Mois : septembre 2023

How Lazarus impersonated Meta to attack a target in Spain – Week in security with Tony Anscombe

1 min read

• Actus

How Lazarus impersonated Meta to attack a target in Spain – Week in security with Tony Anscombe

During the attack, the group deployed several tools, most notably a newly-discovered sophisticated backdoor that ESET named...

Read More

Securing AI: What You Should Know

1 min read

• Actus

Securing AI: What You Should Know

Securing AI within your organization starts with understanding how AI differs from traditional business tools. Google’s Secure...

Read More

The Week in Ransomware – September 29th 2023 – Dark Angels

1 min read

• Actus

The Week in Ransomware – September 29th 2023 – Dark Angels

This week has been a busy ransomware week, with ransomware attacks having a massive impact on organizations...

Read More

Millions of Exim mail servers exposed to zero-day RCE attacks

1 min read

• Actus

Millions of Exim mail servers exposed to zero-day RCE attacks

A critical zero-day vulnerability in all versions of Exim mail transfer agent (MTA) software can let unauthenticated attackers...

Read More

DHS: Physical Security a Concern in Johnson Controls Cyberattack

1 min read

• Actus

DHS: Physical Security a Concern in Johnson Controls Cyberattack

An internal memo cites DHS floor plans that could have been accessed in the breach.

Read More

How Can Your Security Team Help Developers Shift Left?

1 min read

• Actus

How Can Your Security Team Help Developers Shift Left?

Implementing a shift-left process in cybersecurity requires pulling together people, processes, and technology.

Read More

DHS Calls Into Question Physical Security in Johnson Controls Cyberattack

1 min read

• Actus

DHS Calls Into Question Physical Security in Johnson Controls Cyberattack

An internal memo notes of DHS floor plans that could have been accessed in the breach.

Read More

Spyware Vendor Targets Egyptian Orgs With Rare iOS Exploit Chain

1 min read

• Actus

Spyware Vendor Targets Egyptian Orgs With Rare iOS Exploit Chain

The Israeli company developed highly-targeted, mobile malware that would make any APT jealous.

Read More

Exploit released for Microsoft SharePoint Server auth bypass flaw

1 min read

• Actus

Exploit released for Microsoft SharePoint Server auth bypass flaw

Proof-of-concept exploit code has surfaced on GitHub for a critical authentication bypass vulnerability in Microsoft SharePoint Server, allowing...

Read More

Move Over, MOVEit: Critical Progress Bug Infests WS_FTP Software

1 min read

• Actus

Move Over, MOVEit: Critical Progress Bug Infests WS_FTP Software

In the wake of Cl0p’s MOVEit rampage, Progress Software is sending file-transfer customers scrambling again — this...

Read More