Tour of the Underground: Master the Art of Dark Web Intelligence Gathering

Tour of the Underground: Master the Art of Dark Web Intelligence Gathering,

The Deep, Dark Web – The Underground – is a haven for cybercriminals, teeming with tools and resources to launch attacks for financial gain, political motives, and other causes.
But did you know that the underground also offers a goldmine of threat intelligence and information that can be harnessed to bolster your cyber defense strategies? The challenge lies in continuously monitoring the right

,

The Deep, Dark Web – The Underground – is a haven for cybercriminals, teeming with tools and resources to launch attacks for financial gain, political motives, and other causes.
But did you know that the underground also offers a goldmine of threat intelligence and information that can be harnessed to bolster your cyber defense strategies? The challenge lies in continuously monitoring the right

, ,
https://thehackernews.com/2023/04/tour-of-underground-master-art-of-dark.html

Attention, les Macs sont dans le viseur du ransomware LockBit

Attention, les Macs sont dans le viseur du ransomware LockBit,

mac ransomware

Les Macs sont dans le collimateur des pirates de LockBit. La troisième version du ransomware devrait en effet pouvoir chiffrer les données stockées sur macOS. Néanmoins, il semble que cette itération soit loin d’être au point…

,

mac ransomware

Les Macs sont dans le collimateur des pirates de LockBit. La troisième version du ransomware devrait en effet pouvoir chiffrer les données stockées sur macOS. Néanmoins, il semble que cette itération soit loin d’être au point…

, ,
https://www.01net.com/actualites/attention-macs-viseur-ransomware-lockbit.html

Vice Society Ransomware Using Stealthy PowerShell Tool for Data Exfiltration

Vice Society Ransomware Using Stealthy PowerShell Tool for Data Exfiltration,

Threat actors associated with the Vice Society ransomware gang have been observed using a bespoke PowerShell-based tool to fly under the radar and automate the process of exfiltrating data from compromised networks.
« Threat actors (TAs) using built-in data exfiltration methods like [living off the land binaries and scripts] negate the need to bring in external tools that might be flagged by

,

Threat actors associated with the Vice Society ransomware gang have been observed using a bespoke PowerShell-based tool to fly under the radar and automate the process of exfiltrating data from compromised networks.
« Threat actors (TAs) using built-in data exfiltration methods like [living off the land binaries and scripts] negate the need to bring in external tools that might be flagged by

, ,
https://thehackernews.com/2023/04/vice-society-ransomware-using-stealthy.html

New Zaraza Bot Credential-Stealer Sold on Telegram Targeting 38 Web Browsers

New Zaraza Bot Credential-Stealer Sold on Telegram Targeting 38 Web Browsers,

A novel credential-stealing malware called Zaraza bot is being offered for sale on Telegram while also using the popular messaging service as a command-and-control (C2).
« Zaraza bot targets a large number of web browsers and is being actively distributed on a Russian Telegram hacker channel popular with threat actors, » cybersecurity company Uptycs said in a report published last week.
« Once the

,

A novel credential-stealing malware called Zaraza bot is being offered for sale on Telegram while also using the popular messaging service as a command-and-control (C2).
« Zaraza bot targets a large number of web browsers and is being actively distributed on a Russian Telegram hacker channel popular with threat actors, » cybersecurity company Uptycs said in a report published last week.
« Once the

, ,
https://thehackernews.com/2023/04/new-zaraza-bot-credential-stealer-sold.html

Google Releases Urgent Chrome Update to Fix Actively Exploited Zero-Day Vulnerability

Google Releases Urgent Chrome Update to Fix Actively Exploited Zero-Day Vulnerability,

Google on Friday released out-of-band updates to resolve an actively exploited zero-day flaw in its Chrome web browser, making it the first such bug to be addressed since the start of the year.
Tracked as CVE-2023-2033, the high-severity vulnerability has been described as a type confusion issue in the V8 JavaScript engine. Clement Lecigne of Google’s Threat Analysis Group (TAG) has been

,

Google on Friday released out-of-band updates to resolve an actively exploited zero-day flaw in its Chrome web browser, making it the first such bug to be addressed since the start of the year.
Tracked as CVE-2023-2033, the high-severity vulnerability has been described as a type confusion issue in the V8 JavaScript engine. Clement Lecigne of Google’s Threat Analysis Group (TAG) has been

, ,
https://thehackernews.com/2023/04/google-releases-urgent-chrome-update-to.html

