Search: [security] - Lien d'Alternathor

xz-utils backdoor situation

ssh · backdoor · security · linux

March 30, 2024 at 3:57:31 PM GMT+1 * · permalink

·

https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27

·

Everything I know about the XZ backdoor

ssh · backdoor · security · linux

March 30, 2024 at 3:57:21 PM GMT+1 * · permalink

·

https://boehs.org/node/everything-i-know-about-the-xz-backdoor

·

Signed but not secure

bgp · interco · internet · orange · security

March 24, 2024 at 5:24:38 PM GMT+1 * · permalink

·

https://blog.benjojo.co.uk/post/rpki-signed-but-not-secure

·

Salt Labs research finds security flaws within ChatGPT Ecosystem (Remediated)

IA · chatGPT · security · plugin

March 14, 2024 at 7:51:57 PM GMT+1 * · permalink

·

https://salt.security/blog/security-flaws-within-chatgpt-extensions-allowed-access-to-accounts-on-third-party-websites-and-sensitive-data

·

vx-underground sur X : "Lockbit ransomware groups website has been seized by EUROPOL. https://t.co/Z4UTRy25z6" / X

security · lockbit · europol

February 19, 2024 at 11:44:09 PM GMT+1 * · permalink

·

https://twitter.com/vxunderground/status/1759689036375916845

·

BitLocker encryption broken in 43 seconds with sub-$10 Raspberry Pi Pico — key can be sniffed when using an external TPM | Tom's Hardware

bitlocker · windows · security · hack

February 7, 2024 at 8:56:35 PM GMT+1 * · permalink

·

https://www.tomshardware.com/pc-components/cpus/youtuber-breaks-bitlocker-encryption-in-less-than-43-seconds-with-sub-dollar10-raspberry-pi-pico

·

Three million malware-infected smart toothbrushes used in Swiss DDoS attacks — botnet causes millions of euros in damages | Tom's Hardware

IoT · security · piratage

February 6, 2024 at 9:41:40 PM GMT+1 * · permalink

·

https://www.tomshardware.com/networking/three-million-malware-infected-smart-toothbrushes-used-in-swiss-ddos-attacks-botnet-causes-millions-of-euros-in-damages

·

Docker et d'autres moteurs de conteneurs touchés par des failles - Le Monde Informatique

security · docker

February 5, 2024 at 5:23:50 PM GMT+1 * · permalink

·

https://www.lemondeinformatique.fr/actualites/lire-docker-et-d-autres-moteurs-de-conteneurs-touches-par-des-failles-92842.html

·

AnyDesk Hacked: Popular Remote Desktop Software Mandates Password Reset

anydesk · security

February 3, 2024 at 2:07:16 PM GMT+1 * · permalink

·

https://thehackernews.com/2024/02/anydesk-hacked-popular-remote-desktop.html

·

AnyDesk and the disruptions: There may be something up | Born's IT and Windows blog

Des problèmes avec Anydesk.
À suivre au cas ou

anydesk · security

February 2, 2024 at 5:26:36 PM GMT+1 * · permalink

·

https://www-borncity-com.translate.goog/blog/2024/02/01/anydesk-und-die-stoerungen-es-ist-womoeglich-was-im-busch/?_x_tr_sl=auto&_x_tr_tl=en&_x_tr_hl=en&_x_tr_pto=wapp

·

CryptCheck

crypto · analyse · security · https · tls

January 27, 2024 at 1:41:19 PM GMT+1 * · permalink

·

https://cryptcheck.fr/

·

SVG images are accepted but not sanitized · Issue #38 · berthubert/trifecta

svg · security · browser

January 20, 2024 at 1:45:09 PM GMT+1 * · permalink

·

https://github.com/berthubert/trifecta/issues/38

·

GitLab Critical Security Release: 16.7.2, 16.6.4, 16.5.6 | GitLab

Gitlab à mettre à jour rapidement

gitlab · security

January 12, 2024 at 6:40:44 PM GMT+1 * · permalink

·

https://about.gitlab.com/releases/2024/01/11/critical-security-release-gitlab-16-7-2-released/

·

Dutch man sabotaged Iranian nuclear program without Dutch government's knowledge: report | NL Times

nucleaire · stuxnet · iran · security · hack

January 8, 2024 at 6:27:35 PM GMT+1 * · permalink

·

https://nltimes.nl/2024/01/08/dutch-man-sabotaged-iranian-nuclear-program-without-dutch-governments-knowledge-report

·

Blog Stéphane Bortzmeyer: Du nouveau dans la (l'in) sécurité de l'Internet ?

bgp · ripe · orange · security

January 5, 2024 at 6:25:14 PM GMT+1 * · permalink

·

https://www.bortzmeyer.org/orange-espagne-bgp.html

·

Qualcomm chip vulnerability enables remote attack by voice call | SC Media

hack · security · lte

January 4, 2024 at 9:05:13 PM GMT+1 * · permalink

·

https://www.scmagazine.com/news/qualcomm-chip-vulnerability-enables-remote-attack-by-voice-call

·

État de la menace ciblant le secteur des télécommunications – CERT-FR

anssi · security

December 31, 2023 at 11:31:03 AM GMT+1 * · permalink

·

https://cert.ssi.gouv.fr/cti/CERTFR-2023-CTI-010/

·

Octave Klaba sur LinkedIn : 1/2 En Décembre, OVHcloud a reçu les exigences techniques qui sont… | 16 commentaires

ovh · hds · security · secnumcloud · hdh

December 30, 2023 at 3:03:39 PM GMT+1 * · permalink

·

https://www.linkedin.com/posts/octave-klaba-3a0b3632_12-en-d%C3%A9cembre-ovhcloud-a-re%C3%A7u-les-exigences-ugcPost-7146814248231342080-tyOK

·

SMTP Smuggling - Spoofing E-Mails Worldwide - SEC Consult

smtp · security · mail · cisco · postfix · microsoft

December 22, 2023 at 9:02:25 PM GMT+1 * · permalink

·

https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/

·

Chaofan Shou sur X : "😝 Here is the full disclosure of the Twitter XSS + CSRF vulnerability. Clicking a crafted link or going to some crafted web pages would allow attackers to take over your account (posting, liking, updating your profile, deleting your account, etc.) https://t.co/MVJ1MvHt6H" / X

xss · csrf · twitter · security

December 14, 2023 at 10:36:40 PM GMT+1 * · permalink

·

https://twitter.com/shoucccc/status/1734802168723734764

·