L’hebdo cybersécurité (18 février 2024)

Offrez un café pour soutenir cette veille indépendante.

Voici le rapport de veille avec des liens directs vers les actus les plus intéressantes de la semaine passée. Certaines d’entre elles seront développées dans les prochains articles.

Pour information, cette veille est préparée avec un vrai cerveau non artificiel, alors bonne lecture et merci de soutenir le Décodeur !

Les actus sélectionnées cette semaine

Ransomware attack forces 100 Romanian hospitals to go offline
100 hospitals across Romania have taken their systems offline after a ransomware attack hit their healthcare management system.

Microsoft and OpenAI say hackers are using ChatGPT to improve cyberattacks
New research from Microsoft and OpenAI reveals how hacking groups are using AI to improve their cyberattacks. The use of AI may grow for attackers and defenders.

U.S. Internet Leaked Years of Internal, Customer Emails
The Minnesota-based Internet provider U.S. Internet Corp. has a business unit called Securence, which specializes in providing filtered, secure email services to businesses, educational institutions and government agencies worldwide. But until it was notified last week, U.S.

Massive Cloud Database Leak Exposes 380 Million Records
Jeremiah Fowler, a cybersecurity researcher, stumbled upon something quite alarming: a cloud database leak allegedly belonging to Zenlayer.

North Korea successfully hacks email of South Korean President’s aide, gains access to sensitive information
The office of South Korean president Yoon Suk Yeol has confirmed that it believes North Korea hacked into the emails of one of its staff members.

Volt Typhoon targeted emergency management services, per report
Dragos researchers found that the China-sponsored hacking group has been attacking electric utilities since 2023.

DOJ, FBI disrupt Russian intelligence botnet
U.S. authorities disrupted the infrastructure used by a notorious Russian hacking group linked to the country’s military intelligence agency.

Hackers mint 1.79 billion crypto tokens from PlayDapp gaming platform
Hackers are believed to have used a stolen private key to mint and steal over 1.79 billion PLA tokens, a cryptocurrency used within the PlayDapp ecosystem.

FBI disrupts Russian Moobot botnet infecting Ubiquiti routers
The FBI took down a botnet of small office/home office (SOHO) routers used by Russia’s Main Intelligence Directorate of the General Staff (GRU) to proxy malicious traffic and to target the United States and its allies in spearphishing and credential theft attacks.

Des failles dans un patch pour Ivanti régalent les attaquants – Le Monde Informatique
Intrusion, Hacking et Pare-feu : La dernière mise à jour, qui corrigeait de précédentes failles dans les produits d’Ivanti, a introduit d’autres vulnérabilités. Les clients sont…

Une cyberattaque débranche les activités de Varta – Le Monde Informatique
Intrusion, Hacking et Pare-feu : Le fabricant de batteries Varta a vu la quasi-totalité de son activité paralysée par une cyberattaque.

Hackers mint 1.79 billion crypto tokens from PlayDapp gaming platform
Hackers are believed to have used a stolen private key to mint and steal over 1.79 billion PLA tokens, a cryptocurrency used within the PlayDapp ecosystem.

Integris Health says data breach impacts 2.4 million patients
Integris Health has reported to U.S. authorities that the data breach it suffered last November exposed personal information belonging to almost 2.4 million people.

FBI disrupts Russian Moobot botnet infecting Ubiquiti routers
The FBI took down a botnet of small office/home office (SOHO) routers used by Russia’s Main Intelligence Directorate of the General Staff (GRU) to proxy malicious traffic and to target the United States and its allies in spearphishing and credential theft attacks.

US offers up to $15 million for tips on ALPHV ransomware gang
The U.S. State Department is offering rewards of up to $10 million for information that could lead to the identification or location of ALPHV/Blackcat ransomware gang leaders.

North Korean hackers now launder stolen crypto via YoMix tumbler
The North Korean hacker collective Lazarus, infamous for having carried out numerous large-scale cryptocurrency heists over the years, has switched to using YoMix bitcoin mixer to launder stolen proceeds.

Microsoft Introduces Linux-Like ‘sudo’ Command to Windows 11
Microsoft is introducing Sudo for Windows 11, a new feature that allows users to run commands with administrator privileges.

Underwater SOS: EU wants to defend subsea cables
European Commission wants governments to pull together on guarding cable networks after spate of sabotage.

FCC orders telecom carriers to report PII data breaches within 30 days
Starting March 13th, telecommunications companies must report data breaches impacting customers’ personally identifiable information within 30 days, as required by FCC’s updated data breach reporting requirements.

💡 Ne manquez plus l'essentiel
Recevez les analyses et tendances cybersécurité directement dans votre boîte mail.

💡 Note : Certaines images ou extraits présents dans cet article proviennent de sources externes citées à des fins d’illustration ou de veille. Ce site est indépendant et à but non lucratif. 👉 En savoir plus sur notre cadre d’utilisation.

Vous appréciez ces analyses ?
Soutenez DCOD en offrant un café ☕

💡 Ne manquez plus l’essentiel

Les derniers articles

Cybersécurité et éthique : le PNR 77 plaide pour un cadre légal renforcé

Cybersécurité et IA : les CISO au cœur des décisions stratégiques

Londres démantèle un réseau exportant 40 000 téléphones volés vers la Chine

Faille critique dans GitHub Copilot : vol de codes privés via une attaque CVSS 9.6

Apple double les primes pour failles zero-click : jusqu’à 2 millions de dollars

Toutes les catégories

L’hebdo cybersécurité (18 février 2024)

Les actus sélectionnées cette semaine

Ransomware attack forces 100 Romanian hospitals to go offline

Microsoft and OpenAI say hackers are using ChatGPT to improve cyberattacks

U.S. Internet Leaked Years of Internal, Customer Emails

Massive Cloud Database Leak Exposes 380 Million Records

North Korea successfully hacks email of South Korean President’s aide, gains access to sensitive information

Volt Typhoon targeted emergency management services, per report

DOJ, FBI disrupt Russian intelligence botnet

Hackers mint 1.79 billion crypto tokens from PlayDapp gaming platform

FBI disrupts Russian Moobot botnet infecting Ubiquiti routers

Des failles dans un patch pour Ivanti régalent les attaquants – Le Monde Informatique

Une cyberattaque débranche les activités de Varta – Le Monde Informatique

Hackers mint 1.79 billion crypto tokens from PlayDapp gaming platform

Integris Health says data breach impacts 2.4 million patients

FBI disrupts Russian Moobot botnet infecting Ubiquiti routers

US offers up to $15 million for tips on ALPHV ransomware gang

North Korean hackers now launder stolen crypto via YoMix tumbler

Microsoft Introduces Linux-Like ‘sudo’ Command to Windows 11

Underwater SOS: EU wants to defend subsea cables

FCC orders telecom carriers to report PII data breaches within 30 days

Marc Barbezat

Des idées de lecture cybersécurité

Cybersécurité et éthique : le PNR 77 plaide pour un cadre légal renforcé

Cybersécurité et IA : les CISO au cœur des décisions stratégiques

Londres démantèle un réseau exportant 40 000 téléphones volés vers la Chine

Faille critique dans GitHub Copilot : vol de codes privés via une attaque CVSS 9.6

Apple double les primes pour failles zero-click : jusqu’à 2 millions de dollars