China’s MIIT Introduces Color-Coded Action Plan for Data Security Incidents

China’s MIIT Introduces Color-Coded Action Plan for Data Security Incidents

,

China’s Ministry of Industry and Information Technology (MIIT) on Friday unveiled draft proposals detailing its plans to tackle data security events in the country using a color-coded system.
The effort is designed to « improve the comprehensive response capacity for data security incidents, to ensure timely and effective control, mitigation and elimination of hazards and losses caused

,

China’s Ministry of Industry and Information Technology (MIIT) on Friday unveiled draft proposals detailing its plans to tackle data security events in the country using a color-coded system.
The effort is designed to « improve the comprehensive response capacity for data security incidents, to ensure timely and effective control, mitigation and elimination of hazards and losses caused

, ,
https://thehackernews.com/2023/12/chinas-miit-introduces-color-coded.html

Microsoft Warns of Storm-0539: The Rising Threat Behind Holiday Gift Card Frauds

Microsoft Warns of Storm-0539: The Rising Threat Behind Holiday Gift Card Frauds,

Microsoft is warning of an uptick in malicious activity from an emerging threat cluster it’s tracking as Storm-0539 for orchestrating gift card fraud and theft via highly sophisticated email and SMS phishing attacks against retail entities during the holiday shopping season.
The goal of the attacks is to propagate booby-trapped links that direct victims to adversary-in-the-middle (AiTM

,

Microsoft is warning of an uptick in malicious activity from an emerging threat cluster it’s tracking as Storm-0539 for orchestrating gift card fraud and theft via highly sophisticated email and SMS phishing attacks against retail entities during the holiday shopping season.
The goal of the attacks is to propagate booby-trapped links that direct victims to adversary-in-the-middle (AiTM

, ,
https://thehackernews.com/2023/12/microsoft-warns-of-storm-0539-rising.html

Bonus écologique : pourquoi la Model Y est la seule Tesla éligible ?

Bonus écologique : pourquoi la Model Y est la seule Tesla éligible ?,

Model Y et Model 3 - 01net

Pour quelle raison la Model Y sera-t-elle encore éligible au bonus écologique en 2024 alors que la Model 3 est exclue du dispositif ?

,

Model Y et Model 3 - 01net

Pour quelle raison la Model Y sera-t-elle encore éligible au bonus écologique en 2024 alors que la Model 3 est exclue du dispositif ?

, ,
https://www.01net.com/actualites/bonus-ecologique-pourquoi-la-model-y-est-la-seule-tesla-eligible.html

Ingérence, souveraineté, cyberattaque… À quoi sert le réseau interministériel d’Etat ?

Ingérence, souveraineté, cyberattaque… À quoi sert le réseau interministériel d’Etat ?,

RIE infrastructure Etat

Connaissez-vous le RIE, le réseau interministériel de l’État, une particularité française qui permet aux agents de l’État de communiquer et d’échanger en toute sécurité ? Pour 01net.com, Guy Duplaquet, le directeur du RIE, est revenu sur la genèse de cette infrastructure, à l’occasion des 10 ans du réseau.

,

RIE infrastructure Etat

Connaissez-vous le RIE, le réseau interministériel de l’État, une particularité française qui permet aux agents de l’État de communiquer et d’échanger en toute sécurité ? Pour 01net.com, Guy Duplaquet, le directeur du RIE, est revenu sur la genèse de cette infrastructure, à l’occasion des 10 ans du réseau.

, ,
https://www.01net.com/actualites/ingerence-souverainete-cyberattaque-a-quoi-sert-le-reseau-interministeriel-detat.html

Pour Noël, pCloud remplit sa hotte de réductions exceptionnelles

Pour Noël, pCloud remplit sa hotte de réductions exceptionnelles,

Bon Plan pCloud

Le stockage en ligne de pCloud enfile sa tenue de fêtes et distribue des offres promotionnelles uniques. 

,

Bon Plan pCloud

Le stockage en ligne de pCloud enfile sa tenue de fêtes et distribue des offres promotionnelles uniques. 

, ,
https://www.01net.com/bons-plans/pour-noel-pcloud-remplit-sa-hotte-de-reductions-exceptionnelles.html

Nothing Phone (2a) : un tout premier aperçu du design qui fleure bon l’entrée de gamme

Nothing Phone (2a) : un tout premier aperçu du design qui fleure bon l’entrée de gamme,

1400x932

Le Nothing Phone (2a) semble se diriger vers une configuration entrée de gamme avec un design simplifié. Il conserve tout de même le Glyphe.

