Urgent: Microsoft Issues Patches for 97 Flaws, Including Active Ransomware Exploit

Urgent: Microsoft Issues Patches for 97 Flaws, Including Active Ransomware Exploit,

It’s the second Tuesday of the month, and Microsoft has released another set of security updates to fix a total of 97 flaws impacting its software, one of which has been actively exploited in ransomware attacks in the wild.
Seven of the 97 bugs are rated Critical and 90 are rated Important in severity. Interestingly, 45 of the shortcomings are remote code execution flaws, followed by 20

,

It’s the second Tuesday of the month, and Microsoft has released another set of security updates to fix a total of 97 flaws impacting its software, one of which has been actively exploited in ransomware attacks in the wild.
Seven of the 97 bugs are rated Critical and 90 are rated Important in severity. Interestingly, 45 of the shortcomings are remote code execution flaws, followed by 20

, ,
https://thehackernews.com/2023/04/urgent-microsoft-issues-patches-for-97.html

Trouvez des bugs dans ChatGPT pourrait vous rapporter gros

Trouvez des bugs dans ChatGPT pourrait vous rapporter gros,

chatgpt

Le créateur de ChatGPT se dit prêt à vous payer jusqu’à 20 000 dollars – soit 18 300 euros – si vous trouvez des bugs dans son chatbot d’intelligence artificielle.

,

chatgpt

Le créateur de ChatGPT se dit prêt à vous payer jusqu’à 20 000 dollars – soit 18 300 euros – si vous trouvez des bugs dans son chatbot d’intelligence artificielle.

, ,
https://www.01net.com/actualites/trouvez-des-bugs-dans-chatgpt-pourrait-vous-rapporter-gros.html

North Korean Hackers Uncovered as Mastermind in 3CX Supply Chain Attack

North Korean Hackers Uncovered as Mastermind in 3CX Supply Chain Attack,

Enterprise communications service provider 3CX confirmed that the supply chain attack targeting its desktop application for Windows and macOS was the handiwork of a threat actor with North Korean nexus.
The findings are the result of an interim assessment conducted by Google-owned Mandiant, whose services were enlisted after the intrusion came to light late last month. The threat intelligence

,

Enterprise communications service provider 3CX confirmed that the supply chain attack targeting its desktop application for Windows and macOS was the handiwork of a threat actor with North Korean nexus.
The findings are the result of an interim assessment conducted by Google-owned Mandiant, whose services were enlisted after the intrusion came to light late last month. The threat intelligence

, ,
https://thehackernews.com/2023/04/lazarus-sub-group-labyrinth-chollima.html

iOS : après Pegasus, un nouveau spyware compromet les iPhone pour les espionner

iOS : après Pegasus, un nouveau spyware compromet les iPhone pour les espionner,

Un nouveau malware cible les iPhone et viole les libertés essentielles.

NSO Group est mort, vive QuaDream ! Cette société israélienne mettrait à disposition des outils permettant d’espionner les iPhone de personnes ciblées, généralement des opposants politiques, des journalistes ou des activistes. Microsoft et le Citizen Lab viennent de révéler ses agissements à travers le monde.

,

Un nouveau malware cible les iPhone et viole les libertés essentielles.

NSO Group est mort, vive QuaDream ! Cette société israélienne mettrait à disposition des outils permettant d’espionner les iPhone de personnes ciblées, généralement des opposants politiques, des journalistes ou des activistes. Microsoft et le Citizen Lab viennent de révéler ses agissements à travers le monde.

, ,
https://www.01net.com/actualites/ios-apres-pegasus-un-nouveau-spyware-compromet-les-iphone-pour-les-espionner.html

Newly Discovered « By-Design » Flaw in Microsoft Azure Could Expose Storage Accounts to Hackers

Newly Discovered « By-Design » Flaw in Microsoft Azure Could Expose Storage Accounts to Hackers

,

A « by-design flaw » uncovered in Microsoft Azure could be exploited by attackers to gain access to storage accounts, move laterally in the environment, and even execute remote code.
« It is possible to abuse and leverage Microsoft Storage Accounts by manipulating Azure Functions to steal access-tokens of higher privilege identities, move laterally, potentially access critical business assets, and

,

A « by-design flaw » uncovered in Microsoft Azure could be exploited by attackers to gain access to storage accounts, move laterally in the environment, and even execute remote code.
« It is possible to abuse and leverage Microsoft Storage Accounts by manipulating Azure Functions to steal access-tokens of higher privilege identities, move laterally, potentially access critical business assets, and

, ,
https://thehackernews.com/2023/04/newly-discovered-by-design-flaw-in.html

Cybercriminals Turn to Android Loaders on Dark Web to Evade Google Play Security

Cybercriminals Turn to Android Loaders on Dark Web to Evade Google Play Security,

