Veille Cybersécurité

APT28’s attacks rely on specially crafted Microsoft Rich Text Format (RTF) documents to kick off a multistage infection chain to deliver malicious […]

The self-replicating malware has poisoned a fresh set of Open VSX software components, leaving potential downstream victims with infostealer […]

The AI-assisted attack, which started with exposed credentials from public S3 buckets, rapidly achieved administrative privilges.

People trust organizations to do the right thing, but some websites and apps have user interfaces that ultimately lead to inadequate security for […]

A malware-free phishing campaign targets corporate inboxes and asks employees to view « request orders, » ultimately leading to Dropbox credential […]

Iowa police arrested two penetration testers in 2019 for doing their jobs, highlighting the risk to security professionals in red teaming exercises.

State-sponsored threat actors compromised the popular code editor’s hosting provider to redirect targeted users to malicious downloads.

Following their attacks on Salesforce instances last year, members of the cybercrime group have broadened their targeting and gotten more aggressive […]