Année : 2023

CERTFR-2023-AVI-0915 : Multiples vulnérabilités dans les produits Qnap (06 novembre 2023)

1 min read

• Actus

CERTFR-2023-AVI-0915 : Multiples vulnérabilités dans les produits Qnap (06 novembre 2023)

De multiples vulnérabilités ont été découvertes dans les produits Qnap. Elles permettent à un attaquant de provoquer...

Read More

CERTFR-2023-ACT-048 : Bulletin d’actualité CERTFR-2023-ACT-048 (06 novembre 2023)

1 min read

• Actus

CERTFR-2023-ACT-048 : Bulletin d’actualité CERTFR-2023-ACT-048 (06 novembre 2023)

Ce bulletin d’actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs...

Read More

TellYouThePass ransomware joins Apache ActiveMQ RCE attacks

1 min read

• Actus

TellYouThePass ransomware joins Apache ActiveMQ RCE attacks

Internet-exposed Apache ActiveMQ servers are also targeted in TellYouThePass ransomware attacks targeting a critical remote code execution...

Read More

Meet Your New Cybersecurity Auditor: Your Insurer

1 min read

• Actus

Meet Your New Cybersecurity Auditor: Your Insurer

As cyber insurance gets more expensive and competitive, security decision-makers have actionable opportunities to strengthen their cyber...

Read More

QNAP warns of critical command injection flaws in QTS OS, apps

1 min read

• Actus

QNAP warns of critical command injection flaws in QTS OS, apps

QNAP Systems published security advisories for two critical command injection vulnerabilities that impact multiple versions of the...

Read More

Cybercrime service bypasses Android security to install malware

1 min read

• Actus

Cybercrime service bypasses Android security to install malware

A new dropper-as-a-service (DaaS) named ‘SecuriDropper’ has emerged, using a method that bypasses Android 13’s ‘Restricted Settings’...

Read More

Sky’s the Limit, but What About API Security? Challenges in the Cloud-First Era

1 min read

• Actus

Sky’s the Limit, but What About API Security? Challenges in the Cloud-First Era

APIs enable cloud transformation but bring security risks, demanding robust, adaptive strategies to safeguard data and operations.

Read More

Keep Your Organization’s APIs Protected This Holiday Season

1 min read

• Actus

Keep Your Organization’s APIs Protected This Holiday Season

Understanding API security risks isn’t just a good idea — it’s a business imperative. A single API...

Read More

Socks5Systemz proxy service infects 10,000 systems worldwide

1 min read

• Actus

Socks5Systemz proxy service infects 10,000 systems worldwide

A proxy botnet called ‘Socks5Systemz’ has been infecting computers worldwide via the ‘PrivateLoader’ and ‘Amadey’ malware loaders,...

Read More

Apple ‘Find My’ network can be abused to steal keylogged passwords

1 min read

• Actus

Apple ‘Find My’ network can be abused to steal keylogged passwords

Apple’s « Find My » location network can be abused by malicious actors to stealthily transmit sensitive information captured...

Read More