Sodexo food services and facilities management company notified a number of customers that it was the victim of a targeted attack on its cinema vouchers platform Sodexo Filmology. Sodexo food services and facilities management company notified a number of customers that it was the victim of a targeted attack on […]
ATMJackpot, a new strain of ATM Malware discovered by experts
A new strain of ATM jackpotting malware dubbed ATMJackpot has been discovered by experts at Netskope Threat Research Labs. The malware is still under development and appears to have originated in Hong Kong, it has a smaller system footprint compared with similar threats. “Netskope Threat Research Labs has discovered a new […]
Facebook Says Up to 2.7 Million EU Users Affected by Leak
BRUSSELS — The European Union said Friday that Facebook has told it that up to 2.7 million people in the 28-nation bloc may have been victim of improper data sharing involving political data-mining firm Cambridge Analytica. EU spokesman Christian Wigand said EU Justice Commissioner Vera Jourova will have a telephone […]
Financial Services DDoS Attacks Tied to Reaper Botnet
Recorded Future’s « Insikt » threat intelligence research group has linked the Mirai variant IoTroop (aka Reaper) botnet with attacks on the Netherlands financial sector in January 2018. The existence of IoTroop was first noted by Check Point in October 2017. At that point the botnet had not been used to deliver any known DDoS […]
La Bourse de Tunis choisit Ooredoo pour sécuriser l’ensemble de ses interconnexions
Dans le cadre d’un partenariat stratégique, la Bourse des Valeurs mobilières de Tunis (BVMT) a confié à Ooredoo Tunisie le renforcement de ses interconnexions. Le nouveau dispositif garantira la liaison permanente de la Bourse en très haut débit avec ses différents partenaires, notamment le Conseil du Marché financier (CMF) et […]
India’s central bank issues cryptocurrency ban
The Reserve Bank of India (RBI) has banned regulated banks and its account holders from dealing in cryptocurrencies. The growing bubble around bitcoin and other virtual currencies has unnerved a number of central banks in recent months but the RBI’s blanket ban is the furthest measure so far taken by […]
FBI: IRANIAN FIRM STOLE DATA IN MASSIVE SPEAR PHISHING CAMPAIGN
The United States Department of Justice announced charges against nine Iranians accused of stealing private data from U.S. universities, private companies and U.S. government agencies. FBI Deputy Director David Bowdich said in a statement that the state-sponsored hackers worked for more than four years to steal expensive science and engineering-related research, company […]
Remote Execution Flaw Threatens Apps Built Using Spring Framework — Patch Now
Security researchers have discovered three vulnerabilities in the Spring Development Framework, one of which is a critical remote code execution flaw that could allow remote attackers to execute arbitrary code against applications built with it. Spring Framework is a popular, lightweight and an open source framework for developing Java-based enterprise […]
Meltdown et Spectre : Intel abandonne le développement des mises à jour de microcodes pour certains processeurs
Intel a publié une nouvelle version de sa feuille de route de mise à jour de microcodes depuis peu. Le fondeur annonce l’abandon du développement des mises à jour de microcodes pour certains processeurs ; la publication des correctifs pour le reste de sa flotte se poursuit néanmoins. En substance, plusieurs […]
QUICKLY PWNED, QUICKLY PATCHED: DETAILS OF THE MOZILLA PWN2OWN EXPLOIT
At our recent Pwn2Own 2018 competition, Richard Zhu (fluorescence) targeted and successfully exploited Mozilla Firefox with only one bug. After handing over the bug to Mozilla at the contest, they have promptly coordinated an update in less than 24 hours. The response was certainly impressive, but I wanted to take a closer […]