Catégorie : #SECURITE

L’actualité  de la sécurité informatique et de la cybersécurité, traitant de l’actualité francophone et anglophone de la sécurité informatique, du hacking et des programmes informatiques à visée malveillante.

0 362
Posted in #SECURITE FRA

Etude – Les professionnels veulent être formés régulièrement, et d’abord en gestion de projet et sécurité

Fed IT, un cabinet de recrutement spécialisé dans les métiers de l’informatique (développement, infrastructure et décisionnel) a interrogé, en mai 2019, 385 professionnels pour recueillir leurs perceptions du marché de l’emploi. Source : https://www.solutions-numeriques.com/etude-les-professionnels-veulent-etre-formes-regulierement-et-dabord-en-gestion-de-projet-et-securite/ Date : September 17, 2019 at 06:21PM Tag(s) : Médias spécialisés Share this… Email Facebook Twitter…

0 538
Posted in #SECURITE FRA

Les acteurs français de la sécurité du numérique lancent le Cybermoi/s

En octobre 2019 commencera le Cybermoi/s, un mois pour prendre conscience des enjeux du numérique et adopter les premiers bons réflexes. Les acteurs français de la cybersécurité appellent les citoyens français à sécuriser activement et efficacement leur vie numérique, dans la sphère personnelle, comme professionnelle. Source : http://www.fbf.fr/web/Internet2010/Content.nsf/DocumentsByIDWeb/782BF38D4C5C49BCC125847800560493?OpenDocument Date :…

0 332
Posted in #SECURITE ENG

Cyber Threat Intelligence (Ep1) – Quentin talking about the technical office – Thales

When we spot a new attack campaign we see if the malware can be identified by its signature and if it can’t, we create a new signature so our customers stay protected. Source : https://www.youtube.com/watch?v=AxaxWwCk8Xk Date : September 17, 2019 at 01:27PM Tag(s) : Acteurs Share this… Email Facebook Twitter…

0 339
Posted in #SECURITE ENG

Cyber Threat Intelligence (Ep2) – Nicolas talking about the Context & Strategy office – Thales

Cyberthreats are now a real and present danger and if we don’t bother to find out about them we may be unable to defend ourselves. Source : https://www.youtube.com/watch?v=FszXQJ_MI0E Date : September 17, 2019 at 02:29PM Tag(s) : Acteurs Share this… Email Facebook Twitter Linkedin Whatsapp Print

0 356
Posted in #SECURITE ENG

Cyber Threat Intelligence (Ep3) – Romain talking about the Cyber threats analysis centre- Thales

The Cyber Threat Intelligence centre tries to answer four key questions: Who’s attacking who? When? How do they operate and which tactics and techniques do they use? And why? Source : https://www.youtube.com/watch?v=6CV3CyvVLRI Date : September 17, 2019 at 02:29PM Tag(s) : Acteurs Share this… Email Facebook Twitter Linkedin Whatsapp Print

0 379
Posted in #SECURITE ENG US GOV

VMware Releases Security Updates for Multiple Products

VMware has released security updates to address vulnerabilities affecting multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. Source : https://www.us-cert.gov/ncas/current-activity/2019/09/17/vmware-releases-security-updates-multiple-products Date : September 17, 2019 at 05:15PM Tag(s) : US GOV Share this… Email Facebook Twitter Linkedin Whatsapp Print

0 396
Posted in #SECURITE ENG US GOV

2019 CWE Top 25 Most Dangerous Software Errors

MITRE has released the 2019 Common Weakness Enumeration (CWE) Top 25 Most Dangerous Software Errors list. The Top 25 is a compilation of the most frequent and critical errors that can lead to serious vulnerabilities in software. An attacker can often exploit these vulnerabilities to take control of an affected…

0 509
Posted in #SECURITE ENG

Emotet is back: botnet springs back to life with new spam campaign

After a fairly long hiatus that lasted nearly four months, Emotet is back with an active spam distribution campaign. For a few weeks, there were signs that the botnet was setting its gears in motion again, as we observed command and control (C2) server activity. But this morning, the Trojan…

0 366
Posted in #SECURITE ENG

A week in security (September 9 – 15)

Last week  on the Labs blog, we looked at free VPN offerings, how malware can hinder vital emergency services, and explored how the Heartbleed vulnerability is still causing problems. We also talked about a large FTC settlement involving Google, and how to keep an eye out for leaky AWS buckets….

