RadioCSIRT Cyber Daily News 18 Septembre 2024

🎙𝗦𝗼𝗿𝘁𝗶𝗲 𝗱𝘂 𝗽𝗼𝗱𝗰𝗮𝘀𝘁 𝗥𝗮𝗱𝗶𝗼𝗖𝗦𝗜𝗥𝗧 – 𝗘́𝗽𝗶𝘀𝗼𝗱𝗲 𝗱𝘂 𝗠𝗲𝗿𝗰𝗿𝗲𝗱𝗶 𝟭𝟴 𝗦𝗲𝗽𝘁𝗲𝗺𝗯𝗿𝗲 𝟮𝟬𝟮𝟰 🎧 🔐 𝗔𝘂 𝗽𝗿𝗼𝗴𝗿𝗮𝗺𝗺𝗲 : 🔍 𝗔𝗧&𝗧 𝗰𝗼𝗻𝗱𝗮𝗺𝗻𝗲́ 𝗮̀ 𝟭𝟯 𝗺𝗶𝗹𝗹𝗶𝗼𝗻𝘀 𝗱𝗲 𝗱𝗼𝗹𝗹𝗮𝗿𝘀 𝗮𝗽𝗿𝗲̀𝘀 𝘂𝗻𝗲 𝘃𝗶𝗼𝗹𝗮𝘁𝗶𝗼𝗻 𝗱𝗲 𝗱𝗼𝗻𝗻𝗲́𝗲𝘀 𝗦𝗼𝘂𝗿𝗰𝗲 : https://arstechnica.com/tech-policy/2024/09/att-fined-13m-for-data-breach-after-giving-customer-bill-info-to-vendor/ 🛠️ 𝗣𝗮𝘁𝗰𝗵 𝗽𝗼𝘂𝗿 𝘃𝘂𝗹𝗻𝗲́𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗲́ 𝗰𝗿𝗶𝘁𝗶𝗾𝘂𝗲 𝗱𝗲 𝗩𝗠𝘄𝗮𝗿𝗲 𝘃𝗖𝗲𝗻𝘁𝗲𝗿 𝗦𝗼𝘂𝗿𝗰𝗲 : https://thehackernews.com/2024/09/patch-issued-for-critical-vmware.html 📚 𝗟𝗲𝘀 𝗵𝗮𝗰𝗸𝗲𝗿𝘀 𝗻𝗼𝗿𝗱-𝗸𝗼𝗿𝗲́𝗲𝗻𝘀 𝗰𝗶𝗯𝗹𝗲𝗻𝘁 𝗹𝗲𝘀 𝘂𝘁𝗶𝗹𝗶𝘀𝗮𝘁𝗲𝘂𝗿𝘀 𝗱𝗲 𝗰𝗿𝘆𝗽𝘁𝗼𝗺𝗼𝗻𝗻𝗮𝗶𝗲𝘀 𝘀𝘂𝗿 𝗟𝗶𝗻𝗸𝗲𝗱𝗜𝗻 𝗦𝗼𝘂𝗿𝗰𝗲 : https://thehackernews.com/2024/09/north-korean-hackers-target.html ⚙️ 𝗔𝘁𝘁𝗮𝗾𝘂𝗲 𝗱𝗲 𝗰𝗵𝗮𝗶̂𝗻𝗲 𝗱'𝗮𝗽𝗽𝗿𝗼𝘃𝗶𝘀𝗶𝗼𝗻𝗻𝗲𝗺𝗲𝗻𝘁 𝗰𝗼𝗻𝗱𝘂𝗶𝘁𝗲 𝗽𝗮𝗿 𝗹𝗮 𝗽𝗼𝗹𝗶𝗰𝗲 𝗮𝘂𝘀𝘁𝗿𝗮𝗹𝗶𝗲𝗻𝗻𝗲 𝗰𝗼𝗻𝘁𝗿𝗲 𝗹'𝗮𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗱𝗲 𝗰𝗿𝗶𝗺𝗲𝗻𝗲𝘁 𝗚𝗵𝗼𝘀𝘁 𝗦𝗼𝘂𝗿𝗰𝗲 : https://www.theregister.com/2024/09/18/afp_operation_kraken_ghost_crimeware_app/ 📉 𝗠𝘂𝗹𝘁𝗶𝗽𝗹𝗲𝘀 𝘃𝘂𝗹𝗻𝗲́𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗲́𝘀 𝗱𝗮𝗻𝘀 𝗹𝗲𝘀 𝗽𝗿𝗼𝗱𝘂𝗶𝘁𝘀 𝗔𝗽𝗽𝗹𝗲 𝗦𝗼𝘂𝗿𝗰𝗲 CERT-FR : https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-0785/ 📧 𝗨𝗻 𝗰𝗵𝗶𝗻𝗼𝗶𝘀 𝗶𝗻𝗰𝘂𝗹𝗽𝗲́ 𝗽𝗼𝘂𝗿 𝘀𝗽𝗲𝗮𝗿-𝗽𝗵𝗶𝘀𝗵𝗶𝗻𝗴 𝗰𝗼𝗻𝘁𝗿𝗲 𝗹𝗮 𝗡𝗔𝗦𝗔 𝗲𝘁 𝗹𝗲 𝗴𝗼𝘂𝘃𝗲𝗿𝗻𝗲𝗺𝗲𝗻𝘁 𝗮𝗺𝗲́𝗿𝗶𝗰𝗮𝗶𝗻 𝗦𝗼𝘂𝗿𝗰𝗲 : https://securityaffairs.com/168514/cyber-crime/chinese-man-spear-phishing-nasa-us-government.html 💻 𝗟𝗲𝘀 𝗮𝗴𝗲𝗻𝗰𝗲𝘀 𝗱𝗲 𝗿𝗲𝗻𝘀𝗲𝗶𝗴𝗻𝗲𝗺𝗲𝗻𝘁 𝗮𝗳𝗳𝗿𝗼𝗻𝘁𝗲𝗻𝘁 𝗱𝗲𝘀 𝗱𝗲́𝗳𝗶𝘀 𝗱𝗲 𝗿𝗲́𝘁𝗲𝗻𝘁𝗶𝗼𝗻 𝗱𝗲 𝘁𝗮𝗹𝗲𝗻𝘁𝘀 𝗲𝗺𝗲𝗿𝗴𝗲𝗻𝘁𝘀 𝗦𝗼𝘂𝗿𝗰𝗲 : https://www.defenseone.com/policy/2024/09/intelligence-agencies-are-attracting-new-talent-do-they-have-career-development-systems-keep-them/399595/ 📞 𝗤𝘂𝗲𝘀𝘁𝗶𝗼𝗻𝘀 𝗼𝘂 𝘀𝘂𝗴𝗴𝗲𝘀𝘁𝗶𝗼𝗻𝘀 ? 𝗠𝗲𝘀𝘀𝗮𝗴𝗲 𝗮𝘂 𝟬𝟳 𝟲𝟴 𝟳𝟮 𝟮𝟬 𝟬𝟵 !𝘗𝘰𝘥𝘤𝘢𝘴𝘵 𝘥𝘪𝘴𝘱𝘰𝘯𝘪𝘣𝘭𝘦 𝘴𝘶𝘳 𝘈𝘱𝘱𝘭𝘦 𝘗𝘰𝘥𝘤𝘢𝘴𝘵𝘴, 𝘋𝘦𝘦𝘻𝘦𝘳, 𝘚𝘱𝘰𝘵𝘪𝘧𝘺 𝘦𝘵 𝘈𝘮𝘢𝘻𝘰𝘯 𝘔𝘶𝘴𝘪𝘤.