janvier 2023

You Don’t Know Where Your Secrets Are

You Don’t Know Where Your Secrets Are

,

Do you know where your secrets are? If not, I can tell you: you are not alone.
Hundreds of CISOs, CSOs, and security leaders, whether from small or large companies, don’t know either. No matter the organization’s size, the certifications, tools, people, and processes: secrets are not visible in 99% of cases.
It might sound ridiculous at first: keeping secrets is an obvious first thought when

,

Do you know where your secrets are? If not, I can tell you: you are not alone.
Hundreds of CISOs, CSOs, and security leaders, whether from small or large companies, don’t know either. No matter the organization’s size, the certifications, tools, people, and processes: secrets are not visible in 99% of cases.
It might sound ridiculous at first: keeping secrets is an obvious first thought when

, ,
https://thehackernews.com/2023/01/you-dont-know-where-your-secrets-are.html

Facebook : cette faille critique de la double authentification aurait pu faire beaucoup de dégâts

Facebook : cette faille critique de la double authentification aurait pu faire beaucoup de dégâts,

facebook

Décelée dans le cadre d’un programme de Bug Bounty organisé par Meta en 2022, la faille a finalement été corrigée avant d’avoir pu être exploitée.

,

facebook

Décelée dans le cadre d’un programme de Bug Bounty organisé par Meta en 2022, la faille a finalement été corrigée avant d’avoir pu être exploitée.

, ,
https://www.01net.com/actualites/facebook-une-faille-critique-pour-la2f-corrigee-par-meta.html

New Report Reveals NikoWiper Malware That Targeted Ukraine Energy Sector

New Report Reveals NikoWiper Malware That Targeted Ukraine Energy Sector,

The Russia-affiliated Sandworm used yet another wiper malware strain dubbed NikoWiper as part of an attack that took place in October 2022 targeting an energy sector company in Ukraine.
« The NikoWiper is based on SDelete, a command line utility from Microsoft that is used for securely deleting files, » cybersecurity company ESET revealed in its latest APT Activity Report shared with The Hacker

,

The Russia-affiliated Sandworm used yet another wiper malware strain dubbed NikoWiper as part of an attack that took place in October 2022 targeting an energy sector company in Ukraine.
« The NikoWiper is based on SDelete, a command line utility from Microsoft that is used for securely deleting files, » cybersecurity company ESET revealed in its latest APT Activity Report shared with The Hacker

, ,
https://thehackernews.com/2023/01/new-report-reveals-nikowiper-malware.html

Researchers Uncover Packer Used by Several Malware to Evade Detection for 6 Years

Researchers Uncover Packer Used by Several Malware to Evade Detection for 6 Years,

A shellcode-based packer dubbed TrickGate has been successfully operating without attracting notice for over six years, while enabling threat actors to deploy a wide range of malware such as TrickBot, Emotet, AZORult, Agent Tesla, FormBook, Cerber, Maze, and REvil over the years.
« TrickGate managed to stay under the radar for years because it is transformative – it undergoes changes periodically

,

A shellcode-based packer dubbed TrickGate has been successfully operating without attracting notice for over six years, while enabling threat actors to deploy a wide range of malware such as TrickBot, Emotet, AZORult, Agent Tesla, FormBook, Cerber, Maze, and REvil over the years.
« TrickGate managed to stay under the radar for years because it is transformative – it undergoes changes periodically

, ,
https://thehackernews.com/2023/01/researchers-uncover-packer-that-helped.html

Alerte malware sur le Play Store : ces 20 apps Android sont frauduleuses

Alerte malware sur le Play Store : ces 20 apps Android sont frauduleuses,

google play store android

Une vague de malwares s’est propagée sur le Play Store. Dans le code de 20 applications Android, des chercheurs ont découvert des virus capables de siphonner les données personnelles et l’argent des utilisateurs.

,

google play store android

Une vague de malwares s’est propagée sur le Play Store. Dans le code de 20 applications Android, des chercheurs ont découvert des virus capables de siphonner les données personnelles et l’argent des utilisateurs.

, ,
https://www.01net.com/actualites/alerte-malware-play-store-20-apps-android-frauduleuses.html

Les cybercriminels recrutent, et ça paye (très) bien

Les cybercriminels recrutent, et ça paye (très) bien,

developpeur ecran ordinateur

La petite entreprise des cybercriminels ne connait pas la crise. Comme le montre cette nouvelle étude de Kaspersky, qui a analysé le marché de l’emploi sur le dark web, la criminalité en ligne recrute et n’hésite pas à proposer des salaires mensuels très élevés.

