Non classé

Lorsqu’une mise à jour défectueuse de Crowdstrike a bloqué les systèmes Windows à l’échelle mondiale

Marouen Ben Mahmoud 5 jours ago

Le 22 juillet 2024, les employés de CrowdStrike, une entreprise de premier plan dans le domaine de la sécurité informatique, ont été confrontés à une situation extrêmement urgente. Le crash global des systèmes Windows a été provoqué par un dysfonctionnement de la principale solution, le Falcon Sensor, lors de sa […]

Investigation approfondie d’une attaque de ransomware

Marouen Ben Mahmoud 1 mois ago

Une récente enquête menée par des experts en cybersécurité a mis en lumière une attaque de ransomware.

Code injection in Workflows leading to SharePoint RCE (CVE-2020-0646)

Haythem Elmir 4 ans ago

Description A remote code execution issue in SharePoint Online via Workflows code injection was reported to Microsoft in November 2019 which was addressed immediately on the online platform. However, the main issue was patched in .NET Framework in January 2020. Therefore, the SharePoint On-Premise versions which do not have the […]

Alerte Patch! Microsoft met en garde contre des bugs RDP de type worm (ver)

Haythem Elmir 5 ans ago

Le correctif Patch Tuesday de Microsoft publié récemment a apporté de très mauvaises nouvelles : davantage de vulnérabilités RDP de type worm (ver), affectant cette fois-ci les utilisateurs de Windows 10. CVE-2019-1181 et -1182 sont des vulnérabilités critiques dans Remote Desktop Services (anciennement Windows terminal) qui sont de type ver […]

DHS and FBI published a Malware Analysis Report on North Korea-linked tool ELECTRICFISH

Haythem Elmir 5 ans ago

The U.S. Department of Homeland Security (DHS) and the FCI published a new joint report on ELECTRICFISH, a malware used by North Korea. US DHS and the Federal Bureau of Investigation (FBI) conducted a joint analysis of a traffic tunneling tool dubbed ELECTRICFISH used by North Korea-linked APT group tracked […]

New Settings Let Hackers Easily Pentest Facebook, Instagram Mobile Apps

Haythem Elmir 5 ans ago

Facebook has introduced a new feature in its platform that has been designed to make it easier for bug bounty hunters to find security flaws in Facebook, Messenger, and Instagram Android applications. Since almost all Facebook-owned apps by default use security mechanisms such as Certificate Pinning to ensure integrity and […]

Facebook victime d’un changement de configuration serveur

Haythem Elmir 5 ans ago

Technologie : Les 14 heures de panne essuyées par Facebook – qui a aussi affecté Instragram et WhatsApp – sont la conséquence d’une modification de la configuration serveur. Mercredi, heure française, de nombreux utilisateurs des services Facebook se plaignaient de l’indisponibilité des applications. La plateforme, qui avait rapidement exclu une attaque […]

Non classé

Firefox Send — Free Encrypted File Transfer Service Now Available For All

Haythem Elmir 5 ans ago

Mozilla has made it easy for you to share large files securely and privately with whomever you want, eliminating the need to depend upon less secure free third-party services or file upload tools that burn a hole in your pocket. Mozilla has finally launched its free, end-to-end encrypted file-transfer service, […]

Non classé

Flight Booking System Flaw Affected Customers of 141 Airlines Worldwide

Haythem Elmir 6 ans ago

Almost half of the fight travelers around the world were found exposed to a critical security vulnerability discovered in online flight ticket booking system that allowed remote hackers to access and modify their travel details and even claim their frequent flyer miles. Israeli network security researcher Noam Rotem discovered the […]

phpMyAdmin Releases Critical Software Update — Patch Your Sites Now!

Haythem Elmir 6 ans ago

phpMyAdmin Releases Critical Software Update — Patch Your Sites Now! Developers of phpMyAdmin, one of the most popular and widely used MySQL database management systems, today released an updated version 4.8.4 of its software to patch several important vulnerabilities that could eventually allow remote attackers to take control of the […]