U.S. Proposes $1 Million Fine on Colonial Pipeline for Safety Violations After Cyberattack

U.S. Proposes $1 Million Fine on Colonial Pipeline for Safety Violations After Cyberattack,

The U.S. Department of Transportation’s Pipeline and Hazardous Materials Safety Administration (PHMSA) has proposed a penalty of nearly $1 million to Colonial Pipeline for violating federal safety regulations, worsening the impact of the ransomware attack last year.
The $986,400 penalty is the result of an inspection conducted by the regulator of the pipeline operator’s control room management (

,

The U.S. Department of Transportation’s Pipeline and Hazardous Materials Safety Administration (PHMSA) has proposed a penalty of nearly $1 million to Colonial Pipeline for violating federal safety regulations, worsening the impact of the ransomware attack last year.
The $986,400 penalty is the result of an inspection conducted by the regulator of the pipeline operator’s control room management (

, ,
https://thehackernews.com/2022/05/us-proposes-1-million-fine-on-colonial.html

Critical Gems Takeover Bug Reported in RubyGems Package Manager

Critical Gems Takeover Bug Reported in RubyGems Package Manager,

The maintainers of the RubyGems package manager have addressed a critical security flaw that could have been abused to remove gems and replace them with rogue versions under specific circumstances.
« Due to a bug in the yank action, it was possible for any RubyGems.org user to remove and replace certain gems even if that user was not authorized to do so, » RubyGems said in a security advisory

,

The maintainers of the RubyGems package manager have addressed a critical security flaw that could have been abused to remove gems and replace them with rogue versions under specific circumstances.
« Due to a bug in the yank action, it was possible for any RubyGems.org user to remove and replace certain gems even if that user was not authorized to do so, » RubyGems said in a security advisory

, ,
https://thehackernews.com/2022/05/critical-gems-takeover-bug-reported-in.html

Ce ver informatique se propage, à l’ancienne, grâce à une clé USB

Ce ver informatique se propage, à l’ancienne, grâce à une clé USB

,

Camouflé dans un fichier de raccourci Windows, le malware « Raspberry Robin » contacte des serveurs NAS infectés pour prendre le contrôle du système. Mais beaucoup de questions restent en suspens.

,

Camouflé dans un fichier de raccourci Windows, le malware « Raspberry Robin » contacte des serveurs NAS infectés pour prendre le contrôle du système. Mais beaucoup de questions restent en suspens.

, ,
https://www.01net.com/actualites/ce-ver-informatique-se-propage-a-l-ancienne-grace-a-une-cle-usb-2056172.html

Experts Sound Alarm on DCRat Backdoor Being Sold on Russian Hacking Forums

Experts Sound Alarm on DCRat Backdoor Being Sold on Russian Hacking Forums,

Cybersecurity researchers have shed light on an actively maintained remote access trojan called DCRat (aka DarkCrystal RAT) that’s offered on sale for « dirt cheap » prices, making it accessible to professional cybercriminal groups and novice actors alike.
« Unlike the well-funded, massive Russian threat groups crafting custom malware […], this remote access Trojan (RAT) appears to be the work of

,

Cybersecurity researchers have shed light on an actively maintained remote access trojan called DCRat (aka DarkCrystal RAT) that’s offered on sale for « dirt cheap » prices, making it accessible to professional cybercriminal groups and novice actors alike.
« Unlike the well-funded, massive Russian threat groups crafting custom malware […], this remote access Trojan (RAT) appears to be the work of

, ,
https://thehackernews.com/2022/05/experts-sound-alarm-on-dcrat-backdoor.html

SHIELDS UP in bite sized chunks

SHIELDS UP in bite sized chunks,

Unless you are living completely off the grid, you know the horrifying war in Ukraine and the related geopolitical tensions have dramatically increased cyberattacks and the threat of even more to come.
The Cybersecurity and Infrastructure Security Agency (CISA) provides guidance to US federal agencies in their fight against cybercrime, and the agency’s advice has proven so valuable that it’s

,

Unless you are living completely off the grid, you know the horrifying war in Ukraine and the related geopolitical tensions have dramatically increased cyberattacks and the threat of even more to come.
The Cybersecurity and Infrastructure Security Agency (CISA) provides guidance to US federal agencies in their fight against cybercrime, and the agency’s advice has proven so valuable that it’s

, ,
https://thehackernews.com/2022/05/shields-up-in-bite-sized-chunks.html

Another Set of Joker Trojan-Laced Android Apps Resurfaces on Google Play Store

Another Set of Joker Trojan-Laced Android Apps Resurfaces on Google Play Store,

A new set of trojanized apps spread via the Google Play Store has been observed distributing the notorious Joker malware on compromised Android devices.
Joker, a repeat offender, refers to a class of harmful apps that are used for billing and SMS fraud, while also performing a number of actions of a malicious hacker’s choice, such as stealing text messages, contact lists, and device information.

