Zyxel Firewall Devices Vulnerable to Remote Code Execution Attacks — Patch Now

Zyxel Firewall Devices Vulnerable to Remote Code Execution Attacks — Patch Now,

Networking equipment maker Zyxel has released patches for a critical security flaw in its firewall devices that could be exploited to achieve remote code execution on affected systems.
The issue, tracked as CVE-2023-28771, is rated 9.8 on the CVSS scoring system. Researchers from TRAPA Security have been credited with reporting the flaw.
« Improper error message handling in some firewall versions

,

Networking equipment maker Zyxel has released patches for a critical security flaw in its firewall devices that could be exploited to achieve remote code execution on affected systems.
The issue, tracked as CVE-2023-28771, is rated 9.8 on the CVSS scoring system. Researchers from TRAPA Security have been credited with reporting the flaw.
« Improper error message handling in some firewall versions

, ,
https://thehackernews.com/2023/04/zyxel-firewall-devices-vulnerable-to.html

ViperSoftX InfoStealer Adopts Sophisticated Techniques to Avoid Detection

ViperSoftX InfoStealer Adopts Sophisticated Techniques to Avoid Detection,

A significant number of victims in the consumer and enterprise sectors located across Australia, Japan, the U.S., and India have been affected by an evasive information-stealing malware called ViperSoftX.
ViperSoftX was first documented in 2020, with cybersecurity company Avast detailing a campaign in November 2022 that leveraged the malware to distribute a malicious Google Chrome extension

,

A significant number of victims in the consumer and enterprise sectors located across Australia, Japan, the U.S., and India have been affected by an evasive information-stealing malware called ViperSoftX.
ViperSoftX was first documented in 2020, with cybersecurity company Avast detailing a campaign in November 2022 that leveraged the malware to distribute a malicious Google Chrome extension

, ,
https://thehackernews.com/2023/04/vipersoftx-infostealer-adopts.html

Pourquoi ces chiens robots utilisés à New York posent problème aux associations de défense des droits civils ?

Pourquoi ces chiens robots utilisés à New York posent problème aux associations de défense des droits civils ?,

Les deux « Digidogs », que les forces de l’ordre ont commencé à utiliser à New York suscitent toujours la méfiance des associations de défense des droits. Outre leur efficacité, qu’elles questionnent, elles craignent que ce type d’objet ne soit les prémisses d’une surveillance de masse des New-Yorkais.

,

Les deux « Digidogs », que les forces de l’ordre ont commencé à utiliser à New York suscitent toujours la méfiance des associations de défense des droits. Outre leur efficacité, qu’elles questionnent, elles craignent que ce type d’objet ne soit les prémisses d’une surveillance de masse des New-Yorkais.

, ,
https://www.01net.com/actualites/pourquoi-ces-chiens-robots-utilises-a-new-york-posent-probleme-aux-associations-de-defense-des-droits-civils.html

Sites de rencontres : des hackers ont volé une montagne de données sensibles

Sites de rencontres : des hackers ont volé une montagne de données sensibles,

sites rencontres vol données

Deux sites de rencontres en ligne ont été piratés. Les hackers sont parvenus à dérober une foule de données personnelles très sensibles, comme les messages privés et les adresses e-mail.

,

sites rencontres vol données

Deux sites de rencontres en ligne ont été piratés. Les hackers sont parvenus à dérober une foule de données personnelles très sensibles, comme les messages privés et les adresses e-mail.

, ,
https://www.01net.com/actualites/sites-rencontre-hackers-vole-montagne-donnees-sensibles.html

Attention Online Shoppers: Don’t Be Fooled by Their Sleek, Modern Looks — It’s Magecart!

Attention Online Shoppers: Don’t Be Fooled by Their Sleek, Modern Looks — It’s Magecart!

,

An ongoing Magecart campaign has attracted the attention of cybersecurity researchers for leveraging realistic-looking fake payment screens to capture sensitive data entered by unsuspecting users.
« The threat actor used original logos from the compromised store and customized a web element known as a modal to perfectly hijack the checkout page, » Jérôme Segura, director of threat intelligence at

,

An ongoing Magecart campaign has attracted the attention of cybersecurity researchers for leveraging realistic-looking fake payment screens to capture sensitive data entered by unsuspecting users.
« The threat actor used original logos from the compromised store and customized a web element known as a modal to perfectly hijack the checkout page, » Jérôme Segura, director of threat intelligence at

, ,
https://thehackernews.com/2023/04/attention-online-shoppers-dont-be.html

Tonto Team Uses Anti-Malware File to Launch Attacks on South Korean Institutions

Tonto Team Uses Anti-Malware File to Launch Attacks on South Korean Institutions,

