Hackers Exploit PrestaShop Zero-Day to Steal Payment Data from Online Stores

Hackers Exploit PrestaShop Zero-Day to Steal Payment Data from Online Stores,

Malicious actors are exploiting a previously unknown security flaw in the open source PrestaShop e-commerce platform to inject malicious skimmer code designed to swipe sensitive information.
« Attackers have found a way to use a security vulnerability to carry out arbitrary code execution in servers running PrestaShop websites, » the company noted in an advisory published on July 22.
PrestaShop is

,

Malicious actors are exploiting a previously unknown security flaw in the open source PrestaShop e-commerce platform to inject malicious skimmer code designed to swipe sensitive information.
« Attackers have found a way to use a security vulnerability to carry out arbitrary code execution in servers running PrestaShop websites, » the company noted in an advisory published on July 22.
PrestaShop is

, ,
https://thehackernews.com/2022/07/hackers-exploit-prestashop-zero-day-to.html

Microsoft Adds Default Protection Against RDP Brute-Force Attacks in Windows 11

Microsoft Adds Default Protection Against RDP Brute-Force Attacks in Windows 11,

Microsoft is now taking steps to prevent Remote Desktop Protocol (RDP) brute-force attacks as part of the latest builds for the Windows 11 operating system in an attempt to raise the security baseline to meet the evolving threat landscape.
To that end, the default policy for Windows 11 builds – particularly, Insider Preview builds 22528.1000 and newer – will automatically lock accounts for 10

,

Microsoft is now taking steps to prevent Remote Desktop Protocol (RDP) brute-force attacks as part of the latest builds for the Windows 11 operating system in an attempt to raise the security baseline to meet the evolving threat landscape.
To that end, the default policy for Windows 11 builds – particularly, Insider Preview builds 22528.1000 and newer – will automatically lock accounts for 10

, ,
https://thehackernews.com/2022/07/microsoft-adds-default-protection.html

Experts Uncover New ‘CosmicStrand’ UEFI Firmware Rootkit Used by Chinese Hackers

Experts Uncover New ‘CosmicStrand’ UEFI Firmware Rootkit Used by Chinese Hackers

,

An unknown Chinese-speaking threat actor has been attributed to a new kind of sophisticated UEFI firmware rootkit called CosmicStrand.
« The rootkit is located in the firmware images of Gigabyte or ASUS motherboards, and we noticed that all these images are related to designs using the H81 chipset, » Kaspersky researchers said in a new report published today. « This suggests that a common

,

An unknown Chinese-speaking threat actor has been attributed to a new kind of sophisticated UEFI firmware rootkit called CosmicStrand.
« The rootkit is located in the firmware images of Gigabyte or ASUS motherboards, and we noticed that all these images are related to designs using the H81 chipset, » Kaspersky researchers said in a new report published today. « This suggests that a common

, ,
https://thehackernews.com/2022/07/experts-uncover-new-cosmicstrand-uefi.html

Windows 11 : Microsoft déploie un nouvel outil pour protéger son OS des ransomwares

Windows 11 : Microsoft déploie un nouvel outil pour protéger son OS des ransomwares,

,

Windows 11

En activant le verrouillage des comptes utilisateurs dans Windows en cas d’accès répétés via l’accès au bureau à distance, Microsoft pourrait mettre un frein à une grande majorité des attaques de rançongiciels dans le monde.

L’article Windows 11 : Microsoft déploie un nouvel outil pour protéger son OS des ransomwares est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/windows-11-microsoft-deploie-un-nouvel-outil-pour-proteger-son-os-des-ransomwares.html

Une faille de Twitter a rendu accessible les données de 5,4 millions de comptes

Une faille de Twitter a rendu accessible les données de 5,4 millions de comptes,

,

A cause d’une faille de sécurité découverte dans l’application Android de Twitter, des données d’utilisateurs ont pu être collectées par des pirates. Elles incluent des adresses de courrier électronique et des numéros de téléphone.

