What is an External Penetration Test?

What is an External Penetration Test?,

A penetration test (also known as a pentest) is a security assessment that simulates the activities of real-world attackers to identify security holes in your IT systems or applications. 
The aim of the test is to understand what vulnerabilities you have, how they could be exploited, and what the impact would be if an attacker was successful.
Usually performed first, an external pentest (also

,

A penetration test (also known as a pentest) is a security assessment that simulates the activities of real-world attackers to identify security holes in your IT systems or applications. 
The aim of the test is to understand what vulnerabilities you have, how they could be exploited, and what the impact would be if an attacker was successful.
Usually performed first, an external pentest (also

, ,
https://thehackernews.com/2022/11/what-is-external-penetration-test.html

Cette faille permet à n’importe qui de déverrouiller certains smartphones Android…

Cette faille permet à n’importe qui de déverrouiller certains smartphones Android…,

Un chercheur a trouvé une faille qui permet à n’importe qui d’accéder à un Pixel, et à vraisemblablement beaucoup d’autres smartphones Android, même s’ils sont verrouillés. Après des mois sans retour réel de Google, le correctif vient d’être publié… et une prime lui a été accordée.

,

Un chercheur a trouvé une faille qui permet à n’importe qui d’accéder à un Pixel, et à vraisemblablement beaucoup d’autres smartphones Android, même s’ils sont verrouillés. Après des mois sans retour réel de Google, le correctif vient d’être publié… et une prime lui a été accordée.

, ,
https://www.01net.com/actualites/cette-faille-permet-a-nimporte-qui-de-deverrouiller-certains-smartphones-android.html

New KmsdBot Malware Hijacking Systems for Mining Crypto and Launch DDoS Attacks

New KmsdBot Malware Hijacking Systems for Mining Crypto and Launch DDoS Attacks,

A newly discovered evasive malware leverages the Secure Shell (SSH) cryptographic protocol to gain entry into targeted systems with the goal of mining cryptocurrency and carrying out distributed denial-of-service (DDoS) attacks.
Dubbed KmsdBot by the Akamai Security Intelligence Response Team (SIRT), the Golang-based malware has been found targeting a variety of companies ranging from gaming to

,

A newly discovered evasive malware leverages the Secure Shell (SSH) cryptographic protocol to gain entry into targeted systems with the goal of mining cryptocurrency and carrying out distributed denial-of-service (DDoS) attacks.
Dubbed KmsdBot by the Akamai Security Intelligence Response Team (SIRT), the Golang-based malware has been found targeting a variety of companies ranging from gaming to

, ,
https://thehackernews.com/2022/11/new-kmsdbot-malware-hijacking-systems.html

Worok Hackers Abuse Dropbox API to Exfiltrate Data via Backdoor Hidden in Images

Worok Hackers Abuse Dropbox API to Exfiltrate Data via Backdoor Hidden in Images,

A recently discovered cyber espionage group dubbed Worok has been found hiding malware in seemingly innocuous image files, corroborating a crucial link in the threat actor’s infection chain.
Czech cybersecurity firm Avast said the purpose of the PNG files is to conceal a payload that’s used to facilitate information theft.
« What is noteworthy is data collection from victims’ machines using

,

A recently discovered cyber espionage group dubbed Worok has been found hiding malware in seemingly innocuous image files, corroborating a crucial link in the threat actor’s infection chain.
Czech cybersecurity firm Avast said the purpose of the PNG files is to conceal a payload that’s used to facilitate information theft.
« What is noteworthy is data collection from victims’ machines using

, ,
https://thehackernews.com/2022/11/worok-hackers-abuse-dropbox-api-to.html

Dark Web : découvrez la folle histoire des 50 000 bitcoins volés à Silk Road en 2012

Dark Web : découvrez la folle histoire des 50 000 bitcoins volés à Silk Road en 2012,

bitcoin popcorn

Il y a dix ans, Silk Road a été piraté. En exploitant une faille, un hacker a volé plus de 50 000 bitcoins sur le marché noir du dark Web, considéré comme l’eBay de la drogue. Au terme d’une longue enquête, cet impressionnant trésor en cryptomonnaies a finalement été retrouvé… au fond d’une boîte de popcorn.

,

bitcoin popcorn

Il y a dix ans, Silk Road a été piraté. En exploitant une faille, un hacker a volé plus de 50 000 bitcoins sur le marché noir du dark Web, considéré comme l’eBay de la drogue. Au terme d’une longue enquête, cet impressionnant trésor en cryptomonnaies a finalement été retrouvé… au fond d’une boîte de popcorn.

