🖥️« Énorme par sa taille et son impact » : aux États-Unis, 41 000 noms d’agents d’ICE et de la Sécurité intérieure divulgués dans un piratage
Distributed Denial of Secrets (DDOS) a affirmé avoir recueilli ces informations sensibles auprès d’un groupe de hackers connu sous le nom de …
📰Officials seize domain of top bulletproof hosting provider Virtualine
The Russian-speaking cybercrime storefront was among the most active bulletproof hosting providers this year to date, receiving almost one-fifth of all illicit-attributed inflow tracked by...
📰Leak site publishes data on more than 41,000 DHS employees obtained by hacktivists
The Department of Peace group shared it with Swiss hacker/journalist maia arson crimew and DDoSecrets put it online. The post Leak site publishes data on more than 41,000 DHS employees obtained by...
📰Lawsuit against Ex-Overstock CEO tied to 2020 election film falls apart over question of ‘actual malice’
The lawsuit, brought by a former executive at Dominion Voting Systems, concerns comments made in a 2020 film financed by Byrne titled “The Deep Rig.” The post Lawsuit against Ex-Overstock CEO...
🔥Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and...
🔥Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.
Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android's usual confirmation screens, and to update them in the background. To qualify, a...
🖥️Les failles PHP à nouveau exploitées : une vaste cyberattaque chinoise fait des ravages avec l'IA
Les failles critiques de PHP viennent de faire de nouvelles victimes. Les chercheurs ont découvert une cyberattaque ambitieuse, attribuée à des …
🔥Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win
A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge's sandbox, a security researcher has shown. Orange Tsai
🔥PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the...
📰Researchers uncover Volt Typhoon’s covert, ephemeral network
The China-linked threat group has used the “Silent Train” framework, built on a series of rapidly rotating compromised devices, to infiltrate hundreds of critical infrastructure networks. The...
🖥️« Un bug éternel » : cette faille critique se cache dans le démarrage de la plupart des serveurs du monde, et la corriger relève du casse-tête
Une vulnérabilité critique dans EDK2, le code sur lequel repose le démarrage de l’immense majorité des serveurs, permet d’exécuter du code avant même …
📰Prosecutors charge Madagascar scammers in NFT-stealing scheme based on fake online dating profiles
The scammers affected approximately 800 victims and led to losses of more than half a million dollars, the Justice Department said. The post Prosecutors charge Madagascar scammers in NFT-stealing...
🖥️230 000 comptes clients piratés : la compagnie des transports strasbourgeois victime d'une vaste cyberattaque
Les données de 40 % des comptes clients ont été piratées sur le site internet de la CTS à Strasbourg (Bas-Rhin). La compagnie de transport appelle à …
🔥Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch
Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm Defused Cyber. The vulnerability in question is
🖥️Etats-Unis: la Commission électorale, garante de la transparence des dépenses pour les élections de mi-mandats, a été victime d'une cyberattaque
L'organisme chargé de contrôler et rendre public les fonds utilisés pour les différents candidats aux élections de mi-mandats a dû mettre certains de …
🖥️« Énorme par sa taille et son impact » : aux États-Unis, 41 000 noms d’agents d’ICE et de la Sécurité intérieure divulgués dans un piratage
Distributed Denial of Secrets (DDOS) a affirmé avoir recueilli ces informations sensibles auprès d’un groupe de hackers connu sous le nom de …
📰Officials seize domain of top bulletproof hosting provider Virtualine
The Russian-speaking cybercrime storefront was among the most active bulletproof hosting providers this year to date, receiving almost one-fifth of all illicit-attributed inflow tracked by...
📰Leak site publishes data on more than 41,000 DHS employees obtained by hacktivists
The Department of Peace group shared it with Swiss hacker/journalist maia arson crimew and DDoSecrets put it online. The post Leak site publishes data on more than 41,000 DHS employees obtained by...
📰Lawsuit against Ex-Overstock CEO tied to 2020 election film falls apart over question of ‘actual malice’
The lawsuit, brought by a former executive at Dominion Voting Systems, concerns comments made in a 2020 film financed by Byrne titled “The Deep Rig.” The post Lawsuit against Ex-Overstock CEO...
🔥Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and...
🔥Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.
Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android's usual confirmation screens, and to update them in the background. To qualify, a...
🖥️Les failles PHP à nouveau exploitées : une vaste cyberattaque chinoise fait des ravages avec l'IA
Les failles critiques de PHP viennent de faire de nouvelles victimes. Les chercheurs ont découvert une cyberattaque ambitieuse, attribuée à des …
🔥Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win
A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge's sandbox, a security researcher has shown. Orange Tsai
🔥PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the...
📰Researchers uncover Volt Typhoon’s covert, ephemeral network
The China-linked threat group has used the “Silent Train” framework, built on a series of rapidly rotating compromised devices, to infiltrate hundreds of critical infrastructure networks. The...
🖥️« Un bug éternel » : cette faille critique se cache dans le démarrage de la plupart des serveurs du monde, et la corriger relève du casse-tête
Une vulnérabilité critique dans EDK2, le code sur lequel repose le démarrage de l’immense majorité des serveurs, permet d’exécuter du code avant même …
📰Prosecutors charge Madagascar scammers in NFT-stealing scheme based on fake online dating profiles
The scammers affected approximately 800 victims and led to losses of more than half a million dollars, the Justice Department said. The post Prosecutors charge Madagascar scammers in NFT-stealing...
🖥️230 000 comptes clients piratés : la compagnie des transports strasbourgeois victime d'une vaste cyberattaque
Les données de 40 % des comptes clients ont été piratées sur le site internet de la CTS à Strasbourg (Bas-Rhin). La compagnie de transport appelle à …
🔥Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch
Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm Defused Cyber. The vulnerability in question is
🖥️Etats-Unis: la Commission électorale, garante de la transparence des dépenses pour les élections de mi-mandats, a été victime d'une cyberattaque
L'organisme chargé de contrôler et rendre public les fonds utilisés pour les différents candidats aux élections de mi-mandats a dû mettre certains de …