L’article Une faille de Twitter a rendu accessible les données de 5,4 millions de comptes est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/une-faille-de-twitter-a-rendu-accessible-les-donnees-de-54-millions-de-comptes.html

Magecart Hacks Food Ordering Systems to Steal Payment Data from Over 300 Restaurants

Magecart Hacks Food Ordering Systems to Steal Payment Data from Over 300 Restaurants,

Three restaurant ordering platforms MenuDrive, Harbortouch, and InTouchPOS were the target of two Magecart skimming campaigns that resulted in the compromise of at least 311 restaurants.
The trio of breaches has led to the theft of more than 50,000 payment card records from these infected restaurants and posted for sale on the dark web.
« The online ordering platforms MenuDrive and Harbortouch

,

Three restaurant ordering platforms MenuDrive, Harbortouch, and InTouchPOS were the target of two Magecart skimming campaigns that resulted in the compromise of at least 311 restaurants.
The trio of breaches has led to the theft of more than 50,000 payment card records from these infected restaurants and posted for sale on the dark web.
« The online ordering platforms MenuDrive and Harbortouch

, ,
https://thehackernews.com/2022/07/magecart-hacks-online-food-ordering.html

Racoon Stealer is Back — How to Protect Your Organization

Racoon Stealer is Back — How to Protect Your Organization,

The Racoon Stealer malware as a service platform gained notoriety several years ago for its ability to extract data that is stored within a Web browser. This data initially included passwords and cookies, which sometimes allow a recognized device to be authenticated without a password being entered. Racoon Stealer was also designed to steal auto-fill data, which can include a vast trove of

,

The Racoon Stealer malware as a service platform gained notoriety several years ago for its ability to extract data that is stored within a Web browser. This data initially included passwords and cookies, which sometimes allow a recognized device to be authenticated without a password being entered. Racoon Stealer was also designed to steal auto-fill data, which can include a vast trove of

, ,
https://thehackernews.com/2022/07/racoon-stealer-is-back-how-to-protect.html

Roaming Mantis Financial Hackers Targeting Android and iPhone Users in France

Roaming Mantis Financial Hackers Targeting Android and iPhone Users in France,

The mobile threat campaign tracked as Roaming Mantis has been linked to a new wave of compromises directed against French mobile phone users, months after it expanded its targeting to include European countries.
No fewer than 70,000 Android devices are said to have been infected as part of the active malware operation, Sekoia said in a report published last week.
Attack chains involving Roaming

,

The mobile threat campaign tracked as Roaming Mantis has been linked to a new wave of compromises directed against French mobile phone users, months after it expanded its targeting to include European countries.
No fewer than 70,000 Android devices are said to have been infected as part of the active malware operation, Sekoia said in a report published last week.
Attack chains involving Roaming

, ,
https://thehackernews.com/2022/07/roaming-mantis-financial-hackers.html

Comment la Russie a caché un malware dans une application Android pro-Ukraine

Comment la Russie a caché un malware dans une application Android pro-Ukraine,

,

Android malware virus

Des pirates russes ont développé une fausse application pro-Ukraine pour piéger les internautes. L’application cache en effet un malware.

L’article Comment la Russie a caché un malware dans une application Android pro-Ukraine est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/russie-cache-malware-application-android-pro-ukraine.html

SonicWall Issues Patch for Critical Bug Affecting its Analytics and GMS Products

SonicWall Issues Patch for Critical Bug Affecting its Analytics and GMS Products,

Network security company SonicWall on Friday rolled out fixes to mitigate a critical SQL injection (SQLi) vulnerability affecting its Analytics On-Prem and Global Management System (GMS) products.
The vulnerability, tracked as CVE-2022-22280, is rated 9.4 for severity on the CVSS scoring system and stems from what the company describes is an « improper neutralization of special elements » used in

,

Network security company SonicWall on Friday rolled out fixes to mitigate a critical SQL injection (SQLi) vulnerability affecting its Analytics On-Prem and Global Management System (GMS) products.
The vulnerability, tracked as CVE-2022-22280, is rated 9.4 for severity on the CVSS scoring system and stems from what the company describes is an « improper neutralization of special elements » used in

, ,
https://thehackernews.com/2022/07/sonicwall-issues-patch-for-critical-bug.html