Voici le rapport de veille de la semaine faisant le tour des actualités les plus intéressantes. Certaines d’entre elles seront développées dans les prochains articles. Bonne lecture et merci pour le café 😉
Vol / perte de données
Data Leak Exposes Personal Details of Airport Workers
Misconfigured storage bucket at security giant leaks 1.5 million files
NSO Group Pegasus Spyware Aims at Finnish Diplomats
Finland is weathering a bout of Pegasus infections, along with a Facebook Messenger phishing scam.
Russia unlikely to be tapping submarine cables by Ireland
Muscle-flexing rather than publicised ‘sabotage right here’ plan
Cyberattaques / fraudes
Allemagne : un ransomware perturbe la distribution de pétrole – Le Monde Informatique
Intrusion, Hacking et Pare-feu : Les entreprises allemandes Oiltanking et Mabanaft (groupe Marquard & Bahls) spécialisées dans la distribution et le stockage de produits pétroliers…
FBI urges athletes to keep personal devices at home, use burners during Beijing Winter Olympics
The FBI also warned of cyber threats against the event despite no specific intel.
Swissport on Twitter: « ⚠️ A part of #Swissport’s IT infrastructure was subject to a ransomware attack. The attack has been largely contained, and we are working actively to fully resolve the issue as quickly as possible. Swissport regrets any impact the incidence has had on our service delivery. / Twitter »
⚠️ A part of #Swissport’s IT infrastructure was subject to a ransomware attack. The attack has been largely contained, and we are working actively to fully resolve the issue as quickly as possible. Swissport regrets any impact the incidence has had on our service delivery.
Airport services firm Swissport reports ransomware incident
Swissport said part of its IT infrastructure was hit with a ransomware attack on Thursday.
FBI shares Lockbit ransomware technical details, defense tips
The Federal Bureau of Investigation (FBI) has released technical details and indicators of compromise associated with Lockbit ransomware attacks in a new flash alert published this Friday.
New Wave of Cyber Attacks Target Palestine with Political Bait and Malware
A new wave of cyberattacks is targeting Palestinian activists and entities with politically-themed phishing emails and decoy documents.
Ukraine Continues to Face Cyber Espionage Attacks from Russian Hackers
Cybersecurity researchers uncovered evidence of attempted attacks by a Russia-linked hacking operation targeting a Ukrainian entity in July 2021.
Failles / vulnérabilités
Apple Pays $100.5K Bug Bounty for Mac Webcam Hack
The researcher found that he could gain unauthorized camera access via a shared iCloud document that could also « hack every website you’ve ever visited. »
Crypto Finance Firm Offers $2m Bug Bounty to Hackers
Attackers stole $80m from Qubit Finance last week
Une vulnérabilité sévère affecte toutes les distributions Linux
Le directeur du Lab Qualys déclare : » Nous continuons de dire que chaque nouvelle vulnérabilité sévère est un » coup de semonce « , mais, dans les faits la communauté ne réagit pas.
Justice / police / réglementation
Suisse
Cyberattaque contre Emil Frey: des données publiées sur le darkweb (update)
Plus grand importateur automobile en Europe, l’entreprise suisse Emil Frey a été victime d’une cyberattaque. Des données ont été découvertes sur le darkweb. Apparemment, des clients en Suisse et en Allemagne sont concernés.
Les identifiants d’e-banking d’UBS ciblés par une vague de SMS malveillants
En Suisse, des cybercriminels envoient actuellement des SMS malveillants en se faisant passer pour UBS. Les messages contiennent des liens vers un faux site web imitant celui de la banque.
Divers
–
