Bulletins d'actualité : Différence entre versions
De Docaposte Cyberdéfense
| (41 révisions intermédiaires par le même utilisateur non affichées) | |||
| Ligne 5 : | Ligne 5 : | ||
</btn> | </btn> | ||
<br> | <br> | ||
| + | {| style="color: black; background-color: #ffffcc; width: 100%;" | ||
| + | | style="width: 10%; background-color: #EBECEC; text-align: center;"| | ||
| + | <br> | ||
| + | [[Fichier: Logo v5.png|150px]] | ||
| + | | style="width: 70%; background-color: #EBECEC; text-align: center;"| | ||
| + | =='''Undernews'''== | ||
| + | |||
| + | |} | ||
| + | <br> | ||
| + | <br> | ||
| + | <rss max=10 highlight="CVE">http://feeds.feedburner.com/undernews/oCmA</rss> | ||
| + | |||
{| style="color: black; background-color: #ffffcc; width: 100%;" | {| style="color: black; background-color: #ffffcc; width: 100%;" | ||
| style="width: 10%; background-color: #EBECEC; text-align: center;"| | | style="width: 10%; background-color: #EBECEC; text-align: center;"| | ||
| + | <br> | ||
[[Fichier: Edb-2015-theme-logo641.png|150px]] | [[Fichier: Edb-2015-theme-logo641.png|150px]] | ||
| style="width: 70%; background-color: #EBECEC; text-align: center;"| | | style="width: 70%; background-color: #EBECEC; text-align: center;"| | ||
| − | + | =='''Offensive Security’s Exploit Database'''== | |
| + | |||
| + | |} | ||
| + | <br> | ||
| + | <br> | ||
| + | <rss max=10 highlight="CVE">https://www.exploit-db.com/rss.xml</rss> | ||
| + | |||
| + | {| style="color: black; background-color: #ffffcc; width: 100%;" | ||
| + | | style="width: 10%; background-color: #EBECEC; text-align: center;"| | ||
| + | <br> | ||
| + | [[Fichier: Darkreading-logo.gif|200px]] | ||
| + | | style="width: 70%; background-color: #EBECEC; text-align: center;"| | ||
| + | =='''Dark Reading'''== | ||
| + | |||
| + | |} | ||
| + | <br> | ||
| + | <br> | ||
| + | <rss max=10 highlight="CVE">https://www.darkreading.com/rss_simple.asp</rss> | ||
| + | |||
| + | {| style="color: black; background-color: #ffffcc; width: 100%;" | ||
| + | | style="width: 10%; background-color: #EBECEC; text-align: center;"| | ||
| + | <br> | ||
| + | [[Fichier: Logo-3-1.png|150px]] | ||
| + | | style="width: 70%; background-color: #EBECEC; text-align: center;"| | ||
| + | =='''ZATAZ'''== | ||
| + | |||
| + | |} | ||
| + | <br> | ||
| + | <br> | ||
| + | <rss max=10 highlight="CVE">https://www.zataz.com/feed/</rss> | ||
| + | |||
| + | {| style="color: black; background-color: #ffffcc; width: 100%;" | ||
| + | | style="width: 10%; background-color: #EBECEC; text-align: center;"| | ||
| + | ='''';--'''= | ||
| + | | style="width: 70%; background-color: #EBECEC; text-align: center;"| | ||
| + | =='''Identity Leaked'''== | ||
|} | |} | ||
<br> | <br> | ||
<br> | <br> | ||
| − | <rss max= | + | <rss max=10 highlight="CVE">http://feeds.feedburner.com/HaveIBeenPwnedLatestBreaches?format=xml</rss> |
Version actuelle datée du 6 mars 2018 à 00:06
Classification
|
|
SommaireUndernews |
Impossible de charger le flux RSS de https://www.exploit-db.com/rss.xml : Il y a eu un problème lors de la requête HTTP : 502 Bad Gateway
|
|
Dark Reading |
Impossible de charger le flux RSS de https://www.darkreading.com/rss_simple.asp : Il y a eu un problème lors de la requête HTTP : 403 Forbidden
|
|
ZATAZ |
|
|
Cyber actualités ZATAZ de la semaine du 28 juin 2026
Bonjour à toutes et tous, Cette semaine cyber est marquée par de nouvelles fuites revendiquées, des intrusions sensibles et des opérations judiciaires d’ampleur. Akaolife, Bet365, Tripadvisor, Zalando Australia, Autosur, la Carte Jeune Occitanie, la RATP et l’identité notariale apparaissent dans des dossiers où les données personnelles, professionnelles ou internes sont au cœur des risques. Operation […]
|
|
|
L’authentification par certificat pour Active Directory : pourquoi elle devient incontournable avec la dépréciation de NTLM
Microsoft met fin à NT LAN Manager (NTLM), mais le remplacer dans les systèmes legacy, les applications et les intégrations tierces n’est pas une opération simple. Pour les accès distants exposés sur internet en particulier, l’authentification par certificat (CBA) est souvent le remplaçant le plus sécurisé. Voici dans quels cas la CBA peut prendre le […]
|
|
|
LeHACK 2026, la scène hacker éthique française en alerte
LeHACK 2026 réunit hackers et experts cyber, avec le confessionnal ZATAZ pour signaler failles et fuites.
|
|
|
Akaolife, l’intrusion qui menace France Travail ?
