How Secrets Lurking in Source Code Lead to Major Breaches

How Secrets Lurking in Source Code Lead to Major Breaches,

If one word could sum up the 2021 infosecurity year (well, actually three), it would be these: « supply chain attack ». 
A software supply chain attack happens when hackers manipulate the code in third-party software components to compromise the ‘downstream’ applications that use them. In 2021, we have seen a dramatic rise in such attacks: high profile security incidents like the SolarWinds,

,

If one word could sum up the 2021 infosecurity year (well, actually three), it would be these: « supply chain attack ». 
A software supply chain attack happens when hackers manipulate the code in third-party software components to compromise the ‘downstream’ applications that use them. In 2021, we have seen a dramatic rise in such attacks: high profile security incidents like the SolarWinds,

, ,
https://thehackernews.com/2022/05/how-secrets-lurking-in-source-code-lead.html

Learn How Hackers Can Hijack Your Online Accounts Even Before You Create Them

Learn How Hackers Can Hijack Your Online Accounts Even Before You Create Them,

Malicious actors can gain unauthorized access to users’ online accounts via a new technique called « account pre-hijacking, » new research has found.
The attack takes aim at the account creation process that’s ubiquitous in websites and other online platforms, enabling an adversary to perform a set of actions before an unsuspecting victim creates an account in a target service.
The study was led

,

Malicious actors can gain unauthorized access to users’ online accounts via a new technique called « account pre-hijacking, » new research has found.
The attack takes aim at the account creation process that’s ubiquitous in websites and other online platforms, enabling an adversary to perform a set of actions before an unsuspecting victim creates an account in a target service.
The study was led

, ,
https://thehackernews.com/2022/05/learn-how-hackers-can-hijack-your.html

Researchers Find New Malware Attacks Targeting Russian Government Entities

Researchers Find New Malware Attacks Targeting Russian Government Entities,

An unknown advanced persistent threat (APT) group has been linked to a series of spear-phishing attacks targeting Russian government entities since the onset of the Russo-Ukrainian war in late February 2022.
« The campaigns […] are designed to implant a Remote Access Trojan (RAT) that can be used to surveil the computers it infects, and run commands on them remotely, » Malwarebytes said in a

,

An unknown advanced persistent threat (APT) group has been linked to a series of spear-phishing attacks targeting Russian government entities since the onset of the Russo-Ukrainian war in late February 2022.
« The campaigns […] are designed to implant a Remote Access Trojan (RAT) that can be used to surveil the computers it infects, and run commands on them remotely, » Malwarebytes said in a

, ,
https://thehackernews.com/2022/05/researchers-find-new-malware-attacks.html

[Template] Incident Response for Management Presentation

[Template] Incident Response for Management Presentation,

Security incidents occur. It’s not a matter of « if, » but of « when. » That’s why you implemented security products and procedures to optimize the incident response (IR) process.
However, many security pros who are doing an excellent job in handling incidents find effectively communicating the ongoing process with their management a much more challenging task.
Feels familiar?
In many organizations,

,

Security incidents occur. It’s not a matter of « if, » but of « when. » That’s why you implemented security products and procedures to optimize the incident response (IR) process.
However, many security pros who are doing an excellent job in handling incidents find effectively communicating the ongoing process with their management a much more challenging task.
Feels familiar?
In many organizations,

, ,
https://thehackernews.com/2022/05/template-incident-response-for.html

On peut pirater un compte Instagram… avant même qu’il ne soit créé !

On peut pirater un compte Instagram… avant même qu’il ne soit créé !,

Les procédures d’authentification de dizaines de services en ligne ne sont pas correctement implémentées, permettant de créer des accès parallèles en avance de phase. Parmi les services vulnérables figurent Instagram, LinkedIn, Dropbox, Zoom et WordPress.

,

Les procédures d’authentification de dizaines de services en ligne ne sont pas correctement implémentées, permettant de créer des accès parallèles en avance de phase. Parmi les services vulnérables figurent Instagram, LinkedIn, Dropbox, Zoom et WordPress.

