Found 1498 bookmarks
Custom sorting
US-Canada water commission confirms 'cybersecurity incident"
US-Canada water commission confirms 'cybersecurity incident"
NoEscape promises 'colossal wave of problems' if IJC doesn't pay up The International Joint Commission, a body that manages water rights along the US-Canada border, has confirmed its IT security was targeted, after a ransomware gang claimed it stole 80GB of data from the organization.
#theregister#EN#2023#IJC#ransommware#NoEscape#US-Canada#border#water#Critical-infrastructure
·theregister.com·
US-Canada water commission confirms 'cybersecurity incident"
[CVE-2023-42752] integer overflow in Linux kernel leading to exploitable memory access
[CVE-2023-42752] integer overflow in Linux kernel leading to exploitable memory access
I recently found an integer overflow in the Linux kernel, which leads to the kernel allocating skb_shared_info in the userspace, which is exploitable in systems without SMAP protection since skb_shared_info contains references to function pointers.
#seclists#EN#2023#CVE-2023-42752#integer#overflow#Linux#kernel
·seclists.org·
[CVE-2023-42752] integer overflow in Linux kernel leading to exploitable memory access
New Python NodeStealer Goes Beyond Facebook Credentials, Now Stealing All Browser Cookies and Login Credentials
New Python NodeStealer Goes Beyond Facebook Credentials, Now Stealing All Browser Cookies and Login Credentials
Netskope Threat Labs is tracking a campaign that uses malicious Python scripts to steal Facebook users’ credentials and browser data. This campaign targets Facebook business accounts with bogus Facebook messages with a malicious file attached. The attacks are reaching victims mainly in Southern Europe and North America across different segments, led by the manufacturing services and technology sectors.
#netskope#EN#2023#analysis#Python#NodeStealer#Facebook#Credentials#Login
·netskope.com·
New Python NodeStealer Goes Beyond Facebook Credentials, Now Stealing All Browser Cookies and Login Credentials
Ransomware flingers hit Manchester cops in the supply chain • The Register
Ransomware flingers hit Manchester cops in the supply chain • The Register
The UK's Greater Manchester Police (GMP) has admitted that crooks have got their mitts on some of its data after a third-party supplier responsible for ID badges was attacked. According to the Manchester Evening News the stolen data included the names and pictures of police officers held by the supplier for use on thousands of ID badges.
#theregister#EN#2023#Greater-Manchester-Police#databreach#ransomware#police#UK
·theregister.com·
Ransomware flingers hit Manchester cops in the supply chain • The Register
Argent russe: la place financière suisse rattrapée par une fuite de données
Argent russe: la place financière suisse rattrapée par une fuite de données
Un ancien ministre de Vladimir Poutine et la famille du patron d'une entreprise publique russe, impliquée dans l'effort de guerre, se retrouvent dans les données inédites repérées par la RTS. Des liens avec la place financière suisse sont mis en lumière. Ces révélations proviennent des documents confidentiels de la société de gestion de fortune zurichoise Finaport. Tout commence en janvier 2023 lorsque l'entreprise, sponsor officiel de l'Open de tennis de Zoug, est victime d'un piratage, comme le révélait le site Watson.
#rts#FR#CH#2023#Russie#Argent#exfiltration#journalisme#enquête#Finaport
·rts.ch·
Argent russe: la place financière suisse rattrapée par une fuite de données
CVE-2023-38146: Arbitrary Code Execution via Windows Themes
CVE-2023-38146: Arbitrary Code Execution via Windows Themes
This is a fun bug I found while poking around at weird Windows file formats. It's a kind of classic Windows style vulnerability featuring broken signing, sketchy DLL loads, file races, cab files, and Mark-of-the-Web silliness. It was also my first experience submitting to the MSRC Windows bug bounty since leaving Microsoft in April of 2022.
#exploits.forsale#EN#2023#CVE-2023-38146#Arbitrary#Code#Execution#themebleed#Windows#Themes
·exploits.forsale·
CVE-2023-38146: Arbitrary Code Execution via Windows Themes
Threat actor leaks sensitive data belonging to Airbus
Threat actor leaks sensitive data belonging to Airbus
The multinational aerospace corporation Airbus has launched an investigation into the recent leak of information allegedly stolen from the company. The multinational aerospace corporation Airbus announced that it is investigating a data leak after cybersecurity firm Hudson Rock reported that a hacker posted information on thousands of the company’s vendors to the dark web.
#securityaffairs#EN#2023#Airbus#leak#databreach
·securityaffairs.com·
Threat actor leaks sensitive data belonging to Airbus
Ransomware crew hits Save The Children, steals 7TB of data
Ransomware crew hits Save The Children, steals 7TB of data
Cybercrime crew BianLian says it has broken into the IT systems of a top nonprofit and stolen a ton of files, including what the miscreants claim is financial, health, and medical data. As highlighted by VX-Underground and Emsisoft threat analyst Brett Callow earlier today, BianLian bragged on its website it had hit an organization that, based on the gang's description of its unnamed victim, looks to be Save The Children International. The NGO, which employs about 25,000 people, says it has helped more than a billion kids since it was founded in 1919.
#theregister#EN#2023#BianLian#exfiltration#ONG#SavetheChildren#databreach
·theregister.com·
Ransomware crew hits Save The Children, steals 7TB of data
KNVB paid ransom to prevent cyber criminals from publishing footballers' passports
KNVB paid ransom to prevent cyber criminals from publishing footballers' passports
The Dutch football association KNVB paid the ransom demanded by cyber criminals in a ransomware attack in April. The hackers stole Dutch and other football players’ passports, ID cards, home addresses, and salary slips and threatened to publish the data if the football association didn’t pay the ransom, the KNVB said on Tuesday.
#nltimes#EN#2023#Dutch#football#association#KNVB#paid#ransomware#LockBit
·nltimes.nl·
KNVB paid ransom to prevent cyber criminals from publishing footballers' passports