L’hebdo cybersécurité (28 janvier 2024)

Offrez un café pour soutenir cette veille indépendante.

Voici le rapport de veille avec des liens directs vers les actus les plus intéressantes de la semaine passée. Certaines d’entre elles seront développées dans les prochains articles.

Pour information, cette veille est préparée avec un vrai cerveau non artificiel, alors bonne lecture et merci de soutenir le Décodeur !

Les actus sélectionnées cette semaine

Time to update your password: 26 billion personal records just leaked
The massive compilation of user credentials and personal information is being called the « mother of all breaches. »

In major gaffe, hacked Microsoft test account was assigned admin privileges
How does a legacy test account grant access to read every Office 365 account?

HP Enterprise was hacked by the same Russian state-sponsored group that targeted Microsoft
HP Enterprise was infiltrated by Midnight Blizzard or Cozy Bear, a hacking group linked to Russian intelligence, the business IT company has revealed in a Securities and Exchange Commission filing.

US sanctions Russian citizen accused of playing key role in Medibank ransomware attack | TechCrunch
The U.S. government sanctioned a Russian national for allegedly playing a « pivotal role » in the ransomware attack against Australian health insurance

ICO confirms data breach probe as UK councils remain downed by cyberattack | TechCrunch
The UK data regulator has confirmed it has received a breach report from three Kent councils downed by ongoing cyberattack

LoanDepot discloses that hackers breached personal data of 16 million customers
As mortgage lender LoanDepot continues recovery efforts from a ransomware attack, it revealed on Monday that hackers stole data from more than 16 million customers.

23andMe’s data hack went unnoticed for months
The 23andMe hacks started in late April 2023 and went on for months before the company discovered the data breach.

Mass exploitation of Ivanti VPNs is infecting networks around the globe
Orgs that haven’t acted yet should, even if it means suspending VPN services.

The life and times of Cozy Bear, the Russian hackers who just hit Microsoft and HPE
Hacks by Kremlin-backed group continue to hit hard.

NSA finally admits to spying on Americans by purchasing sensitive data
Violating Americans’ privacy « not just unethical but illegal, » senator says.

LockBit Ransomware Gang Claims Subway as New Victim
The LockBit ransomware gang has given Subway a deadline of February 2, 2024, to pay the ransom, or their data will be leaked.

Thousands of Dark Web Posts Expose ChatGPT Abuse Plans
Kaspersky has uncovered more than 3,000 posts on the dark web, where threat actors seek to abuse ChatGPT, OpenAI’s AI-powered chatbot.

Hackers Crack Tesla Twice, Rake in $1.3 Million at Pwn2Own Automotive
Pwn2Own Automotive 2024, a 3-day contest, saw competitors earn $1,323,750 for hacking Tesla and discovering 49 zero-day bugs in EV systems.

NCSC Warns That AI is Already Being Used by Ransomware Gangs
The UK’s NCSC has warned that malicious attackers are already taking advantage of artificial intelligence and that the volume and impact of threats – including ransomware – will increase in the next two years.

Atlassian Tightens API After Hacker Scrapes 15M Trello Profiles
The company hasn’t taken full responsibility for the incident,even though allowing scraping paves the way for dangerous follow-on attacks.

North Korean government hackers target individuals of interest, infosec professionals
The hacking unit is tasked with gathering strategic intelligence.

Ukraine: Hack wiped 2 petabytes of data from Russian research center
The Main Intelligence Directorate of Ukraine’s Ministry of Defense claims that pro-Ukrainian hacktivists breached the Russian Center for Space Hydrometeorology, aka « planeta » (планета), and wiped 2 petabytes of data.

Le chef d’un gang de hackers russes offre une récompense à celui qui dévoile l’identité d’un autre pirate
Le responsable du collectif de cybercriminel Lockbit a posté une annonce sur un forum de hackers. Il cherche des informations sur le membre d’un autre

💡 Ne manquez plus l'essentiel
Recevez les analyses et tendances cybersécurité directement dans votre boîte mail.

💡 Note : Certaines images ou extraits présents dans cet article proviennent de sources externes citées à des fins d’illustration ou de veille. Ce site est indépendant et à but non lucratif. 👉 En savoir plus sur notre cadre d’utilisation.

Vous appréciez ces analyses ?
Soutenez DCOD en offrant un café ☕

💡 Ne manquez plus l’essentiel

Les derniers articles

Cybersécurité et éthique : le PNR 77 plaide pour un cadre légal renforcé

Cybersécurité et IA : les CISO au cœur des décisions stratégiques

Londres démantèle un réseau exportant 40 000 téléphones volés vers la Chine

Faille critique dans GitHub Copilot : vol de codes privés via une attaque CVSS 9.6

Apple double les primes pour failles zero-click : jusqu’à 2 millions de dollars

Toutes les catégories

L’hebdo cybersécurité (28 janvier 2024)

Les actus sélectionnées cette semaine

Time to update your password: 26 billion personal records just leaked

In major gaffe, hacked Microsoft test account was assigned admin privileges

HP Enterprise was hacked by the same Russian state-sponsored group that targeted Microsoft

US sanctions Russian citizen accused of playing key role in Medibank ransomware attack | TechCrunch

ICO confirms data breach probe as UK councils remain downed by cyberattack | TechCrunch

LoanDepot discloses that hackers breached personal data of 16 million customers

23andMe’s data hack went unnoticed for months

Mass exploitation of Ivanti VPNs is infecting networks around the globe

The life and times of Cozy Bear, the Russian hackers who just hit Microsoft and HPE

NSA finally admits to spying on Americans by purchasing sensitive data

LockBit Ransomware Gang Claims Subway as New Victim

Thousands of Dark Web Posts Expose ChatGPT Abuse Plans

Hackers Crack Tesla Twice, Rake in $1.3 Million at Pwn2Own Automotive

NCSC Warns That AI is Already Being Used by Ransomware Gangs

Atlassian Tightens API After Hacker Scrapes 15M Trello Profiles

North Korean government hackers target individuals of interest, infosec professionals

Ukraine: Hack wiped 2 petabytes of data from Russian research center

Le chef d’un gang de hackers russes offre une récompense à celui qui dévoile l’identité d’un autre pirate

Marc Barbezat

Des idées de lecture cybersécurité

Cybersécurité et éthique : le PNR 77 plaide pour un cadre légal renforcé

Cybersécurité et IA : les CISO au cœur des décisions stratégiques

Londres démantèle un réseau exportant 40 000 téléphones volés vers la Chine

Faille critique dans GitHub Copilot : vol de codes privés via une attaque CVSS 9.6

Apple double les primes pour failles zero-click : jusqu’à 2 millions de dollars