L’anti-malware de Gmail, bientôt activé dans Docs, Sheets et Slides

L’anti-malware de Gmail, bientôt activé dans Docs, Sheets et Slides,

Avec l’augmentation du télétravail, les pirates ont multiplié les scénarios d’attaque fondés sur les documents partagés. Une tendance que Google veut étouffer dans l’œuf.

,

Avec l’augmentation du télétravail, les pirates ont multiplié les scénarios d’attaque fondés sur les documents partagés. Une tendance que Google veut étouffer dans l’œuf.

, ,
https://www.01net.com/actualites/l-anti-malware-de-gmail-bientot-active-dans-docs-sheets-et-slides-2056216.html

Piratage Viasat : l’Union européenne et ses alliés pointent la Russie du doigt

Piratage Viasat : l’Union européenne et ses alliés pointent la Russie du doigt,

Les alliés occidentaux se sont appuyés sur des données de renseignement pour déterminer l’origine de l’attaque qui a mis en berne des dizaines de milliers de terminaux satellitaires en Europe.

,

Les alliés occidentaux se sont appuyés sur des données de renseignement pour déterminer l’origine de l’attaque qui a mis en berne des dizaines de milliers de terminaux satellitaires en Europe.

, ,
https://www.01net.com/actualites/piratage-viasat-l-union-europeenne-et-ses-allies-pointent-la-russie-du-doigt-2056211.html

CISA Urges Organizations to Patch Actively Exploited F5 BIG-IP Vulnerability

CISA Urges Organizations to Patch Actively Exploited F5 BIG-IP Vulnerability,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the recently disclosed F5 BIG-IP flaw to its Known Exploited Vulnerabilities Catalog following reports of active abuse in the wild.
The flaw, assigned the identifier CVE-2022-1388 (CVSS score: 9.8), concerns a critical bug in the BIG-IP iControl REST endpoint that provides an unauthenticated adversary with a method to

,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the recently disclosed F5 BIG-IP flaw to its Known Exploited Vulnerabilities Catalog following reports of active abuse in the wild.
The flaw, assigned the identifier CVE-2022-1388 (CVSS score: 9.8), concerns a critical bug in the BIG-IP iControl REST endpoint that provides an unauthenticated adversary with a method to

, ,
https://thehackernews.com/2022/05/cisa-urges-organizations-to-patch.html

Bitter APT Hackers Add Bangladesh to Their List of Targets in South Asia

Bitter APT Hackers Add Bangladesh to Their List of Targets in South Asia,

An espionage-focused threat actor known for targeting China, Pakistan, and Saudi Arabia has expanded to set its sights on Bangladeshi government organizations as part of an ongoing campaign that commenced in August 2021.
Cybersecurity firm Cisco Talos attributed the activity with moderate confidence to a hacking group dubbed the Bitter APT based on overlaps in the command-and-control (C2)

,

An espionage-focused threat actor known for targeting China, Pakistan, and Saudi Arabia has expanded to set its sights on Bangladeshi government organizations as part of an ongoing campaign that commenced in August 2021.
Cybersecurity firm Cisco Talos attributed the activity with moderate confidence to a hacking group dubbed the Bitter APT based on overlaps in the command-and-control (C2)

, ,
https://thehackernews.com/2022/05/bitter-apt-hackers-add-bangladesh-to.html

Ces hackers découpent et cachent leurs malwares… dans les logs de Windows

Ces hackers découpent et cachent leurs malwares… dans les logs de Windows,

Pour rester sous les radars, des pirates découpent leur code malveillant en petits bouts de 8 ko et les éparpillent dans les logs Windows de la machine infectée. C’est la première fois qu’une telle technique est observée.

,

Pour rester sous les radars, des pirates découpent leur code malveillant en petits bouts de 8 ko et les éparpillent dans les logs Windows de la machine infectée. C’est la première fois qu’une telle technique est observée.

