Search: [security] - Lien d'Alternathor

New Wi-Fi Takeover Attack—All Windows Users Warned To Update Now

windows · wifi · security · hack · 0day

June 15, 2024 at 1:38:59 AM GMT+2 * · permalink

·

https://www.forbes.com/sites/daveywinder/2024/06/14/new-wi-fi-takeover-attack-all-windows-users-warned-to-update-now/

·

Baldur

phone · security · RCE · exploit · hack

June 15, 2024 at 1:36:27 AM GMT+2 * · permalink

·

https://baldur.dk/blog/embedded-mitel-exploitation.html

·

Malicious VSCode extensions with millions of installs discovered

vscode · security

June 10, 2024 at 9:13:59 PM GMT+2 * · permalink

·

https://www.bleepingcomputer.com/news/security/malicious-vscode-extensions-with-millions-of-installs-discovered/

·

John Hammond sur X : "ok lets go https://t.co/1llvy5ritQ" / X

recall · microsoft · copilot · security · privacy

June 7, 2024 at 9:47:28 PM GMT+2 * · permalink

·

https://x.com/_JohnHammond/status/1799003359300718903

·

Bypassing Windows Hello Without Masks or Plastic Surgery

windows · hello · security

June 7, 2024 at 6:58:59 PM GMT+2 * · permalink

·

https://www.cyberark.com/resources/threat-research-blog/bypassing-windows-hello-without-masks-or-plastic-surgery

·

Update on the Recall preview feature for Copilot+ PCs | Windows Experience Blog

Changements annoncés concernant Copilot+ Recall de Microsoft + quelques détails sur le fonctionnement

copilot · recall · windows · security · privacy

June 7, 2024 at 6:21:42 PM GMT+2 * · permalink

·

https://blogs.windows.com/windowsexperience/2024/06/07/update-on-the-recall-preview-feature-for-copilot-pcs/

·

Hacking Millions of Modems (and Investigating Who Hacked My Modem)

modem · isp · security · hack

June 6, 2024 at 8:44:06 PM GMT+2 * · permalink

·

https://samcurry.net/hacking-millions-of-modems

·

xaitax/TotalRecall: This tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC's activity snapshots.

recall · microsoft · security · privacy · copilot

June 5, 2024 at 5:58:02 PM GMT+2 * · permalink

·

https://github.com/xaitax/TotalRecall

·

Stealing everything you’ve ever typed or viewed on your own Windows PC is now possible with two lines of code — inside the Copilot+ Recall disaster. | by Kevin Beaumont | May, 2024 | DoublePulsar

security · microsoft · copilot · privacy

June 1, 2024 at 10:04:57 AM GMT+2 * · permalink

·

https://doublepulsar.com/recall-stealing-everything-youve-ever-typed-or-viewed-on-your-own-windows-pc-is-now-possible-da3e12e9465e

·

Yet more ransomware uses BitLocker to encrypt victims' files • The Register

bitlocker · security · microsoft

May 26, 2024 at 12:36:22 PM GMT+2 * · permalink

·

https://www.theregister.com/2024/05/23/ransomware_abuses_microsoft_bitlocker/

·

QNAP QTS - QNAPping At The Wheel (CVE-2024-27130 and friends)

security · qnap · nas

May 18, 2024 at 11:57:47 AM GMT+2 * · permalink

·

https://labs.watchtowr.com/qnap-qts-qnapping-at-the-wheel-cve-2024-27130-and-friends/

·

Dell warns of data breach, 49 million customers allegedly affected

security · dell · leak · data

May 9, 2024 at 10:25:31 PM GMT+2 * · permalink

·

https://www.bleepingcomputer.com/news/security/dell-warns-of-data-breach-49-million-customers-allegedly-affected/

·

Novel attack against virtually all VPN apps neuters their entire purpose | Ars Technica

vpn · security · dhco

May 9, 2024 at 9:56:03 AM GMT+2 * · permalink

·

https://arstechnica.com/security/2024/05/novel-attack-against-virtually-all-vpn-apps-neuters-their-entire-purpose/

·

Millions of Docker repos found pushing malware, phishing sites

docker · security · malware · spam

May 2, 2024 at 8:50:56 PM GMT+2 * · permalink

·

https://www.bleepingcomputer.com/news/security/millions-of-docker-repos-found-pushing-malware-phishing-sites/

