Italian Users Warned of Malware Attack Targeting Sensitive Information

Italian Users Warned of Malware Attack Targeting Sensitive Information,

A new malware campaign has been observed targeting Italy with phishing emails designed to deploy an information stealer on compromised Windows systems.
« The info-stealer malware steals sensitive information like system info, crypto wallet and browser histories, cookies, and credentials of crypto wallets from victim machines, » Uptycs security researcher Karthickkumar Kathiresan said in a report.

,

A new malware campaign has been observed targeting Italy with phishing emails designed to deploy an information stealer on compromised Windows systems.
« The info-stealer malware steals sensitive information like system info, crypto wallet and browser histories, cookies, and credentials of crypto wallets from victim machines, » Uptycs security researcher Karthickkumar Kathiresan said in a report.

, ,
https://thehackernews.com/2023/01/italian-users-warned-of-malware-attack.html

Après un piratage, Air France-KLM conseille de changer votre mot de passe

Après un piratage, Air France-KLM conseille de changer votre mot de passe,

air france klm hack

La compagnie Air France-KLM a été victime d’un piratage. Les hackers ont réussi à dérober les données personnelles de certains clients. L’entreprise demande aux victimes de changer leur mot de passe et précise avoir alerté les autorités.

,

air france klm hack

La compagnie Air France-KLM a été victime d’un piratage. Les hackers ont réussi à dérober les données personnelles de certains clients. L’entreprise demande aux victimes de changer leur mot de passe et précise avoir alerté les autorités.

, ,
https://www.01net.com/actualites/apres-piratage-air-france-klm-conseille-changer-mot-passe.html

Severe Security Flaw Found in « jsonwebtoken » Library Used by 22,000+ Projects

Severe Security Flaw Found in « jsonwebtoken » Library Used by 22,000+ Projects

,

A high-severity security flaw has been disclosed in the open source jsonwebtoken (JWT) library that, if successfully exploited, could lead to remote code execution on a target server.
« By exploiting this vulnerability, attackers could achieve remote code execution (RCE) on a server verifying a maliciously crafted JSON web token (JWT) request, » Palo Alto Networks Unit 42 researcher Artur Oleyarsh

,

A high-severity security flaw has been disclosed in the open source jsonwebtoken (JWT) library that, if successfully exploited, could lead to remote code execution on a target server.
« By exploiting this vulnerability, attackers could achieve remote code execution (RCE) on a server verifying a maliciously crafted JSON web token (JWT) request, » Palo Alto Networks Unit 42 researcher Artur Oleyarsh

, ,
https://thehackernews.com/2023/01/critical-security-flaw-found-in.html

Kinsing Cryptojacking Hits Kubernetes Clusters via Misconfigured PostgreSQL

Kinsing Cryptojacking Hits Kubernetes Clusters via Misconfigured PostgreSQL,

The threat actors behind the Kinsing cryptojacking operation have been spotted exploiting misconfigured and exposed PostgreSQL servers to obtain initial access to Kubernetes environments.
A second initial access vector technique entails the use of vulnerable images, Sunders Bruskin, security researcher at Microsoft Defender for Cloud, said in a report last week.
Kinsing has a storied history of

,

The threat actors behind the Kinsing cryptojacking operation have been spotted exploiting misconfigured and exposed PostgreSQL servers to obtain initial access to Kubernetes environments.
A second initial access vector technique entails the use of vulnerable images, Sunders Bruskin, security researcher at Microsoft Defender for Cloud, said in a report last week.
Kinsing has a storied history of

, ,
https://thehackernews.com/2023/01/kinsing-cryptojacking-hits-kubernetes.html

New Study Uncovers Text-to-SQL Model Vulnerabilities Allowing Data Theft and DoS Attacks

New Study Uncovers Text-to-SQL Model Vulnerabilities Allowing Data Theft and DoS Attacks,

A group of academics has demonstrated novel attacks that leverage Text-to-SQL models to produce malicious code that could enable adversaries to glean sensitive information and stage denial-of-service (DoS) attacks.
« To better interact with users, a wide range of database applications employ AI techniques that can translate human questions into SQL queries (namely Text-to-SQL), » Xutan Peng, a

,

A group of academics has demonstrated novel attacks that leverage Text-to-SQL models to produce malicious code that could enable adversaries to glean sensitive information and stage denial-of-service (DoS) attacks.
« To better interact with users, a wide range of database applications employ AI techniques that can translate human questions into SQL queries (namely Text-to-SQL), » Xutan Peng, a

, ,
https://thehackernews.com/2023/01/new-study-uncovers-text-to-sql-model.html

Why Do User Permissions Matter for SaaS Security?

