CISA Sounds Alarm on Cybersecurity Threats Amid Russia’s Invasion Anniversary

CISA Sounds Alarm on Cybersecurity Threats Amid Russia’s Invasion Anniversary

,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is urging organizations and individuals to increase their cyber vigilance, as Russia’s military invasion of Ukraine officially enters one year.
« CISA assesses that the United States and European nations may experience disruptive and defacement attacks against websites in an attempt to sow chaos and societal discord on February 24,

,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is urging organizations and individuals to increase their cyber vigilance, as Russia’s military invasion of Ukraine officially enters one year.
« CISA assesses that the United States and European nations may experience disruptive and defacement attacks against websites in an attempt to sow chaos and societal discord on February 24,

, ,
https://thehackernews.com/2023/02/cisa-sounds-alarm-on-cybersecurity.html

macOS : ce malware mine des cryptos sur votre Mac, au détriment de ses performances

macOS : ce malware mine des cryptos sur votre Mac, au détriment de ses performances,

Le MacBook Pro 16 pouces 2023, animé par un M2 Pro.

Un malware conçu pour miner des cryptomonnaies vise actuellement les Mac, et spécialement les ordinateurs avec une puce M conçue par Apple. Pour se protéger du virus, les experts recommandent d’installer la mise à jour Ventura sans tarder.

,

Le MacBook Pro 16 pouces 2023, animé par un M2 Pro.

Un malware conçu pour miner des cryptomonnaies vise actuellement les Mac, et spécialement les ordinateurs avec une puce M conçue par Apple. Pour se protéger du virus, les experts recommandent d’installer la mise à jour Ventura sans tarder.

, ,
https://www.01net.com/actualites/macos-malware-mine-cryptos-detriment-perfromances.html

Even Top-Ranked Android Apps in Google Play Store Provide Misleading Data Safety Labels

Even Top-Ranked Android Apps in Google Play Store Provide Misleading Data Safety Labels,

An investigation into data safety labels for Android apps available on the Google Play Store has uncovered « serious loopholes » that allow apps to provide misleading or outright false information.
The study, conducted by the Mozilla Foundation as part of its *Privacy Not Included initiative, compared the privacy policies and labels of the 20 most popular paid apps and the 20 most popular free

,

An investigation into data safety labels for Android apps available on the Google Play Store has uncovered « serious loopholes » that allow apps to provide misleading or outright false information.
The study, conducted by the Mozilla Foundation as part of its *Privacy Not Included initiative, compared the privacy policies and labels of the 20 most popular paid apps and the 20 most popular free

, ,
https://thehackernews.com/2023/02/majority-of-android-apps-on-google-play.html

Hackers Using Trojanized macOS Apps to Deploy Evasive Cryptocurrency Mining Malware

Hackers Using Trojanized macOS Apps to Deploy Evasive Cryptocurrency Mining Malware,

Trojanized versions of legitimate applications are being used to deploy evasive cryptocurrency mining malware on macOS systems.
Jamf Threat Labs, which made the discovery, said the XMRig coin miner was executed as Final Cut Pro, a video editing software from Apple, which contained an unauthorized modification.
« This malware makes use of the Invisible Internet Project (i2p) […] to download

,

Trojanized versions of legitimate applications are being used to deploy evasive cryptocurrency mining malware on macOS systems.
Jamf Threat Labs, which made the discovery, said the XMRig coin miner was executed as Final Cut Pro, a video editing software from Apple, which contained an unauthorized modification.
« This malware makes use of the Invisible Internet Project (i2p) […] to download

, ,
https://thehackernews.com/2023/02/hackers-using-trojanized-macos-apps-to.html

Experts Sound Alarm Over Growing Attacks Exploiting Zoho ManageEngine Products

Experts Sound Alarm Over Growing Attacks Exploiting Zoho ManageEngine Products,

Multiple threat actors have been observed opportunistically weaponizing a now-patched critical security vulnerability impacting several Zoho ManageEngine products since January 20, 2023.
Tracked as CVE-2022-47966 (CVSS score: 9.8), the remote code execution flaw allows a complete takeover of the susceptible systems by unauthenticated attackers.
As many as 24 different products, including Access

,

Multiple threat actors have been observed opportunistically weaponizing a now-patched critical security vulnerability impacting several Zoho ManageEngine products since January 20, 2023.
Tracked as CVE-2022-47966 (CVSS score: 9.8), the remote code execution flaw allows a complete takeover of the susceptible systems by unauthenticated attackers.
As many as 24 different products, including Access