,

A new set of trojanized apps spread via the Google Play Store has been observed distributing the notorious Joker malware on compromised Android devices.
Joker, a repeat offender, refers to a class of harmful apps that are used for billing and SMS fraud, while also performing a number of actions of a malicious hacker’s choice, such as stealing text messages, contact lists, and device information.

, ,
https://thehackernews.com/2022/05/another-set-of-joker-trojan-laced.html

Ukrainian CERT Warns Citizens of a New Wave of Attacks Distributing Jester Malware

Ukrainian CERT Warns Citizens of a New Wave of Attacks Distributing Jester Malware,

The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of phishing attacks that deploy an information-stealing malware called Jester Stealer on compromised systems.
The mass email campaign carries the subject line « chemical attack » and contains a link to a macro-enabled Microsoft Excel file, opening which leads to computers getting infected with Jester Stealer.
The attack, which

,

The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of phishing attacks that deploy an information-stealing malware called Jester Stealer on compromised systems.
The mass email campaign carries the subject line « chemical attack » and contains a link to a macro-enabled Microsoft Excel file, opening which leads to computers getting infected with Jester Stealer.
The attack, which

, ,
https://thehackernews.com/2022/05/ukrainian-cert-warns-citizens-of-new.html

Des chercheurs en sécurité révèlent des failles vieilles de plusieurs années dans Avast et AVG

Des chercheurs en sécurité révèlent des failles vieilles de plusieurs années dans Avast et AVG,

Deux failles critiques viennent d’être dévoilées par les chercheurs en sécurité de SentinelOne. Elles ont été présentes dans les antivirus Avast et AVG entre 2016 et 2022.

,

Deux failles critiques viennent d’être dévoilées par les chercheurs en sécurité de SentinelOne. Elles ont été présentes dans les antivirus Avast et AVG entre 2016 et 2022.

, ,
https://www.01net.com/actualites/des-chercheurs-en-securite-revelent-des-failles-vieilles-de-plusieurs-annees-dans-avast-et-avg-2056146.html

U.S. Offering $10 Million Reward for Information on Conti Ransomware Hackers

U.S. Offering $10 Million Reward for Information on Conti Ransomware Hackers,

The U.S. State Department has announced rewards of up to $10 million for any information leading to the identification of key individuals who are part of the infamous Conti cybercrime gang.
Additionally, it’s offering another $5 million for intelligence information that could help arrest or convict individuals who are conspiring or attempting to affiliate with the group in a ransomware attack.

,

The U.S. State Department has announced rewards of up to $10 million for any information leading to the identification of key individuals who are part of the infamous Conti cybercrime gang.
Additionally, it’s offering another $5 million for intelligence information that could help arrest or convict individuals who are conspiring or attempting to affiliate with the group in a ransomware attack.

, ,
https://thehackernews.com/2022/05/us-offering-10-million-reward-for.html

Researchers Develop RCE Exploit for the Latest F5 BIG-IP Vulnerability

Researchers Develop RCE Exploit for the Latest F5 BIG-IP Vulnerability,

Days after F5 released patches for a critical remote code execution vulnerability affecting its BIG-IP family of products, security researchers are warning that they were able to create an exploit for the shortcoming.
Tracked CVE-2022-1388 (CVSS score: 9.8), the flaw relates to an iControl REST authentication bypass that, if successfully exploited, could lead to remote code execution, allowing

,

Days after F5 released patches for a critical remote code execution vulnerability affecting its BIG-IP family of products, security researchers are warning that they were able to create an exploit for the shortcoming.
Tracked CVE-2022-1388 (CVSS score: 9.8), the flaw relates to an iControl REST authentication bypass that, if successfully exploited, could lead to remote code execution, allowing

, ,
https://thehackernews.com/2022/05/researchers-develop-rce-exploit-for.html