décembre 2022

Researcher Uncovers Potential Wiretapping Bugs in Google Home Smart Speakers

Researcher Uncovers Potential Wiretapping Bugs in Google Home Smart Speakers,

A security researcher was awarded a bug bounty of $107,500 for identifying security issues in Google Home smart speakers that could be exploited to install backdoors and turn them into wiretapping devices.
The flaws « allowed an attacker within wireless proximity to install a ‘backdoor’ account on the device, enabling them to send commands to it remotely over the internet, access its microphone

,

A security researcher was awarded a bug bounty of $107,500 for identifying security issues in Google Home smart speakers that could be exploited to install backdoors and turn them into wiretapping devices.
The flaws « allowed an attacker within wireless proximity to install a ‘backdoor’ account on the device, enabling them to send commands to it remotely over the internet, access its microphone

, ,
https://thehackernews.com/2022/12/researcher-uncovers-potential.html

CISA Warns of Active exploitation of JasperReports Vulnerabilities

CISA Warns of Active exploitation of JasperReports Vulnerabilities,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two years-old security flaws impacting TIBCO Software’s JasperReports product to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
The flaws, tracked as CVE-2018-5430 (CVSS score: 7.7) and CVE-2018-18809 (CVSS score: 9.9), were addressed by TIBCO in April 2018 and March 2019,

,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two years-old security flaws impacting TIBCO Software’s JasperReports product to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
The flaws, tracked as CVE-2018-5430 (CVSS score: 7.7) and CVE-2018-18809 (CVSS score: 9.9), were addressed by TIBCO in April 2018 and March 2019,

, ,
https://thehackernews.com/2022/12/cisa-warns-of-active-exploitation-of.html

Les enceintes Google Home piratées pour écouter des conversations privées

Les enceintes Google Home piratées pour écouter des conversations privées,

google nest mini

Un chercheur a découvert une faille de sécurité qui permettait aux pirates de compromettre la sécurité des haut-parleurs Google Home afin de les utiliser comme moyen d’espionnage. Une faille logicielle importante qui a depuis été corrigée par l’entreprise américaine.

,

google nest mini

Un chercheur a découvert une faille de sécurité qui permettait aux pirates de compromettre la sécurité des haut-parleurs Google Home afin de les utiliser comme moyen d’espionnage. Une faille logicielle importante qui a depuis été corrigée par l’entreprise américaine.

, ,
https://www.01net.com/actualites/les-enceintes-google-home-piratees-pour-ecouter-des-conversations-privees.html

« Mensonges éhontés », « chiffrement de merde » : LastPass est violemment critiqué pour ses déclarations et sa sécurité

« Mensonges éhontés », « chiffrement de merde » : LastPass est violemment critiqué pour ses déclarations et sa sécurité,

LastPass a été victime d'un hack, et la sécurité de son chiffrement n'était pas à la hauteur.

Une semaine après l’annonce que des hackers ont pu accéder aux coffres-forts de ses utilisateurs, de nombreux experts critiquent ouvertement la communication de LastPass, jugée mensongère, lénifiante, et sa sécurité insuffisante.

,

LastPass a été victime d'un hack, et la sécurité de son chiffrement n'était pas à la hauteur.

Une semaine après l’annonce que des hackers ont pu accéder aux coffres-forts de ses utilisateurs, de nombreux experts critiquent ouvertement la communication de LastPass, jugée mensongère, lénifiante, et sa sécurité insuffisante.

, ,
https://www.01net.com/actualites/mensonges-ehontes-chiffrement-de-merde-lastpass-est-violemment-critique-pour-ses-declarations-et-sa-securite.html

Thousands of Citrix Servers Still Unpatched for Critical Vulnerabilities

Thousands of Citrix Servers Still Unpatched for Critical Vulnerabilities,

Thousands of Citrix Application Delivery Controller (ADC) and Gateway endpoints remain vulnerable to two critical security flaws disclosed by the company over the last few months.
The issues in question are CVE-2022-27510 and CVE-2022-27518 (CVSS scores: 9.8), which were addressed by the virtualization services provider on November 8 and December 13, 2022, respectively.
While CVE-2022-27510

,

Thousands of Citrix Application Delivery Controller (ADC) and Gateway endpoints remain vulnerable to two critical security flaws disclosed by the company over the last few months.
The issues in question are CVE-2022-27510 and CVE-2022-27518 (CVSS scores: 9.8), which were addressed by the virtualization services provider on November 8 and December 13, 2022, respectively.
While CVE-2022-27510

, ,
https://thehackernews.com/2022/12/thousands-of-citrix-servers-still.html

New Malvertising Campaign via Google Ads Targets Users Searching for Popular Software