·

Toutes blessent, la dernière tue - Le blog de ZythomLe blog de Zythom

security · log · analyse

April 27, 2024 at 4:02:40 PM GMT+2 * · permalink

·

https://zythom.fr/2024/04/toutes-blessent-la-derniere-tue-2/

·

https://services.google.com/fh/files/misc/apt44-unearthing-sandworm.pdf

apt · security

April 20, 2024 at 12:23:08 AM GMT+2 * · permalink

·

https://services.google.com/fh/files/misc/apt44-unearthing-sandworm.pdf

·

Email DNS Records Cheatsheet

mail · dns · security

April 14, 2024 at 2:04:09 AM GMT+2 * · permalink

·

https://www.netmeister.org/blog/email-dns-records.html

·

Kobold letters – Lutra Security

security · mail · gmail · outlook · thunderbird

April 6, 2024 at 10:22:08 PM GMT+2 * · permalink

·

https://lutrasecurity.com/en/articles/kobold-letters/

·

xz/liblzma: Bash-stage Obfuscation Explained - gynvael.coldwind//vx.log

ssh · linux · backdoor · security

March 31, 2024 at 11:54:25 AM GMT+2 * · permalink

·

https://gynvael.coldwind.pl/?lang=en&id=782

·

Xz (liblzma) compromis - LinuxFr.org

ssh · linux · security · backdoor

March 30, 2024 at 8:38:01 PM GMT+1 * · permalink

·

https://linuxfr.org/users/ytterbium/journaux/xz-liblzma-compromis

·

xz-utils backdoor situation

ssh · backdoor · security · linux

March 30, 2024 at 3:57:31 PM GMT+1 * · permalink

·

https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27

·

Everything I know about the XZ backdoor

ssh · backdoor · security · linux

March 30, 2024 at 3:57:21 PM GMT+1 * · permalink

·

https://boehs.org/node/everything-i-know-about-the-xz-backdoor

·

Signed but not secure

bgp · interco · internet · orange · security

March 24, 2024 at 5:24:38 PM GMT+1 * · permalink

·

https://blog.benjojo.co.uk/post/rpki-signed-but-not-secure

·

Salt Labs research finds security flaws within ChatGPT Ecosystem (Remediated)

IA · chatGPT · security · plugin

March 14, 2024 at 7:51:57 PM GMT+1 * · permalink

·

https://salt.security/blog/security-flaws-within-chatgpt-extensions-allowed-access-to-accounts-on-third-party-websites-and-sensitive-data

·

vx-underground sur X : "Lockbit ransomware groups website has been seized by EUROPOL. https://t.co/Z4UTRy25z6" / X

security · lockbit · europol

February 19, 2024 at 11:44:09 PM GMT+1 * · permalink

·

https://twitter.com/vxunderground/status/1759689036375916845

·

BitLocker encryption broken in 43 seconds with sub-$10 Raspberry Pi Pico — key can be sniffed when using an external TPM | Tom's Hardware

bitlocker · windows · security · hack

February 7, 2024 at 8:56:35 PM GMT+1 * · permalink

·

https://www.tomshardware.com/pc-components/cpus/youtuber-breaks-bitlocker-encryption-in-less-than-43-seconds-with-sub-dollar10-raspberry-pi-pico

·

Three million malware-infected smart toothbrushes used in Swiss DDoS attacks — botnet causes millions of euros in damages | Tom's Hardware

IoT · security · piratage

February 6, 2024 at 9:41:40 PM GMT+1 * · permalink

·

https://www.tomshardware.com/networking/three-million-malware-infected-smart-toothbrushes-used-in-swiss-ddos-attacks-botnet-causes-millions-of-euros-in-damages

·

Docker et d'autres moteurs de conteneurs touchés par des failles - Le Monde Informatique

security · docker

February 5, 2024 at 5:23:50 PM GMT+1 * · permalink

·

https://www.lemondeinformatique.fr/actualites/lire-docker-et-d-autres-moteurs-de-conteneurs-touches-par-des-failles-92842.html

·

AnyDesk Hacked: Popular Remote Desktop Software Mandates Password Reset

anydesk · security

February 3, 2024 at 2:07:16 PM GMT+1 * · permalink

·

https://thehackernews.com/2024/02/anydesk-hacked-popular-remote-desktop.html

·

AnyDesk and the disruptions: There may be something up | Born's IT and Windows blog

Des problèmes avec Anydesk.
À suivre au cas ou

anydesk · security

February 2, 2024 at 5:26:36 PM GMT+1 * · permalink

·

https://www-borncity-com.translate.goog/blog/2024/02/01/anydesk-und-die-stoerungen-es-ist-womoeglich-was-im-busch/?_x_tr_sl=auto&_x_tr_tl=en&_x_tr_hl=en&_x_tr_pto=wapp

·

CryptCheck

crypto · analyse · security · https · tls

January 27, 2024 at 1:41:19 PM GMT+1 * · permalink

·

https://cryptcheck.fr/

·

SVG images are accepted but not sanitized · Issue #38 · berthubert/trifecta

svg · security · browser

January 20, 2024 at 1:45:09 PM GMT+1 * · permalink

·

https://github.com/berthubert/trifecta/issues/38

·

GitLab Critical Security Release: 16.7.2, 16.6.4, 16.5.6 | GitLab

Gitlab à mettre à jour rapidement

gitlab · security

January 12, 2024 at 6:40:44 PM GMT+1 * · permalink

·

https://about.gitlab.com/releases/2024/01/11/critical-security-release-gitlab-16-7-2-released/

·

Dutch man sabotaged Iranian nuclear program without Dutch government's knowledge: report | NL Times

nucleaire · stuxnet · iran · security · hack

January 8, 2024 at 6:27:35 PM GMT+1 * · permalink

·

https://nltimes.nl/2024/01/08/dutch-man-sabotaged-iranian-nuclear-program-without-dutch-governments-knowledge-report

