste company targeted. ]]> 2024-01-05T13:56:46+00:00 https://www.securityweek.com/in-other-news-us-ransomware-attacks-23andme-blames-victims-nuclear-waste-hacking-attempt/ www.secnews.physaphae.fr/article.php?IdArticle=8435150 False Ransomware,Hack None 3.0000000000000000 Dark Reading - Informationweek Branch If Ukraine\'s core telephone network can be taken out, organizations in the West could easily be next, Ukraine\'s SBU chief says.]]> 2024-01-04T19:57:00+00:00 https://www.darkreading.com/cyberattacks-data-breaches/russia-kyivstar-hack-should-alarm-west-ukraine-cyber-spy-warns www.secnews.physaphae.fr/article.php?IdArticle=8434626 False Hack None 2.0000000000000000 Recorded Future - FLux Recorded Future Les pirates russes derrière les cyberattaque sur l'Ukraine \\ de l'opérateur de télécommunications de l'Ukraine qui s'appelle dans son infrastructure des mois avant le temps de télécommunications d'Ukraine \\Décembre Hack, selon le plus haut responsable du cyber-responsable de l'Ukraine.L'attaque contre Kyivstar a été «l'une des cyberattaques perturbatrices les plus à impact sur les réseaux ukrainiens» depuis que la Russie a envahi le pays l'année dernière.Il a laissé des millions d'abonnés à Kievstar sans un

---

The Russian hackers behind the cyberattack on Ukraine\'s largest telecom operator snuck into its infrastructure months before the December hack, according to Ukraine\'s top cyber official. The attack on Kyivstar was “one of the highest-impact disruptive cyberattacks on Ukrainian networks” since Russia invaded the country last year. It left millions of Kyivstar subscribers without a]]> 2024-01-04T16:00:00+00:00 https://therecord.media/russians-infiltrated-kyivstar-months-before www.secnews.physaphae.fr/article.php?IdArticle=8434526 False Hack None 3.0000000000000000 The Hacker News - The Hacker News est un blog de news de hack (surprenant non?) American cybersecurity firm and Google Cloud subsidiary Mandiant had its X (formerly Twitter) account compromised for more than six hours by an unknown attacker to propagate a cryptocurrency scam. As of writing, the account has been restored on the social media platform. It\'s currently not clear how the account was breached. But the hacked Mandiant account was initially renamed to "@]]> 2024-01-04T11:59:00+00:00 https://thehackernews.com/2024/01/mandiants-twitter-account-restored.html www.secnews.physaphae.fr/article.php?IdArticle=8434203 False Hack,Cloud None 4.0000000000000000 AlienVault Lab Blog - AlienVault est un acteur de defense majeur dans les IOC According to Statista, the global virtual reality and augmented reality market is worth $32.1 billion in 2023, and analysts predict it will exceed $58 billion by 2028. These appear to be conservative estimates, with another study forecasting growth up to a whopping $252 billion in the next four years. Whereas these technologies aren’t susceptible to major malicious exploitation at this point, their skyrocketing popularity might encourage threat actors to come up with viable attack vectors in the near future. This article highlights some of the current security and privacy concerns that stem from the rising adoption of VR and AR technologies. 1. Eye tracking Many people consider eye tracking in VR to be truly revolutionary. The logic of such a perspective is clear: this tech enhances the accuracy of virtual interaction and takes the user experience to a new level by helping interpret people’s emotions. It is also believed to give the security of VR systems a boost because eye scanning can refine biometric verification in the login workflows. As useful as it is, glance tracking could also expose users to hidden monitoring and other privacy risks. For example, VR game makers may be tempted to embed advertisements in their products, similar to how sponsored information is shown in mobile games. If this is the case, eye tracking would be a perfect instrument for advertisers to figure out which ads draw your attention and which ones you ignore. As per analysts’ findings, 95% of decisions to buy a product occur in the subconscious mind. By snooping on a user’s visual response, marketers may be able to derive conclusions regarding their preferences and dislikes. The flip side is that such a technology could potentially play into unscrupulous parties’ hands as a powerful surveillance instrument. 2. Blackmail and harassment Adult entertainment is one of the most popular areas of the virtual reality industry. According to a relevant study, the VR adult content market will see a staggering rise from $716 million in 2021 to $19 billion in 2026. Cybercriminals may try to cash in on this hype by engaging in what’s known as “sextortion”. The idea is to deceive users into thinking that the malefactors have some embarrassing evidence of their private pastimes and instruct them to send money in exchange for not disclosing this information. In some cases, the scammers may even include a valid password for one of the user’s web accounts so that the blackmail message appears true. Bear in mind that they obtained these authentication details from a large-scale data breach that occurred in the past. While these emails contain ]]> 2024-01-04T11:00:00+00:00 https://cybersecurity.att.com/blogs/security-essentials/vr-and-ar-potential-security-risks-to-be-prepared-for www.secnews.physaphae.fr/article.php?IdArticle=8434556 False Data Breach,Hack,Tool,Threat,Mobile,Prediction None 3.0000000000000000 Dark Reading - Informationweek Branch Incident prompts Ukraine\'s security service to ask webcam operators in country to stop live broadcasts.]]> 2024-01-03T22:54:00+00:00 https://www.darkreading.com/ics-ot-security/russian-agents-use-residential-webcams-to-gather-info-for-missile-attack-on-kyiv www.secnews.physaphae.fr/article.php?IdArticle=8433974 False Hack None 3.0000000000000000 Bleeping Computer - Magazine Américain Orbit Chain has experienced a security breach that has resulted in a loss of $86 million in cryptocurrency, particularly Ether, Dai, Tether, and USD Coin. [...]]]> 2024-01-02T14:46:23+00:00 https://www.bleepingcomputer.com/news/security/orbit-chain-loses-86-million-in-the-last-fintech-hack-of-2023/ www.secnews.physaphae.fr/article.php?IdArticle=8433168 False Hack None 3.0000000000000000 SecurityWeek - Security News Des histoires remarquables qui auraient pu glisser sous le radar: Ubisoft enquêtant sur présumé hack, la NASA publie des conseils de sécurité, Tiktok fait peur aux utilisateurs d'iPhone.

