ZuoRAT Malware Hijacking Home-Office Routers to Spy on Targeted Networks

ZuoRAT Malware Hijacking Home-Office Routers to Spy on Targeted Networks,

A never-before-seen remote access trojan dubbed ZuoRAT has been singling out small office/home office (SOHO) routers as part of a sophisticated campaign targeting North American and European networks.
The malware « grants the actor the ability to pivot into the local network and gain access to additional systems on the LAN by hijacking network communications to maintain an undetected foothold, »

,

A never-before-seen remote access trojan dubbed ZuoRAT has been singling out small office/home office (SOHO) routers as part of a sophisticated campaign targeting North American and European networks.
The malware « grants the actor the ability to pivot into the local network and gain access to additional systems on the LAN by hijacking network communications to maintain an undetected foothold, »

, ,
https://thehackernews.com/2022/06/zuorat-malware-hijacking-home-office.html

APT Hackers Targeting Industrial Control Systems with ShadowPad Backdoor

APT Hackers Targeting Industrial Control Systems with ShadowPad Backdoor,

Entities located in Afghanistan, Malaysia, and Pakistan are in the crosshairs of an attack campaign that targets unpatched Microsoft Exchange Servers as an initial access vector to deploy the ShadowPad malware.
Russian cybersecurity firm Kaspersky, which first detected the activity in mid-October 2021, attributed it to a previously unknown Chinese-speaking threat actor. Targets include

,

Entities located in Afghanistan, Malaysia, and Pakistan are in the crosshairs of an attack campaign that targets unpatched Microsoft Exchange Servers as an initial access vector to deploy the ShadowPad malware.
Russian cybersecurity firm Kaspersky, which first detected the activity in mid-October 2021, attributed it to a previously unknown Chinese-speaking threat actor. Targets include

, ,
https://thehackernews.com/2022/06/apt-hackers-targeting-industrial.html

Overview of Top Mobile Security Threats in 2022

Overview of Top Mobile Security Threats in 2022,

Your smartphone is your daily companion. The chances are that most of our activities rely on them, from ordering food to booking medical appointments. However, the threat landscape always reminds us how vulnerable smartphones can be. 
Consider the recent discovery by Oversecured, a security startup. These experts observed the dynamic code loading and its potential dangers. Why is this a problem?

,

Your smartphone is your daily companion. The chances are that most of our activities rely on them, from ordering food to booking medical appointments. However, the threat landscape always reminds us how vulnerable smartphones can be. 
Consider the recent discovery by Oversecured, a security startup. These experts observed the dynamic code loading and its potential dangers. Why is this a problem?

, ,
https://thehackernews.com/2022/06/overview-of-top-mobile-security-threats.html

LockBit, ce ransomware qui vous offre jusqu’à un million de dollars si vous arrivez à le hacker

LockBit, ce ransomware qui vous offre jusqu’à un million de dollars si vous arrivez à le hacker,

,

Les pirates proposent jusqu’à un million de dollars pour ceux qui – entre autres – trouvent des failles dans les sites Web des entreprises ciblées ou dans le réseau Tor.

L’article LockBit, ce ransomware qui vous offre jusqu’à un million de dollars si vous arrivez à le hacker est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/lockbit-le-premier-ransomware-a-vous-offrir-jusqua-un-million-de-dollars-si-vous-arrivez-a-le-hacker.html

OpenSSL to Release Security Patch for Remote Memory Corruption Vulnerability

OpenSSL to Release Security Patch for Remote Memory Corruption Vulnerability,

The latest version of the OpenSSL library has been discovered as susceptible to a remote memory-corruption vulnerability on select systems.
The issue has been identified in OpenSSL version 3.0.4, which was released on June 21, 2022, and impacts x64 systems with the AVX-512 instruction set. OpenSSL 1.1.1 as well as OpenSSL forks BoringSSL and LibreSSL are not affected.
<!–adsense–>
Security