, ,
https://thehackernews.com/2023/02/experts-sound-alarm-over-growing.html

The Secret Vulnerability Finance Execs are Missing

The Secret Vulnerability Finance Execs are Missing,

The (Other) Risk in Finance
A few years ago, a Washington-based real estate developer received a document link from First American – a financial services company in the real estate industry – relating to a deal he was working on. Everything about the document was perfectly fine and normal.
The odd part, he told a reporter, was that if he changed a single digit in the URL, suddenly, he could see

,

The (Other) Risk in Finance
A few years ago, a Washington-based real estate developer received a document link from First American – a financial services company in the real estate industry – relating to a deal he was working on. Everything about the document was perfectly fine and normal.
The odd part, he told a reporter, was that if he changed a single digit in the URL, suddenly, he could see

, ,
https://thehackernews.com/2023/02/the-secret-vulnerability-finance-execs.html

New Hacking Cluster ‘Clasiopa’ Targeting Materials Research Organizations in Asia

New Hacking Cluster ‘Clasiopa’ Targeting Materials Research Organizations in Asia

,

Materials research organizations in Asia have been targeted by a previously unknown threat actor using a distinct set of tools.
Symantec, by Broadcom Software, is tracking the cluster under the moniker Clasiopa. The origins of the hacking group and its affiliations are currently unknown, but there are hints that suggest the adversary could have ties to India.
This includes references to « 

,

Materials research organizations in Asia have been targeted by a previously unknown threat actor using a distinct set of tools.
Symantec, by Broadcom Software, is tracking the cluster under the moniker Clasiopa. The origins of the hacking group and its affiliations are currently unknown, but there are hints that suggest the adversary could have ties to India.
This includes references to « 

, ,
https://thehackernews.com/2023/02/new-hacking-cluster-clasiopa-targeting.html

Lazarus Group Likely Using New WinorDLL64 Backdoor to Exfiltrate Sensitive Data

Lazarus Group Likely Using New WinorDLL64 Backdoor to Exfiltrate Sensitive Data,

A new backdoor associated with a malware downloader named Wslink has been discovered, with the tool likely used by the notorious North Korea-aligned Lazarus Group, new findings reveal.
The payload, dubbed WinorDLL64 by ESET, is a fully-featured implant that can exfiltrate, overwrite, and delete files; execute PowerShell commands; and obtain comprehensive information about the underlying machine.

,

A new backdoor associated with a malware downloader named Wslink has been discovered, with the tool likely used by the notorious North Korea-aligned Lazarus Group, new findings reveal.
The payload, dubbed WinorDLL64 by ESET, is a fully-featured implant that can exfiltrate, overwrite, and delete files; execute PowerShell commands; and obtain comprehensive information about the underlying machine.

, ,
https://thehackernews.com/2023/02/lazarus-group-using-new-winordll64.html

Play Store : 80 % des apps Android vous mentent sur les données personnelles

Play Store : 80 % des apps Android vous mentent sur les données personnelles,

google play store android

Une étude de Mozilla révèle qu’une grande majorité des applications Android disponibles sur le Play Store mentent à Google au sujet des données personnelles. En effet, la plupart des apps ne traitent pas les informations privées des utilisateurs de la même manière qu’annoncé…

,

google play store android

Une étude de Mozilla révèle qu’une grande majorité des applications Android disponibles sur le Play Store mentent à Google au sujet des données personnelles. En effet, la plupart des apps ne traitent pas les informations privées des utilisateurs de la même manière qu’annoncé…

, ,
https://www.01net.com/actualites/play-store-80-apps-android-mentent-donnees-personnelles.html

New S1deload Malware Hijacking Users’ Social Media Accounts and Mining Cryptocurrency

New S1deload Malware Hijacking Users’ Social Media Accounts and Mining Cryptocurrency

,

An active malware campaign has set its sights on Facebook and YouTube users by leveraging a new information stealer to hijack the accounts and abuse the systems’ resources to mine cryptocurrency.
Bitdefender is calling the malware S1deload Stealer for its use of DLL side-loading techniques to get past security defenses and execute its malicious components.
« Once infected, S1deload Stealer steals

,

An active malware campaign has set its sights on Facebook and YouTube users by leveraging a new information stealer to hijack the accounts and abuse the systems’ resources to mine cryptocurrency.
Bitdefender is calling the malware S1deload Stealer for its use of DLL side-loading techniques to get past security defenses and execute its malicious components.
« Once infected, S1deload Stealer steals

, ,
https://thehackernews.com/2023/02/new-s1deload-malware-hijacking-users.html