Russia-Linked Hackers Launches Espionage Attacks on Foreign Diplomatic Entities

Russia-Linked Hackers Launches Espionage Attacks on Foreign Diplomatic Entities,

The Russia-linked APT29 (aka Cozy Bear) threat actor has been attributed to an ongoing cyber espionage campaign targeting foreign ministries and diplomatic entities located in NATO member states, the European Union, and Africa.
According to Poland’s Military Counterintelligence Service and the CERT Polska team, the observed activity shares tactical overlaps with a cluster tracked by Microsoft as

,

The Russia-linked APT29 (aka Cozy Bear) threat actor has been attributed to an ongoing cyber espionage campaign targeting foreign ministries and diplomatic entities located in NATO member states, the European Union, and Africa.
According to Poland’s Military Counterintelligence Service and the CERT Polska team, the observed activity shares tactical overlaps with a cluster tracked by Microsoft as

, ,
https://thehackernews.com/2023/04/russia-linked-hackers-launches.html

Le patron d’OpenAI annonce mettre le holà sur les prochaines versions de ChatGPT

Le patron d’OpenAI annonce mettre le holà sur les prochaines versions de ChatGPT,

chatgpt 4

Il n’y aura pas de GPT-5 avant un moment, a expliqué Sam Altman, l’homme à la tête d’OpenAI – la société américaine qui a développé ChatGPT. Le PDG s’exprimait pour la première fois sur la lettre demandant l’arrêt de l’IA.

,

chatgpt 4

Il n’y aura pas de GPT-5 avant un moment, a expliqué Sam Altman, l’homme à la tête d’OpenAI – la société américaine qui a développé ChatGPT. Le PDG s’exprimait pour la première fois sur la lettre demandant l’arrêt de l’IA.

, ,
https://www.01net.com/actualites/le-patron-dopenai-annonce-mettre-le-hola-sur-les-prochaines-versions-de-chatgpt.html

Kodi Confirms Data Breach: 400K User Records and Private Messages Stolen

Kodi Confirms Data Breach: 400K User Records and Private Messages Stolen,

Open source media player software provider Kodi has confirmed a data breach after threat actors stole the company’s MyBB forum database containing user data and private messages.
What’s more, the unknown threat actors attempted to sell the data dump comprising 400,635 Kodi users on the now-defunct BreachForums cybercrime marketplace.
« MyBB admin logs show the account of a trusted but currently

,

Open source media player software provider Kodi has confirmed a data breach after threat actors stole the company’s MyBB forum database containing user data and private messages.
What’s more, the unknown threat actors attempted to sell the data dump comprising 400,635 Kodi users on the now-defunct BreachForums cybercrime marketplace.
« MyBB admin logs show the account of a trusted but currently

, ,
https://thehackernews.com/2023/04/kodi-confirms-data-breach-400k-user.html

Severe Android and Novi Survey Vulnerabilities Under Active Exploitation

Severe Android and Novi Survey Vulnerabilities Under Active Exploitation,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.
The two flaws are listed below –

CVE-2023-20963 (CVSS score: 7.8) – Android Framework Privilege Escalation Vulnerability
CVE-2023-29492 (CVSS score: TBD) – Novi Survey Insecure Deserialization Vulnerability

,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.
The two flaws are listed below –

CVE-2023-20963 (CVSS score: 7.8) – Android Framework Privilege Escalation Vulnerability
CVE-2023-29492 (CVSS score: TBD) – Novi Survey Insecure Deserialization Vulnerability

, ,
https://thehackernews.com/2023/04/severe-android-and-novi-survey.html

Webinar: Tips from MSSPs to MSSPs – Building a Profitable vCISO Practice

Webinar: Tips from MSSPs to MSSPs – Building a Profitable vCISO Practice,

In today’s fast-paced and ever-changing digital landscape, businesses of all sizes face a myriad of cybersecurity threats. Putting in place the right people, technological tools and services, MSSPs are in a great position to ensure their customers’ cyber resilience. 
The growing need of SMEs and SMBs for structured cybersecurity services can be leveraged by MSPs and MSSPs to provide strategic

,

In today’s fast-paced and ever-changing digital landscape, businesses of all sizes face a myriad of cybersecurity threats. Putting in place the right people, technological tools and services, MSSPs are in a great position to ensure their customers’ cyber resilience. 
The growing need of SMEs and SMBs for structured cybersecurity services can be leveraged by MSPs and MSSPs to provide strategic

, ,
https://thehackernews.com/2023/04/webinar-tips-from-mssps-to-mssps.html