The Electronic Frontier Foundation (EFF) announced a new project named STARTTLS Everywhere that aims to provide guidance to server administrators on how to set up a proper email server that runs STARTTLS the correct way. STARTTLS Everywhere is eerily similar to Let’s Encrypt, another pro-encryption initiative the EFF launched together […]
Année : 2018
Lazarus APT hackers leverages HWP Documents in a recent string of attacks
Security researchers at AlienVault uncovered a series of cyber attacks on cryptocurrency exchanges leveraging weaponized Hangul Word Processor HWP documents (Hangul Word Processor documents). The string of attacks involving the HWP documents has been attributed to the North Korea-linked Lazarus APT group, and includes the hack of the South Korean virtual currency […]
Misconfigured Java web server component Jolokia expose website at cyber attacks
Several websites using the misconfigured Java web server component Jolokia, including those operated by financial organizations. are exposed to cyber attacks. Websites using a misconfigured Java web server component are exposed to cyber attacks. Several high-profile websites including those operated by financial organizations were affected by issues. The security researcher […]
China Tick APT group targeting air-gapped systems in Asia
Palo Alto Networks experts uncovered a new operation conducted by the cyber espionage group known as Tick APT that has been targeting a secure USB drive built by a South Korean defense company. The Tick APT group has been active for at least a decade, tracked also as Bronze Butler, it was […]
Une attaque de Type Web Defacement cible les agences de voyages Tunisiennes
Le 25 Juin 20178 ,des sites web d’agences de voyages Tunisiennes ont été attaqué par le groupe de pirate N4ST4R_ID L’attaque a visé des sites tunisiens hébergés sur le même serveur en France. Les sites sont : ths.tn novatours.com.tn topbooking.com.tn bookinghotels.com.tn revolutiontravel.com.tn mte.com.tn gemvoyages.com destination-azure.com gemvoyages.com tunitalyhome.com etc… DE QUOI S’AGIT-IL […]
Mobile Devices Exposed to Spying via Malicious Batteries: Researchers
A team of researchers has demonstrated that specially crafted batteries installed in a smartphone can allow malicious actors to harvest and exfiltrate sensitive information. Researchers from Technion, UT Austin and Hebrew University showed that an attacker can use a malicious battery to obtain various types of information from a device […]
Oracle issued security patches for recently discovered Spectre and Meltdown issues
Last week Oracle started releasing software and microcode updates for products affected by the recently disclosed variants of the Spectre and Meltdown flaws. In May, tech giants Intel, AMD, ARM, IBM, Microsoft and other tech firms teamed to disclose two new variants of both Meltdown and Spectre issues. The so-called Variant 4 (CVE-2018-3639) relies on a Speculative […]
UK Tax Agency HMRC has recorded the voice tracks of 5.1 Million Brits
The UK-based privacy group Big Brother Watch revealed that the British tax agency HMRC has recorded the voice of over 5.1 million Britons. The UK-based privacy and civil liberties group Big Brother Watch has revealed that the British tax agency HMRC (Her Majesty’s Revenue and Customs) has recorded the voice […]
WannaSpam – Beware messages from WannaCry-Hack-Team, it is the last hoax
WannaSpam – Many users have received a mysterious message that claims their PC was infected by WannaCry Ransomware. Crooks ask victims to pay a ransom, but it’s a scam. Many users have received a mysterious message from a group that called itself the “WannaCry-Hack-Team” that claims that WannaCry Ransomware has returned. The mail informs […]
CSE Malware ZLab – A new variant of Ursnif Banking Trojan served by the Necurs botnet hits Italy
Malware researchers from CSE Cybsec ZLab discovered a missed link between the Necurs Botnet and a variant of the Ursnif trojan that recently hit Italy. Starting from 6th June, a new version of the infamous banking trojan Ursnif hit Italian companies. This malware is well known to the cyber-security community, the Ursnif banking Trojan was […]