, ,
https://www.01net.com/actualites/on-peut-pirater-un-compte-instagram-avant-meme-qu-il-ne-soit-cree-2056354.html

New Zoom Flaws Could Let Attackers Hack Victims Just by Sending them a Message

New Zoom Flaws Could Let Attackers Hack Victims Just by Sending them a Message,

Popular video conferencing service Zoom has resolved as many as four security vulnerabilities, which could be exploited to compromise another user over chat by sending specially crafted Extensible Messaging and Presence Protocol (XMPP) messages and execute malicious code.
Tracked from CVE-2022-22784 through CVE-2022-22787, the issues range between 5.9 and 8.1 in severity. Ivan Fratric of Google

,

Popular video conferencing service Zoom has resolved as many as four security vulnerabilities, which could be exploited to compromise another user over chat by sending specially crafted Extensible Messaging and Presence Protocol (XMPP) messages and execute malicious code.
Tracked from CVE-2022-22784 through CVE-2022-22787, the issues range between 5.9 and 8.1 in severity. Ivan Fratric of Google

, ,
https://thehackernews.com/2022/05/new-zoom-flaws-could-let-attackers-hack.html

Popular PyPI Package ‘ctx’ and PHP Library ‘phpass’ Hijacked to Steal AWS Keys

Popular PyPI Package ‘ctx’ and PHP Library ‘phpass’ Hijacked to Steal AWS Keys

,

Two trojanized Python and PHP packages have been uncovered in what’s yet another instance of a software supply chain attack targeting the open source ecosystem.
One of the packages in question is « ctx, » a Python module available in the PyPi repository. The other involves « phpass, » a PHP package that’s been forked on GitHub to distribute a rogue update.
« In both cases the attacker appears to have

,

Two trojanized Python and PHP packages have been uncovered in what’s yet another instance of a software supply chain attack targeting the open source ecosystem.
One of the packages in question is « ctx, » a Python module available in the PyPi repository. The other involves « phpass, » a PHP package that’s been forked on GitHub to distribute a rogue update.
« In both cases the attacker appears to have

, ,
https://thehackernews.com/2022/05/pypi-package-ctx-and-php-library-phpass.html

SIM-based Authentication Aims to Transform Device Binding Security to End Phishing

SIM-based Authentication Aims to Transform Device Binding Security to End Phishing,

Let’s face it: we all use email, and we all use passwords. Passwords create inherent vulnerability in the system. The success rate of phishing attacks is skyrocketing, and opportunities for the attack have greatly multiplied as lives moved online. All it takes is one password to be compromised for all other users to become victims of a data breach. 
To deliver additional security, therefore,

,

Let’s face it: we all use email, and we all use passwords. Passwords create inherent vulnerability in the system. The success rate of phishing attacks is skyrocketing, and opportunities for the attack have greatly multiplied as lives moved online. All it takes is one password to be compromised for all other users to become victims of a data breach. 
To deliver additional security, therefore,

, ,
https://thehackernews.com/2022/05/sim-based-authentication-aims-to.html

New Chaos Ransomware Builder Variant « Yashma » Discovered in the Wild

New Chaos Ransomware Builder Variant « Yashma » Discovered in the Wild

,

Cybersecurity researchers have disclosed details of the latest version of the Chaos ransomware line, dubbed Yashma.
« Though Chaos ransomware builder has only been in the wild for a year, Yashma claims to be the sixth version (v6.0) of this malware, » BlackBerry research and intelligence team said in a report shared with The Hacker News.
Chaos is a customizable ransomware builder that emerged in

,

Cybersecurity researchers have disclosed details of the latest version of the Chaos ransomware line, dubbed Yashma.
« Though Chaos ransomware builder has only been in the wild for a year, Yashma claims to be the sixth version (v6.0) of this malware, » BlackBerry research and intelligence team said in a report shared with The Hacker News.
Chaos is a customizable ransomware builder that emerged in

, ,
https://thehackernews.com/2022/05/new-chaos-ransomware-builder-variant.html

Cytrox Predator : Google révèle plusieurs failles zero-day utilisées pour des activités d’espionnage

Cytrox Predator : Google révèle plusieurs failles zero-day utilisées pour des activités d’espionnage

,

Armé de cinq zero-day, Cytrox a ciblé des dizaines d’utilisateurs Android pour le compte d’agences gouvernementales.

,

Armé de cinq zero-day, Cytrox a ciblé des dizaines d’utilisateurs Android pour le compte d’agences gouvernementales.

, ,
https://www.01net.com/actualites/cytrox-predator-google-revele-plusieurs-failles-zero-day-utilisees-pour-des-activites-d-espionnage-2056340.html