,

developpeur ecran ordinateur

La petite entreprise des cybercriminels ne connait pas la crise. Comme le montre cette nouvelle étude de Kaspersky, qui a analysé le marché de l’emploi sur le dark web, la criminalité en ligne recrute et n’hésite pas à proposer des salaires mensuels très élevés.

, ,
https://www.01net.com/actualites/les-cybercriminels-recrutent-et-ca-paye-tres-bien.html

QNAP Fixes Critical Vulnerability in NAS Devices with Latest Security Updates

QNAP Fixes Critical Vulnerability in NAS Devices with Latest Security Updates,

Taiwanese company QNAP has released updates to remediate a critical security flaw affecting its network-attached storage (NAS) devices that could lead to arbitrary code injection.
Tracked as CVE-2022-27596, the vulnerability is rated 9.8 out of a maximum of 10 on the CVSS scoring scale. It affects QTS 5.0.1 and QuTS hero h5.0.1.
« If exploited, this vulnerability allows remote attackers to inject

,

Taiwanese company QNAP has released updates to remediate a critical security flaw affecting its network-attached storage (NAS) devices that could lead to arbitrary code injection.
Tracked as CVE-2022-27596, the vulnerability is rated 9.8 out of a maximum of 10 on the CVSS scoring scale. It affects QTS 5.0.1 and QuTS hero h5.0.1.
« If exploited, this vulnerability allows remote attackers to inject

, ,
https://thehackernews.com/2023/01/qnap-fixes-critical-vulnerability-in.html

GitHub Breach: Hackers Stole Code-Signing Certificates for GitHub Desktop and Atom

GitHub Breach: Hackers Stole Code-Signing Certificates for GitHub Desktop and Atom,

GitHub on Monday disclosed that unknown threat actors managed to exfiltrate encrypted code signing certificates pertaining to some versions of GitHub Desktop for Mac and Atom apps.
As a result, the company is taking the step of revoking the exposed certificates out of abundance of caution. The following versions of GitHub Desktop for Mac have been invalidated: 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6,

,

GitHub on Monday disclosed that unknown threat actors managed to exfiltrate encrypted code signing certificates pertaining to some versions of GitHub Desktop for Mac and Atom apps.
As a result, the company is taking the step of revoking the exposed certificates out of abundance of caution. The following versions of GitHub Desktop for Mac have been invalidated: 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6,

, ,
https://thehackernews.com/2023/01/github-breach-hackers-stole-code.html

Titan Stealer: A New Golang-Based Information Stealer Malware Emerges

Titan Stealer: A New Golang-Based Information Stealer Malware Emerges,

A new Golang-based information stealer malware dubbed Titan Stealer is being advertised by threat actors through their Telegram channel.
« The stealer is capable of stealing a variety of information from infected Windows machines, including credential data from browsers and crypto wallets, FTP client details, screenshots, system information, and grabbed files, » Uptycs security researchers

,

A new Golang-based information stealer malware dubbed Titan Stealer is being advertised by threat actors through their Telegram channel.
« The stealer is capable of stealing a variety of information from infected Windows machines, including credential data from browsers and crypto wallets, FTP client details, screenshots, system information, and grabbed files, » Uptycs security researchers

, ,
https://thehackernews.com/2023/01/titan-stealer-new-golang-based.html

Épidémie de virus sur Android et iOS : désinstallez vite ces 203 applications malveillantes

Épidémie de virus sur Android et iOS : désinstallez vite ces 203 applications malveillantes,

applications ios iphone

Une épidémie de virus s’est déclarée sur le Play Store et sur l’App Store. Plus de 200 applications Android et iOS dangereuses ont en effet été identifiées… Découvrez la liste des apps malveillantes ci-dessous.

,

applications ios iphone

Une épidémie de virus s’est déclarée sur le Play Store et sur l’App Store. Plus de 200 applications Android et iOS dangereuses ont en effet été identifiées… Découvrez la liste des apps malveillantes ci-dessous.

, ,
https://www.01net.com/actualites/epidemie-malwares-android-ios-desinstallez-vite-203-applications-malveillantes.html