Bulletins d'actualité : Différence entre versions
De Docaposte Cyberdéfense
| (10 révisions intermédiaires par le même utilisateur non affichées) | |||
| Ligne 5 : | Ligne 5 : | ||
</btn> | </btn> | ||
<br> | <br> | ||
| + | {| style="color: black; background-color: #ffffcc; width: 100%;" | ||
| + | | style="width: 10%; background-color: #EBECEC; text-align: center;"| | ||
| + | <br> | ||
| + | [[Fichier: Logo v5.png|150px]] | ||
| + | | style="width: 70%; background-color: #EBECEC; text-align: center;"| | ||
| + | =='''Undernews'''== | ||
| + | |||
| + | |} | ||
| + | <br> | ||
| + | <br> | ||
| + | <rss max=10 highlight="CVE">http://feeds.feedburner.com/undernews/oCmA</rss> | ||
| − | |||
{| style="color: black; background-color: #ffffcc; width: 100%;" | {| style="color: black; background-color: #ffffcc; width: 100%;" | ||
Version actuelle datée du 6 mars 2018 à 00:06
Classification
|
|
SommaireUndernews |
|
|
[remote] PCMan 2.0.7 - Buffer Overflow
PCMan 2.0.7 - Buffer Overflow
|
|
|
[dos] NanaZip 6.5 - DoS
NanaZip 6.5 - DoS
|
|
|
[webapps] flyto-core 2.26.7 - Arbitrary File Write
flyto-core 2.26.7 - Arbitrary File Write
|
|
|
[webapps] Nodemailer 9.0.0 - File Read/ SSRF
Nodemailer 9.0.0 - File Read/ SSRF
|
|
|
[webapps] Linuxfabrik monitoring_plugins_6.0.0 - SSRF
Linuxfabrik monitoring_plugins_6.0.0 - SSRF
|
|
|
[dos] NanaZip 6.5 - DoS
NanaZip 6.5 - DoS
|
|
|
[webapps] flyto_core 2.26.7 - Server-Side Request Forgery
flyto_core 2.26.7 - Server-Side Request Forgery
|
|
|
[webapps] Probo 0.222.2 - IDOR
Probo 0.222.2 - IDOR
|
|
|
[webapps] webpack_devserver 5.2.5 - CSRF
webpack_devserver 5.2.5 - CSRF
|
|
|
[remote] phpSysInfo 3.4.5 - IP Allowlist Bypass
phpSysInfo 3.4.5 - IP Allowlist Bypass
|
|
|
Dark Reading |
Impossible de charger le flux RSS de https://www.darkreading.com/rss_simple.asp : Il y a eu un problème lors de la requête HTTP : 403 Forbidden
|
|
ZATAZ |
|
|
Chess.com : un nouveau pirate revendique 7,3 millions de profils
Un pirate revendique la copie de 7,3 millions de profils Chess.com, dont quatre millions de mails.
|
|
|
LockBit 5.0 menace de publier des données d’Actua
LockBit 5.0 menace de publier fin août des documents attribués à Actua concernant plus de 100 000 personnes.
|
|
|
Corée du Sud : des responsables politiques visés par une fuite
Corée du Sud : une agence de certification piratée aurait exposé les coordonnées de responsables présidentiels.
|
|
|
Ransomware : avec 181 victimes, 2026 dépasse déjà toute l’année 2025
Ransomware en France : le nombre de cyberattaques de 2025 déjà dépassé en août 2026.
|
|
|
Escape Data ZATAZ 2.0 transforme l’enquête en jeu
Escape Data ZATAZ 2.0 mêle escape game, OSINT, observation et réflexes cyber dans une enquête numérique estivale.
|
|
|
Pokémon Center touché par la cyberattaque d’un prestataire
Cyberattaque : des données de clients Pokémon Center exposées et certaines précommandes annulées en Europe.
