19-Year-Old Teen Arrested for Using Leaked Optus Breach Data in SMS Scam

19-Year-Old Teen Arrested for Using Leaked Optus Breach Data in SMS Scam,

The Australian Federal Police (AFP) has arrested a 19-year-old teen from Sydney for allegedly attempting to leverage the data leaked following the Optus data breach late last month to extort victims.
The suspect is said to have carried out a text message blackmail scam, demanding that the recipients transfer $2,000 to a bank account or risk getting their personal information misused for

,

The Australian Federal Police (AFP) has arrested a 19-year-old teen from Sydney for allegedly attempting to leverage the data leaked following the Optus data breach late last month to extort victims.
The suspect is said to have carried out a text message blackmail scam, demanding that the recipients transfer $2,000 to a bank account or risk getting their personal information misused for

, ,
https://thehackernews.com/2022/10/19-year-old-hacker-arrested-for-using.html

Former Uber Security Chief Found Guilty of Data Breach Coverup

Former Uber Security Chief Found Guilty of Data Breach Coverup,

A U.S. federal court jury has found former Uber Chief Security Officer Joseph Sullivan guilty of not disclosing a 2016 breach of customer and driver records to regulators and attempting to cover up the incident.
Sullivan has been convicted on two counts: One for obstructing justice by not reporting the incident and another for misprision. He faces a maximum of five years in prison for the

,

A U.S. federal court jury has found former Uber Chief Security Officer Joseph Sullivan guilty of not disclosing a 2016 breach of customer and driver records to regulators and attempting to cover up the incident.
Sullivan has been convicted on two counts: One for obstructing justice by not reporting the incident and another for misprision. He faces a maximum of five years in prison for the

, ,
https://thehackernews.com/2022/10/former-uber-security-chief-found-guilty.html

Pourquoi Facebook est l’application la plus dangereuse de votre smartphone

Pourquoi Facebook est l’application la plus dangereuse de votre smartphone,

,

facebook instagram

Facebook est une application dangereuse pour la vie privée des utilisateurs, révèle une étude. En plus de collecter une montagne de données personnelles sur ses membres, le réseau social est l’une des cibles préférées des hackers.

L’article Pourquoi Facebook est l’application la plus dangereuse de votre smartphone est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/pourquoi-facebook-application-la-plus-dangereuse-smartphone.html

Experts Warn of New RatMilad Android Spyware Targeting Enterprise Devices

Experts Warn of New RatMilad Android Spyware Targeting Enterprise Devices,

A novel Android malware called RatMilad has been observed targeting a Middle Eastern enterprise mobile device by concealing itself as a VPN and phone number spoofing app.
The mobile trojan functions as advanced spyware with capabilities that receives and executes commands to collect and exfiltrate a wide variety of data from the infected mobile endpoint, Zimperium said in a report shared with

,

A novel Android malware called RatMilad has been observed targeting a Middle Eastern enterprise mobile device by concealing itself as a VPN and phone number spoofing app.
The mobile trojan functions as advanced spyware with capabilities that receives and executes commands to collect and exfiltrate a wide variety of data from the infected mobile endpoint, Zimperium said in a report shared with

, ,
https://thehackernews.com/2022/10/experts-warn-of-new-ratmilad-android.html

Telstra Telecom Suffers Data Breach Potentially Exposing Employee Information

Telstra Telecom Suffers Data Breach Potentially Exposing Employee Information,

Australia’s largest telecommunications company Telstra disclosed that it was the victim of a data breach through a third-party, nearly two weeks after Optus reported a breach of its own.
« There has been no breach of Telstra’s systems, » Narelle Devine, the company’s chief information security officer for the Asia Pacific region, said. « And no customer account data was involved. »

It

,

Australia’s largest telecommunications company Telstra disclosed that it was the victim of a data breach through a third-party, nearly two weeks after Optus reported a breach of its own.
« There has been no breach of Telstra’s systems, » Narelle Devine, the company’s chief information security officer for the Asia Pacific region, said. « And no customer account data was involved. »

It

, ,
https://thehackernews.com/2022/10/telstra-telecom-suffers-data-breach.html

FBI, CISA, and NSA Reveal How Hackers Targeted a Defense Industrial Base Organization

