Unpatched GPS Tracker Bugs Could Let Attackers Disrupt Vehicles Remotely

Unpatched GPS Tracker Bugs Could Let Attackers Disrupt Vehicles Remotely,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a handful of unpatched security vulnerabilities in MiCODUS MV720 Global Positioning System (GPS) trackers outfitted in over 1.5 million vehicles that could lead to remote disruption of critical operations.
« Successful exploitation of these vulnerabilities may allow a remote actor to exploit access and gain control of

,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a handful of unpatched security vulnerabilities in MiCODUS MV720 Global Positioning System (GPS) trackers outfitted in over 1.5 million vehicles that could lead to remote disruption of critical operations.
« Successful exploitation of these vulnerabilities may allow a remote actor to exploit access and gain control of

, ,
https://thehackernews.com/2022/07/unpatched-gps-tracker-bugs-could-let.html

Dealing With Alert Overload? There’s a Guide For That

Dealing With Alert Overload? There’s a Guide For That

,

The Great Resignation – or the Great Reshuffle as some are calling it – and the growing skills gap have been dominating headlines lately. But these issues aren’t new to the cybersecurity industry. While many are just now hearing about employee burnout, security teams have faced reality and serious consequences of burnout for years. 
One of the biggest culprits? Alert overload. 
The average

,

The Great Resignation – or the Great Reshuffle as some are calling it – and the growing skills gap have been dominating headlines lately. But these issues aren’t new to the cybersecurity industry. While many are just now hearing about employee burnout, security teams have faced reality and serious consequences of burnout for years. 
One of the biggest culprits? Alert overload. 
The average

, ,
https://thehackernews.com/2022/07/dealing-with-alert-overload-theres.html

Russian Hackers Tricked Ukrainians with Fake « DoS Android Apps to Target Russia »

Russian Hackers Tricked Ukrainians with Fake « DoS Android Apps to Target Russia »

,

Russian threat actors capitalized on the ongoing conflict against Ukraine to distribute Android malware camouflaged as an app for pro-Ukrainian hacktivists to launch distributed denial-of-service (DDoS) attacks against Russian sites.
Google Threat Analysis Group (TAG) attributed the malware to Turla, an advanced persistent threat also known as Krypton, Venomous Bear, Waterbug, and Uroburos, and

,

Russian threat actors capitalized on the ongoing conflict against Ukraine to distribute Android malware camouflaged as an app for pro-Ukrainian hacktivists to launch distributed denial-of-service (DDoS) attacks against Russian sites.
Google Threat Analysis Group (TAG) attributed the malware to Turla, an advanced persistent threat also known as Krypton, Venomous Bear, Waterbug, and Uroburos, and

, ,
https://thehackernews.com/2022/07/russian-hackers-tricked-ukrainians-with.html

Russian Hackers Using DropBox and Google Drive to Drop Malicious Payloads

Russian Hackers Using DropBox and Google Drive to Drop Malicious Payloads,

The Russian state-sponsored hacking collective known as APT29 has been attributed to a new phishing campaign that takes advantage of legitimate cloud services like Google Drive and Dropbox to deliver malicious payloads on compromised systems.
« These campaigns are believed to have targeted several Western diplomatic missions between May and June 2022, » Palo Alto Networks Unit 42 said in a Tuesday

,

The Russian state-sponsored hacking collective known as APT29 has been attributed to a new phishing campaign that takes advantage of legitimate cloud services like Google Drive and Dropbox to deliver malicious payloads on compromised systems.
« These campaigns are believed to have targeted several Western diplomatic missions between May and June 2022, » Palo Alto Networks Unit 42 said in a Tuesday

, ,
https://thehackernews.com/2022/07/russian-hackers-using-dropbox-and.html

Jailbreak : iOS 15, iPadOS 15, et les iPhone 13 sont sur le point de tomber…

Jailbreak : iOS 15, iPadOS 15, et les iPhone 13 sont sur le point de tomber…,

,

Le jailbreak d'iOS 15 permettrait notamment le sideloading...

Alors qu’iOS 16 est en approche, la scène jailbreak vient d’annoncer que les iPhone 13 et les iPad sous iOS et iPadOS 15 seront bientôt « déverrouillables ». Une bonne nouvelle pour les aficionados de cette pratique, mais qui pose toujours des questions de sécurité à court et moyen termes.

