Is Your EV Charging Station Safe? New Security Vulnerabilities Uncovered

Is Your EV Charging Station Safe? New Security Vulnerabilities Uncovered,

Two new security weaknesses discovered in several electric vehicle (EV) charging systems could be exploited to remotely shut down charging stations and even expose them to data and energy theft.
The findings, which come from Israel-based SaiFlow, once again demonstrate the potential risks facing the EV charging infrastructure.
The issues have been identified in version 1.6J of the Open Charge

,

Two new security weaknesses discovered in several electric vehicle (EV) charging systems could be exploited to remotely shut down charging stations and even expose them to data and energy theft.
The findings, which come from Israel-based SaiFlow, once again demonstrate the potential risks facing the EV charging infrastructure.
The issues have been identified in version 1.6J of the Open Charge

, ,
https://thehackernews.com/2023/02/is-your-ev-charging-station-safe-new.html

Post-Macro World Sees Rise in Microsoft OneNote Documents Delivering Malware

Post-Macro World Sees Rise in Microsoft OneNote Documents Delivering Malware,

In a continuing sign that threat actors are adapting well to a post-macro world, it has emerged that the use of Microsoft OneNote documents to deliver malware via phishing attacks is on the rise.
Some of the notable malware families that are being distributed using this method include AsyncRAT, RedLine Stealer, Agent Tesla, DOUBLEBACK, Quasar RAT, XWorm, Qakbot, BATLOADER, and FormBook.

,

In a continuing sign that threat actors are adapting well to a post-macro world, it has emerged that the use of Microsoft OneNote documents to deliver malware via phishing attacks is on the rise.
Some of the notable malware families that are being distributed using this method include AsyncRAT, RedLine Stealer, Agent Tesla, DOUBLEBACK, Quasar RAT, XWorm, Qakbot, BATLOADER, and FormBook.

, ,
https://thehackernews.com/2023/02/post-macro-world-sees-rise-in-microsoft.html

Iranian OilRig Hackers Using New Backdoor to Exfiltrate Data from Govt. Organizations

Iranian OilRig Hackers Using New Backdoor to Exfiltrate Data from Govt. Organizations,

The Iranian nation-state hacking group known as OilRig has continued to target government organizations in the Middle East as part of a cyber espionage campaign that leverages a new backdoor to exfiltrate data.
« The campaign abuses legitimate but compromised email accounts to send stolen data to external mail accounts controlled by the attackers, » Trend Micro researchers Mohamed Fahmy, Sherif

,

The Iranian nation-state hacking group known as OilRig has continued to target government organizations in the Middle East as part of a cyber espionage campaign that leverages a new backdoor to exfiltrate data.
« The campaign abuses legitimate but compromised email accounts to send stolen data to external mail accounts controlled by the attackers, » Trend Micro researchers Mohamed Fahmy, Sherif

, ,
https://thehackernews.com/2023/02/iranian-oilrig-hackers-using-new.html

The Pivot: How MSPs Can Turn a Challenge Into a Once-in-a-Decade Opportunity

The Pivot: How MSPs Can Turn a Challenge Into a Once-in-a-Decade Opportunity,

Cybersecurity is quickly becoming one of the most significant growth drivers for Managed Service Providers (MSPs). That’s the main insight from a recent study from Lumu: in North America, more than 80% of MSPs cite cybersecurity as a primary growth driver of their business. Service providers have a huge opportunity to expand their business and win new customers by developing their cybersecurity

,

Cybersecurity is quickly becoming one of the most significant growth drivers for Managed Service Providers (MSPs). That’s the main insight from a recent study from Lumu: in North America, more than 80% of MSPs cite cybersecurity as a primary growth driver of their business. Service providers have a huge opportunity to expand their business and win new customers by developing their cybersecurity

, ,
https://thehackernews.com/2023/02/the-pivot-how-msps-can-turn-challenge.html

Record historique pour les cryptomonnaies : pourquoi les pirates n’ont jamais gagné autant

Record historique pour les cryptomonnaies : pourquoi les pirates n’ont jamais gagné autant,

crypto

L’an dernier, le secteur des cryptomonnaies a battu un triste record. Pour la première fois, les pirates sont parvenus à dérober près de 4 milliards de dollars. Les hackers, dont les sbires de Kim Jong Un, ont exploité la fragilité de certains protocoles…

,

crypto

L’an dernier, le secteur des cryptomonnaies a battu un triste record. Pour la première fois, les pirates sont parvenus à dérober près de 4 milliards de dollars. Les hackers, dont les sbires de Kim Jong Un, ont exploité la fragilité de certains protocoles…

, ,
https://www.01net.com/actualites/record-historique-cryptomonnaies-pirates-jamais-gagne-autant.html

Fuite de données : Meta se trouve dans une situation embarrassante

Fuite de données : Meta se trouve dans une situation embarrassante,

facebook

Meta est dans une position plutôt délicate. Le groupe américain admet avoir payé pour obtenir les données publiques de certains sites web… tout en s’opposant farouchement aux extracteurs d’informations qui visent Facebook et Instagram.

