State-Backed Hackers Targeting Journalists in Widespread Espionage Campaigns

State-Backed Hackers Targeting Journalists in Widespread Espionage Campaigns,

Nation-state hacking groups aligned with China, Iran, North Korea, and Turkey have been targeting journalists to conduct espionage and spread malware as part of a series of campaigns since early 2021.
« Most commonly, phishing attacks targeting journalists are used for espionage or to gain key insights into the inner workings of another government, company, or other area of state-designated

,

Nation-state hacking groups aligned with China, Iran, North Korea, and Turkey have been targeting journalists to conduct espionage and spread malware as part of a series of campaigns since early 2021.
« Most commonly, phishing attacks targeting journalists are used for espionage or to gain key insights into the inner workings of another government, company, or other area of state-designated

, ,
https://thehackernews.com/2022/07/state-backed-hackers-targeting.html

A Simple Formula for Getting Your IT Security Budget Approved

A Simple Formula for Getting Your IT Security Budget Approved,

Although there is a greater awareness of cybersecurity threats than ever before, it is becoming increasingly difficult for IT departments to get their security budgets approved. Security budgets seem to shrink each year and IT pros are constantly being asked to do more with less. Even so, the situation may not be hopeless. There are some things that IT pros can do to improve the chances of

,

Although there is a greater awareness of cybersecurity threats than ever before, it is becoming increasingly difficult for IT departments to get their security budgets approved. Security budgets seem to shrink each year and IT pros are constantly being asked to do more with less. Even so, the situation may not be hopeless. There are some things that IT pros can do to improve the chances of

, ,
https://thehackernews.com/2022/07/a-simple-formula-for-getting-your-it.html

Microsoft Details App Sandbox Escape Bug Impacting Apple iOS, iPadOS, macOS Devices

Microsoft Details App Sandbox Escape Bug Impacting Apple iOS, iPadOS, macOS Devices,

Microsoft on Wednesday shed light on a now patched security vulnerability affecting Apple’s operating systems that, if successfully exploited, could allow attackers to escalate device privileges and deploy malware.
« An attacker could take advantage of this sandbox escape vulnerability to gain elevated privileges on the affected device or execute malicious commands like installing additional

,

Microsoft on Wednesday shed light on a now patched security vulnerability affecting Apple’s operating systems that, if successfully exploited, could allow attackers to escalate device privileges and deploy malware.
« An attacker could take advantage of this sandbox escape vulnerability to gain elevated privileges on the affected device or execute malicious commands like installing additional

, ,
https://thehackernews.com/2022/07/microsoft-details-app-sandbox-escape.html

Pakistani Hackers Targeting Indian Students in Latest Malware Campaign

Pakistani Hackers Targeting Indian Students in Latest Malware Campaign,

The advanced persistent threat (APT) group known as Transparent Tribe has been attributed to a new ongoing phishing campaign targeting students at various educational institutions in India at least since December 2021.
« This new campaign also suggests that the APT is actively expanding its network of victims to include civilian users, » Cisco Talos said in a report shared with The Hacker News.

,

The advanced persistent threat (APT) group known as Transparent Tribe has been attributed to a new ongoing phishing campaign targeting students at various educational institutions in India at least since December 2021.
« This new campaign also suggests that the APT is actively expanding its network of victims to include civilian users, » Cisco Talos said in a report shared with The Hacker News.

, ,
https://thehackernews.com/2022/07/pakistani-hackers-targeting-indian.html

Intel et AMD sont à nouveau confrontés à des attaques semblables à Spectre sur certains microprocesseurs

Intel et AMD sont à nouveau confrontés à des attaques semblables à Spectre sur certains microprocesseurs,

,

Les chercheurs Johannes Wikner et Kaveh Razavi de l’ETH Zurich ont découvert que certains processeurs Intel et AMD pouvaient être vulnérables à une nouvelle catégorie d’attaques, semblables à la variante 2 de Spectre, même s’ils sont protégés par les correctifs déployés en 2018.