---

>Noteworthy stories that might have slipped under the radar: Ubisoft investigating alleged hack, NASA releases security guidance, TikTok scares iPhone users.  ]]> 2023-12-29T13:02:00+00:00 https://www.securityweek.com/in-other-news-ubisoft-hack-nasa-security-guidance-tiktok-requests-iphone-passcode/ www.secnews.physaphae.fr/article.php?IdArticle=8430798 False Hack,Mobile None 3.0000000000000000 The Hacker News - The Hacker News est un blog de news de hack (surprenant non?) The Operation Triangulation spyware attacks targeting Apple iOS devices leveraged never-before-seen exploits that made it possible to even bypass pivotal hardware-based security protections erected by the company. Russian cybersecurity firm Kaspersky, which discovered the campaign at the beginning of 2023 after becoming one of the targets, described it as]]> 2023-12-28T16:49:00+00:00 https://thehackernews.com/2023/12/most-sophisticated-iphone-hack-ever.html www.secnews.physaphae.fr/article.php?IdArticle=8430253 False Hack,Mobile None 3.0000000000000000 Zataz - Magazine Francais de secu 2023-12-28T16:43:04+00:00 https://www.zataz.com/un-pirate-perd-la-boule-et-hack-la-loterie/ www.secnews.physaphae.fr/article.php?IdArticle=8430361 False Hack None 3.0000000000000000 HackRead - Chercher Cyber waqas Big Tech vs Big Brother: Apple défie la pression de l'Inde sur les alertes de piratage iPhone. Ceci est un article de HackRead.com Lire le post original: Les avertissements d'attaque de piratage d'iPhone d'Apple Stillent la tempête politique en Inde

---

By Waqas Big Tech vs. Big Brother: Apple Defies India Pressure over iPhone Hacking Alerts. This is a post from HackRead.com Read the original post: Apple’s iPhone Hack Attack Warnings Spark Political Firestorm in India]]> 2023-12-28T14:16:07+00:00 https://www.hackread.com/apples-iphone-hack-attack-warnings-india/ www.secnews.physaphae.fr/article.php?IdArticle=8430315 False Hack,Mobile None 3.0000000000000000 SecurityWeek - Security News Le groupe DragonForce Ransomware a pris le crédit du hack de loterie de l'Ohio, affirmant avoir volé des millions d'enregistrements de données.

