Contenu
Stratégie et Tendances / Strategy and Trends
Comment éviter le déficit de préparation et assurer une reprise rapide après une cyberattaque ?
informatiquenews.fr - 13/08/2024 
Les entreprises surestiment souvent leur résilience face aux cyberattaques, négligeant la préparation à la récupération après une intrusion inévitable. Avec l’évolution rapide des techniques d’attaque, notamment via l’intelligence artificielle, une stratégie de défense axée sur la protection et la restauration sécurisée des données de sauvegarde devient cruciale.
How Phishing Attacks Adapt Quickly to Capitalize on Current Events
thehackernews.com - 12/08/2024 
In 2023, no fewer than 94 percent of businesses were impacted by phishing attacks, a 40 percent increase compared to the previous year, according to research from Egress.
Browser backdoors: Securing the new frontline of shadow IT
helpnetsecurity.com - 13/08/2024
Browser extensions are a prime target for cybercriminals. And this isn’t just a consumer problem, it’s a new frontier in enterprises’ battle against shadow IT.
35% of exposed API keys still active, posing major security risks
helpnetsecurity.com - 13/08/2024
Nightfall AI’s research revealed that secrets like passwords and API keys were most often found in GitHub, with nearly 350 total secrets exposed per 100 employees every year.
Outils, Technologies et Standards / Tools, Technologies and Standards
Microsoft shares Outlook workaround for Gmail sign-in issues
bleepingcomputer.com - 12/08/2024
Microsoft has shared a temporary fix for a known issue preventing Microsoft 365 customers from signing in or adding Gmail accounts using classic Outlook.
DARPA competition shows promise of using AI to find and patch bugs
cyberscoop.com - 12/08/2024
The Pentagon is one step closer to building autonomous mechanics that can find and fix vulnerabilities in the world’s digital underbelly and all it took was a few million dollars and a contest with some of the best and brightest at hacker summer camp.
PostgreSQL Vulnerability Allows Hackers To Execute Arbitrary SQL Functions
gbhackers.com - 13/08/2024
A critical vulnerability identified as CVE-2024-7348
has been discovered in PostgreSQL, enabling attackers to execute arbitrary SQL functions.
This vulnerability in the pg_dump utility poses a significant security risk, especially when
executed by superusers.
Note: This information is covered in the CERT-IST/AV-2024.1493 advisory.
Failles et Attaques / Flaws and Attacks
Un faux site Web imitant celui de WinRAR se balade, soyez vigilant
clubic.com - 12/08/2024
Une arnaque en ligne vise les utilisateurs de WinRAR, le célèbre logiciel de compression. Des cybercriminels ont créé un faux site web ressemblant au site officiel pour propager des logiciels malveillants. Le domaine frauduleux, win-rar.co, exploite une faute de frappe courante pour piéger les internautes inattentifs.
Cybersécurité : l’université Paris-Saclay touchée par un ransomware
usine-digitale.fr - 13/08/2024
L’université francilienne a annoncé avoir été visée par une attaque par ransomware le 11 août. Un incident qui intervient une semaine après une autre cyberattaque contre plus de 40 établissements culturels en France.
South Korea says DPRK hackers stole spy plane technical data
bleepingcomputer.com - 12/08/2024
South Korea's ruling party, People Power Party (PPP), claims that North Korean hackers have stolen crucial information about K2 tanks, the country's main battle tank, as well as its "Baekdu" and "Geumgang" spy planes.
Sur le même sujet / On the
same topic:
South
Korea Warns Pyongyang Has Stolen Spy Plane Details
(infosecurity-magazine.com)
Hackers posing as Ukraine’s Security Service infect 100 govt PCs
bleepingcomputer.com - 12/08/2024
Attackers impersonating the Security Service of Ukraine (SSU) have used malicious spam emails to target and compromise systems belonging to the country's government agencies.
Sur le même sujet / On the
same topic:
Ukraine
Warns of New Phishing Campaign Targeting Government Computers
(thehackernews.com)
CERT-UA
warns of a phishing campaign targeting government entities
(securityaffairs.com)
Vulnerability in Windows Driver Leads to System Crashes
infosecurity-magazine.com - 12/08/2024
A newly discovered vulnerability, identified as CVE-2024-6768, has surfaced in the Common Log File System (CLFS.sys) driver of Windows.
Juridique / Legal
Ransomware : le FBI neutralise un gang après 43 cyberattaques
01net - 13/08/2024
Le FBI a frappé fort contre Dispossessor, un gang de cybercriminels responsable de dizaines d’attaques par ransomware depuis 2023. Les agents fédéraux ont saisi les différents sites du groupe, accentuant la lutte contre les pirates spécialisés dans la double extorsion.
Sur le même sujet / On the
same topic:
FBI
disrupts the Dispossessor ransomware operation, seizes servers
(bleepingcomputer.com)
FBI
Shuts Down Dispossessor Ransomware Group's Servers Across U.S., U.K., and
Germany (thehackernews.com)
International
investigation shuts down Radar/Dispossessor ransomware group
(helpnetsecurity.com)
Divers / Miscellaneous
clubic.com - 13/08/2024
Alors qu'il s'apprêtait à interviewer Donald Trump sur son réseau social X, Elon Musk a été contraint d'attendre. La plateforme a été frappée par une attaque DDoS massive, retardant le démarrage de l'entretien.
Sur le même sujet / On the
same topic:
Bug
technique sur X pendant l’entretien entre Trump et Musk, qui plaide l’attaque
DDoS (next.ink)
DeathGrip Ransomware Expanding Services Using RaaS Service
gbhackers.com - 13/08/2024
A new Ransomware-as-a-Service (RaaS) platform known as DeathGrip has surfaced, offering sophisticated ransomware tools to aspiring cyber criminals.
Australian gold producer Evolution Mining hit by ransomware
bleepingcomputer.com - 12/08/2024
Evolution Mining has informed that it has been targeted by a ransomware attack on August 8, 2024, which impacted its IT systems.
Sur le même sujet / On the
same topic:
Australian
gold mining company hit with ransomware (helpnetsecurity.com)
Australian
gold mining company Evolution Mining announces ransomware attack
(therecord.media)
Researchers Uncover Vulnerabilities in Solarman and Deye Solar Systems
thehackernews.com - 12/08/2024
Cybersecurity researchers have identified a number of security shortcomings in photovoltaic system management platforms operated by Chinese companies Solarman and Deye that could enable malicious actors to cause disruption and power blackouts.