Les actus cybersécurité | sem 14 août 2022

Voici le rapport de veille de la semaine faisant le tour des actualités les plus intéressantes. Certaines d’entre elles seront développées dans les prochains articles. Bonne lecture et merci pour le café 😉

L'essentiel Cybersécurité, IA & Tech

Rejoignez la communauté. 3 fois par semaine, recevez l'analyse des tendances par Marc Barbezat. Pas de spam, juste de l'info.

Ou suivez le flux temps réel

Vol / perte de données

Twitter Confirms Data Breach as 5.4M Accounts Sold on Hacker Forum
Twitter was forced to investigate the incident when a hacker offered the personal data of 5.4 million users on a hacker forum for $30,000 last month.

Twilio discloses data breach that impacted customers & employees
Communications company Twilio discloses a data breach after threat actors have stolen employee credentials in an SMS phishing attack.

Hackers behind Twilio breach also targeted Cloudflare employees
Cloudflare revealed that at least 76 employees and their family members were targeted by smIshing attacks similar to the one that hit Twilio.

Slack Resets Passwords After Hashes Exposed When Invitations Shared
Slack has notified roughly 0.5% of its users that it reset their passwords after fixing a bug that exposed salted password hashes when creating or revoking shared invitation links for workspaces.

Cyberattaques / fraudes

Automotive supplier breached by 3 ransomware gangs in 2 weeks
An automotive supplier had its systems breached and files encrypted by three different ransomware gangs over a two-week span in May, two of the attacks happening within just two hours.

Ransomware attack blamed for closure of all 7-Eleven stores in Denmark
The retailer closed all of its stores in Denmark after its cash registers and payment systems were brought down in the ransomware attack.

Cisco Confirms Network Breach Via Hacked Employee Google Account
Networking giant says attackers gained initial access to an employee’s VPN client via a compromised Google account.

North Korea Allegedly Stole Millions of Dollars Worth of Crypto Assets
According to a confidential United Nations (UN) report seen by Reuters on Thursday, North Korea stole hundreds of millions of dollars worth of crypto assets in at least one major hack.

Recovery From NHS Attack Could Take Weeks
Last week, Advanced, a key NHS IT partner was hit by a ransomware attack. The IT company has said that it could take three to four weeks for systems to resume n

NHS 111 services provider MSP Advanced confirms ransomware
Advanced’s infrastructure still down and out, recovery to take weeks or more

North Korean hackers target crypto experts with fake Coinbase job offers
A new social engineering campaign by the notorious North Korean Lazarus hacking group has been discovered, with the hackers impersonating Coinbase to target employees in the fintech industry.

Failles / vulnérabilités

Starlink Successfully Hacked Using $25 Modchip
Belgian researcher Lennert Wouters revealed at Black Hat how he mounted a successful fault injection attack on a user terminal for SpaceX’s satellite-based internet system

Il a fallu cinq ans pour patcher cette faille zero-day dans le noyau Linux
Les chercheurs en sécurité de Google sont tombé sur une vulnérabilité qui avait déjà été signalée en 2016 sans être corrigée. Quelques années plus tard, elle s’est retrouvée dans l’arsenal d’un éditeur de logiciels espion pour pirater des smartphones Android.

Pour la CISA, la faille Log4Shell va persister longtemps – Le Monde Informatique
Intrusion, Hacking et Pare-feu : Une enquête menée par la CISA fournit non seulement les indicateurs de compromission, mais elle met aussi en évidence les raisons pour lesquelles la…

Making Linux Kernel Exploit Cooking Harder
Posted by Eduardo Vela, Exploit Critic Cover of the medieval cookbook. Title in large letters kernel Exploits. Adorned. Featuring a small pe…

Justice / police / réglementation

Former Twitter Employee Found Guilty of Spying for Saudi Arabia
A former Twitter employee has been convicted of spying on the private information of Twitter users for Saudi Arabia.

The US offers a $10M rewards for info on the Conti ransomware gang’s members
U.S. State Department announced a $10 million reward for information related to five individuals associated with the Conti ransomware gang.

FBI, CISA warn over ransomware gang that can make million dollar demands
Zeppelin is a well organized ransomware actor that spends two weeks mapping a network – before infecting it with multiple instances of malware.

Ex Twitter employee found guilty of spying for Saudi Arabia
A former Twitter employee was found guilty of spying on certain Twitter users for Saudi Arabia ……………

Cybercriminalité : un Français réclamé au Maroc par les Etats-Unis
Le jeune homme de 21 ans est détenu au Maroc. Il risque 116 ans de prison s’il est condamné aux Etats-Unis. Il est sous le coup d’une extradition du Maroc vers les Etats-Unis.

Suisse

La Confédération se tourne vers les « hackers éthiques » pour prévenir les cyberattaques – Le Temps
Des pirates auront pour mission de déceler les vulnérabilités dans les systèmes informatiques de l’administration fédérale. Un programme qui a fait ses preuves dans le secteur privé

Divers

China could be reviewing security bugs before tech companies issue patches, DHS official says
This could give Beijing the upper hand when carrying out cyberattacks against the U.S. or its other digital adversaries.

Russian Is Escalating, Diversifying Hacking of Ukraine, Research Says
The Kremlin’s cyber-goons are sending mass texts to Ukrainian civilians threatening their lives if they don’t retreat from their homes.