Intrusion revendiquée chez Akaolife : données RH, santé et France Travail au cœur d’un risque cyber majeur ?
|
|
|
Fuite présumée chez bet365 : l’ombre d’un fichier trés sensible ?
Un pirate affirme vendre 120 millions de profils attribués à bet365. La nature des données évoquée par le hacker pourrait sembler bien plus grave qu’une "simple" liste d’adresses électroniques.
|
|
|
Tripadvisor, Bet365 et Zalando : trois fuites revendiquées et beaucoup d’ombre
Fuites revendiquées chez Tripadvisor, Bet365 et Zalando Australia : attribution faible, prudence cyber maximale.
|
|
|
Fuite présumée sur la Carte Jeune Occitanie
Fuite présumée de 318 751 données liées à la Carte Jeune Occitanie : risques, prudence et enjeu cyber pour les élèves et les parents.
|
|
|
FIOD : deux arrestations dans une affaire de sanctions
Deux suspects arrêtés pour soupçon de contournement des sanctions européennes contre la russie. 800 serveurs saisis.
|
|
|
Polymarket face au soupçon d’initiés
Polymarket visé par une affaire d’initié Google et une interdiction en Espagne : enjeux cyber et renseignement.
|
|
|
À 22 ans, son identité est piratée : 400 000 euros de dette
Une jeune française de 22 ans ouvre des comptes pour un faux ami : son identité sert à détourner des centaines de milliers d’euros.
|
';-- |
Identity Leaked |
|
|
Sysco - 2,691,852 breached accounts
In June 2026, the food distribution company Sysco was targeted by a ShinyHunters "pay or leak" extortion campaign. Data was subsequently published containing 2.7M unique email addresses belonging to staff and customers. The data also contained largely corporate contact information including names, phone numbers, physical addresses, internal job titles, and customer feedback.
|
|
|
American Tower - 216,601 breached accounts
In June 2026, telecommunications tower infrastructure company American Tower was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data allegedly taken from the company containing more than 200k unique email addresses belonging to employees, contractors, customers, and leads. Exposed data also included names, addresses, and phone numbers.
|
|
|
Madison Square Garden Sports - 9,796,738 breached accounts
In June 2026, the sports and entertainment company Madison Square Garden Sports was the target of a ShinyHunters "pay or leak" extortion campaign. The group later published the alleged data, which included almost 10M unique email addresses spanning staff and customers, along with extensive personal, employment and customer relationship information.
|
|
|
JCPenney - 368,418 breached accounts
In June 2026, retailer JCPenney and associated brands were targeted in a ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from JCPenney through the exploitation of a cri...
|
|
|
Ralph Lauren - 139,903 breached accounts
In June 2026, fashion retailer Ralph Lauren was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published hundreds of gigabytes of data they claimed was obtained from the organisation's Salesforce instance, including 140k unique email addresses along with names, phone numbers, genders and age groups.
|
|
|
Operation Endgame 4.0 - 4,160,519 breached accounts
On 18 June 2026, the latest phase of Operation Endgame targeted the SocGholish malware operation, a prolific malware distribution network used to compromise systems and facilitate further cybercrime. Coordinated by international law enforcement agencies with support from Europol and Eurojust, the operation remediated almost 15,000 compromise...
|
|
|
CFGI - 248,235 breached accounts
In March 2026, the financial consulting and advisory firm CFGI was the target of a ShinyHunters "pay-or-leak" extortion campaign. The group subsequently publicised data allegedly obtained from CFGI comprising corporate contact information, including 243k unique email addresses, names, phone numbers and physical addresses.
|
|
|
June 2026 Stealer Logs - 56,278,397 breached accounts
In June 2026, a collection of accumulated stealer logs from various sources was added to HIBP. The corpus comprised 56M unique email addresses across hundreds of millions of stealer log records. The data also contained 124M unique passwords, which have been added to Pwned Passwords and are now searchable. Individuals can view any records captured against their email address in
|
| Berkadia - 305,216 breached accounts
In March 2026, the commercial real estate finance company Berkadia was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they alleged was taken from Berkadia's Salesforce instance, including over 300k unique email addresses as well as names, physical addresses and phone numbers, among other data.
|
|
|
Infinite Campus - 137,123 breached accounts
In March 2026, the student information system Infinite Campus was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they alleged was taken from Infinite Campus, containing 137k unique email addresses along with names, phone numbers, physical addresses and support tickets.
Récupérée de « https://csirt.docapost.fr/index.php?title=Bulletins_d%27actualité&oldid=1264 »
|