Malicious loader programs capable of trojanizing Android applications are being traded on the criminal underground for up to $20,000 as a way to evade Google Play Store defenses.
« The most popular application categories to hide malware and unwanted software include cryptocurrency trackers, financial apps, QR-code scanners, and even dating apps, » Kaspersky said in a new report based on messages

,

Malicious loader programs capable of trojanizing Android applications are being traded on the criminal underground for up to $20,000 as a way to evade Google Play Store defenses.
« The most popular application categories to hide malware and unwanted software include cryptocurrency trackers, financial apps, QR-code scanners, and even dating apps, » Kaspersky said in a new report based on messages

, ,
https://thehackernews.com/2023/04/cybercriminals-turn-to-android-loaders.html

[eBook] A Step-by-Step Guide to Cyber Risk Assessment

[eBook] A Step-by-Step Guide to Cyber Risk Assessment,

In today’s perilous cyber risk landscape, CISOs and CIOs must defend their organizations against relentless cyber threats, including ransomware, phishing, attacks on infrastructure, supply chain breaches, malicious insiders, and much more. Yet at the same time, security leaders are also under tremendous pressure to reduce costs and invest wisely. 
One of the most effective ways for CISOs and

,

In today’s perilous cyber risk landscape, CISOs and CIOs must defend their organizations against relentless cyber threats, including ransomware, phishing, attacks on infrastructure, supply chain breaches, malicious insiders, and much more. Yet at the same time, security leaders are also under tremendous pressure to reduce costs and invest wisely. 
One of the most effective ways for CISOs and

, ,
https://thehackernews.com/2023/04/ebook-step-by-step-guide-to-cyber-risk.html

Un boîtier à 5 000 dollars permet à des voleurs de dérober votre voiture en quelques minutes

Un boîtier à 5 000 dollars permet à des voleurs de dérober votre voiture en quelques minutes,

Toyota Rav 4

Un chercheur en cybersécurité, qui s’est fait endommager les phares de sa voiture à trois reprises, a tenté de comprendre les raisons de ce qu’il pensait être un acte de vandalisme. L’ingénieur est tombé sur un nouveau type d’attaque, qui permet aux voleurs de repartir avec votre véhicule en un rien de temps.

,

Toyota Rav 4

Un chercheur en cybersécurité, qui s’est fait endommager les phares de sa voiture à trois reprises, a tenté de comprendre les raisons de ce qu’il pensait être un acte de vandalisme. L’ingénieur est tombé sur un nouveau type d’attaque, qui permet aux voleurs de repartir avec votre véhicule en un rien de temps.

, ,
https://www.01net.com/actualites/un-boitier-a-5-000-dollars-permet-a-des-voleurs-de-derober-votre-voiture-en-quelques-minutes.html

Comment Discord s’est retrouvé au centre d’une fuite de documents top secret sur la guerre en Ukraine

Comment Discord s’est retrouvé au centre d’une fuite de documents top secret sur la guerre en Ukraine,

Cybersécurité

Une centaine de fichiers, dont certains sont top secret, ont été publiés sur un serveur Discord destiné aux fans de Minecraft, avant d’être diffusés sur 4chan ou encore Telegram. La fuite est d’importance et aurait déjà eu des conséquences sur le conflit actuel en Ukraine.

,

Cybersécurité

Une centaine de fichiers, dont certains sont top secret, ont été publiés sur un serveur Discord destiné aux fans de Minecraft, avant d’être diffusés sur 4chan ou encore Telegram. La fuite est d’importance et aurait déjà eu des conséquences sur le conflit actuel en Ukraine.

, ,
https://www.01net.com/actualites/comment-discord-sest-retrouve-au-centre-dune-fuite-de-documents-top-secret-sur-la-guerre-en-ukraine.html

Cryptocurrency Stealer Malware Distributed via 13 NuGet Packages

Cryptocurrency Stealer Malware Distributed via 13 NuGet Packages,

Cybersecurity researchers have detailed the inner workings of the cryptocurrency stealer malware that was distributed via 13 malicious NuGet packages as part of a supply chain attack targeting .NET developers.
The sophisticated typosquatting campaign, which was detailed by JFrog late last month, impersonated legitimate packages to execute PowerShell code designed to retrieve a follow-on binary

,

Cybersecurity researchers have detailed the inner workings of the cryptocurrency stealer malware that was distributed via 13 malicious NuGet packages as part of a supply chain attack targeting .NET developers.
The sophisticated typosquatting campaign, which was detailed by JFrog late last month, impersonated legitimate packages to execute PowerShell code designed to retrieve a follow-on binary

, ,
https://thehackernews.com/2023/04/cryptocurrency-stealer-malware.html