Ukrainian Hacker Jailed for 4-Years in U.S. for Selling Access to Hacked Servers

Ukrainian Hacker Jailed for 4-Years in U.S. for Selling Access to Hacked Servers,

A 28-year-old Ukrainian national has been sentenced to four years in prison for siphoning thousands of server login credentials and selling them on the dark web for monetary gain as part of a credential theft scheme.
Glib Oleksandr Ivanov-Tolpintsev, who pleaded guilty to his offenses earlier this February, was arrested in Poland in October 2020, before being extradited to the U.S. in September

,

A 28-year-old Ukrainian national has been sentenced to four years in prison for siphoning thousands of server login credentials and selling them on the dark web for monetary gain as part of a credential theft scheme.
Glib Oleksandr Ivanov-Tolpintsev, who pleaded guilty to his offenses earlier this February, was arrested in Poland in October 2020, before being extradited to the U.S. in September

, ,
https://thehackernews.com/2022/05/ukrainian-hacker-jailed-for-4-years-in.html

Comment l’invasion de l’Ukraine enflamme la cyberguerre aux portes d’une Europe

Comment l’invasion de l’Ukraine enflamme la cyberguerre aux portes d’une Europe

,

Premier pays à devoir se battre dans le cyberespace, l’Ukraine met la priorité sur la résilience, tout en développant une stratégie offensive. Dans le camp occidental, le conflit provoque de l’admiration, mais aussi de l’effroi.

,

Premier pays à devoir se battre dans le cyberespace, l’Ukraine met la priorité sur la résilience, tout en développant une stratégie offensive. Dans le camp occidental, le conflit provoque de l’admiration, mais aussi de l’effroi.

, ,
https://www.01net.com/actualites/comment-l-invasion-de-l-ukraine-enflamme-la-cyberguerre-aux-portes-d-une-europe-2056232.html

Pédopornographie : la proposition de loi européenne provoque une levée de boucliers

Pédopornographie : la proposition de loi européenne provoque une levée de boucliers,

Le texte élaboré par la Commission européenne est jugé disproportionné et contraire aux lois fondamentales des droits de l’homme. Pour certains, ce serait équivalent à la création d’un énorme Big Brother.

,

Le texte élaboré par la Commission européenne est jugé disproportionné et contraire aux lois fondamentales des droits de l’homme. Pour certains, ce serait équivalent à la création d’un énorme Big Brother.

, ,
https://www.01net.com/actualites/pedopornographie-la-proposition-de-loi-europeenne-provoque-une-levee-de-boucliers-2056244.html

Get Lifetime Access to 2022 Cybersecurity Certification Prep Courses @ 95% Off

Get Lifetime Access to 2022 Cybersecurity Certification Prep Courses @ 95% Off,

Ever thought about working full-time in cybersecurity? With millions of unfilled jobs around, now is a great time to get into the industry. Of course, there are many different roles in this field. But all of them require the same handful of professional certifications.
The 2022 Ultimate Advanced CyberSecurity Professional Certification Bundle helps you collect the full house, with five

,

Ever thought about working full-time in cybersecurity? With millions of unfilled jobs around, now is a great time to get into the industry. Of course, there are many different roles in this field. But all of them require the same handful of professional certifications.
The 2022 Ultimate Advanced CyberSecurity Professional Certification Bundle helps you collect the full house, with five

, ,
https://thehackernews.com/2022/05/get-ultimate-2022-cybersecurity.html

SonicWall Releases Patches for New Flaws Affecting SSLVPN SMA1000 Devices

SonicWall Releases Patches for New Flaws Affecting SSLVPN SMA1000 Devices,

SonicWall has published an advisory warning of a trio of security flaws in its Secure Mobile Access (SMA) 1000 appliances, including a high-severity authentication bypass vulnerability.
The weaknesses in question impact SMA 6200, 6210, 7200, 7210, 8000v running firmware versions 12.4.0 and 12.4.1. The list of vulnerabilities is below –

CVE-2022-22282 (CVSS score: 8.2) – Unauthenticated Access

,

SonicWall has published an advisory warning of a trio of security flaws in its Secure Mobile Access (SMA) 1000 appliances, including a high-severity authentication bypass vulnerability.
The weaknesses in question impact SMA 6200, 6210, 7200, 7210, 8000v running firmware versions 12.4.0 and 12.4.1. The list of vulnerabilities is below –

