Messages récents

1

News / [Sophos]Google is tracking your location, even when the setting is turned off

« Dernier message par igor51 le Hier à 21:00:12 »

Google is tracking your location, even when the setting is turned off

Shock! It appears Google can track the location of anyone using some of its apps on Android or iPhone even when they’ve told it not to.
Source: Google is tracking your location, even when the setting is turned off

2

News / [AVAST]How to Create a Strong Password and Beat the Hackers | Avast

« Dernier message par igor51 le Hier à 20:00:12 »

How to Create a Strong Password and Beat the Hackers | Avast

Every week, our researchers round up the latest security news and report our findings in these blog pages. If you’ve been reading, you may have noticed a particularly nasty trend claiming new victims week after week — data breaches. In the last two months alone, we’ve reported on the Ticketmaster UK breach, the Macy’s breach, the MyHeritage breach, the Prince Hotels breach, and the Equifax breach. And that’s only some of them.

Source: How to Create a Strong Password and Beat the Hackers | Avast

3

News / [Sophos]The sextortionists are back, this time with your phone number as “proof”

« Dernier message par igor51 le Hier à 19:00:11 »

The sextortionists are back, this time with your phone number as “proof”

Last month the crooks were throwing old passwords into their scams to make you sit up and take notice. Now it's phone numbers.
Source: The sextortionists are back, this time with your phone number as “proof”

4

News / [FireEye]Announcing the Fifth Annual Flare-On Challenge

« Dernier message par igor51 le Hier à 18:00:23 »

Announcing the Fifth Annual Flare-On Challenge

The FireEye Labs Advanced Reverse Engineering (FLARE) team’s annual
  reverse engineering challenge will start at 8:00 p.m. ET on Aug. 24,
  2018. This is a CTF-style challenge for all active and aspiring
  reverse engineers, malware analysts, and security professionals. So
  dust off your disassembler, put a new coat of oil on your old
  debugger, and get your favorite chat client ready to futilely beg your
  friends for help. Once again, this contest is designed for
  individuals, not teams, and it is a single track of challenges. The
  contest runs for six full weeks and ends at 8:00 p.m. ET on Oct. 5, 2018.

 

This year’s contest will once again host a total of 12 challenges
  covering architectures from x86, x64 on Windows, Java, .NET,
  Webassembly, and Linux, with special appearances of Bootloaders and
  Bootkits. This is one of the only Windows-centric CTF challenges out
  there and we have crafted it to represent the skills and challenges of
  our workload on the FLARE team.

 

If you complete the Flare-On Challenge you will receive a prize and
  permanent recognition on the flare-on.com website for your
  accomplishment. Prize details will be revealed when the contest ends,
  but as always, it will be something that will be coveted and envied by
  your peers. In prior years we’ve had rodeo belt buckles, replica
  police badges, challenge coins, and a huge pin.

 

Check out the   href="http://www.flare-on.com/">Flare-On website for a live
  countdown timer and to see the previous year’s winners. For official
  news and support we will be using the Twitter hashtag: #flareon5.

Source: Announcing the Fifth Annual Flare-On Challenge

5

News / [kreb]Patch Tuesday, August 2018 Edition

« Dernier message par igor51 le Hier à 17:00:09 »

Patch Tuesday, August 2018 Edition

Adobe and Microsoft each released security updates for their software on Tuesday. Adobe plugged five security holes in its Flash Player browser plugin. Microsoft pushed 17 updates to fix at least 60 vulnerabilities in Windows and other software, including two "zero-day" flaws that attackers were already exploiting before Microsoft issued patches to fix them.
Source: Patch Tuesday, August 2018 Edition

6

News / [Eset]Instagram users locked out of accounts en masse

« Dernier message par igor51 le Hier à 16:00:05 »

Instagram users locked out of accounts en masse

If you’re an Instagrammer, you may want to take some basic precautions, such as picking a strong and unique password and signing up for two-factor authentication sooner rather than later
The post Instagram users locked out of accounts en masse appeared first on WeLiveSecurity

Source: Instagram users locked out of accounts en masse

7

News / [Sophos]Are your Android apps listening to you?

« Dernier message par igor51 le Hier à 16:00:04 »

Are your Android apps listening to you?

This simple setup will help you discover if your apps are listening in on you.
Source: Are your Android apps listening to you?

8

News / [Trend]Use-after-free (UAF) Vulnerability CVE-2018-8373 in VBScript Engine Affects Internet Explorer to Run Shellcode

« Dernier message par igor51 le Hier à 15:00:11 »

Use-after-free (UAF) Vulnerability CVE-2018-8373 in VBScript Engine Affects Internet Explorer to Run Shellcode

We discovered a high-risk Internet Explorer (IE) vulnerability in the wild on July 11, just a day after Microsoft’s July Patch Tuesday. We immediately sent Microsoft the details to help fix this flaw. While this vulnerability, now designated as CVE-2018-8373, affects the VBScript engine in the latest versions of Windows, Internet Explorer 11 is not vulnerable since VBScript in Windows 10 Redstone 3 (RS3) has been effectively disabled by default.

The post Use-after-free (UAF) Vulnerability CVE-2018-8373 in VBScript Engine Affects Internet Explorer to Run Shellcode appeared first on .

Source: Use-after-free (UAF) Vulnerability CVE-2018-8373 in VBScript Engine Affects Internet Explorer to Run Shellcode

9

News / [Sophos]Your smart air conditioner could contribute to mass power outages

« Dernier message par igor51 le Hier à 15:00:10 »

Your smart air conditioner could contribute to mass power outages

Researchers call the scenario BlackIoT: an IoT botnet of high-wattage devices that could crash the power grid.
Source: Your smart air conditioner could contribute to mass power outages

10

News / [Sophos]FBI warns of choreographed ATM drainage

« Dernier message par igor51 le Hier à 14:00:18 »

FBI warns of choreographed ATM drainage

This type of multinational  ATM cashout could drain cash machines of millions within the span of hours.
Source: FBI warns of choreographed ATM drainage