South Korean education, construction, diplomatic, and political institutions are at the receiving end of new attacks perpetrated by a China-aligned threat actor known as the Tonto Team.
« Recent cases have revealed that the group is using a file related to anti-malware products to ultimately execute their malicious attacks, » the AhnLab Security Emergency Response Center (ASEC) said in a report

,

South Korean education, construction, diplomatic, and political institutions are at the receiving end of new attacks perpetrated by a China-aligned threat actor known as the Tonto Team.
« Recent cases have revealed that the group is using a file related to anti-malware products to ultimately execute their malicious attacks, » the AhnLab Security Emergency Response Center (ASEC) said in a report

, ,
https://thehackernews.com/2023/04/tonto-team-uses-anti-malware-file-to.html

Google Gets Court Order to Take Down CryptBot That Infected Over 670,000 Computers

Google Gets Court Order to Take Down CryptBot That Infected Over 670,000 Computers,

Google on Wednesday said it obtained a temporary court order in the U.S. to disrupt the distribution of a Windows-based information-stealing malware called CryptBot and « decelerate » its growth.
The tech giant’s Mike Trinh and Pierre-Marc Bureau said the efforts are part of steps it takes to « not only hold criminal operators of malware accountable, but also those who profit from its distribution.

,

Google on Wednesday said it obtained a temporary court order in the U.S. to disrupt the distribution of a Windows-based information-stealing malware called CryptBot and « decelerate » its growth.
The tech giant’s Mike Trinh and Pierre-Marc Bureau said the efforts are part of steps it takes to « not only hold criminal operators of malware accountable, but also those who profit from its distribution.

, ,
https://thehackernews.com/2023/04/google-gets-court-order-to-take-down.html

Paperbug Attack: New Politically-Motivated Surveillance Campaign in Tajikistan

Paperbug Attack: New Politically-Motivated Surveillance Campaign in Tajikistan,

A little-known Russian-speaking cyber-espionage group has been linked to a new politically-motivated surveillance campaign targeting high-ranking government officials, telecom services, and public service infrastructures in Tajikistan.
The intrusion set, dubbed Paperbug by Swiss cybersecurity company PRODAFT, has been attributed to a threat actor known as Nomadic Octopus (aka DustSquad).
« The

,

A little-known Russian-speaking cyber-espionage group has been linked to a new politically-motivated surveillance campaign targeting high-ranking government officials, telecom services, and public service infrastructures in Tajikistan.
The intrusion set, dubbed Paperbug by Swiss cybersecurity company PRODAFT, has been attributed to a threat actor known as Nomadic Octopus (aka DustSquad).
« The

, ,
https://thehackernews.com/2023/04/paperbug-attack-new-politically.html

LimeRAT Malware Analysis: Extracting the Config

LimeRAT Malware Analysis: Extracting the Config,

Remote Access Trojans (RATs) have taken the third leading position in ANY. RUN’s Q1 2023 report on the most prevalent malware types, making it highly probable that your organization may face this threat.
Though LimeRAT might not be the most well-known RAT family, its versatility is what sets it apart. Capable of carrying out a broad spectrum of malicious activities, it excels not only in data

,

Remote Access Trojans (RATs) have taken the third leading position in ANY. RUN’s Q1 2023 report on the most prevalent malware types, making it highly probable that your organization may face this threat.
Though LimeRAT might not be the most well-known RAT family, its versatility is what sets it apart. Capable of carrying out a broad spectrum of malicious activities, it excels not only in data

, ,
https://thehackernews.com/2023/04/limerat-malware-analysis-extracting.html

Utilisation des drones par les forces de l’ordre : les manifestants bientôt prévenus par dispositif sonore ?

Utilisation des drones par les forces de l’ordre : les manifestants bientôt prévenus par dispositif sonore ?,

drones protéger stades coupe monde

Dans un communiqué du jeudi 27 avril, la Cnil a rappelé les conditions à respecter pour les militaires, gendarmes et policiers qui souhaiteraient utiliser des drones dans l’espace public. L’autorité garante des libertés publiques a aussi émis de nouvelles recommandations.

,

drones protéger stades coupe monde

Dans un communiqué du jeudi 27 avril, la Cnil a rappelé les conditions à respecter pour les militaires, gendarmes et policiers qui souhaiteraient utiliser des drones dans l’espace public. L’autorité garante des libertés publiques a aussi émis de nouvelles recommandations.

, ,
https://www.01net.com/actualites/utilisation-des-drones-par-les-forces-de-lordre-les-manifestants-bientot-prevenus-par-dispositif-sonore.html