FBI, CISA, and NSA Reveal How Hackers Targeted a Defense Industrial Base Organization,

U.S. cybersecurity and intelligence agencies on Tuesday disclosed that multiple nation-state hacking groups potentially targeted a « Defense Industrial Base (DIB) Sector organization’s enterprise network » as part of a cyber espionage campaign.
« [Advanced persistent threat] actors used an open-source toolkit called Impacket to gain their foothold within the environment and further compromise the

,

U.S. cybersecurity and intelligence agencies on Tuesday disclosed that multiple nation-state hacking groups potentially targeted a « Defense Industrial Base (DIB) Sector organization’s enterprise network » as part of a cyber espionage campaign.
« [Advanced persistent threat] actors used an open-source toolkit called Impacket to gain their foothold within the environment and further compromise the

, ,
https://thehackernews.com/2022/10/fbi-cisa-and-nsa-reveal-how-hackers.html

Want More Secure Software? Start Recognizing Security-Skilled Developers

Want More Secure Software? Start Recognizing Security-Skilled Developers,

Professional developers want to do the right thing, but in terms of security, they are rarely set up for success. Organizations must support their upskilling with precision training and incentives if they want secure software from the ground up.
The cyber threat landscape grows more complex by the day, with our data widely considered highly desirable “digital gold”. Attackers are constantly

,

Professional developers want to do the right thing, but in terms of security, they are rarely set up for success. Organizations must support their upskilling with precision training and incentives if they want secure software from the ground up.
The cyber threat landscape grows more complex by the day, with our data widely considered highly desirable “digital gold”. Attackers are constantly

, ,
https://thehackernews.com/2022/10/want-more-secure-software-start.html

Canadian Netwalker Ransomware Affiliate Sentenced to 20 Years in U.S. Prison

Canadian Netwalker Ransomware Affiliate Sentenced to 20 Years in U.S. Prison,

A former affiliate of the Netwalker ransomware has been sentenced to 20 years in prison in the U.S., a little over three months after the Canadian national pleaded guilty to his role in the crimes.
Sebastien Vachon-Desjardins, 35, has also been ordered to forfeit $21,500,000 that was illicitly obtained from dozens of victims globally, including companies, municipalities, hospitals, law

,

A former affiliate of the Netwalker ransomware has been sentenced to 20 years in prison in the U.S., a little over three months after the Canadian national pleaded guilty to his role in the crimes.
Sebastien Vachon-Desjardins, 35, has also been ordered to forfeit $21,500,000 that was illicitly obtained from dozens of victims globally, including companies, municipalities, hospitals, law

, ,
https://thehackernews.com/2022/10/canadian-netwalker-ransomware-affiliate.html

Mitigation for Exchange Zero-Days Bypassed! Microsoft Issues New Workarounds

Mitigation for Exchange Zero-Days Bypassed! Microsoft Issues New Workarounds,

Microsoft has revised its mitigation measures for the newly disclosed and actively exploited zero-day flaws in Exchange Server after it was found that they could be trivially bypassed.
The two vulnerabilities, tracked as CVE-2022-41040 and CVE-2022-41082, have been codenamed ProxyNotShell due to similarities to another set of flaws called ProxyShell, which the tech giant resolved last year.

,

Microsoft has revised its mitigation measures for the newly disclosed and actively exploited zero-day flaws in Exchange Server after it was found that they could be trivially bypassed.
The two vulnerabilities, tracked as CVE-2022-41040 and CVE-2022-41082, have been codenamed ProxyNotShell due to similarities to another set of flaws called ProxyShell, which the tech giant resolved last year.

, ,
https://thehackernews.com/2022/10/mitigation-for-exchange-zero-days.html

Changez rapidement vos mots de passe, votre « ex » les connaît peut-être…

Changez rapidement vos mots de passe, votre « ex » les connaît peut-être…,

,

mot de passe smartphone

Dans une nouvelle étude, la société Avast alerte sur un problème de sécurité auquel on ne pense pas forcément : le fait que votre ex-partenaire connait peut-être un ou plusieurs de vos mots de passe.

L’article Changez rapidement vos mots de passe, votre « ex » les connaît peut-être… est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/changez-rapidement-vos-mots-de-passe-votre-ex-les-connait-peut-etre.html