, ,
https://www.01net.com/actualites/les-malwares-peuvent-aussi-se-planquer-dans-les-logs-de-windows-2056195.html

Researchers Warn of Nerbian RAT Targeting Entities in Italy, Spain, and the U.K

Researchers Warn of Nerbian RAT Targeting Entities in Italy, Spain, and the U.K,

A previously undocumented remote access trojan (RAT) written in the Go programming language has been spotted disproportionately targeting entities in Italy, Spain, and the U.K.
Called Nerbian RAT by enterprise security firm Proofpoint, the novel malware leverages COVID-19-themed lures to propagate as part of a low volume email-borne phishing campaign that started on April 26, 2022.
« The newly

,

A previously undocumented remote access trojan (RAT) written in the Go programming language has been spotted disproportionately targeting entities in Italy, Spain, and the U.K.
Called Nerbian RAT by enterprise security firm Proofpoint, the novel malware leverages COVID-19-themed lures to propagate as part of a low volume email-borne phishing campaign that started on April 26, 2022.
« The newly

, ,
https://thehackernews.com/2022/05/researchers-warn-of-nerbian-rat.html

Malicious NPM Packages Target German Companies in Supply Chain Attack

Malicious NPM Packages Target German Companies in Supply Chain Attack,

Cybersecurity researchers have discovered a number of malicious packages in the NPM registry specifically targeting a number of prominent companies based in Germany to carry out supply chain attacks.
« Compared with most malware found in the NPM repository, this payload seems particularly dangerous: a highly-sophisticated, obfuscated piece of malware that acts as a backdoor and allows the

,

Cybersecurity researchers have discovered a number of malicious packages in the NPM registry specifically targeting a number of prominent companies based in Germany to carry out supply chain attacks.
« Compared with most malware found in the NPM repository, this payload seems particularly dangerous: a highly-sophisticated, obfuscated piece of malware that acts as a backdoor and allows the

, ,
https://thehackernews.com/2022/05/malicious-npm-packages-target-german.html

E.U. Blames Russia for Cyberattack on KA-SAT Satellite Network Operated by Viasat

E.U. Blames Russia for Cyberattack on KA-SAT Satellite Network Operated by Viasat,

The Five Eyes nations comprising Australia, Canada, New Zealand, the U.K., and the U.S., along with Ukraine and the European Union, formally pinned Russia for masterminding an attack on an international satellite communication (SATCOM) provider that had « spillover » effects across Europe.
The cyber offensive, which took place one hour before the Kremlin’s military invasion of Ukraine on February

,

The Five Eyes nations comprising Australia, Canada, New Zealand, the U.K., and the U.S., along with Ukraine and the European Union, formally pinned Russia for masterminding an attack on an international satellite communication (SATCOM) provider that had « spillover » effects across Europe.
The cyber offensive, which took place one hour before the Kremlin’s military invasion of Ukraine on February

, ,
https://thehackernews.com/2022/05/eu-blames-russia-for-cyberattack-on-ka.html

Microsoft Releases Fix for New Zero-Day with May 2022 Patch Tuesday Updates

Microsoft Releases Fix for New Zero-Day with May 2022 Patch Tuesday Updates,

Microsoft on Tuesday rolled out fixes for as many as 74 security vulnerabilities, including one for a zero-day bug that’s being actively exploited in the wild.
Of the 74 issues, seven are rated Critical, 66 are rated Important, and one is rated low in severity. Two of the flaws are listed as publicly known at the time of release.
These encompass 24 remote code execution (RCE), 21 elevation of

,

Microsoft on Tuesday rolled out fixes for as many as 74 security vulnerabilities, including one for a zero-day bug that’s being actively exploited in the wild.
Of the 74 issues, seven are rated Critical, 66 are rated Important, and one is rated low in severity. Two of the flaws are listed as publicly known at the time of release.
These encompass 24 remote code execution (RCE), 21 elevation of

, ,
https://thehackernews.com/2022/05/microsoft-releases-fix-for-new-zero-day.html

New REvil Samples Indicate Ransomware Gang is Back After Months of Inactivity

New REvil Samples Indicate Ransomware Gang is Back After Months of Inactivity,

The notorious ransomware operation known as REvil (aka Sodin or Sodinokibi) has resumed after six months of inactivity, an analysis of new ransomware samples has revealed.
« Analysis of these samples indicates that the developer has access to REvil’s source code, reinforcing the likelihood that the threat group has reemerged, » researchers from Secureworks Counter Threat Unit (CTU) said in a

,

The notorious ransomware operation known as REvil (aka Sodin or Sodinokibi) has resumed after six months of inactivity, an analysis of new ransomware samples has revealed.
« Analysis of these samples indicates that the developer has access to REvil’s source code, reinforcing the likelihood that the threat group has reemerged, » researchers from Secureworks Counter Threat Unit (CTU) said in a

, ,
https://thehackernews.com/2022/05/new-revil-samples-indicate-ransomware.html