Mensuel Shaarli

Tous les liens d'un mois sur une page.

July, 2023

SEC Votes to Require Material Incident Disclosure in 4 Days
thumbnail

U.S. federal market regulators adopted rules Wednesday that require publicly traded companies to disclose most "material cybersecurity incidents" within

La ville d'Angoulême et son agglomération victimes d'une cyberattaque
thumbnail

Le lundi 24 juillet au matin, les services informatiques de la communauté d'agglomération du Grand Angoulême et de la ville d'Angoulême ont subi une cyberattaque. Résultat, plus de réseau ni de téléphone.

PwC has data leaked on the clear web - Cyber Security Connect
thumbnail

Consultancy firm PwC has had its data leaked on the clear web, following the attack it suffered as part of the MOVEit hack. The group behind the attack Cl0p, posted data belonging to PwC online, w

Govulncheck v1.0.0 is released! - The Go Programming Language
thumbnail

he Go vulnerability database, https://vuln.go.dev, which provides a comprehensive source of information about known vulnerabilities in public Go modules. You can browse

Vulnérabilité dans les produits Microsoft – CERT-FR
Transferts de données vers les États-Unis : la Commission européenne adopte une nouvelle décision d’adéquation | CNIL
Bechtle intends to buy French cybersecurity and digital infrastructure services company, Apixit
thumbnail

Bechtle AG intends to purchase the French IT company, Apixit S.A.S., headquartered in Les Ulis, near Paris. An offer to this effect was made today.

Le port de Nagoya paralysé par un ransomware - Le Monde Informatique

Intrusion, Hacking et Pare-feu : Un des plus grands ports actifs du Japon � Nagoya a �t� victime d'une cyberattaque par ransomware. Le chargement et d�chargement des conteneurs ont...

300,000+ Fortinet firewalls vulnerable to critical FortiOS RCE bug

Hundreds of thousands of FortiGate firewalls are vulnerable to a critical security issue identified as CVE-2023-27997, almost a month after Fortinet released an update that addresses the problem.

WordPress Ninja Forms plugin flaw lets hackers steal submitted data
thumbnail
Thales signe sa plus grosse acquisition depuis Gemalto
thumbnail

Le groupe français souhaite devenir un leader mondial de la sécurité informatique. Il a fait une offre acceptée pour racheter le spécialiste américain des applications Imperva pour 3,6 milliards d'euros.

Avec le congrès de l’APSSIS, l’hôpital soigne sa cybersécurité
thumbnail

L’attaque par déni de service (DDoS) a rendu inaccessible pendant une à trois heures des sites internet de l’AP-HP, dont celui de l’hôpital de la Pitié-Salpêtrière, de l’hôpital Saint-Antoine et de l’Hôpital américain de Paris, mais également celui des Hôpitaux Universitaires de Marseille (AP-HM) ainsi que du CHU de Lyon.

Zero-Day Attacks Exploited Critical Vulnerability in Citrix ADC and Gateway
thumbnail

Critical security flaw in Citrix NetScaler ADC and Gateway being actively exploited! CVE-2023-3519 allows unauthenticated remote code execution.

Référentiel de certification HDS: l'arrêté devrait être publié "en octobre"

Premier site français d'information en continu sur les technologies de l'information et de la communication (TIC, NTIC) dans la santé - TICsante

TICsanté - Articles
MOVEit Transfer fixes three new vulnerabilities
thumbnail
Bangladesh government website leaks citizens' personal data

A Bangladeshi government site leaked the personal data of "millions" of citizens, according to a researcher who found the leaked data.

CWE - CWE Top 25 Most Dangerous Software Weaknesses

Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.

RGPD : La Cour de justice de l'UE recadre la personnalisation publicitaire de Meta - Le Monde Informatique

Donn�es Personnelles : Dans un arr�t, la Cour de Justice de l'Union europ�enne s'est prononc�e � la fois sur le traitement des donn�es sensibles � des fins de...

Hackers Exploiting Unpatched WordPress Plugin Flaw to Create Secret Admin Accounts

Unpatched flaw in Ultimate Member plugin endangers 200,000 WordPress sites, enabling covert creation of admin accounts by hackers.

Zimbra patches zero-day vulnerability exploited in XSS attacks
thumbnail
Critical MikroTik RouterOS Vulnerability Exposes Over Half a Million Devices to Hacking
thumbnail

Critical Privilege Escalation Vulnerability in MikroTik RouterOS Poses a Severe Threat to Over Half a Million Devices

Apple Rolls Out Urgent Patches for Zero-Day Flaws Impacting iPhones, iPads and Macs
thumbnail

Apple Rolls Out Urgent Patches for Zero-Day Flaws Impacting iOS, iPadOS, macOS, tvOS, watchOS, and Safari

Vulnérabilité dans OpenSSH – CERT-FR
Kevin Mitnick dead at age 59: Hacker who landed on FBI’s most wanted list & wrote book about it dies after cancer battle
thumbnail

AN infamous computer hacker who landed on the FBI's most wanted list then referred to his time in federal prison as a vacation has died at age 59.Kevi

Amazon ordered to pay more than $30M for privacy violations related to Alexa, Ring devices
Apple Issues Urgent Patch for Zero-Day Flaw Targeting iOS, iPadOS, macOS, and Safari
thumbnail
Pass the SALT 2023 conference

I had the chance to speak at the Pass the SALT 2023 conference.

Publication d’un outil d’autoévaluation de gestion de crise cyber | Agence nationale de la sécurité des systèmes d'information
Dublin Airport staff pay details stolen by hackers after MOVEit attack at third-party provider

Staff at Dublin Airport have been warned that their personal data has fallen into the hands of hackers, following a data breach at a third-party service provider.