L’hebdo cybersécurité (14 avril 2024)

Voici le rapport de veille avec des liens directs vers les actus les plus intéressantes de la semaine passée. Certaines d’entre elles seront développées dans les prochains articles.

Pour information, cette veille est préparée avec un vrai cerveau non artificiel, alors bonne lecture et merci de soutenir le Décodeur !

Les actus sélectionnées cette semaine

iPhone users in 92 countries received a spyware attack warning from Apple
Apple notified individuals in 92 countries of possible mercenary spyware attacks on their systems.

US government urges Sisense customers to reset credentials after hack | TechCrunch
The CISA said it was responding to a « recent compromise » at the data analytics giant, which provides business intelligence to critical infrastructure firms.

Microsoft employees exposed internal passwords in security lapse | TechCrunch
The tech giant secured a cloud storage server that was inadvertently spilling Microsoft internal data and credentials to the open internet.

Security engineer jailed for 3 years for $12M crypto hacks | TechCrunch
Security engineer Shakeeb Ahmed was sentenced to three years in prison for hacking cryptocurrency exchanges Nirvana Finance and Crema Finance.

Un » Black Friday » pour les pirates : la France s’attend à des JO 2024 sous haute tension
La France redoute un déferlement de cyberattaques pendant les Jeux olympiques 2024. Pour l’ANSSI, il faut s’attendre à des attaques venant d’hacktivistes prorusses et de cybercriminels attirés par l’appât du gain.

Les hackers de Lockbit font face à une armée d’imitateurs
Les cybercriminels de Lockbit traversent une mauvaise passe. Alors que la réputation du gang a été ternie par les efforts des forces de police, une armée d’imitateurs se sert du code du ransomware pour mener des attaques.

Roku suffered another data breach, this time affecting 576,000 accounts
Roku has disclosed a second data breach in as many months. The company says that, this time around, 576,000 accounts were compromised.

Critical takeover vulnerabilities in 92,000 D-Link devices under active exploitation
D-Link won’t be patching vulnerable NAS devices because they’re no longer supported.

« Highly capable » hackers root corporate networks by exploiting firewall 0-day
No patch yet for unauthenticated code-execution bug in Palo Alto Networks firewall.

Top Israeli spy exposes own identity in ebook email mistake
Plus: Another local government hobbled by ransomware; Huge rise in infostealing malware; and critical vulns

10-Year-Old ‘RUBYCARP’ Romanian Hacker Group Surfaces with Botnet
RUBYCARP threat group, suspected to be of Romanian origin, has been discovered operating a botnet for crypto mining, DDoS, and phishing attacks

U.S. Department of Health warns of attacks against IT help desks
U.S. Department of Health and Human Services warns of attacks against IT help desks across the Healthcare and Public Health (HPH) sector.

AT&T states that the data breach impacted 51 million former and current customers
AT&T confirmed that the data breach impacted 51 million former and current customers and is notifying them.

US Data Breach Reports Surge 90% Annually in Q1
The number of publicly reported data breaches and leaks grew 90% in the first three months of the year

UK flooded with forged stamps despite using barcodes – to prevent just that
Royal Mail, the British postal and courier service began switching all snail mail stamps to barcoded stamps last year. The purpose of the barcode was to enhance security, deter stamp reuse, and possibly prevent forgeries-which it has failed to do.

When a breach goes from 25 documents to 1.3 terabytes…
If 25 documents stolen is « very serious, » I’m not sure the words exist to describe the 1.3 terabytes of data that Leicester City Council now says it has had stolen by hackers.

Cette veille indépendante vous est utile ?
Offrez un café pour soutenir le serveur (et le rédacteur).

L'essentiel Cybersécurité, IA & Tech

Rejoignez la communauté. 3 fois par semaine, recevez l'analyse des tendances par Marc Barbezat. Pas de spam, juste de l'info.

Ou suivez le flux temps réel

☕ Je soutiens DCOD

💡 Ne manquez plus l’essentiel

Les derniers articles

Espionnage numérique : LinkedIn, cible des espions chinois

Samsung accusé : des logiciels espions sur ses téléphones abordables

250 serveurs saisis : coup d’arrêt à bulletproof hosting

Top 10 OWASP 2025 : les nouveaux risques de la sécurité applicative

Sturnus: un malware Android qui cible WhatsApp, Telegram, Signal

Toutes les catégories

L’hebdo cybersécurité (14 avril 2024)

Les actus sélectionnées cette semaine

iPhone users in 92 countries received a spyware attack warning from Apple

US government urges Sisense customers to reset credentials after hack | TechCrunch

Microsoft employees exposed internal passwords in security lapse | TechCrunch

Security engineer jailed for 3 years for $12M crypto hacks | TechCrunch

Un » Black Friday » pour les pirates : la France s’attend à des JO 2024 sous haute tension

Les hackers de Lockbit font face à une armée d’imitateurs

Roku suffered another data breach, this time affecting 576,000 accounts

Critical takeover vulnerabilities in 92,000 D-Link devices under active exploitation

« Highly capable » hackers root corporate networks by exploiting firewall 0-day

Top Israeli spy exposes own identity in ebook email mistake

10-Year-Old ‘RUBYCARP’ Romanian Hacker Group Surfaces with Botnet

U.S. Department of Health warns of attacks against IT help desks

AT&T states that the data breach impacted 51 million former and current customers

US Data Breach Reports Surge 90% Annually in Q1

UK flooded with forged stamps despite using barcodes – to prevent just that

When a breach goes from 25 documents to 1.3 terabytes…

L'essentiel Cybersécurité, IA & Tech

Marc Barbezat

Des idées de lecture cybersécurité

💡 Ne manquez plus l’essentiel

Les derniers articles

Toutes les catégories

Les actus sélectionnées cette semaine

L'essentiel Cybersécurité, IA & Tech

A lire également

Des idées de lecture cybersécurité