Snake, le redoutable malware espion de la Russie, a été détruit, 20 ans après sa création

Snake, le redoutable malware espion de la Russie, a été détruit, 20 ans après sa création,

snake

Le FBI vient d’anéantir le principal virus-espion des services de renseignement russes. Après 20 ans d’exactions dans le monde, le malware a été détruit par un logiciel dédié, programmé par les autorités américaines…

,

snake

Le FBI vient d’anéantir le principal virus-espion des services de renseignement russes. Après 20 ans d’exactions dans le monde, le malware a été détruit par un logiciel dédié, programmé par les autorités américaines…

, ,
https://www.01net.com/actualites/snake-redoutable-malware-espion-russie-detruit.html

U.S. Authorities Seize 13 Domains Offering Criminal DDoS-for-Hire Services

U.S. Authorities Seize 13 Domains Offering Criminal DDoS-for-Hire Services,

U.S. authorities have announced the seizure of 13 internet domains that offered DDoS-for-hire services to other criminal actors.
The takedown is part of an ongoing international initiative dubbed Operation PowerOFF that’s aimed at dismantling criminal DDoS-for-hire infrastructures worldwide.
The development comes almost five months after a « sweep » in December 2022 dismantled 48 similar services 

,

U.S. authorities have announced the seizure of 13 internet domains that offered DDoS-for-hire services to other criminal actors.
The takedown is part of an ongoing international initiative dubbed Operation PowerOFF that’s aimed at dismantling criminal DDoS-for-hire infrastructures worldwide.
The development comes almost five months after a « sweep » in December 2022 dismantled 48 similar services 

, ,
https://thehackernews.com/2023/05/us-authorities-seize-13-domains.html

Operation ChattyGoblin: Hackers Targeting Gambling Firms via Chat Apps

Operation ChattyGoblin: Hackers Targeting Gambling Firms via Chat Apps,

A gambling company in the Philippines was the target of a China-aligned threat actor as part of a campaign that has been ongoing since October 2021.
Slovak cybersecurity firm ESET is tracking the series of attacks against Southeast Asian gambling companies under the name Operation ChattyGoblin.
« These attacks use a specific tactic: targeting the victim companies’ support agents via chat

,

A gambling company in the Philippines was the target of a China-aligned threat actor as part of a campaign that has been ongoing since October 2021.
Slovak cybersecurity firm ESET is tracking the series of attacks against Southeast Asian gambling companies under the name Operation ChattyGoblin.
« These attacks use a specific tactic: targeting the victim companies’ support agents via chat

, ,
https://thehackernews.com/2023/05/operation-chattygoblin-hackers.html

Product Security: Harnessing the Collective Experience and Collaborative Tools in DevSecOps

Product Security: Harnessing the Collective Experience and Collaborative Tools in DevSecOps,

In the fast-paced cybersecurity landscape, product security takes center stage. DevSecOps swoops in, seamlessly merging security practices into DevOps, empowering teams to tackle challenges. Let’s dive into DevSecOps and explore how collaboration can give your team the edge to fight cyber villains.
Application security and product security
Regrettably, application security teams often intervene

,

In the fast-paced cybersecurity landscape, product security takes center stage. DevSecOps swoops in, seamlessly merging security practices into DevOps, empowering teams to tackle challenges. Let’s dive into DevSecOps and explore how collaboration can give your team the edge to fight cyber villains.
Application security and product security
Regrettably, application security teams often intervene

, ,
https://thehackernews.com/2023/05/strengthening-product-security.html

Après une cyberattaque, une des fonctions de sécurité d’Intel compromise ?

Après une cyberattaque, une des fonctions de sécurité d’Intel compromise ?,

logiciel malveillant pirate

Selon un expert, Intel serait en incapacité de bloquer l’installation de microprogrammes malveillants après la cyberattaque qui a visé le fabricant informatique MSI. Intel a indiqué enquêter activement sur cette fuite présumée qui concernerait des clés privées, utilisées par la fonction de sécurité Intel Boot Guard.

,

logiciel malveillant pirate

Selon un expert, Intel serait en incapacité de bloquer l’installation de microprogrammes malveillants après la cyberattaque qui a visé le fabricant informatique MSI. Intel a indiqué enquêter activement sur cette fuite présumée qui concernerait des clés privées, utilisées par la fonction de sécurité Intel Boot Guard.

