Samsung Admits Data Breach that Exposed Details of Some U.S. Customers

Samsung Admits Data Breach that Exposed Details of Some U.S. Customers,

South Korean chaebol Samsung on Friday said it experienced a cybersecurity incident that resulted in the unauthorized access of some customer information, the second time this year it has reported such a breach.
« In late July 2022, an unauthorized third-party acquired information from some of Samsung’s U.S. systems, » the company disclosed in a notice. « On or around August 4, 2022, we determined

,

South Korean chaebol Samsung on Friday said it experienced a cybersecurity incident that resulted in the unauthorized access of some customer information, the second time this year it has reported such a breach.
« In late July 2022, an unauthorized third-party acquired information from some of Samsung’s U.S. systems, » the company disclosed in a notice. « On or around August 4, 2022, we determined

, ,
https://thehackernews.com/2022/09/samsung-admits-data-breach-that-exposed.html

Google Release Urgent Chrome Update to Patch New Zero-Day Vulnerability

Google Release Urgent Chrome Update to Patch New Zero-Day Vulnerability,

Google on Friday shipped emergency fixes to address a security vulnerability in the Chrome web browser that it said is being actively exploited in the wild.
The issue, assigned the identifier CVE-2022-3075, concerns a case of insufficient data validating in Mojo, which refers to a collection of runtime libraries that provide a platform-agnostic mechanism for inter-process communication (IPC).
An

,

Google on Friday shipped emergency fixes to address a security vulnerability in the Chrome web browser that it said is being actively exploited in the wild.
The issue, assigned the identifier CVE-2022-3075, concerns a case of insufficient data validating in Mojo, which refers to a collection of runtime libraries that provide a platform-agnostic mechanism for inter-process communication (IPC).
An

, ,
https://thehackernews.com/2022/09/google-release-urgent-chrome-update-to.html

Prynt Stealer Contains a Backdoor to Steal Victims’ Data Stolen by Other Cybercriminals

Prynt Stealer Contains a Backdoor to Steal Victims’ Data Stolen by Other Cybercriminals

,

Researchers discovered a private Telegram channel-based backdoor in the information stealing malware, dubbed Prynt Stealer, which its developer added with the intention of secretly stealing a copy of victims’ exfiltrated data when used by other cybercriminals.
« While this untrustworthy behavior is nothing new in the world of cybercrime, the victims’ data end up in the hands of multiple threat

,

Researchers discovered a private Telegram channel-based backdoor in the information stealing malware, dubbed Prynt Stealer, which its developer added with the intention of secretly stealing a copy of victims’ exfiltrated data when used by other cybercriminals.
« While this untrustworthy behavior is nothing new in the world of cybercrime, the victims’ data end up in the hands of multiple threat

, ,
https://thehackernews.com/2022/09/prynt-stealer-contains-backdoor-to.html

JuiceLedger Hackers Behind the Recent Phishing Attacks Against PyPI Users

JuiceLedger Hackers Behind the Recent Phishing Attacks Against PyPI Users,

More details have emerged about the operators behind the first-known phishing campaign specifically aimed at the Python Package Index (PyPI), the official third-party software repository for the programming language.
Connecting it to a threat actor tracked as JuiceLedger, cybersecurity firm SentinelOne, along with Checkmarx, described the group as a relatively new entity that surfaced in early

,

More details have emerged about the operators behind the first-known phishing campaign specifically aimed at the Python Package Index (PyPI), the official third-party software repository for the programming language.
Connecting it to a threat actor tracked as JuiceLedger, cybersecurity firm SentinelOne, along with Checkmarx, described the group as a relatively new entity that surfaced in early

, ,
https://thehackernews.com/2022/09/juiceledger-hackers-behind-recent.html

The Ultimate Security Blind Spot You Don’t Know You Have

The Ultimate Security Blind Spot You Don’t Know You Have

,

How much time do developers spend actually writing code?
According to recent studies, developers spend more time maintaining, testing and securing existing code than they do writing or improving code. Security vulnerabilities have a bad habit of popping up during the software development process, only to surface after an application has been deployed. The disappointing part is that many of these