---

>The DragonForce ransomware group has taken credit for the Ohio Lottery hack, claiming to have stolen millions of data records. ]]> 2023-12-28T11:30:00+00:00 https://www.securityweek.com/ohio-lottery-hit-by-ransomware-hackers-claim-theft-of-employee-and-player-data/ www.secnews.physaphae.fr/article.php?IdArticle=8430248 False Ransomware,Hack None 2.0000000000000000 SecurityWeek - Security News Attaque iOS Zero-Click ciblant les iPhones de Kaspersky a contourné les protections de sécurité basées sur le matériel pour prendre le contrôle des appareils.

---

>iOS zero-click attack targeting Kaspersky iPhones bypassed hardware-based security protections to take over devices. ]]> 2023-12-28T11:00:00+00:00 https://www.securityweek.com/mysterious-apple-soc-feature-leveraged-to-hack-kaspersky-employee-iphones/ www.secnews.physaphae.fr/article.php?IdArticle=8430249 False Hack None 3.0000000000000000 InfoSecurity Mag - InfoSecurity Magazine The MOVEit hack, OpenAI service targeting and Android spyware top the threat landscape in H2 2023, according to ESET]]> 2023-12-27T10:00:00+00:00 https://www.infosecurity-magazine.com/news/2023-threat-dominated-ai-android/ www.secnews.physaphae.fr/article.php?IdArticle=8429718 False Hack,Threat,Mobile None 3.0000000000000000 Bleeping Computer - Magazine Américain ​The source code for Grand Theft Auto 5 was reportedly leaked on Christmas Eve, a little over a year after the Lapsus$ threat actors hacked Rockstar games and stole corporate data. [...]]]> 2023-12-25T13:27:56+00:00 https://www.bleepingcomputer.com/news/security/gta-5-source-code-reportedly-leaked-online-a-year-after-rockstar-hack/ www.secnews.physaphae.fr/article.php?IdArticle=8428924 False Hack,Threat None 3.0000000000000000 SecurityWeek - Security News Arion Kurtaj was found responsible by a British court of carrying out one of the biggest breaches in the history of the video game industry ]]> 2023-12-22T13:58:22+00:00 https://www.securityweek.com/uk-teen-gets-indefinite-hospital-order-for-grand-theft-auto-hack/ www.secnews.physaphae.fr/article.php?IdArticle=8427418 False Hack None 3.0000000000000000 SecurityWeek - Security News Des histoires remarquables qui auraient pu glisser sous le radar: le pirate d'échange de crypto-monnaie plaide coupable, vulnérabilités LLM, analyse des logiciels espions Intellexa.

---

>Noteworthy stories that might have slipped under the radar: Cryptocurrency exchange hacker pleads guilty, rating LLM vulnerabilities, Intellexa spyware analysis. ]]> 2023-12-22T13:04:25+00:00 https://www.securityweek.com/in-other-news-crypto-exchange-hack-guilty-plea-rating-ai-vulnerabilities-intellexa-spyware/ www.secnews.physaphae.fr/article.php?IdArticle=8427419 False Hack,Vulnerability None 3.0000000000000000 Bleeping Computer - Magazine Américain Three malicious Chrome extensions posing as VPN (Virtual Private Networks) infected were downloaded 1.5 million times, acting as browser hijackers, cashback hack tools, and data stealers. [...]]]> 2023-12-22T08:30:15+00:00 https://www.bleepingcomputer.com/news/security/fake-vpn-chrome-extensions-force-installed-15-million-times/ www.secnews.physaphae.fr/article.php?IdArticle=8427415 False Hack,Tool None 2.0000000000000000 BBC - BBC News - Technology Details of Insomniac\'s upcoming Wolverine game plus employee and company data appear online.]]> 2023-12-19T12:43:36+00:00 https://www.bbc.co.uk/news/newsbeat-67754897?at_medium=RSS&at_campaign=KARANGA www.secnews.physaphae.fr/article.php?IdArticle=8425426 False Hack None 2.0000000000000000 Recorded Future - FLux Recorded Future La Russie et la Chine ont tenté d'influencer les mi-parcours américains de 2022, mais n'ont pas réussi à pirater l'infrastructure électorale du pays ou à perturber le vote des États-Unis, a déclaré lundi la communauté du renseignement américain.«Nous n'avons aucune preuve qu'une activité détectée a empêché le vote, les votes modifiés ou perturbé la capacité de compter les votes ou de transmettre l'élection