·

Blog Stéphane Bortzmeyer: Du nouveau dans la (l'in) sécurité de l'Internet ?

bgp · ripe · orange · security

January 5, 2024 at 6:25:14 PM GMT+1 * · permalink

·

https://www.bortzmeyer.org/orange-espagne-bgp.html

·

Qualcomm chip vulnerability enables remote attack by voice call | SC Media

hack · security · lte

January 4, 2024 at 9:05:13 PM GMT+1 * · permalink

·

https://www.scmagazine.com/news/qualcomm-chip-vulnerability-enables-remote-attack-by-voice-call

·

État de la menace ciblant le secteur des télécommunications – CERT-FR

anssi · security

December 31, 2023 at 11:31:03 AM GMT+1 * · permalink

·

https://cert.ssi.gouv.fr/cti/CERTFR-2023-CTI-010/

·

Octave Klaba sur LinkedIn : 1/2 En Décembre, OVHcloud a reçu les exigences techniques qui sont… | 16 commentaires

ovh · hds · security · secnumcloud · hdh

December 30, 2023 at 3:03:39 PM GMT+1 * · permalink

·

https://www.linkedin.com/posts/octave-klaba-3a0b3632_12-en-d%C3%A9cembre-ovhcloud-a-re%C3%A7u-les-exigences-ugcPost-7146814248231342080-tyOK

·

SMTP Smuggling - Spoofing E-Mails Worldwide - SEC Consult

smtp · security · mail · cisco · postfix · microsoft

December 22, 2023 at 9:02:25 PM GMT+1 * · permalink

·

https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/

·

Chaofan Shou sur X : "😝 Here is the full disclosure of the Twitter XSS + CSRF vulnerability. Clicking a crafted link or going to some crafted web pages would allow attackers to take over your account (posting, liking, updating your profile, deleting your account, etc.) https://t.co/MVJ1MvHt6H" / X

xss · csrf · twitter · security

December 14, 2023 at 10:36:40 PM GMT+1 * · permalink

·

https://twitter.com/shoucccc/status/1734802168723734764

·

Just about every Windows and Linux device vulnerable to new LogoFAIL firmware attack

linux · bios · security · windows

December 8, 2023 at 9:04:25 PM GMT+1 * · permalink

·

https://arstechnica.com/security/2023/12/just-about-every-windows-and-linux-device-vulnerable-to-new-logofail-firmware-attack/

·

JOP 2024 : l’ANSSI met à disposition un kit d’exercice « JOP massifié » | ANSSI

anssi · JO · security

December 2, 2023 at 10:12:37 AM GMT+1 * · permalink

·

https://cyber.gouv.fr/actualites/jop-2024-lanssi-met-disposition-un-kit-dexercice-jop-massifie

·

Sauvegarde des systèmes d'information | ANSSI

anssi · back-up · security

November 1, 2023 at 12:00:52 AM GMT+1 * · permalink

·

https://cyber.gouv.fr/publications/fondamentaux-sauvegarde-systemes-dinformation

·

Vulnerability Disclosure: A First-Hand View | RIPE Labs

dns · rootservers · security

October 28, 2023 at 11:08:58 PM GMT+2 * · permalink

·

https://labs.ripe.net/author/giovane_moura/vulnerability-disclosure-a-first-hand-view/

·

Campagnes d’attaques du mode opératoire APT28 depuis 2021 – CERT-FR

anssi · security · apt

October 26, 2023 at 9:42:49 PM GMT+2 * · permalink

·

https://www.cert.ssi.gouv.fr/cti/CERTFR-2023-CTI-009/

·

1Password discloses security incident linked to Okta breach

security · password · okta · 1password

October 24, 2023 at 5:45:42 PM GMT+2 * · permalink

·

https://www.bleepingcomputer.com/news/security/1password-discloses-security-incident-linked-to-okta-breach/

·

Encrypted traffic interception on Hetzner and Linode targeting the largest Russian XMPP (Jabber) messaging service —

security · proxy · analyse · mitm

October 21, 2023 at 11:16:35 PM GMT+2 * · permalink

·

https://notes.valdikss.org.ru/jabber.ru-mitm/

·

YSK Harvard just launched two new free certificates (cybersecurity & databases) : YouShouldKnow

certification · security · database · sql

October 3, 2023 at 6:31:44 PM GMT+2 * · permalink

·

https://www.reddit.com/r/YouShouldKnow/comments/16yo1cz/ysk_harvard_just_launched_two_new_free/

·

https://cure53.de/pentest-report_bitwarden.pdf

password · bitwarden · security · audit

September 22, 2023 at 5:57:57 PM GMT+2 * · permalink

·

https://cure53.de/pentest-report_bitwarden.pdf

·

https://cure53.de/pentest-report_proton-pass.pdf

password · proton · security · audit

September 22, 2023 at 5:57:44 PM GMT+2 * · permalink

·

https://cure53.de/pentest-report_proton-pass.pdf

·