Voici le rapport de veille de la semaine faisant le tour des actualités les plus intéressantes. Certaines d’entre elles seront développées dans les prochains articles. Bonne lecture et merci pour le café 😉
Vol / perte de données
New T-Mobile Breach Affects 37 Million Accounts
T-Mobile today disclosed a data breach affecting tens of millions of customer accounts, its second major data exposure in as many years. In a filing with federal regulators, T-Mobile said an investigation determined that someone abused its systems to harvest subscriber data tied to approximately 37 million current customer accounts.
A hack at ODIN Intelligence exposes a huge trove of police raid files
The breach exposes the police tech firm’s own systems but also confidential law enforcement data uploaded by ODIN’s police customers.
Oops: Airline Leaked The Entire Federal No Fly List – View from the Wing
CommuteAir, which operates Embraer ERJ-145s for United Airlines, left the entire U.S. federal No Fly List on a server that was easily hacked.
35,000 PayPal Accounts Hacked
A security notification released to PayPal customers this morning has revealed that up to 35,000 customers have fallen victim to a credential stuffing attack. C
1.7 TB of data from digital intelligence firm Cellebrite leaked online
1.7 TB of data stolen from Cellebrite, a digital intelligence company that provides tools for law enforcement, were leaked online.
Nissan Supplier Leaked Data on Thousands of Customers
Software developer uploaded information to public cloud repository
Cyberattaques / fraudes
Massive ad-fraud op dismantled after hitting millions of iOS devices
A massive ad fraud operation dubbed ‘Vastflux’ that spoofed more than 1,700 applications from 120 publishers, mostly for iOS, has been disrupted by security researchers at cybersecurity company HUMAN.
1,000 ships impacted by a ransomware attack on DNV
A ransomware attack against the maritime software supplier DNV impacted approximately 1,000 vessels……….
Mailchimp victime d’une cyberattaque par social engineering – Le Monde Informatique
Intrusion, Hacking et Pare-feu : L’éditeur spécialisé en solutions de gestion des campagnes d’e-mailing marketing Mailchimp a été touché par une intrusion sur son SI via une attaque…
Failles / vulnérabilités
Hackers now use Microsoft OneNote attachments to spread malware
Threat actors now use OneNote attachments in phishing emails that infect victims with remote access malware which can be used to install further malware, steal passwords, or even cryptocurrency wallets.
Justice / police / réglementation
Russian founder of a cryptocurrency exchange known for funneling ransomware profits arrested
The arrest comes as the U.S. ramps up efforts to crack down on attempts by cybercriminals to use cryptocurrency to evade sanctions.
WhatsApp attaque enfin en justice la société qui a créé le logiciel espion Pegasus
WhatsApp va pouvoir enfin faire juger l’action de la société israélienne NSO, à l’origine du logiciel espion Pegasus.
Suisse
Le rattachement de l’Office fédéral de la cybersécurité au DDPS ne fait pas que des heureux
Pendant longtemps, de nombreux éléments ont laissé penser que l’Office fédéral de la cybersécurité serait rattaché au Département des finances. La décision d’en faire un Office du Département de la défense ne plaît pas à tout le monde.
En Valais, un informaticien menace de publier des données policières sur le darknet
Le développeur d’un logiciel utilisé par plusieurs polices communales en Valais est en détention préventive. L’informaticien a menacé de publier des données sensibles sur le darknet.
Divers
Hack the Pentagon 3.0: Groundbreaking Bug Bounty Program Is Back
The U.S. Department of Defense has announced the third chapter of its « Hack the Pentagon » bug bounty program, which was first launched in 2016.
💡 Ne manquez plus l'essentiel
Recevez les analyses et tendances cybersécurité directement dans votre boîte mail.
1 commentaire
Commentaires désactivés.