---

Both Russia and China attempted to influence the 2022 U.S. midterms but did not successfully hack into the country\'s election infrastructure or otherwise disrupt voting, the U.S. intelligence community said on Monday. “We have no evidence that any detected activity prevented voting, changed votes, or disrupted the ability to tally votes or to transmit election]]> 2023-12-19T03:10:00+00:00 https://therecord.media/no-evidence-2022-midterm-election-interference-declassified-report www.secnews.physaphae.fr/article.php?IdArticle=8425160 False Hack None 2.0000000000000000 Recorded Future - FLux Recorded Future Le plus grand opérateur de télécommunications de l'Ukraine \\, Kievstar, était «l'une des cyberattaques perturbatrices les plus perturbatrices sur les réseaux ukrainiens» depuis que la Russie a envahi le pays l'année dernière, British Defense Intelligence dit .L'attaque, qui a commencé le 12 décembre, a laissé les abonnés de Kievstar sans signal mobile et Internet pendant deux jours.L'entreprise fournit des services à plus de la moitié

---

The hack of Ukraine\'s largest telecommunications operator, Kyivstar, was “one of the highest-impact disruptive cyberattacks on Ukrainian networks” since Russia invaded the country last year, British defense intelligence said. The attack, which began on December 12, left Kyivstar subscribers without mobile signal and internet for two days. The company provides services to more than half]]> 2023-12-18T14:30:00+00:00 https://therecord.media/ukraine-kyivstar-hack-high-impact www.secnews.physaphae.fr/article.php?IdArticle=8424812 False Hack,Mobile None 3.0000000000000000 SecurityWeek - Security News Delta Dental of California affirme que plus de 6,9 millions de personnes ont été touchées par une violation de données causée par le hack Moveit.

---

>Delta Dental of California says over 6.9 million individuals were impacted by a data breach caused by the MOVEit hack. ]]> 2023-12-18T12:00:00+00:00 https://www.securityweek.com/delta-dental-of-california-discloses-data-breach-impacting-6-9-million-people/ www.secnews.physaphae.fr/article.php?IdArticle=8424746 False Data Breach,Hack None 2.0000000000000000 SecurityWeek - Security News Mongodb Ciso Lena Smart a déclaré que la société n'était au courant d'aucune exposition aux données que les clients stockent dans le produit MongoDB Atlas.

---

>MongoDB CISO Lena Smart said the company was not aware of any exposure to the data that customers store in the MongoDB Atlas product.  ]]> 2023-12-17T21:03:08+00:00 https://www.securityweek.com/mongodb-confirms-hack-says-customer-data-stolen/ www.secnews.physaphae.fr/article.php?IdArticle=8424398 False Hack None 2.0000000000000000 Bleeping Computer - Magazine Américain Kraft Heinz has confirmed that their systems are operating normally and that there is no evidence they were breached after an extortion group listed them on a data leak site. [...]]]> 2023-12-14T18:30:16+00:00 https://www.bleepingcomputer.com/news/security/kraft-heinz-investigates-hack-claims-says-systems-operating-normally/ www.secnews.physaphae.fr/article.php?IdArticle=8422908 False Hack None 2.0000000000000000 SecurityWeek - Security News GambleForce utilise des injections SQL pour pirater les sites Web de jeu, de gouvernement, de vente au détail et de voyage pour voler des informations sensibles.

