Honda’s Keyless Access Bug Could Let Thieves Remotely Unlock and Start Vehicles

Honda’s Keyless Access Bug Could Let Thieves Remotely Unlock and Start Vehicles,

A duo of researchers has released a proof-of-concept (PoC) demonstrating the ability for a malicious actor to remote lock, unlock, and even start Honda and Acura vehicles by means of what’s called a replay attack.
The attack is made possible, thanks to a vulnerability in its remote keyless system (CVE-2022-27254) that affects Honda Civic LX, EX, EX-L, Touring, Si, and Type R models manufactured

,

A duo of researchers has released a proof-of-concept (PoC) demonstrating the ability for a malicious actor to remote lock, unlock, and even start Honda and Acura vehicles by means of what’s called a replay attack.
The attack is made possible, thanks to a vulnerability in its remote keyless system (CVE-2022-27254) that affects Honda Civic LX, EX, EX-L, Touring, Si, and Type R models manufactured

, ,
https://thehackernews.com/2022/03/hondas-keyless-access-bug-could-let.html

Improve Your Hacking Skills with 9 Python Courses for Just $39

Improve Your Hacking Skills with 9 Python Courses for Just $39,

For anyone with interest in cybersecurity, learning Python is a must. The language is used extensively in white hat hacking, and professionals use Python scripts to automate tests. It also has a use in the “soft” side of cybersecurity — like scraping the web for compromised data and detecting bugs. 
Featuring nine full-length video courses, The Complete 2022 Python Programmer Bundle helps you

,

For anyone with interest in cybersecurity, learning Python is a must. The language is used extensively in white hat hacking, and professionals use Python scripts to automate tests. It also has a use in the “soft” side of cybersecurity — like scraping the web for compromised data and detecting bugs. 
Featuring nine full-length video courses, The Complete 2022 Python Programmer Bundle helps you

, ,
https://thehackernews.com/2022/03/improve-your-hacking-skills-with-9.html

LAPSUS$ Claims to Have Breached IT Firm Globant; Leaks 70GB of Data

LAPSUS$ Claims to Have Breached IT Firm Globant; Leaks 70GB of Data,

The LAPSUS$ data extortion gang announced their return on Telegram after a week-long « vacation, » leaking what they claim is data from software services company Globant.
« We are officially back from a vacation, » the group wrote on their Telegram channel – which has nearly around 54,000 members as of writing – posting images of extracted data and credentials belonging to the company’s DevOps

,

The LAPSUS$ data extortion gang announced their return on Telegram after a week-long « vacation, » leaking what they claim is data from software services company Globant.
« We are officially back from a vacation, » the group wrote on their Telegram channel – which has nearly around 54,000 members as of writing – posting images of extracted data and credentials belonging to the company’s DevOps

, ,
https://thehackernews.com/2022/03/lapsus-claims-to-have-breached-it-firm.html

CISA Warns of Ongoing Cyber Attacks Targeting Internet-Connected UPS Devices

CISA Warns of Ongoing Cyber Attacks Targeting Internet-Connected UPS Devices,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Energy (DoE) are jointly warning of attacks against internet-connected uninterruptible power supply (UPS) devices by means of default usernames and passwords.
« Organizations can mitigate attacks against their UPS devices, which provide emergency power in a variety of applications when normal power sources are

,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Energy (DoE) are jointly warning of attacks against internet-connected uninterruptible power supply (UPS) devices by means of default usernames and passwords.
« Organizations can mitigate attacks against their UPS devices, which provide emergency power in a variety of applications when normal power sources are

, ,
https://thehackernews.com/2022/03/cisa-warns-of-ongoing-cyber-attacks.html

Critical SonicOS Vulnerability Affects SonicWall Firewall Appliances

Critical SonicOS Vulnerability Affects SonicWall Firewall Appliances,

SonicWall has released security updates to contain a critical flaw across multiple firewall appliances that could be weaponized by an unauthenticated, remote attacker to execute arbitrary code and cause a denial-of-service (DoS) condition.
Tracked as CVE-2022-22274 (CVSS score: 9.4), the issue has been described as a stack-based buffer overflow in the web management interface of SonicOS that

,

SonicWall has released security updates to contain a critical flaw across multiple firewall appliances that could be weaponized by an unauthenticated, remote attacker to execute arbitrary code and cause a denial-of-service (DoS) condition.
Tracked as CVE-2022-22274 (CVSS score: 9.4), the issue has been described as a stack-based buffer overflow in the web management interface of SonicOS that