, ,
https://www.01net.com/actualites/apres-une-cyberattaque-une-des-fonctions-de-securite-dintel-compromise.html

Researchers Uncover SideWinder’s Latest Server-Based Polymorphism Technique

Researchers Uncover SideWinder’s Latest Server-Based Polymorphism Technique

,

The advanced persistent threat (APT) actor known as SideWinder has been accused of deploying a backdoor in attacks directed against Pakistan government organizations as part of a campaign that commenced in late November 2022.
« In this campaign, the SideWinder advanced persistent threat (APT) group used a server-based polymorphism technique to deliver the next stage payload, » the BlackBerry

,

The advanced persistent threat (APT) actor known as SideWinder has been accused of deploying a backdoor in attacks directed against Pakistan government organizations as part of a campaign that commenced in late November 2022.
« In this campaign, the SideWinder advanced persistent threat (APT) group used a server-based polymorphism technique to deliver the next stage payload, » the BlackBerry

, ,
https://thehackernews.com/2023/05/researchers-uncover-sidewinders-latest.html

Microsoft Warns of State-Sponsored Attacks Exploiting Critical PaperCut Vulnerability

Microsoft Warns of State-Sponsored Attacks Exploiting Critical PaperCut Vulnerability,

Iranian nation-state groups have now joined financially motivated actors in actively exploiting a critical flaw in PaperCut print management software, Microsoft said.
The tech giant’s threat intelligence team said it observed both Mango Sandstorm (Mercury) and Mint Sandstorm (Phosphorus) weaponizing CVE-2023-27350 in their operations to achieve initial access.
« This activity shows Mint

,

Iranian nation-state groups have now joined financially motivated actors in actively exploiting a critical flaw in PaperCut print management software, Microsoft said.
The tech giant’s threat intelligence team said it observed both Mango Sandstorm (Mercury) and Mint Sandstorm (Phosphorus) weaponizing CVE-2023-27350 in their operations to achieve initial access.
« This activity shows Mint

, ,
https://thehackernews.com/2023/05/microsoft-warns-of-state-sponsored.html

New Ransomware Strain ‘CACTUS’ Exploits VPN Flaws to Infiltrate Networks

New Ransomware Strain ‘CACTUS’ Exploits VPN Flaws to Infiltrate Networks

,

Cybersecurity researchers have shed light on a new ransomware strain called CACTUS that has been found to leverage known flaws in VPN appliances to obtain initial access to targeted networks.
« Once inside the network, CACTUS actors attempt to enumerate local and network user accounts in addition to reachable endpoints before creating new user accounts and leveraging custom scripts to automate

,

Cybersecurity researchers have shed light on a new ransomware strain called CACTUS that has been found to leverage known flaws in VPN appliances to obtain initial access to targeted networks.
« Once inside the network, CACTUS actors attempt to enumerate local and network user accounts in addition to reachable endpoints before creating new user accounts and leveraging custom scripts to automate

, ,
https://thehackernews.com/2023/05/new-ransomware-strain-cactus-exploits.html

Apple perd un procès en appel, et c’est une bonne nouvelle pour la cybersécurité

Apple perd un procès en appel, et c’est une bonne nouvelle pour la cybersécurité,

Apple vient de perdre son appel contre Corellium.

Aux termes d’une procédure de quatre ans, Apple vient d’être débouté de sa plainte contre une start-up dont les outils permettent aux experts en cybersécurité de chercher des failles dans iOS. L’affaire n’est toutefois pas totalement terminée.

,

Apple vient de perdre son appel contre Corellium.

Aux termes d’une procédure de quatre ans, Apple vient d’être débouté de sa plainte contre une start-up dont les outils permettent aux experts en cybersécurité de chercher des failles dans iOS. L’affaire n’est toutefois pas totalement terminée.

, ,
https://www.01net.com/actualites/apple-perd-un-proces-en-appel-et-cest-une-bonne-nouvelle-pour-la-cybersecurite.html

Méfiez-vous de ces codes QR qui peuvent vous couter très cher

Méfiez-vous de ces codes QR qui peuvent vous couter très cher,

code qr

Largement utilisés comme outils promotionnels par les marques, entreprises, mais aussi par les pouvoirs publics, les codes QR sont maintenant détournés par des acteurs malveillants pour voler l’argent qui se trouve sur vos comptes bancaires.

,

code qr

Largement utilisés comme outils promotionnels par les marques, entreprises, mais aussi par les pouvoirs publics, les codes QR sont maintenant détournés par des acteurs malveillants pour voler l’argent qui se trouve sur vos comptes bancaires.

, ,
https://www.01net.com/actualites/mefiez-vous-de-ces-codes-qr-qui-peuvent-vous-couter-tres-cher.html