Comprehensive, Easy Cybersecurity for Lean IT Security Teams Starts with XDR

Comprehensive, Easy Cybersecurity for Lean IT Security Teams Starts with XDR,

Breaches don’t just happen to large enterprises. Threat actors are increasingly targeting small businesses. In fact, 43% of data breaches involved small to medium-sized businesses. But there is a glaring discrepancy. Larger businesses typically have the budget to keep their lights on if they are breached. Most small businesses (83%), however, don’t have the financial resources to recover if they

,

Breaches don’t just happen to large enterprises. Threat actors are increasingly targeting small businesses. In fact, 43% of data breaches involved small to medium-sized businesses. But there is a glaring discrepancy. Larger businesses typically have the budget to keep their lights on if they are breached. Most small businesses (83%), however, don’t have the financial resources to recover if they

, ,
https://thehackernews.com/2022/06/comprehensive-easy-cybersecurity-for.html

Cloudflare Saw Record-Breaking DDoS Attack Peaking at 26 Million Request Per Second

Cloudflare Saw Record-Breaking DDoS Attack Peaking at 26 Million Request Per Second,

Cloudflare on Tuesday disclosed that it had acted to prevent a record-setting 26 million request per second (RPS) distributed denial-of-service (DDoS) attack last week, making it the largest HTTPS DDoS attack detected to date.
The web performance and security company said the attack was directed against an unnamed customer website using its Free plan and emanated from a « powerful » botnet of

,

Cloudflare on Tuesday disclosed that it had acted to prevent a record-setting 26 million request per second (RPS) distributed denial-of-service (DDoS) attack last week, making it the largest HTTPS DDoS attack detected to date.
The web performance and security company said the attack was directed against an unnamed customer website using its Free plan and emanated from a « powerful » botnet of

, ,
https://thehackernews.com/2022/06/cloudflare-saw-record-breaking-ddos.html

Un marché noir de vente de données personnelles a été démantelé

Un marché noir de vente de données personnelles a été démantelé,

,

marché noir données personnelles

Un important marché noir spécialisé dans les données personnelles vient de fermer ses portes. Après des années de fonctionnement, la marketplace est tombée dans les filets de la justice américaine.

L’article Un marché noir de vente de données personnelles a été démantelé est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/marche-noir-vente-donnees-personnelles-saisi.html

Patch Tuesday: Microsoft Issues Fix for Actively Exploited ‘Follina’ Vulnerability

Patch Tuesday: Microsoft Issues Fix for Actively Exploited ‘Follina’ Vulnerability

,

Microsoft officially released fixes to address an actively exploited Windows zero-day vulnerability known as Follina as part of its Patch Tuesday updates.
Also addressed by the tech giant are 55 other flaws, three of which are rated Critical, 51 are rated Important, and one is rated Moderate in severity. Separately, five other shortcomings were resolved in the Microsoft Edge browser.
<!-

,

Microsoft officially released fixes to address an actively exploited Windows zero-day vulnerability known as Follina as part of its Patch Tuesday updates.
Also addressed by the tech giant are 55 other flaws, three of which are rated Critical, 51 are rated Important, and one is rated Moderate in severity. Separately, five other shortcomings were resolved in the Microsoft Edge browser.
<!-

, ,
https://thehackernews.com/2022/06/patch-tuesday-microsoft-issues-fix-for.html

New Zimbra Email Vulnerability Could Let Attackers Steal Your Login Credentials

New Zimbra Email Vulnerability Could Let Attackers Steal Your Login Credentials,

A new high-severity vulnerability has been disclosed in the Zimbra email suite that, if successfully exploited, enables an unauthenticated attacker to steal cleartext passwords of users sans any user interaction.
« With the consequent access to the victims’ mailboxes, attackers can potentially escalate their access to targeted organizations and gain access to various internal services and steal

,

A new high-severity vulnerability has been disclosed in the Zimbra email suite that, if successfully exploited, enables an unauthenticated attacker to steal cleartext passwords of users sans any user interaction.
« With the consequent access to the victims’ mailboxes, attackers can potentially escalate their access to targeted organizations and gain access to various internal services and steal

