U.S. FCC Commissioner Asks Apple and Google to Remove TikTok from App Stores

U.S. FCC Commissioner Asks Apple and Google to Remove TikTok from App Stores,

One of the commissioners of the U.S. Federal Communications Commission (FCC) has renewed calls asking for Apple and Google to boot the popular video-sharing platform TikTok from their app stores citing « its pattern of surreptitious data practices. »
« It is clear that TikTok poses an unacceptable national security risk due to its extensive data harvesting being combined with Beijing’s apparently

,

One of the commissioners of the U.S. Federal Communications Commission (FCC) has renewed calls asking for Apple and Google to boot the popular video-sharing platform TikTok from their app stores citing « its pattern of surreptitious data practices. »
« It is clear that TikTok poses an unacceptable national security risk due to its extensive data harvesting being combined with Beijing’s apparently

, ,
https://thehackernews.com/2022/06/us-fcc-commissioner-asks-apple-and.html

What is Shadow IT and why is it so risky?

What is Shadow IT and why is it so risky?,

Shadow IT refers to the practice of users deploying unauthorized technology resources in order to circumvent their IT department. Users may resort to using shadow IT practices when they feel that existing IT policies are too restrictive or get in the way of them being able to do their jobs effectively.
An old school phenomenon 
Shadow IT is not new. There have been countless examples of

,

Shadow IT refers to the practice of users deploying unauthorized technology resources in order to circumvent their IT department. Users may resort to using shadow IT practices when they feel that existing IT policies are too restrictive or get in the way of them being able to do their jobs effectively.
An old school phenomenon 
Shadow IT is not new. There have been countless examples of

, ,
https://thehackernews.com/2022/06/what-is-shadow-it-and-why-is-it-so-risky.html

Ex-Canadian Government Employee Pleads Guilty Over NetWalker Ransomware Attacks

Ex-Canadian Government Employee Pleads Guilty Over NetWalker Ransomware Attacks,

A former Canadian government employee this week agreed to plead guilty in the U.S. to charges related to his involvement with the NetWalker ransomware syndicate.
Sebastien Vachon-Desjardins, who was extradited to the U.S. on March 10, 2022, is accused of conspiracy to commit computer fraud and wire fraud, intentional damage to a protected computer, and transmitting a demand in relation to

,

A former Canadian government employee this week agreed to plead guilty in the U.S. to charges related to his involvement with the NetWalker ransomware syndicate.
Sebastien Vachon-Desjardins, who was extradited to the U.S. on March 10, 2022, is accused of conspiracy to commit computer fraud and wire fraud, intentional damage to a protected computer, and transmitting a demand in relation to

, ,
https://thehackernews.com/2022/06/ex-canadian-government-employee-pleads.html

North Korean Hackers Suspected to be Behind $100M Horizon Bridge Hack

North Korean Hackers Suspected to be Behind $100M Horizon Bridge Hack,

The notorious North Korea-backed hacking collective Lazarus Group is suspected to be behind the recent $100 million altcoin theft from Harmony Horizon Bridge, citing similarities to the Ronin bridge attack in March 2022.
The finding comes as Harmony confirmed that its Horizon Bridge, a platform that allows users to move cryptocurrency across different blockchains, had been breached last week.

,

The notorious North Korea-backed hacking collective Lazarus Group is suspected to be behind the recent $100 million altcoin theft from Harmony Horizon Bridge, citing similarities to the Ronin bridge attack in March 2022.
The finding comes as Harmony confirmed that its Horizon Bridge, a platform that allows users to move cryptocurrency across different blockchains, had been breached last week.

, ,
https://thehackernews.com/2022/06/north-korean-hackers-suspected-to-be.html

Un mystérieux malware infecte de petits routeurs en Europe et aux États-Unis

Un mystérieux malware infecte de petits routeurs en Europe et aux États-Unis,

,

tete de mort - matrix - hacker -pirate

Des pirates espionnent des réseaux locaux en prenant appui sur des routeurs non patchés et peu surveillés. Il s’agit probablement d’un acteur étatique.