|
|
|
Target visé par une nouvelle revendication de fuite
Un pirate renvendique le vol de codes sources à un géant de la grande distribution, sur fond d’une précédente fuite interne.
|
|
|
Des bases de joueurs européens de casino diffusées sur un forum pirate
Un vendeur propose des bases de joueurs de casino européens contenant coordonnées, téléphones et données de dépôt.
|
|
|
Checker max cible les portefeuilles Solana en masse
Checker max analyse Solana par lots de 1 000 adresses, une capacité sensible pour le triage de portefeuilles proposé sur un forum de pirates.
|
|
|
DYSPHOR1A, nouveau groupe de ransomware maître chanteur
DYSPHOR1A émerge comme un nouveau groupe ransomware maître chanteur, avec ventes, fuites et retraits payants de données.
|
';-- |
Identity Leaked |
|
|
Golf Canada - 568,972 breached accounts
In mid-2026, hundreds of thousands of user records allegedly sourced from Golf Canada began circulating via Telegram. The data included 569k unique email addresses along with names, usernames, dates of birth, genders and approximate geographic locations (city, province and postcode). Golf Canada didn't respond to multiple attempts to make contact, and it remains unclear whether the data was obtained via unintentionally exposed website features or a security vulnerability.
|
|
|
Oz Hair and Beauty - 1,988,331 breached accounts
In August 2026, Australian beauty retailer Oz Hair and Beauty was the target of an xpl0itrs extortion attack. The group subsequently published data allegedly obtained from the company, which included 2M unique email addresses along with names, phone numbers, geographic locations (suburb and postcode) and purchases.
|
|
|
Fanlore - 144,520 breached accounts
In August 2026, the Organization for Transformative Works (OTW) identified unauthorised access to the Fanlore wiki it operates. The breach resulted in the exposure of 145k unique email addresses along with usernames and passwords stored as either MD5 or PBKDF2 hashes. OTW self-submitted the exposed data to HIBP.
|
|
|
RingCentral - 1,596,490 breached accounts
In July 2026, the cloud-based business communications platform RingCentral was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they claimed was obtained from the platform, which included 1.6M unique email addresses along with names, physical addresses and phone numbers.
|
| Alcon - 218,395 breached accounts
In August 2026, the Alcon eye care company was named in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data allegedly sourced from Alcon containing 218k unique email addresses along with other largely corporate B2B contact fields, including name, phone number and physical address.
|
|
|
Brinks Home - 732,162 breached accounts
In July 2026, Brinks Home was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they alleged was taken from the company, including 732k unique email addresses and other personal information relating to leads, customers and Brinks staff such as name, phone numbers and physical addresses. The data a...
|
|
|
Exact Sciences - 10,869,543 breached accounts
In July 2026, Exact Sciences (now owned by Abbott Laboratories) was the target of a ShinyHunters "pay or leak" extortion campaign. The group claimed to have obtained data from the company's cancer diagnostics business, which they later published publicly. The breach contained 10.9M unique email addresses belonging to customers, patients and heal...
|
|
|
Inter-Con Security - 276,114 breached accounts
In June 2026, Inter-Con Security was targeted in a ShinyHunters “pay or leak” extortion campaign. The group subsequently published data it alleged was taken from the company, including 276k unique email addresses along with names, physical addresses, job titles and phone numbers. The data encompassed a combination of contacts, internal users and leads.
|
|
|
SplitVPN - 865,336 breached accounts
In July 2026, the Russian VPN service SplitVPN (previously known as NotVPN) suffered a data breach. The incident exposed millions of customer records, including 865k unique email addresses. Other impacted data included IP addresses, the user's country, and partial payment card data (first 6 and last 4 digits plus expiry date).
|
|
|
Houston City College - 831,642 breached accounts
In June 2026, Houston City College was the target of a ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from the college was later published publicly and included 832k unique email addresses along with names, addresses, phone numbers, academic records, and other personal information relating to both current students and alumni.
|