L’hebdo cybersécurité (7 avril 2024)

Offrez un café pour soutenir cette veille indépendante.

📚 Lecture conseillée : Cybersécurité : tests d’intrusion des systèmes d’informations web: Le guide des vulnérabilités web — 📘 Voir sur Amazon

Voici le rapport de veille avec des liens directs vers les actus les plus intéressantes de la semaine passée. Certaines d’entre elles seront développées dans les prochains articles.

Pour information, cette veille est préparée avec un vrai cerveau non artificiel, alors bonne lecture et merci de soutenir le Décodeur !

Les actus sélectionnées cette semaine

Microsoft blamed for « a cascade of security failures » in Exchange breach report
Summer 2023 intrusion pinned to corporate culture, « avoidable errors. »

US State Department investigates alleged theft of government data
The U.S. Department of State is investigating claims of a cyber incident after a threat actor leaked documents allegedly stolen from a government contractor.

Google to Delete Billions of Browsing Records in ‘Incognito Mode’ Privacy Lawsuit Settlement
Google agrees to wipe billions of browsing records to settle class action lawsuit, alleging tracking without consent in Chrome’s Incognito Mode.

AT&T acknowledges data leak that hit 73 million current and former users
Data leak hit 7.6 million current AT&T users, 65.4 million former subscribers.

CISA faces resource challenge in implementing cyber reporting rules
The Cybersecurity and Infrastructure Security Agency’s reporting requirements represent a sea change for when private entities will have to report cybersecurity incidents.

US Health Dept warns hospitals of hackers targeting IT help desks
The U.S. Department of Health and Human Services (HHS) warns that hackers are now using social engineering tactics to target IT help desks across the Healthcare and Public Health (HPH) sector.

US and UK will work together to test AI models for safety threats
Both the US and UK will share expertise and even conduct at least one joint safety test of AI models under the new agreement.

Security Firm at Center of $30 Million Easter Heist Was Hacked Months Earlier
A private security firm that controls a huge amount of money was robbed over Easter weekend. Cops are stumped as to how it happened.

Ransomware : le retour des pirates de Lockbit est compromis
Les pirates de Lockbit sont dans une mauvaise passe. Plusieurs semaines après l’opération Cronos, les cybercriminels peinent à relancer leurs activités. D’après Trend Micro, l’offensive de la police a durablement terni la réputation du gang et sa précieuse image de marque.

Missouri county declares state of emergency amid suspected ransomware attack
Outage occurs on same day as special election, but election offices remain open.

Linux backdoor was a long con, possibly with nation-state support, experts say
If the XZ Utils vulnerability hadn’t been caught in time, hackers would have had a « skeleton key to the world, » one analyst told Nextgov/FCW.

Omni Hotel IT Outage Disrupts Reservations, Digital Key Systems
Guests affected by the companywide disruption vented their frustrations on social media.

Naked photos sent in WhatsApp ‘phishing’ attacks on UK MPs and staff
At least six men working in the UK Parliament received unsolicited messages – and the exchanges quickly turned sexual.

Chinese hackers turn to AI to meddle in elections
Beijing’s influence operations are experimenting with synthetically generated content to carry out influence operations, per Microsoft report.

US cancer center data breach exposes info of 827,000 patients
Cancer treatment and research center City of Hope is warning that a data breach exposed the sensitive information of over 820,000 patients.

💡 Ne manquez plus l'essentiel
Recevez les analyses et tendances cybersécurité directement dans votre boîte mail.

💡 Note : Certaines images ou extraits présents dans cet article proviennent de sources externes citées à des fins d’illustration ou de veille. Ce site est indépendant et à but non lucratif. 👉 En savoir plus sur notre cadre d’utilisation.

Vous appréciez ces analyses ?
Soutenez DCOD en offrant un café ☕

💡 Ne manquez plus l’essentiel

Les derniers articles

Les 10 directives essentielles pour renforcer sa cybersécurité en 2025

Proton déplace ses serveurs face aux lois suisses

Reconnaissance faciale: 4,7 millions de Britanniques scannés

Google victime d’une cyberattaque ciblant Salesforce

Les dernières actus des cybercriminels – 29 août 2025

Toutes les catégories

L’hebdo cybersécurité (7 avril 2024)

Les actus sélectionnées cette semaine

Microsoft blamed for « a cascade of security failures » in Exchange breach report

US State Department investigates alleged theft of government data

Google to Delete Billions of Browsing Records in ‘Incognito Mode’ Privacy Lawsuit Settlement

AT&T acknowledges data leak that hit 73 million current and former users

CISA faces resource challenge in implementing cyber reporting rules

US Health Dept warns hospitals of hackers targeting IT help desks

US and UK will work together to test AI models for safety threats

Security Firm at Center of $30 Million Easter Heist Was Hacked Months Earlier

Ransomware : le retour des pirates de Lockbit est compromis

Missouri county declares state of emergency amid suspected ransomware attack

Linux backdoor was a long con, possibly with nation-state support, experts say

Omni Hotel IT Outage Disrupts Reservations, Digital Key Systems

Naked photos sent in WhatsApp ‘phishing’ attacks on UK MPs and staff

Chinese hackers turn to AI to meddle in elections

US cancer center data breach exposes info of 827,000 patients

Marc Barbezat

Des idées de lecture cybersécurité

Les 10 directives essentielles pour renforcer sa cybersécurité en 2025

Proton déplace ses serveurs face aux lois suisses

Reconnaissance faciale: 4,7 millions de Britanniques scannés

Google victime d’une cyberattaque ciblant Salesforce

Les dernières actus des cybercriminels – 29 août 2025