, ,
https://www.01net.com/actualites/dark-web-decouvrez-folle-histoire-50000-bitcoins-voles-silk-road-2012.html

Experts Uncover Two Long-Running Android Spyware Campaigns Targeting Uyghurs

Experts Uncover Two Long-Running Android Spyware Campaigns Targeting Uyghurs,

Two long-running surveillance campaigns have been found targeting the Uyghur community in China and elsewhere with Android spyware tools designed to harvest sensitive information and track their whereabouts.
This encompasses a previously undocumented malware strain called BadBazaar and updated variants of an espionage artifact dubbed MOONSHINE by researchers from the University of Toronto’s

,

Two long-running surveillance campaigns have been found targeting the Uyghur community in China and elsewhere with Android spyware tools designed to harvest sensitive information and track their whereabouts.
This encompasses a previously undocumented malware strain called BadBazaar and updated variants of an espionage artifact dubbed MOONSHINE by researchers from the University of Toronto’s

, ,
https://thehackernews.com/2022/11/experts-uncover-two-long-running.html

Malicious Google Play Store App Spotted Distributing Xenomorph Banking Trojan

Malicious Google Play Store App Spotted Distributing Xenomorph Banking Trojan,

Google has removed two new malicious dropper apps that have been detected on the Play Store for Android, one of which posed as a lifestyle app and was caught distributing the Xenomorph banking malware.
« Xenomorph is a trojan that steals credentials from banking applications on users’ devices, » Zscaler ThreatLabz researchers Himanshu Sharma and Viral Gandhi said in an analysis published Thursday.

,

Google has removed two new malicious dropper apps that have been detected on the Play Store for Android, one of which posed as a lifestyle app and was caught distributing the Xenomorph banking malware.
« Xenomorph is a trojan that steals credentials from banking applications on users’ devices, » Zscaler ThreatLabz researchers Himanshu Sharma and Viral Gandhi said in an analysis published Thursday.

, ,
https://thehackernews.com/2022/11/these-two-google-play-store-apps.html

VPN vs. DNS Security

VPN vs. DNS Security,

When you are trying to get another layer of cyber protection that would not require a lot of resources, you are most likely choosing between a VPN service & a DNS Security solution. Let’s discuss both. 
VPN Explained
VPN stands for Virtual Private Networks and basically hides your IP and provides an encrypted server by redirecting your traffic via a server run by a VPN host. It establishes a

,

When you are trying to get another layer of cyber protection that would not require a lot of resources, you are most likely choosing between a VPN service & a DNS Security solution. Let’s discuss both. 
VPN Explained
VPN stands for Virtual Private Networks and basically hides your IP and provides an encrypted server by redirecting your traffic via a server run by a VPN host. It establishes a

, ,
https://thehackernews.com/2022/11/vpn-vs-dns-security.html

Multiple High-Severity Flaw Affect Widely Used OpenLiteSpeed Web Server Software

Multiple High-Severity Flaw Affect Widely Used OpenLiteSpeed Web Server Software,

Multiple high-severity flaws have been uncovered in the open source OpenLiteSpeed Web Server as well as its enterprise variant that could be weaponized to achieve remote code execution.
« By chaining and exploiting the vulnerabilities, adversaries could compromise the web server and gain fully privileged remote code execution, » Palo Alto Networks Unit 42 said in a Thursday report.

,

Multiple high-severity flaws have been uncovered in the open source OpenLiteSpeed Web Server as well as its enterprise variant that could be weaponized to achieve remote code execution.
« By chaining and exploiting the vulnerabilities, adversaries could compromise the web server and gain fully privileged remote code execution, » Palo Alto Networks Unit 42 said in a Thursday report.

, ,
https://thehackernews.com/2022/11/multiple-high-severity-flaw-affect.html

Russian-Canadian National Charged Over Involvement in LockBit Ransomware Attacks

Russian-Canadian National Charged Over Involvement in LockBit Ransomware Attacks,

The U.S. Department of Justice (DoJ) has announced charges against a dual Russian and Canadian national for his alleged participation in LockBit ransomware attacks across the world.
The 33-year-old Ontario resident, Mikhail Vasiliev, has been taken into custody and is awaiting extradition to the U.S., where is likely to be sentenced for a maximum of five years in prison.
Vasiliev has been

,

The U.S. Department of Justice (DoJ) has announced charges against a dual Russian and Canadian national for his alleged participation in LockBit ransomware attacks across the world.
The 33-year-old Ontario resident, Mikhail Vasiliev, has been taken into custody and is awaiting extradition to the U.S., where is likely to be sentenced for a maximum of five years in prison.
Vasiliev has been

, ,
https://thehackernews.com/2022/11/russian-canadian-national-charged-over.html