,

1400x932

Le Nothing Phone (2a) semble se diriger vers une configuration entrée de gamme avec un design simplifié. Il conserve tout de même le Glyphe.

, ,
https://www.01net.com/actualites/nothing-phone-2a-un-tout-premier-apercu-du-design-qui-fleure-bon-lentree-de-gamme.html

New KV-Botnet Targeting Cisco, DrayTek, and Fortinet Devices for Stealthy Attacks

New KV-Botnet Targeting Cisco, DrayTek, and Fortinet Devices for Stealthy Attacks,

A new botnet consisting of firewalls and routers from Cisco, DrayTek, Fortinet, and NETGEAR is being used as a covert data transfer network for advanced persistent threat actors, including the China-linked threat actor called Volt Typhoon.
Dubbed KV-botnet by the Black Lotus Labs team at Lumen Technologies, the malicious network is an amalgamation of two complementary activity

,

A new botnet consisting of firewalls and routers from Cisco, DrayTek, Fortinet, and NETGEAR is being used as a covert data transfer network for advanced persistent threat actors, including the China-linked threat actor called Volt Typhoon.
Dubbed KV-botnet by the Black Lotus Labs team at Lumen Technologies, the malicious network is an amalgamation of two complementary activity

, ,
https://thehackernews.com/2023/12/new-kv-botnet-targeting-cisco-draytek.html

Crypto Hardware Wallet Ledger’s Supply Chain Breach Results in $600,000 Theft

Crypto Hardware Wallet Ledger’s Supply Chain Breach Results in $600,000 Theft

,

Crypto hardware wallet maker Ledger published a new version of its « @ledgerhq/connect-kit » npm module after unidentified threat actors pushed malicious code that led to the theft of more than $600,000 in virtual assets.
The compromise was the result of a former employee falling victim to a phishing attack, the company said in a statement.
This allowed the attackers to gain

,

Crypto hardware wallet maker Ledger published a new version of its « @ledgerhq/connect-kit » npm module after unidentified threat actors pushed malicious code that led to the theft of more than $600,000 in virtual assets.
The compromise was the result of a former employee falling victim to a phishing attack, the company said in a statement.
This allowed the attackers to gain

, ,
https://thehackernews.com/2023/12/crypto-hardware-wallet-ledgers-supply.html

Bug or Feature? Hidden Web Application Vulnerabilities Uncovered

Bug or Feature? Hidden Web Application Vulnerabilities Uncovered,

Web Application Security consists of a myriad of security controls that ensure that a web application:

Functions as expected.
Cannot be exploited to operate out of bounds.
Cannot initiate operations that it is not supposed to do.

Web Applications have become ubiquitous after the expansion of Web 2.0, which Social Media Platforms, E-Commerce websites, and email clients saturating the internet

,

Web Application Security consists of a myriad of security controls that ensure that a web application:

Functions as expected.
Cannot be exploited to operate out of bounds.
Cannot initiate operations that it is not supposed to do.

Web Applications have become ubiquitous after the expansion of Web 2.0, which Social Media Platforms, E-Commerce websites, and email clients saturating the internet

, ,
https://thehackernews.com/2023/12/bug-or-feature-hidden-web-application.html

New Security Vulnerabilities Uncovered in pfSense Firewall Software – Patch Now

New Security Vulnerabilities Uncovered in pfSense Firewall Software – Patch Now,

Multiple security vulnerabilities have been discovered in the open-source Netgate pfSense firewall solution called pfSense that could be chained by an attacker to execute arbitrary commands on susceptible appliances.
The issues relate to two reflected cross-site scripting (XSS) bugs and one command injection flaw, according to new findings from Sonar.
« Security inside a local network is often

,

Multiple security vulnerabilities have been discovered in the open-source Netgate pfSense firewall solution called pfSense that could be chained by an attacker to execute arbitrary commands on susceptible appliances.
The issues relate to two reflected cross-site scripting (XSS) bugs and one command injection flaw, according to new findings from Sonar.
« Security inside a local network is often

, ,
https://thehackernews.com/2023/12/new-security-vulnerabilities-uncovered.html