,

The latest version of the OpenSSL library has been discovered as susceptible to a remote memory-corruption vulnerability on select systems.
The issue has been identified in OpenSSL version 3.0.4, which was released on June 21, 2022, and impacts x64 systems with the AVX-512 instruction set. OpenSSL 1.1.1 as well as OpenSSL forks BoringSSL and LibreSSL are not affected.
<!–adsense–>
Security

, ,
https://thehackernews.com/2022/06/openssh-to-release-security-patch-for.html

New Android Banking Trojan ‘Revive’ Targeting Users of Spanish Financial Services

New Android Banking Trojan ‘Revive’ Targeting Users of Spanish Financial Services

,

A previously unknown Android banking trojan has been discovered in the wild, targeting users of the Spanish financial services company BBVA.
Said to be in its early stages of development, the malware — dubbed Revive by Italian cybersecurity firm Cleafy — was first observed on June 15, 2022 and distributed by means of phishing campaigns.
« The name Revive has been chosen since one of the

,

A previously unknown Android banking trojan has been discovered in the wild, targeting users of the Spanish financial services company BBVA.
Said to be in its early stages of development, the malware — dubbed Revive by Italian cybersecurity firm Cleafy — was first observed on June 15, 2022 and distributed by means of phishing campaigns.
« The name Revive has been chosen since one of the

, ,
https://thehackernews.com/2022/06/new-android-banking-trojan-revive.html

Pourquoi les apps de suivi menstruel mettent en danger certaines femmes aux États-Unis

Pourquoi les apps de suivi menstruel mettent en danger certaines femmes aux États-Unis,

,

apps suivi menstruel danger

Les applications de suivi menstruel inquiètent les associations de défense des femmes. Suite à l’abolition du droit à l’avortement aux États-Unis, les données collectées par les apps pourraient être utilisées pour traquer les Américaines ayant subi une IVG.

L’article Pourquoi les apps de suivi menstruel mettent en danger certaines femmes aux États-Unis est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/apps-suivi-menstruel-danger-certaines-femmes.html

Cybersecurity Experts Warn of Emerging Threat of « Black Basta » Ransomware

Cybersecurity Experts Warn of Emerging Threat of « Black Basta » Ransomware

,

The Black Basta ransomware-as-a-service (RaaS) syndicate has amassed nearly 50 victims in the U.S., Canada, the U.K., Australia, and New Zealand within two months of its emergence in the wild, making it a prominent threat in a short window.
« Black Basta has been observed targeting a range of industries, including manufacturing, construction, transportation, telcos, pharmaceuticals, cosmetics,

,

The Black Basta ransomware-as-a-service (RaaS) syndicate has amassed nearly 50 victims in the U.S., Canada, the U.K., Australia, and New Zealand within two months of its emergence in the wild, making it a prominent threat in a short window.
« Black Basta has been observed targeting a range of industries, including manufacturing, construction, transportation, telcos, pharmaceuticals, cosmetics,

, ,
https://thehackernews.com/2022/06/cybersecurity-experts-warn-of-emerging.html

Pourquoi Google et Apple sont accusés de surveillance de masse

Pourquoi Google et Apple sont accusés de surveillance de masse,

,

apple google surveillance masse

Google et Apple sont dans le viseur de quatre sénateurs américains. Ils estiment que les deux géants de la technologie ont mis en place un système de surveillance de masse. Ce système représenterait un immense danger pour la vie privée.

L’article Pourquoi Google et Apple sont accusés de surveillance de masse est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/google-apple-sont-accuses-surveillance-masse.html

Ces clés USB « sécurisées » sont truffées de failles, ne les achetez pas

Ces clés USB « sécurisées » sont truffées de failles, ne les achetez pas,

,

SySS USB key attack

Un chercheur en sécurité s’amuse à décortiquer des appareils de stockage amovible qui promettent une confidentialité sans faille des données. La réalité est malheureusement toute autre.

L’article Ces clés USB « sécurisées » sont truffées de failles, ne les achetez pas est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/ces-cles-usb-securisees-sont-truffees-de-failles-ne-les-achetez-pas.html