, ,
https://thehackernews.com/2022/03/critical-sonicos-vulnerability-affects.html

New Hacking Campaign by Transparent Tribe Hackers Targeting Indian Officials

New Hacking Campaign by Transparent Tribe Hackers Targeting Indian Officials,

A threat actor of likely Pakistani origin has been attributed to yet another campaign designed to backdoor targets of interest with a Windows-based remote access trojan named CrimsonRAT since at least June 2021.
« Transparent Tribe has been a highly active APT group in the Indian subcontinent, » Cisco Talos researchers said in an analysis shared with The Hacker News. « Their primary targets have

,

A threat actor of likely Pakistani origin has been attributed to yet another campaign designed to backdoor targets of interest with a Windows-based remote access trojan named CrimsonRAT since at least June 2021.
« Transparent Tribe has been a highly active APT group in the Indian subcontinent, » Cisco Talos researchers said in an analysis shared with The Hacker News. « Their primary targets have

, ,
https://thehackernews.com/2022/03/new-hacking-campaign-by-transparent.html

Pourquoi l’embargo de semi-conducteurs sud-coréens va (aussi) faire mal à la Russie

Pourquoi l’embargo de semi-conducteurs sud-coréens va (aussi) faire mal à la Russie,

Les composants électroniques coréens font partie de la chaîne d’approvisionnement dont a besoin l’industrie de l’armement russe. Déjà privée de composants américains, européens et japonais, les Russes devraient avoir encore plus de mal à produire (et remplacer) leurs équipements.

,

Les composants électroniques coréens font partie de la chaîne d’approvisionnement dont a besoin l’industrie de l’armement russe. Déjà privée de composants américains, européens et japonais, les Russes devraient avoir encore plus de mal à produire (et remplacer) leurs équipements.

, ,
https://www.01net.com/actualites/pourquoi-l-embargo-de-semi-conducteurs-sud-coreens-va-aussi-faire-mal-a-la-russie-2055693.html

Les États-Unis voient Kaspersky comme une menace pour leur sécurité nationale

Les États-Unis voient Kaspersky comme une menace pour leur sécurité nationale,

L’éditeur est la première entreprise non chinoise à rejoindre une liste qui épingle des fournisseurs high-tech pour les « risques inacceptables » qu’ils représentent. Un coup fatal pour son image de marque.

,

L’éditeur est la première entreprise non chinoise à rejoindre une liste qui épingle des fournisseurs high-tech pour les « risques inacceptables » qu’ils représentent. Un coup fatal pour son image de marque.

, ,
https://www.01net.com/actualites/les-etats-unis-voient-kaspersky-comme-une-menace-pour-leur-securite-nationale-2055686.html

Privid: A Privacy-Preserving Surveillance Video Analytics System

Privid: A Privacy-Preserving Surveillance Video Analytics System,

A group of academics has designed a new system known as « Privid » that enables video analytics in a privacy-preserving manner to combat concerns with invasive tracking.
« We’re at a stage right now where cameras are practically ubiquitous. If there’s a camera on every street corner, every place you go, and if someone could actually process all of those videos in aggregate, you can imagine that

,

A group of academics has designed a new system known as « Privid » that enables video analytics in a privacy-preserving manner to combat concerns with invasive tracking.
« We’re at a stage right now where cameras are practically ubiquitous. If there’s a camera on every street corner, every place you go, and if someone could actually process all of those videos in aggregate, you can imagine that

, ,
https://thehackernews.com/2022/03/privid-privacy-preserving-surveillance.html

Critical Sophos Firewall RCE Vulnerability Under Active Exploitation

Critical Sophos Firewall RCE Vulnerability Under Active Exploitation,

Cybersecurity firm Sophos on Monday warned that a recently patched critical security vulnerability in its firewall product is being actively exploited in real-world attacks.
The flaw, tracked as CVE-2022-1040, is rated 9.8 out of 10 on the CVSS scoring system and impacts Sophos Firewall versions 18.5 MR3 (18.5.3) and older. It relates to an authentication bypass vulnerability in the User Portal

,

Cybersecurity firm Sophos on Monday warned that a recently patched critical security vulnerability in its firewall product is being actively exploited in real-world attacks.
The flaw, tracked as CVE-2022-1040, is rated 9.8 out of 10 on the CVSS scoring system and impacts Sophos Firewall versions 18.5 MR3 (18.5.3) and older. It relates to an authentication bypass vulnerability in the User Portal

, ,
https://thehackernews.com/2022/03/critical-sophos-firewall-rce.html