L’hebdo cybersécurité (28 janvier 2024)

Voici le rapport de veille avec des liens directs vers les actus les plus intéressantes de la semaine passée. Certaines d’entre elles seront développées dans les prochains articles.

L'essentiel Cybersécurité, IA & Tech

Rejoignez la communauté. 3 fois par semaine, recevez l'analyse des tendances par Marc Barbezat. Pas de spam, juste de l'info.

Ou suivez le flux temps réel

Pour information, cette veille est préparée avec un vrai cerveau non artificiel, alors bonne lecture et merci de soutenir le Décodeur !

Les actus sélectionnées cette semaine

Time to update your password: 26 billion personal records just leaked
The massive compilation of user credentials and personal information is being called the « mother of all breaches. »

In major gaffe, hacked Microsoft test account was assigned admin privileges
How does a legacy test account grant access to read every Office 365 account?

HP Enterprise was hacked by the same Russian state-sponsored group that targeted Microsoft
HP Enterprise was infiltrated by Midnight Blizzard or Cozy Bear, a hacking group linked to Russian intelligence, the business IT company has revealed in a Securities and Exchange Commission filing.

US sanctions Russian citizen accused of playing key role in Medibank ransomware attack | TechCrunch
The U.S. government sanctioned a Russian national for allegedly playing a « pivotal role » in the ransomware attack against Australian health insurance

ICO confirms data breach probe as UK councils remain downed by cyberattack | TechCrunch
The UK data regulator has confirmed it has received a breach report from three Kent councils downed by ongoing cyberattack

LoanDepot discloses that hackers breached personal data of 16 million customers
As mortgage lender LoanDepot continues recovery efforts from a ransomware attack, it revealed on Monday that hackers stole data from more than 16 million customers.

23andMe’s data hack went unnoticed for months
The 23andMe hacks started in late April 2023 and went on for months before the company discovered the data breach.

Mass exploitation of Ivanti VPNs is infecting networks around the globe
Orgs that haven’t acted yet should, even if it means suspending VPN services.

The life and times of Cozy Bear, the Russian hackers who just hit Microsoft and HPE
Hacks by Kremlin-backed group continue to hit hard.

NSA finally admits to spying on Americans by purchasing sensitive data
Violating Americans’ privacy « not just unethical but illegal, » senator says.

LockBit Ransomware Gang Claims Subway as New Victim
The LockBit ransomware gang has given Subway a deadline of February 2, 2024, to pay the ransom, or their data will be leaked.

Thousands of Dark Web Posts Expose ChatGPT Abuse Plans
Kaspersky has uncovered more than 3,000 posts on the dark web, where threat actors seek to abuse ChatGPT, OpenAI’s AI-powered chatbot.

Hackers Crack Tesla Twice, Rake in $1.3 Million at Pwn2Own Automotive
Pwn2Own Automotive 2024, a 3-day contest, saw competitors earn $1,323,750 for hacking Tesla and discovering 49 zero-day bugs in EV systems.

NCSC Warns That AI is Already Being Used by Ransomware Gangs
The UK’s NCSC has warned that malicious attackers are already taking advantage of artificial intelligence and that the volume and impact of threats – including ransomware – will increase in the next two years.

Atlassian Tightens API After Hacker Scrapes 15M Trello Profiles
The company hasn’t taken full responsibility for the incident,even though allowing scraping paves the way for dangerous follow-on attacks.

North Korean government hackers target individuals of interest, infosec professionals
The hacking unit is tasked with gathering strategic intelligence.

Ukraine: Hack wiped 2 petabytes of data from Russian research center
The Main Intelligence Directorate of Ukraine’s Ministry of Defense claims that pro-Ukrainian hacktivists breached the Russian Center for Space Hydrometeorology, aka « planeta » (планета), and wiped 2 petabytes of data.

Le chef d’un gang de hackers russes offre une récompense à celui qui dévoile l’identité d’un autre pirate
Le responsable du collectif de cybercriminel Lockbit a posté une annonce sur un forum de hackers. Il cherche des informations sur le membre d’un autre

Cette veille vous a fait gagner du temps ?
Aidez DCOD à payer ses serveurs et à rester 100% gratuit et indépendant.

☕ Offrir un café

Navigation

Les derniers articles

Le vibe coding face aux enjeux de sécurité informatique

Cybercriminalité : les 9 opérations et arrestations du 26 juin 2026

Secure Boot : des clés expirées menacent Windows et Linux

Fuites de données : les 15 incidents majeurs au 25 juin 2026

Fausses vidéos sur Polymarket : l’illusion dupe les internautes

Suivez en direct

L’hebdo cybersécurité (28 janvier 2024)

L'essentiel Cybersécurité, IA & Tech

Les actus sélectionnées cette semaine

Time to update your password: 26 billion personal records just leaked

In major gaffe, hacked Microsoft test account was assigned admin privileges

HP Enterprise was hacked by the same Russian state-sponsored group that targeted Microsoft

US sanctions Russian citizen accused of playing key role in Medibank ransomware attack | TechCrunch

ICO confirms data breach probe as UK councils remain downed by cyberattack | TechCrunch

LoanDepot discloses that hackers breached personal data of 16 million customers

23andMe’s data hack went unnoticed for months

Mass exploitation of Ivanti VPNs is infecting networks around the globe

The life and times of Cozy Bear, the Russian hackers who just hit Microsoft and HPE

NSA finally admits to spying on Americans by purchasing sensitive data

LockBit Ransomware Gang Claims Subway as New Victim

Thousands of Dark Web Posts Expose ChatGPT Abuse Plans

Hackers Crack Tesla Twice, Rake in $1.3 Million at Pwn2Own Automotive

NCSC Warns That AI is Already Being Used by Ransomware Gangs

Atlassian Tightens API After Hacker Scrapes 15M Trello Profiles

North Korean government hackers target individuals of interest, infosec professionals

Ukraine: Hack wiped 2 petabytes of data from Russian research center

Le chef d’un gang de hackers russes offre une récompense à celui qui dévoile l’identité d’un autre pirate

Marc Barbezat

Des idées de lecture recommandées par DCOD

Navigation

Les derniers articles

Suivez en direct

L'essentiel Cybersécurité, IA & Tech

Les actus sélectionnées cette semaine

A lire également

Des idées de lecture recommandées par DCOD

Soutenir la veille DCOD