Why Do User Permissions Matter for SaaS Security?,

Earlier this year, threat actors infiltrated Mailchimp, the popular SaaS email marketing platform. They viewed over 300 Mailchimp customer accounts and exported audience data from 102 of them. The breach was preceded by a successful phishing attempt and led to malicious attacks against Mailchimp’s customers’ end users.
Three months later, Mailchimp was hit with another attack. Once again, an

,

Earlier this year, threat actors infiltrated Mailchimp, the popular SaaS email marketing platform. They viewed over 300 Mailchimp customer accounts and exported audience data from 102 of them. The breach was preceded by a successful phishing attempt and led to malicious attacks against Mailchimp’s customers’ end users.
Three months later, Mailchimp was hit with another attack. Once again, an

, ,
https://thehackernews.com/2023/01/why-do-user-permissions-matter-for-saas.html

Millions of Vehicles at Risk: API Vulnerabilities Uncovered in 16 Major Car Brands

Millions of Vehicles at Risk: API Vulnerabilities Uncovered in 16 Major Car Brands,

Multiple bugs affecting millions of vehicles from 16 different manufacturers could be abused to unlock, start, and track cars, plus impact the privacy of car owners.
The security vulnerabilities were found in the automotive APIs powering Acura, BMW, Ferrari, Ford, Genesis, Honda, Hyundai, Infiniti, Jaguar, Kia, Land Rover, Mercedes-Benz, Nissan, Porsche, Rolls Royce, Toyota as well as in

,

Multiple bugs affecting millions of vehicles from 16 different manufacturers could be abused to unlock, start, and track cars, plus impact the privacy of car owners.
The security vulnerabilities were found in the automotive APIs powering Acura, BMW, Ferrari, Ford, Genesis, Honda, Hyundai, Infiniti, Jaguar, Kia, Land Rover, Mercedes-Benz, Nissan, Porsche, Rolls Royce, Toyota as well as in

, ,
https://thehackernews.com/2023/01/millions-of-vehicles-at-risk-api.html

Crypto : 2022 a été l’année des piratages… et ce sera pire en 2023

Crypto : 2022 a été l’année des piratages… et ce sera pire en 2023,

ethereum merge

En 2022, le secteur des cryptomonnaies a subi une centaine d’attaques informatiques. En ciblant les protocoles les plus fragiles de la finance décentralisée, les pirates ont siphonné des milliards de dollars… et ils ne comptent pas s’arrêter là.

,

ethereum merge

En 2022, le secteur des cryptomonnaies a subi une centaine d’attaques informatiques. En ciblant les protocoles les plus fragiles de la finance décentralisée, les pirates ont siphonné des milliards de dollars… et ils ne comptent pas s’arrêter là.

, ,
https://www.01net.com/actualites/crypto-2022-a-ete-lannee-des-piratages-et-ce-sera-pire-en-2023.html

ChatGPT : mauvaise nouvelle, les cybercriminels ont aussi commencé à l’utiliser

ChatGPT : mauvaise nouvelle, les cybercriminels ont aussi commencé à l’utiliser,

hacking, hack, hacker

C’est une tendance inquiétante : les pirates se sont aussi emparés de ChatGPT et certains s’en servent pour créer e-mails de phishing et malwares en quelques secondes. Le début d’une nouvelle ère ?

,

hacking, hack, hacker

C’est une tendance inquiétante : les pirates se sont aussi emparés de ChatGPT et certains s’en servent pour créer e-mails de phishing et malwares en quelques secondes. Le début d’une nouvelle ère ?

, ,
https://www.01net.com/actualites/chatgpt-mauvaise-nouvelle-les-cybercriminels-ont-aussi-commence-a-lutiliser.html

Malicious PyPI Packages Using Cloudflare Tunnels to Sneak Through Firewalls

Malicious PyPI Packages Using Cloudflare Tunnels to Sneak Through Firewalls,

In yet another campaign targeting the Python Package Index (PyPI) repository, six malicious packages have been found deploying information stealers on developer systems.
The now-removed packages, which were discovered by Phylum between December 22 and December 31, 2022, include pyrologin, easytimestamp, discorder, discord-dev, style.py, and pythonstyles.
The malicious code, as is increasingly

,

In yet another campaign targeting the Python Package Index (PyPI) repository, six malicious packages have been found deploying information stealers on developer systems.
The now-removed packages, which were discovered by Phylum between December 22 and December 31, 2022, include pyrologin, easytimestamp, discorder, discord-dev, style.py, and pythonstyles.
The malicious code, as is increasingly

, ,
https://thehackernews.com/2023/01/malicious-pypi-packages-using.html