---

>GambleForce uses SQL injections to hack gambling, government, retail, and travel websites to steal sensitive information. ]]> 2023-12-14T15:17:45+00:00 https://www.securityweek.com/new-threat-actor-uses-sql-injection-attacks-to-steal-data-from-apac-companies/ www.secnews.physaphae.fr/article.php?IdArticle=8422731 False Hack,Threat None 2.0000000000000000 TroyHunt - Blog Security Hackers tied to Russian military take responsibility for hack on Ukraine\'s biggest provider.]]> 2023-12-14T01:33:41+00:00 https://arstechnica.com/?p=1991011 www.secnews.physaphae.fr/article.php?IdArticle=8422388 False Hack None 3.0000000000000000 Techworm - News BleepingComputer ). Pour ceux qui ne le savent pas, certains des systèmes de TFS \\ en Europe et en Afrique ont subi une attaque de ransomware le mois dernier. The Medusa Ransomware Gang Responsabilité affirmée pourL'attaque et les TF répertoriés comme site de fuite de données sur le Web Dark. Le groupe a exigé que l'entreprise paie une rançon de 8 millions de dollars américains en 10 jours pour supprimer les données qui auraient été volées à la société japonaise, avec la possibilité de payer 10 000 $ pour une extension de jour. . Pour soutenir sa réclamation, le gang de ransomware a également publié des captures d'écran de plusieurs documents, aux côtés d'une arborescence de fichiers de toutes les données exfiltrées. Il comprenait des documents financiers, des feuilles de calcul, des mots de passe du compte hachée, des factures d'achat, des analyses de passeport, des identifiants utilisateur en texte clair et des mots de passe, des adresses e-mail du personnel, des graphiques d'organisation interne, des rapports de performances financières, des accords, et plus encore. «Toyota Motor Corporation est un fabricant d'automobile multinational japonais dont le siège est à Toyota City, Aichi, Japon.Toyota est l'un des plus grands constructeurs automobiles au monde, produisant environ 10 millions de véhicules par an », a déclaré le site de fuite de Medusa \\, qui comprenait une brève description du piratage. «Les données divulguées proviennent de Toyota Financial Services en Allemagne.Toyota Deutschland GmbH est une société affiliée détenue par Toyota Motor Europe (TME) à Bruxelles / Belgique et située à K & OUML; LN (Cologne). » Suite à la menace de fuite de données par Medusa Ransomware, un porte-parole de Toyota a confirmé à BleepingComputer qu'il a détecté un accès non autorisé sur certains de ses systèmes en Europe et en Afrique. À l'époque, TFS n'a confirmé pas si l'une de ses données avait été volée dans la violation, mais a déclaré qu'elle avait pris des systèmes hors ligne pour atténuer les risques et aider ses enquêtes. Il semble que Toyota n'a pas cédé aux demandes du gang de ransomware de Medusa, car toutes les données divulguées ont été publiées sur le portail d'extorsion de Medusa & # 8217; Plus tôt ce mois-Germany-Toyota-KreditBank-GmbH-2 / Texte "Data-Wpel-Link =" External "rel =" Nofollow Noopener NoreFerrer "> Identifié comme l'une des divisions affectées, admettant que certains fichiers TKG étaient accessibles parpirates pendant l'attaque. Les lettres de notification de violation qui ont été envoyées en allemand aux clients touchés de Toyota \\ ont été accessibles par le point de presse allemand heise . Il les informe que les informations compromises dans la violation de données sur la base de l'enquête en cours comprennent les noms de premier et de famille, les adresses résidentielles, les informations du contrat, les détails de l'achat de location et Iban (numéro de compte bancaire international). Étan]]> 2023-12-12T22:15:48+00:00 https://www.techworm.net/2023/12/toyota-personal-financial-info-data-breach.html www.secnews.physaphae.fr/article.php?IdArticle=8421603 False Ransomware,Data Breach,Hack,Threat None 3.0000000000000000 InfoSecurity Mag - InfoSecurity Magazine Kyivstar announced its mobile network had temporarily been shut down due to a major cyber-attack on its systems]]> 2023-12-12T14:00:00+00:00 https://www.infosecurity-magazine.com/news/ukraine-kyivstar-hacked-war-russia/ www.secnews.physaphae.fr/article.php?IdArticle=8421572 False Hack,Mobile None 3.0000000000000000 Recorded Future - FLux Recorded Future Un groupe de pirates a ciblé un service de télévision aux Émirats arabes unis au cours du week-end, remplaçant la diffusion originale par des images graphiques de la guerre entre Israël et le Hamas.Plusieurs citoyens des EAU touchés par le piratage a déclaré à le journal basé à Dubaï, Khaleej, que les programmes de télévision diffusés sur les chaînes en direct européennes, y compris BBC News, étaient