0 523
Posted in #SECURITE ENG

What startup CSOs can learn from three enterprise security experts

How do you keep your startup secure? That’s the big question we explored at TC Sessions: Enterprise earlier this month. No matter the size, every startup is an enterprise. Every startup will grow in size as it builds out. But as a company expands, that rapid growth can lead to…

0 385
Posted in #SECURITE ENG

Data of 24.3 million Lumin PDF users shared on hacking forum

The person who leaked the data claims it notified Lumin PDF earlier this year but got no reply. Source : https://www.zdnet.com/article/data-of-24-3-million-lumin-pdf-users-shared-on-hacking-forum/#ftag=RSSbaffb68 Date : September 16, 2019 at 10:24PM Tag(s) : Médias internationaux Share this… Email Facebook Twitter Linkedin Whatsapp Print

0 371
Posted in #SECURITE ENG

Security firm: Data breach exposes millions of Ecuadorians

QUITO, Ecuador (AP) – Millions of Ecuadorians are at risk of identity theft because a security breach exposed a trove of data including names, phone numbers and birth dates, a cyber security firm said Monday. Source : https://www.washingtontimes.com/news/2019/sep/16/security-firm-data-breach-exposes-millions-of-ecua/?utm_source=RSS_Feed&utm_medium=RSS Date : September 17, 2019 at 12:50AM Tag(s) : Médias internationaux Share…

0 449
Posted in #SECURITE ENG US GOV

Vulnerability Summary for the Week of September 9, 2019

The CISA Weekly Vulnerability Summary Bulletin is created using information from the NIST NVD. In some cases, the vulnerabilities in the Bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available Source : https://www.us-cert.gov/ncas/bulletins/sb19-259 Date : September…

0 367
Posted in #SECURITE FRA

3 Questions Boards Want Answered About Cyber Security

As they deal with their oversight duties, board members need to ask a related question: Are they themselves sufficiently in the know? Source : https://www.symantec.com/blogs/feature-stories/3-questions-boards-want-answered-about-cyber-security Date : September 16, 2019 at 06:40PM Tag(s) : #SECURITE FRA Share this… Email Facebook Twitter Linkedin Whatsapp Print

0 336
Posted in #SECURITE FRA

CERTFR-2019-AVI-445 : Multiples vulnérabilités dans Moodle (16 septembre 2019)

De multiples vulnérabilités ont été découvertes dans Moodle. Certaines d’entre elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l’éditeur, un contournement de la politique de sécurité et une atteinte à la confidentialité des données. Source : https://www.cert.ssi.gouv.fr/avis/CERTFR-2019-AVI-445/ Date : September 16, 2019 at 03:42PM…

0 374
Posted in #SECURITE FRA

L’authentification à double facteur généralisée pour les paiements en ligne

La version 2 de la Directive sur les services de paiement (PSD2) de l’UE est entrée en vigueur ce week-end. Elle doit permettre de faciliter (…) Source : https://www.lemondeinformatique.fr/actualites/lire-l-authentification-a-double-facteur-generalisee-pour-les-paiements-en-ligne-76461.html Date : September 16, 2019 at 06:50PM Tag(s) : Médias Share this… Email Facebook Twitter Linkedin Whatsapp Print

0 399
Posted in #DATA FRA #SECURITE FRA

Le cloud hybride, une approche intéressante pour la sécurité des données et de la continuité d’activité

Les données sont-elles mieux protégées dans le cloud ou vaut-il mieux les laisser sur site ? Le cloud hybride permet de résoudre cette question. Voici comment. Source : https://www.zdnet.fr/actualites/le-cloud-hybride-une-approche-interessante-pour-la-securite-des-donnees-et-de-la-continuite-d-activite-39890677.htm#xtor=RSS-1 Date : September 16, 2019 at 03:35PM Tag(s) : Médias spécialisés Share this… Email Facebook Twitter Linkedin Whatsapp Print

0 470
Posted in #SECURITE FRA

Cyberguerre : stopper les attaques contre les actifs critiques et les citoyens

La cyberguerre menée par un État contre un autre est devenue un danger très concret. Une question se pose alors : que peuvent faire les gouvernements pour protéger leurs citoyens et leurs infrastructures ? Source : https://www.silicon.fr/avis-expert/cyberguerre-stopper-les-attaques-contre-les-actifs-critiques-et-les-citoyens Date : September 16, 2019 at 04:42PM Tag(s) : Médias spécialisés Share this… Email Facebook…

0 566
Posted in #SECURITE ENG

That’s Classified: Why a Deep Understanding of Military Data Protection Delivers DLP for Enterprises Today

When the captain of a Navy ship receives a “Flash command,” he or she has three minutes to deliver a response: “Received, Understood, Actioned.” The commander has to be sure that the correct captain has received the message, Source : https://www.forcepoint.com/blog/insights/thats-classified-why-deep-understanding-military-data-protection-delivers-dlp Date : September 16, 2019 at 02:39PM Tag(s) :…

0 368
Posted in #SECURITE ENG

Emotet, today’s most dangerous botnet, comes back to life

Emotet botnet resumes malspam operations after going silent for nearly four months. Source : https://www.zdnet.com/article/emotet-todays-most-dangerous-botnet-comes-back-to-life/#ftag=RSSbaffb68 Date : September 16, 2019 at 02:06PM Tag(s) : Médias internationaux Share this… Email Facebook Twitter Linkedin Whatsapp Print