New Malvertising Campaign via Google Ads Targets Users Searching for Popular Software,

Users searching for popular software are being targeted by a new malvertising campaign that abuses Google Ads to serve trojanized variants that deploy malware, such as Raccoon Stealer and Vidar.
The activity makes use of seemingly credible websites with typosquatted domain names that are surfaced on top of Google search results in the form of malicious ads by hijacking searches for specific

,

Users searching for popular software are being targeted by a new malvertising campaign that abuses Google Ads to serve trojanized variants that deploy malware, such as Raccoon Stealer and Vidar.
The activity makes use of seemingly credible websites with typosquatted domain names that are surfaced on top of Google search results in the form of malicious ads by hijacking searches for specific

, ,
https://thehackernews.com/2022/12/new-malvertising-campaign-via-google.html

BitKeep Confirms Cyber Attack, Loses Over $9 Million in Digital Currencies

BitKeep Confirms Cyber Attack, Loses Over $9 Million in Digital Currencies,

Decentralized multi-chain crypto wallet BitKeep on Wednesday confirmed a cyberattack that allowed threat actors to distribute fraudulent versions of its Android app with the goal of stealing users’ digital currencies.
« With maliciously implanted code, the altered APK led to the leak of user’s private keys and enabled the hacker to move funds, » BitKeep CEO Kevin Como said, describing it as a « 

,

Decentralized multi-chain crypto wallet BitKeep on Wednesday confirmed a cyberattack that allowed threat actors to distribute fraudulent versions of its Android app with the goal of stealing users’ digital currencies.
« With maliciously implanted code, the altered APK led to the leak of user’s private keys and enabled the hacker to move funds, » BitKeep CEO Kevin Como said, describing it as a « 

, ,
https://thehackernews.com/2022/12/bitkeep-confirms-cyber-attack-loses.html

APT Hackers Turn to Malicious Excel Add-ins as Initial Intrusion Vector

APT Hackers Turn to Malicious Excel Add-ins as Initial Intrusion Vector,

Microsoft’s decision to block Visual Basic for Applications (VBA) macros by default for Office files downloaded from the internet has led many threat actors to improvise their attack chains in recent months.
Now according to Cisco Talos, advanced persistent threat (APT) actors and commodity malware families alike are increasingly using Excel add-in (.XLL) files as an initial intrusion vector.

,

Microsoft’s decision to block Visual Basic for Applications (VBA) macros by default for Office files downloaded from the internet has led many threat actors to improvise their attack chains in recent months.
Now according to Cisco Talos, advanced persistent threat (APT) actors and commodity malware families alike are increasingly using Excel add-in (.XLL) files as an initial intrusion vector.

, ,
https://thehackernews.com/2022/12/apt-hackers-turn-to-malicious-excel-add.html

Cyberattaques : les assureurs veulent que vous aussi vous payiez la casse

Cyberattaques : les assureurs veulent que vous aussi vous payiez la casse,

Cybersécurité

Un dirigeant d’un des plus grands groupes d’assurance au monde déclarait récemment au Financial Times que les coûts induits par les cyberattaques dépassent désormais la compétence d’un assureur. Il appelle à l’intervention des Etats, au travers de partenariats public-privé, financés donc par les impôts des contribuables.

,

Cybersécurité

Un dirigeant d’un des plus grands groupes d’assurance au monde déclarait récemment au Financial Times que les coûts induits par les cyberattaques dépassent désormais la compétence d’un assureur. Il appelle à l’intervention des Etats, au travers de partenariats public-privé, financés donc par les impôts des contribuables.

, ,
https://www.01net.com/actualites/les-cyberattaques-seront-bientot-impossibles-a-assurer-sauf-si-vous-payez.html

BlueNoroff APT Hackers Using New Ways to Bypass Windows MotW Protection

BlueNoroff APT Hackers Using New Ways to Bypass Windows MotW Protection,

BlueNoroff, a subcluster of the notorious Lazarus Group, has been observed adopting new techniques into its playbook that enable it to bypass Windows Mark of the Web (MotW) protections.
This includes the use of optical disk image (.ISO extension) and virtual hard disk (.VHD extension) file formats as part of a novel infection chain, Kaspersky disclosed in a report published today.
« BlueNoroff

,

BlueNoroff, a subcluster of the notorious Lazarus Group, has been observed adopting new techniques into its playbook that enable it to bypass Windows Mark of the Web (MotW) protections.
This includes the use of optical disk image (.ISO extension) and virtual hard disk (.VHD extension) file formats as part of a novel infection chain, Kaspersky disclosed in a report published today.
« BlueNoroff

, ,
https://thehackernews.com/2022/12/bluenoroff-apt-hackers-using-new-ways.html