,

How much time do developers spend actually writing code?
According to recent studies, developers spend more time maintaining, testing and securing existing code than they do writing or improving code. Security vulnerabilities have a bad habit of popping up during the software development process, only to surface after an application has been deployed. The disappointing part is that many of these

, ,
https://thehackernews.com/2022/09/the-ultimate-security-blind-spot-you.html

Warning: PyPI Feature Executes Code Automatically After Python Package Download

Warning: PyPI Feature Executes Code Automatically After Python Package Download,

In another finding that could expose developers to increased risk of a supply chain attack, it has emerged that nearly one-third of the packages in PyPI, the Python Package Index, trigger automatic code execution upon downloading them.
« A worrying feature in pip/PyPI allows code to automatically run when developers are merely downloading a package, » Checkmarx researcher Yehuda Gelb said in a

,

In another finding that could expose developers to increased risk of a supply chain attack, it has emerged that nearly one-third of the packages in PyPI, the Python Package Index, trigger automatic code execution upon downloading them.
« A worrying feature in pip/PyPI allows code to automatically run when developers are merely downloading a package, » Checkmarx researcher Yehuda Gelb said in a

, ,
https://thehackernews.com/2022/09/warning-pypi-feature-executes-code.html

Une faille dans Chrome permet aux sites de modifier en douce votre presse-papier

Une faille dans Chrome permet aux sites de modifier en douce votre presse-papier,

,

En raison d’un bug, les sites web peuvent altérer le contenu du presse-papier à n’importe quel moment, sans que cela soit lié à une action de l’utilisateur. Ce qui est plutôt dangereux.

L’article Une faille dans Chrome permet aux sites de modifier en douce votre presse-papier est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/une-faille-dans-chrome-permet-aux-sites-de-modifier-en-douce-votre-presse-papier.html

New Evidence Links Raspberry Robin Malware to Dridex and Russian Evil Corp Hackers

New Evidence Links Raspberry Robin Malware to Dridex and Russian Evil Corp Hackers,

Researchers have identified functional similarities between a malicious component used in the Raspberry Robin infection chain and a Dridex malware loader, further strengthening the operators’ connections to the Russia-based Evil Corp group.
The findings suggest that « Evil Corp is likely using Raspberry Robin infrastructure to carry out its attacks, » IBM Security X-Force researcher Kevin Henson 

,

Researchers have identified functional similarities between a malicious component used in the Raspberry Robin infection chain and a Dridex malware loader, further strengthening the operators’ connections to the Russia-based Evil Corp group.
The findings suggest that « Evil Corp is likely using Raspberry Robin infrastructure to carry out its attacks, » IBM Security X-Force researcher Kevin Henson 

, ,
https://thehackernews.com/2022/09/new-evidence-links-raspberry-robin.html

Google Chrome Bug Lets Sites Silently Overwrite System Clipboard Content

Google Chrome Bug Lets Sites Silently Overwrite System Clipboard Content,

A « major » security issue in the Google Chrome web browser, as well as Chromium-based alternatives, could allow malicious web pages to automatically overwrite clipboard content without requiring any user consent or interaction by simply visiting them.
The clipboard poisoning attack is said to have been accidentally introduced in Chrome version 104, according to developer Jeff Johnson.
While the

,

A « major » security issue in the Google Chrome web browser, as well as Chromium-based alternatives, could allow malicious web pages to automatically overwrite clipboard content without requiring any user consent or interaction by simply visiting them.
The clipboard poisoning attack is said to have been accidentally introduced in Chrome version 104, according to developer Jeff Johnson.
While the

, ,
https://thehackernews.com/2022/09/google-chrome-bug-lets-sites-silently.html

Une fausse application Google mine des cryptomonnaies sur des milliers de PC

Une fausse application Google mine des cryptomonnaies sur des milliers de PC,

,

monero crypto

Une fausse application Google Traduction se propage sur la toile. Elle cache un malware capable de miner du Monero, une cryptomonnaie très appréciée des cybercriminels, avec l’ordinateur des internautes.

L’article Une fausse application Google mine des cryptomonnaies sur des milliers de PC est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/fausse-application-google-mine-cryptomonnaies-milliers-pc.html