, ,
https://thehackernews.com/2022/06/new-zimbra-email-vulnerability-could.html

What is the Essential Eight (And Why Non-Aussies Should Care)

What is the Essential Eight (And Why Non-Aussies Should Care),

In 2017, The Australian Cyber Security Center (ACSC) published a set of mitigation strategies that were designed to help organizations to protect themselves against cyber security incidents. These strategies, which became known as the Essential Eight, are designed specifically for use on Windows networks, although variations of these strategies are commonly applied to other platforms.
What is

,

In 2017, The Australian Cyber Security Center (ACSC) published a set of mitigation strategies that were designed to help organizations to protect themselves against cyber security incidents. These strategies, which became known as the Essential Eight, are designed specifically for use on Windows networks, although variations of these strategies are commonly applied to other platforms.
What is

, ,
https://thehackernews.com/2022/06/what-is-essential-eight-and-why-non.html

Technical Details Released for ‘SynLapse’ RCE Vulnerability Reported in Microsoft Azure

Technical Details Released for ‘SynLapse’ RCE Vulnerability Reported in Microsoft Azure

,

Microsoft has incorporated additional improvements to address the recently disclosed SynLapse security vulnerability in order to meet comprehensive tenant isolation requirements in Azure Data Factory and Azure Synapse Pipelines.
The latest safeguards include moving the shared integration runtimes to sandboxed ephemeral instances and using scoped tokens to prevent adversaries from using a client

,

Microsoft has incorporated additional improvements to address the recently disclosed SynLapse security vulnerability in order to meet comprehensive tenant isolation requirements in Azure Data Factory and Azure Synapse Pipelines.
The latest safeguards include moving the shared integration runtimes to sandboxed ephemeral instances and using scoped tokens to prevent adversaries from using a client

, ,
https://thehackernews.com/2022/06/technical-details-released-for-synlapse.html

Coinbase, Metamask… des chevaux de Troie déferlent sur le web3

Coinbase, Metamask… des chevaux de Troie déferlent sur le web3,

,

Opération SeaFlower

Des pirates inondent la Toile avec des applications mobiles vérolées, capable de siphonner en douce les portefeuilles des utilisateurs.

L’article Coinbase, Metamask… des chevaux de Troie déferlent sur le web3 est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/coinbase-metamask-des-chevaux-de-troie-deferlent-sur-le-web3.html

Unpatched Travis CI API Bug Exposes Thousands of Secret User Access Tokens

Unpatched Travis CI API Bug Exposes Thousands of Secret User Access Tokens,

An unpatched security issue in the Travis CI API has left tens of thousands of developers’ user tokens exposed to potential attacks, effectively allowing threat actors to breach cloud infrastructures, make unauthorized code changes, and initiate supply chain attacks.
« More than 770 million logs of free tier users are available, from which you can easily extract tokens, secrets, and other

,

An unpatched security issue in the Travis CI API has left tens of thousands of developers’ user tokens exposed to potential attacks, effectively allowing threat actors to breach cloud infrastructures, make unauthorized code changes, and initiate supply chain attacks.
« More than 770 million logs of free tier users are available, from which you can easily extract tokens, secrets, and other

, ,
https://thehackernews.com/2022/06/unpatched-travis-ci-api-bug-exposes.html

New Syslogk Linux Rootkit Lets Attackers Remotely Command It Using « Magic Packets »

New Syslogk Linux Rootkit Lets Attackers Remotely Command It Using « Magic Packets »

,

A new covert Linux kernel rootkit named Syslogk has been spotted under development in the wild and cloaking a malicious payload that can be remotely commandeered by an adversary using a magic network traffic packet.
« The Syslogk rootkit is heavily based on Adore-Ng but incorporates new functionalities making the user-mode application and the kernel rootkit hard to detect, » Avast security

,

A new covert Linux kernel rootkit named Syslogk has been spotted under development in the wild and cloaking a malicious payload that can be remotely commandeered by an adversary using a magic network traffic packet.
« The Syslogk rootkit is heavily based on Adore-Ng but incorporates new functionalities making the user-mode application and the kernel rootkit hard to detect, » Avast security

, ,
https://thehackernews.com/2022/06/new-syslogk-linux-rootkit-lets.html