CVE-2022-22282 (CVSS score: 8.2) – Unauthenticated Access

, ,
https://thehackernews.com/2022/05/sonicwall-releases-patches-for-new.html

Google Created ‘Open-Source Maintenance Crew’ to Help Secure Critical Projects

Google Created ‘Open-Source Maintenance Crew’ to Help Secure Critical Projects

,

Google on Thursday announced the creation of a new « Open Source Maintenance Crew » to focus on bolstering the security of critical open source projects.
Additionally, the tech giant pointed out Open Source Insights as a tool for analyzing packages and their dependency graphs, using it to determine « whether a vulnerability in a dependency might affect your code. »
« With this information, developers

,

Google on Thursday announced the creation of a new « Open Source Maintenance Crew » to focus on bolstering the security of critical open source projects.
Additionally, the tech giant pointed out Open Source Insights as a tool for analyzing packages and their dependency graphs, using it to determine « whether a vulnerability in a dependency might affect your code. »
« With this information, developers

, ,
https://thehackernews.com/2022/05/google-created-open-source-maintenance.html

New Saitama backdoor Targeted Official from Jordan’s Foreign Ministry

New Saitama backdoor Targeted Official from Jordan’s Foreign Ministry

,

A spear-phishing campaign targeting Jordan’s foreign ministry has been observed dropping a new stealthy backdoor dubbed Saitama.
Researchers from Malwarebytes and Fortinet FortiGuard Labs attributed the campaign to an Iranian cyber espionage threat actor tracked under the moniker APT34, citing resemblances to past campaigns staged by the group.
« Like many of these attacks, the email contained a

,

A spear-phishing campaign targeting Jordan’s foreign ministry has been observed dropping a new stealthy backdoor dubbed Saitama.
Researchers from Malwarebytes and Fortinet FortiGuard Labs attributed the campaign to an Iranian cyber espionage threat actor tracked under the moniker APT34, citing resemblances to past campaigns staged by the group.
« Like many of these attacks, the email contained a

, ,
https://thehackernews.com/2022/05/new-saitama-backdoor-targeted-official.html

Zyxel Releases Patch for Critical Firewall OS Command Injection Vulnerability

Zyxel Releases Patch for Critical Firewall OS Command Injection Vulnerability,

Zyxel has moved to address a critical security vulnerability affecting Zyxel firewall devices that enables unauthenticated and remote attackers to gain arbitrary code execution.
« A command injection vulnerability in the CGI program of some firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device, » the company said in an advisory

,

Zyxel has moved to address a critical security vulnerability affecting Zyxel firewall devices that enables unauthenticated and remote attackers to gain arbitrary code execution.
« A command injection vulnerability in the CGI program of some firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device, » the company said in an advisory

, ,
https://thehackernews.com/2022/05/zyxel-releases-patch-for-critical.html

Iranian Hackers Leveraging BitLocker and DiskCryptor in Ransomware Attacks

Iranian Hackers Leveraging BitLocker and DiskCryptor in Ransomware Attacks,

A ransomware group with an Iranian operational connection has been linked to a string of file-encrypting malware attacks targeting organizations in Israel, the U.S., Europe, and Australia.
Cybersecurity firm Secureworks attributed the intrusions to a threat actor it tracks under the moniker Cobalt Mirage, which it said is linked to an Iranian hacking crew dubbed Cobalt Illusion (aka APT35,

,

A ransomware group with an Iranian operational connection has been linked to a string of file-encrypting malware attacks targeting organizations in Israel, the U.S., Europe, and Australia.
Cybersecurity firm Secureworks attributed the intrusions to a threat actor it tracks under the moniker Cobalt Mirage, which it said is linked to an Iranian hacking crew dubbed Cobalt Illusion (aka APT35,

, ,
https://thehackernews.com/2022/05/iranian-hackers-leveraging-bitlocker.html

E.U. Proposes New Rules for Tech Companies to Combat Online Child Sexual Abuse

E.U. Proposes New Rules for Tech Companies to Combat Online Child Sexual Abuse,

The European Commission on Wednesday proposed new regulation that would require tech companies to scan for child sexual abuse material (CSAM) and grooming behavior, raising worries that it could undermine end-to-end encryption (E2EE).
To that end, online service providers, including hosting services and communication apps, are expected to proactively scan their platforms for CSAM as well as

,

The European Commission on Wednesday proposed new regulation that would require tech companies to scan for child sexual abuse material (CSAM) and grooming behavior, raising worries that it could undermine end-to-end encryption (E2EE).
To that end, online service providers, including hosting services and communication apps, are expected to proactively scan their platforms for CSAM as well as

, ,
https://thehackernews.com/2022/05/eu-proposes-new-rules-for-tech.html