CERTFR-2024-ALE-003 : [MàJ] Incident affectant les solutions AnyDesk (05 février 2024)

[Mise à jour du 27 février 2024]

Le 29 janvier 2024 l'ANSSI a été alertée par le BSI que l'éditeur AnyDesk Software GmbH a été victime d'une fuite de données. Le code source des applications développées par l'éditeur ainsi que des …

CERTFR-2024-ALE-002 : [MàJ] Multiples Vulnérabilités dans GitLab (12 janvier 2024)

[Mise à jour du 29 janvier 2024]

Le 25 janvier 2024, l'éditeur a publié un avis de sécurité concernant plusieurs vulnérabilités affectant GitLab CE et EE.

La vulnérabilité CVE-2024-0402 est considérée critique avec un score …

CERTFR-2023-ALE-012 : [MàJ] Vulnérabilité dans Citrix NetScaler ADC et NetScaler Gateway (23 octobre 2023)

[Mise à jour du 22 novembre 2023]

L'éditeur a publié un document [3] le 20 novembre 2023 listant les différents journaux à analyser ainsi que les éléments à rechercher pour identifier une activité pouvant être liée à une …

CERTFR-2023-ALE-011 : [MàJ] Multiples vulnérabilités dans Cisco IOS XE (17 octobre 2023)

[Mise à jour du 02 novembre 2023]

La version 17.3.8a est disponible.

[Mise à jour du 31 octobre 2023]

Les détails techniques de la vulnérabilité CVE-2023-20198 sont désormais disponibles publiquement. …

CERTFR-2023-ALE-010 : Multiples vulnérabilités dans Exim (02 octobre 2023)

Le 27 septembre 2023, Zero Day Initiative (ZDI) a publié six avis de sécurité [1] concernant des vulnérabilités de type zéro-jour affectant les versions antérieures à 4.96.1 ou 4.97 de l'agent de transfert de courriels (Mail Transfer Agent ou MTA) Exim. Le 1er octobre 2023, …

Source : Centre canadien pour la cybersécurité (Alertes et Avis)

Bulletin de sécurité Mitel (AV24-226)

Bulletin de sécurité HPE (AV24-225)

Bulletin de sécurité Drupal (AV24-224)

Bulletin de sécurité Cisco (AV24-223)

Cyberactivité touchant les dispositifs Cisco ASA

Bulletin de sécurité Google Chrome (AV24-222)

Bulletin de sécurité CrushFTP (AV24-221)

Bulletin de sécurité Dell (AV24-220)

Bulletin de sécurité Ubuntu (AV24-219)

Bulletin de sécurité IBM (AV24-218)

Source : NCSC Feed

Data breaches: guidance for individuals and families

How to protect yourself from the impact of data breaches

Pathways: exploring a new way to achieve Cyber Essentials certification

For large, complex firms struggling with the prescriptiveness of Cyber Essentials, ‘Pathways’ will provide a new route to certification.

Smart devices: using them safely in your home

Many everyday items are now connected to the internet: we explain how to use them safely.

'NCSC Cyber Series' podcast now available

Listen to all five episodes now, covering a wide range of cyber security topics.

Ever wondered how a cyber crime gang operates?

NCSC publishes new report on criminal online activity.

Securing Office 365 with better configuration

How our Office 365 advisory and new security guidance from Microsoft can help protect your cloud services.

Cyber Assessment Framework 3.2

Latest version of the CAF reflects the increased threat to critical national infrastructure

Watch all the plenaries from CYBERUK 2024 live, and for free

Key talks from the UK government’s flagship cyber security event will be livestreamed from Birmingham’s ICC.

Responding to a cyber incident – a guide for CEOs

Guidance to help CEOs in public and private sector organisations manage a cyber incident.

Interactive administration in the cloud: managing the risks

Tips to help you secure and reduce interactive access to your cloud infrastructure.

Source : Bleeping Computer (security)

Telegram is down with "Connecting" error

Telegram users are currently experiencing issues worldwide, with users unable to use the website and mobile apps. [...]

Fake job interviews target developers with new Python backdoor

A new campaign tracked as "Dev Popper" is targeting software developers with fake job interviews in an attempt to trick them into installing a Python remote access trojan (RAT). [...]

Kaiser Permanente: Data breach may impact 13.4 million patients

Healthcare service provider Kaiser Permanente disclosed a data security incident that may impact 13.4 million people in the United States. [...]

FBI warns against using unlicensed crypto transfer services

The FBI has warned today that using unlicensed cryptocurrency transfer services can result in financial loss if these platforms are taken down by law enforcement. [...]

LA County Health Services: Patients' data exposed in phishing attack

​The Los Angeles County Department of Health Services disclosed a data breach after thousands of patients' personal and health information was exposed in a data breach resulting from a recent phishing attack impacting over two dozen employees. [...]

Researchers sinkhole PlugX malware server with 2.5 million unique IPs

Researchers have sinkholed a command and control server for a variant of the PlugX malware and observed in six months more than 2.5 million connections from unique IP addresses. [...]

Reddit down in major outage blocking access to web, mobile apps

Reddit is investigating a major outage blocking users worldwide from accessing the social network's websites and mobile apps. [...]

Over 1,400 CrushFTP servers vulnerable to actively exploited bug

​Over 1,400 CrushFTP servers exposed online were found vulnerable to attacks currently targeting a critical severity server-side template injection (SSTI) vulnerability previously exploited as a zero-day. [...]

WP Automatic WordPress plugin hit by millions of SQL injection attacks

Hackers have started to target a critical severity vulnerability in the WP Automatic plugin for WordPress to create user accounts with administrative privileges and to plant backdoors for long-term access. [...]

New Brokewell malware takes over Android devices, steals data

Security researchers have discovered a new Android banking trojan they named Brokewell that can capture every event on the device, from touches and information displayed to text input and the applications the user launches. [...]