L’article Jailbreak : iOS 15, iPadOS 15, et les iPhone 13 sont sur le point de tomber… est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/jailbreak-ios-15-ipados-15-et-les-iphone-13-sont-sur-le-point-de-tomber.html

Experts Uncover New CloudMensis Spyware Targeting Apple macOS Users

Experts Uncover New CloudMensis Spyware Targeting Apple macOS Users,

Cybersecurity researchers have taken the wraps off a previously undocumented spyware targeting the Apple macOS operating system.
The malware, codenamed CloudMensis by Slovak cybersecurity firm ESET, is said to exclusively use public cloud storage services such as pCloud, Yandex Disk, and Dropbox for receiving attacker commands and exfiltrating files.
« Its capabilities clearly show that the

,

Cybersecurity researchers have taken the wraps off a previously undocumented spyware targeting the Apple macOS operating system.
The malware, codenamed CloudMensis by Slovak cybersecurity firm ESET, is said to exclusively use public cloud storage services such as pCloud, Yandex Disk, and Dropbox for receiving attacker commands and exfiltrating files.
« Its capabilities clearly show that the

, ,
https://thehackernews.com/2022/07/experts-uncover-new-cloudmensis-spyware.html

Security Experts Warn of Two Primary Client-Side Risks Associated with Data Exfiltration and Loss

Security Experts Warn of Two Primary Client-Side Risks Associated with Data Exfiltration and Loss,

Two client-side risks dominate the problems with data loss and data exfiltration: improperly placed trackers on websites and web applications and malicious client-side code pulled from third-party repositories like NPM. 
Client-side security researchers are finding that improperly placed trackers, while not intentionally malicious, are a growing problem and have clear and significant privacy

,

Two client-side risks dominate the problems with data loss and data exfiltration: improperly placed trackers on websites and web applications and malicious client-side code pulled from third-party repositories like NPM. 
Client-side security researchers are finding that improperly placed trackers, while not intentionally malicious, are a growing problem and have clear and significant privacy

, ,
https://thehackernews.com/2022/07/security-experts-warn-of-two-primary.html

New Air-Gap Attack Uses SATA Cable as an Antenna to Transfer Radio Signals

New Air-Gap Attack Uses SATA Cable as an Antenna to Transfer Radio Signals,

A new method devised to leak information and jump over air-gaps takes advantage of Serial Advanced Technology Attachment (SATA) or Serial ATA cables as a communication medium, adding to a long list of electromagnetic, magnetic, electric, optical, and acoustic methods already demonstrated to plunder data.
« Although air-gap computers have no wireless connectivity, we show that attackers can use

,

A new method devised to leak information and jump over air-gaps takes advantage of Serial Advanced Technology Attachment (SATA) or Serial ATA cables as a communication medium, adding to a long list of electromagnetic, magnetic, electric, optical, and acoustic methods already demonstrated to plunder data.
« Although air-gap computers have no wireless connectivity, we show that attackers can use

, ,
https://thehackernews.com/2022/07/new-air-gap-attack-uses-sata-cable-as.html

Several New Play Store Apps Spotted Distributing Joker, Facestealer and Coper Malware

Several New Play Store Apps Spotted Distributing Joker, Facestealer and Coper Malware,

Google has taken steps to ax dozens of fraudulent apps from the official Play Store that were spotted propagating Joker, Facestealer, and Coper malware families through the virtual marketplace.
While the Android storefront is considered to be a trusted source for discovering and installing apps, bad actors have repeatedly found ways to sneak past security barriers erected by Google in hopes of

,

Google has taken steps to ax dozens of fraudulent apps from the official Play Store that were spotted propagating Joker, Facestealer, and Coper malware families through the virtual marketplace.
While the Android storefront is considered to be a trusted source for discovering and installing apps, bad actors have repeatedly found ways to sneak past security barriers erected by Google in hopes of

, ,
https://thehackernews.com/2022/07/several-new-play-store-apps-spotted.html

Facebook a trouvé un nouveau moyen incontournable de vous tracker facilement

Facebook a trouvé un nouveau moyen incontournable de vous tracker facilement,

,

facebook instagram

En modifiant la façon dont sont générées les URL qui pointent vers certains contenus, Facebook s’est assuré de pouvoir tracker les utilisateurs à coup sûr, court-circuitant les efforts de navigateurs, comme Brave, ou Firefox, qui bloquaient la méthode précédente depuis peu.

L’article Facebook a trouvé un nouveau moyen incontournable de vous tracker facilement est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/facebook-a-trouve-un-nouveau-moyen-de-vous-tracker-facilement-et-de-maniere-incontournable.html