L’article Intel et AMD sont à nouveau confrontés à des attaques semblables à Spectre sur certains microprocesseurs est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/intel-et-amd-sont-a-nouveau-confrontes-a-des-attaques-semblables-a-spectre-sur-certains-microprocesseurs.html

New ‘Retbleed’ Speculative Execution Attack Affects AMD and Intel CPUs

New ‘Retbleed’ Speculative Execution Attack Affects AMD and Intel CPUs

,

Security researchers have uncovered yet another vulnerability affecting numerous older AMD and Intel microprocessors that could bypass current defenses and result in Spectre-based speculative-execution attacks.
Dubbed Retbleed by ETH Zurich researchers Johannes Wikner and Kaveh Razavi, the issues are tracked as CVE-2022-29900 (AMD) and CVE-2022-29901 (Intel), with the chipmakers releasing 

,

Security researchers have uncovered yet another vulnerability affecting numerous older AMD and Intel microprocessors that could bypass current defenses and result in Spectre-based speculative-execution attacks.
Dubbed Retbleed by ETH Zurich researchers Johannes Wikner and Kaveh Razavi, the issues are tracked as CVE-2022-29900 (AMD) and CVE-2022-29901 (Intel), with the chipmakers releasing 

, ,
https://thehackernews.com/2022/07/new-retbleed-speculative-execution.html

U.S. FTC Vows to Crack Down on illegal Use and Sharing of Citizens’ Sensitive Data

U.S. FTC Vows to Crack Down on illegal Use and Sharing of Citizens’ Sensitive Data

,

The U.S. Federal Trade Commission (FTC) warned this week that it will crack down on tech companies’ illegal use and sharing of highly sensitive data and false claims about data anonymization.
« While many consumers may happily offer their location data in exchange for real-time crowd-sourced advice on the fastest route home, they likely think differently about having their thinly-disguised online

,

The U.S. Federal Trade Commission (FTC) warned this week that it will crack down on tech companies’ illegal use and sharing of highly sensitive data and false claims about data anonymization.
« While many consumers may happily offer their location data in exchange for real-time crowd-sourced advice on the fastest route home, they likely think differently about having their thinly-disguised online

, ,
https://thehackernews.com/2022/07/us-ftc-vows-to-crack-down-on-illegal.html

New UEFI Firmware Vulnerabilities Impact Several Lenovo Notebook Models

New UEFI Firmware Vulnerabilities Impact Several Lenovo Notebook Models,

Consumer electronics maker Lenovo on Tuesday rolled out fixes to contain three security flaws in its UEFI firmware affecting over 70 product models.
« The vulnerabilities can be exploited to achieve arbitrary code execution in the early phases of the platform boot, possibly allowing the attackers to hijack the OS execution flow and disable some important security features, » Slovak cybersecurity

,

Consumer electronics maker Lenovo on Tuesday rolled out fixes to contain three security flaws in its UEFI firmware affecting over 70 product models.
« The vulnerabilities can be exploited to achieve arbitrary code execution in the early phases of the platform boot, possibly allowing the attackers to hijack the OS execution flow and disable some important security features, » Slovak cybersecurity

, ,
https://thehackernews.com/2022/07/new-uefi-firmware-vulnerabilities.html

Microsoft a découvert une campagne de phishing ayant touché 10 000 entreprises

Microsoft a découvert une campagne de phishing ayant touché 10 000 entreprises,

,

tete de mort - matrix - hacker -pirate

La firme de Redmond a publié les détails d’une attaque par hameçonnage capable d’outrepasser les comptes protégés avec une double authentification. Au moins 10 000 entreprises auraient été touchées depuis septembre dernier.

L’article Microsoft a découvert une campagne de phishing ayant touché 10 000 entreprises est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/microsoft-a-decouvert-une-campagne-de-phishing-ayant-touche-10-000-entreprises.html

Microsoft Warns of Large-Scale AiTM Phishing Attacks Against Over 10,000 Organizations

Microsoft Warns of Large-Scale AiTM Phishing Attacks Against Over 10,000 Organizations,

Microsoft on Tuesday disclosed that a large-scale phishing campaign targeted over 10,000 organizations since September 2021 by hijacking Office 365’s authentication process even on accounts secured with multi-factor authentication (MFA).
« The attackers then used the stolen credentials and session cookies to access affected users’ mailboxes and perform follow-on business email compromise (BEC)

,

Microsoft on Tuesday disclosed that a large-scale phishing campaign targeted over 10,000 organizations since September 2021 by hijacking Office 365’s authentication process even on accounts secured with multi-factor authentication (MFA).
« The attackers then used the stolen credentials and session cookies to access affected users’ mailboxes and perform follow-on business email compromise (BEC)

, ,
https://thehackernews.com/2022/07/microsoft-warns-of-large-scale-aitm.html