,

facebook

Meta est dans une position plutôt délicate. Le groupe américain admet avoir payé pour obtenir les données publiques de certains sites web… tout en s’opposant farouchement aux extracteurs d’informations qui visent Facebook et Instagram.

, ,
https://www.01net.com/actualites/fuite-donnees-meta-encore-position-delicate.html

Atlassian’s Jira Software Found Vulnerable to Critical Authentication Vulnerability

Atlassian’s Jira Software Found Vulnerable to Critical Authentication Vulnerability

,

Atlassian has released fixes to resolve a critical security flaw in Jira Service Management Server and Data Center that could be abused by an attacker to pass off as another user and gain unauthorized access to susceptible instances.
The vulnerability is tracked as CVE-2023-22501 (CVSS score: 9.4) and has been described as a case of broken authentication with low attack complexity.
« An

,

Atlassian has released fixes to resolve a critical security flaw in Jira Service Management Server and Data Center that could be abused by an attacker to pass off as another user and gain unauthorized access to susceptible instances.
The vulnerability is tracked as CVE-2023-22501 (CVSS score: 9.4) and has been described as a case of broken authentication with low attack complexity.
« An

, ,
https://thehackernews.com/2023/02/atlassians-jira-software-found.html

New High-Severity Vulnerabilities Discovered in Cisco IOx and F5 BIG-IP Products

New High-Severity Vulnerabilities Discovered in Cisco IOx and F5 BIG-IP Products,

F5 has warned of a high-severity flaw impacting BIG-IP appliances that could lead to denial-of-service (DoS) or arbitrary code execution.
The issue is rooted in the iControl Simple Object Access Protocol (SOAP) interface and affects the following versions of BIG-IP –

13.1.5
14.1.4.6 – 14.1.5
15.1.5.1 – 15.1.8
16.1.2.2 – 16.1.3, and
17.0.0

« A format string vulnerability exists in iControl SOAP

,

F5 has warned of a high-severity flaw impacting BIG-IP appliances that could lead to denial-of-service (DoS) or arbitrary code execution.
The issue is rooted in the iControl Simple Object Access Protocol (SOAP) interface and affects the following versions of BIG-IP –

13.1.5
14.1.4.6 – 14.1.5
15.1.5.1 – 15.1.8
16.1.2.2 – 16.1.3, and
17.0.0

« A format string vulnerability exists in iControl SOAP

, ,
https://thehackernews.com/2023/02/new-high-severity-vulnerabilities.html

CISA Alert: Oracle E-Business Suite and SugarCRM Vulnerabilities Under Attack

CISA Alert: Oracle E-Business Suite and SugarCRM Vulnerabilities Under Attack,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on February 2 added two security flaws to its Known Exploited Vulnerabilities (KEV) Catalog, citing evidence of active exploitation.
The first of the two vulnerabilities is CVE-2022-21587 (CVSS score: 9.8), a critical issue impacting versions 12.2.3 to 12.2.11 of the Oracle Web Applications Desktop Integrator product.
« Oracle

,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on February 2 added two security flaws to its Known Exploited Vulnerabilities (KEV) Catalog, citing evidence of active exploitation.
The first of the two vulnerabilities is CVE-2022-21587 (CVSS score: 9.8), a critical issue impacting versions 12.2.3 to 12.2.11 of the Oracle Web Applications Desktop Integrator product.
« Oracle

, ,
https://thehackernews.com/2023/02/cisa-alert-oracle-e-business-suite-and.html

New Russian-Backed Gamaredon’s Spyware Variants Targeting Ukrainian Authorities

New Russian-Backed Gamaredon’s Spyware Variants Targeting Ukrainian Authorities

,

The State Cyber Protection Centre (SCPC) of Ukraine has called out the Russian state-sponsored threat actor known as Gamaredon for its targeted cyber attacks on public authorities and critical information infrastructure in the country.
The advanced persistent threat, also known as Actinium, Armageddon, Iron Tilden, Primitive Bear, Shuckworm, Trident Ursa, and UAC-0010, has a track record of 

,

The State Cyber Protection Centre (SCPC) of Ukraine has called out the Russian state-sponsored threat actor known as Gamaredon for its targeted cyber attacks on public authorities and critical information infrastructure in the country.
The advanced persistent threat, also known as Actinium, Armageddon, Iron Tilden, Primitive Bear, Shuckworm, Trident Ursa, and UAC-0010, has a track record of 

, ,
https://thehackernews.com/2023/02/new-russian-backed-gamaredons-spyware.html