L’article Un mystérieux malware infecte de petits routeurs en Europe et aux États-Unis est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/un-mysterieux-malware-infecte-de-petits-routeurs-en-europe-et-aux-etats-unis.html

New YTStealer Malware Aims to Hijack Accounts of YouTube Content Creators

New YTStealer Malware Aims to Hijack Accounts of YouTube Content Creators,

Cybersecurity researchers have documented a new information-stealing malware that targets YouTube content creators by plundering their authentication cookies.
Dubbed « YTStealer » by Intezer, the malicious tool is likely believed to be sold as a service on the dark web, with it distributed using fake installers that also drop RedLine Stealer and Vidar.
« What sets YTStealer aside from other

,

Cybersecurity researchers have documented a new information-stealing malware that targets YouTube content creators by plundering their authentication cookies.
Dubbed « YTStealer » by Intezer, the malicious tool is likely believed to be sold as a service on the dark web, with it distributed using fake installers that also drop RedLine Stealer and Vidar.
« What sets YTStealer aside from other

, ,
https://thehackernews.com/2022/06/new-ytstealer-malware-aims-to-hijack.html

New UnRAR Vulnerability Could Let Attackers Hack Zimbra Webmail Servers

New UnRAR Vulnerability Could Let Attackers Hack Zimbra Webmail Servers,

A new security vulnerability has been disclosed in RARlab’s UnRAR utility that, if successfully exploited, could permit a remote attacker to execute arbitrary code on a system that relies on the binary.
The flaw, assigned the identifier CVE-2022-30333, relates to a path traversal vulnerability in the Unix versions of UnRAR that can be triggered upon extracting a maliciously crafted RAR archive.

,

A new security vulnerability has been disclosed in RARlab’s UnRAR utility that, if successfully exploited, could permit a remote attacker to execute arbitrary code on a system that relies on the binary.
The flaw, assigned the identifier CVE-2022-30333, relates to a path traversal vulnerability in the Unix versions of UnRAR that can be triggered upon extracting a maliciously crafted RAR archive.

, ,
https://thehackernews.com/2022/06/new-unrar-vulnerability-could-let.html

New ‘FabricScape’ Bug in Microsoft Azure Service Fabric Impacts Linux Workloads

New ‘FabricScape’ Bug in Microsoft Azure Service Fabric Impacts Linux Workloads

,

Cybersecurity researchers from Palo Alto Networks Unit 42 disclosed details of a new security flaw affecting Microsoft’s Service Fabric that could be exploited to obtain elevated permissions and seize control of all nodes in a cluster.
The issue, which has been dubbed FabricScape (CVE-2022-30137), could be exploited on containers that are configured to have runtime access. It has been remediated

,

Cybersecurity researchers from Palo Alto Networks Unit 42 disclosed details of a new security flaw affecting Microsoft’s Service Fabric that could be exploited to obtain elevated permissions and seize control of all nodes in a cluster.
The issue, which has been dubbed FabricScape (CVE-2022-30137), could be exploited on containers that are configured to have runtime access. It has been remediated

, ,
https://thehackernews.com/2022/06/new-fabricscape-bug-in-microsoft-azure.html

La Lituanie durement ciblée par des cyberattaques russes

La Lituanie durement ciblée par des cyberattaques russes,

,

Killnet attaque la Lituanie

Le groupe de pirates Killnet veut inonder le pays balte avec des attaques DDoS, tant que le transit de marchandises vers Kaliningrad ne sera pas totalement rétabli.

L’article La Lituanie durement ciblée par des cyberattaques russes est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/la-lituanie-durement-ciblee-par-des-cyberattaques-russes.html

CISA Warns of Active Exploitation of ‘PwnKit’ Linux Vulnerability in the Wild

CISA Warns of Active Exploitation of ‘PwnKit’ Linux Vulnerability in the Wild

,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) this week moved to add a Linux vulnerability dubbed PwnKit to its Known Exploited Vulnerabilities Catalog, citing evidence of active exploitation.
The issue, tracked as CVE-2021-4034 (CVSS score: 7.8), came to light in January 2022 and concerns a case of local privilege escalation in polkit’s pkexec utility, which allows an

,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) this week moved to add a Linux vulnerability dubbed PwnKit to its Known Exploited Vulnerabilities Catalog, citing evidence of active exploitation.
The issue, tracked as CVE-2021-4034 (CVSS score: 7.8), came to light in January 2022 and concerns a case of local privilege escalation in polkit’s pkexec utility, which allows an

, ,
https://thehackernews.com/2022/06/cisa-warns-of-active-exploitation-of.html