L’hebdo cybersécurité (10 mars 2024)

Offrez un café pour soutenir cette veille indépendante.

📚 Lecture conseillée : Hacking et Cybersécurité Mégapoche pour les Nuls — 📘 Voir sur Amazon

Voici le rapport de veille avec des liens directs vers les actus les plus intéressantes de la semaine passée. Certaines d’entre elles seront développées dans les prochains articles.

Pour information, cette veille est préparée avec un vrai cerveau non artificiel, alors bonne lecture et merci de soutenir le Décodeur !

Les actus sélectionnées cette semaine

Hackers exploited Windows 0-day for 6 months after Microsoft knew of it
Technically, Microsoft doesn’t consider such bugs vulnerabilities. It patched it anyway.

Hackers Behind the Change Healthcare Ransomware Attack Just Received a $22 Million Payment
The transaction, visible on Bitcoin’s blockchain, suggests the victim of one of the worst ransomware attacks in years may have paid a very large ransom.

Attack wrangles thousands of web users into a password-cracking botnet
Ongoing attack is targeting thousands of sites, continues to grow.

Microsoft says Kremlin-backed hackers accessed its source and internal systems
Midnight Blizzard is now using stolen secrets in follow-on attacks against customers.

FBI: U.S. lost record $12.5 billion to online crime in 2023
FBI’s Internet Crime Complaint Center (IC3) has released its 2023 Internet Crime Report, which recorded a 22% increase in reported losses compared to 2022, amounting to a record of $12.5 billion.

MiTM phishing attack can let attackers unlock and steal a Tesla
Researchers demonstrated how they could conduct a Man-in-the-Middle (MiTM) phishing attack to compromise Tesla accounts, unlocking cars, and starting them. The attack works on the latest Tesla app, version 4.30.6, and Tesla software version 11.1 2024.2.7.

Ukraine claims it hacked Russian Ministry of Defence, stole secrets and encryption ciphers
Ukraine claims to have successfully hacked Russian military servers and gained access to highly sensitive information.

BlackCat Goes Dark After Ripping Off Change Healthcare Ransom
Source code fire sale, stiffing affiliates – are BlackCat admins intentionally burning their RaaS business to the ground? Experts say something’s up.

Russia-Sponsored Cyberattackers Infiltrate Microsoft’s Code Base
The Midnight Blizzard APT is mounting a sustained, focused cyber campaign against the computing kahuna, using secrets it stole from emails back in January.

South Korean Police Deploy Deepfake Detection Tool Prior to Elections
The nation’s battle with political deepfakes may be a harbinger for what’s to come in elections around the world this year.

Berlin blames Taurus call leak on officer logging in via insecure Singapore hotel line
Germany is scrambling to clean up the damage following an embarrassing leak of secret information to the Russians.

Content farm impersonates 60+ major news outlets, like BBC, CNN, CNBC
BleepingComputer has discovered a content farm operating some 60+ domains named after popular media outlets, including the BBC, CNBC, CNN, Forbes, Huffington Post, The Guardian, and Washington Post, among others. These sites build SEO for their online gambling ventures and sell « press release » slots at hefty prices.

💡 Ne manquez plus l'essentiel
Recevez les analyses et tendances cybersécurité directement dans votre boîte mail.

💡 Note : Certaines images ou extraits présents dans cet article proviennent de sources externes citées à des fins d’illustration ou de veille. Ce site est indépendant et à but non lucratif. 👉 En savoir plus sur notre cadre d’utilisation.

Vous appréciez ces analyses ?
Soutenez DCOD en offrant un café ☕

💡 Ne manquez plus l’essentiel

Les derniers articles

Proton déplace ses serveurs face aux lois suisses

Reconnaissance faciale: 4,7 millions de Britanniques scannés

Google victime d’une cyberattaque ciblant Salesforce

Les dernières actus des cybercriminels – 29 août 2025

Records de fouilles de téléphones à la frontière américaine

Toutes les catégories

L’hebdo cybersécurité (10 mars 2024)

Les actus sélectionnées cette semaine

Hackers exploited Windows 0-day for 6 months after Microsoft knew of it

Hackers Behind the Change Healthcare Ransomware Attack Just Received a $22 Million Payment

Attack wrangles thousands of web users into a password-cracking botnet

Microsoft says Kremlin-backed hackers accessed its source and internal systems

FBI: U.S. lost record $12.5 billion to online crime in 2023

MiTM phishing attack can let attackers unlock and steal a Tesla

Ukraine claims it hacked Russian Ministry of Defence, stole secrets and encryption ciphers

BlackCat Goes Dark After Ripping Off Change Healthcare Ransom

Russia-Sponsored Cyberattackers Infiltrate Microsoft’s Code Base

South Korean Police Deploy Deepfake Detection Tool Prior to Elections

Berlin blames Taurus call leak on officer logging in via insecure Singapore hotel line

Content farm impersonates 60+ major news outlets, like BBC, CNN, CNBC

Marc Barbezat

Des idées de lecture cybersécurité

Proton déplace ses serveurs face aux lois suisses

Reconnaissance faciale: 4,7 millions de Britanniques scannés

Google victime d’une cyberattaque ciblant Salesforce

Les dernières actus des cybercriminels – 29 août 2025

Records de fouilles de téléphones à la frontière américaine