---

A group of hackers targeted a television service in the United Arab Emirates over the weekend, replacing the original broadcast with graphic footage from the war between Israel and Hamas. Several UAE citizens affected by the hack told the Dubai-based newspaper Khaleej Times that television programs aired on European live channels, including BBC News, were]]> 2023-12-11T18:15:00+00:00 https://therecord.media/tv-service-hacked-to-show-atrocities-palestine-uae www.secnews.physaphae.fr/article.php?IdArticle=8421160 False Hack None 3.0000000000000000 Recorded Future - FLux Recorded Future La police du Lancashire, dans le nord-ouest de l'Angleterre, a réussi à retourner autour et 8 millions (10 millions de dollars) de Bitcoin à un homme dont la crypto-monnaie a été volée en 2017. Il suit quatre personnes condamnées plus tôt cette année pour leur rôle dans A & Pound; 20;million (25 millions de dollars) piratent après avoir découvert un problème dans la façon dont le

---

Police in Lancashire in North West England have managed to return around £8 million ($10 million) in bitcoin to a man whose cryptocurrency was stolen back in 2017. It follows four people being sentenced earlier this year for their part in a £20 million ($25 million) hack after they discovered a glitch in how the]]> 2023-12-11T18:00:00+00:00 https://therecord.media/uk-police-return-millions-in-bitcoin-stolen-by-bed-bound-thief www.secnews.physaphae.fr/article.php?IdArticle=8421140 False Hack None 2.0000000000000000 SecurityWeek - Security News Les données compromises comprennent des noms, des dates de naissance, des numéros de sécurité sociale, des informations sur la santé et l'assurance et les numéros de licence de conducteur.

---

>Compromised data includes names, dates of birth, Social Security numbers, health and insurance information, and driver\'s license numbers. ]]> 2023-12-11T15:19:30+00:00 https://www.securityweek.com/norton-healthcare-ransomware-hack-2-5-million-personal-records-stolen/ www.secnews.physaphae.fr/article.php?IdArticle=8421096 False Ransomware,Hack None 3.0000000000000000 SecurityWeek - Security News Un haut responsable de la sécurité nationale de la Maison Blanche a déclaré que les cyberattaques récentes de pirates iraniens sur les autorités américaines de l'eau devraient être considérées comme un appel à l'action des services publics et de l'industrie pour resserrer la cybersécurité.

---

>A top White House national security official said recent cyber attacks by Iranian hackers on US water authorities should be seen as a call to action by utilities and industry to tighten cybersecurity. ]]> 2023-12-11T11:05:09+00:00 https://www.securityweek.com/top-white-house-cyber-aide-says-recent-iran-hack-on-water-wystem-is-call-to-tighten-cybersecurity/ www.secnews.physaphae.fr/article.php?IdArticle=8421033 False Hack None 2.0000000000000000 BBC - BBC News - Technology A cutting-edge tool from Open AI appears to be poorly moderated, allowing it to be abused by cyber-criminals.]]> 2023-12-07T00:04:10+00:00 https://www.bbc.co.uk/news/technology-67614065?at_medium=RSS&at_campaign=KARANGA www.secnews.physaphae.fr/article.php?IdArticle=8419726 False Hack,Tool ChatGPT 2.0000000000000000 Ars Technica - Risk Assessment Security Hacktivism Anyone who fails to opt out "will be deemed to have agreed to the new terms."]]> 2023-12-06T21:20:29+00:00 https://arstechnica.com/?p=1989247 www.secnews.physaphae.fr/article.php?IdArticle=8419687 False Hack None 2.0000000000000000