Episode 0x182 (Hebdo) - 5 juin 2021
5 juin 2021
Shamelessplug
iHack 19 juin
Formation cybersécurité aux entreprises - Séminaire de Sherbrooke - Réussi!
FIC 2021 (7, 8 & 9 septembre)
15 au 19 novembre, Hack in Paris
Hackfest Shop
Join Hackfest/La French Connection Discord
Hackfest à 12 ans, mais 13e édition! :)
Shownotes and Links
JACQUES - Des milliers de serveurs VMware vCenter vulnérables et exposés publiquement
STEVE - 20210527 - Re-Checking Your Pulse: Updates on Chinese APT Actors Compromising Pulse Secure VPN Devices
STEVE - 20210531 - Faulty emailing tool prevented Accellion from notifying customers of attacks
STEVE - 20210530 - The SolarWinds hackers aren’t back—they never went away
RICHER - Il pirate cinq téléphones et une Tesla
JACQUES - On sait maintenant que la compagnie d’assurance CNA a payé $40M de dollars aux pirates qui ont attaqué leur réseau:
https://grahamcluley.com/cyber-insurance-giant-cna-paid-out-40-million-to-its-ransomware-attackers/
https://www.bloomberg.com/news/articles/2021-05-20/cna-financial-paid-40-million-in-ransom-after-march-cyberattack
STEVE - 20210603 - Chinese cybercriminals spent three years creating a new backdoor to spy on governments
https://www.zdnet.com/article/chinese-cybercriminals-spent-three-years-creating-a-new-backdoor-to-spy-on-governments/
https://research.checkpoint.com/2021/chinese-apt-group-targets-southeast-asian-government-with-previously-unknown-backdoor/
RICHER - TeamTNT targets Kubernetes instances - nearly 50k ip compromised
STEVE - 2010604 - SIM swapping victim alleges T-Mobile failed to stop $20,000 cryptocurrency scam
STEVE - 20210602 - Huawei officially replaces Android with HarmonyOS, which is also Android
STEVE - 20210604 - Hackers Breached Colonial Pipeline Using Compromised Password
STEVE - 20200603 - TikTok just gave itself permission to collect biometric data on US users, including ‘faceprints and voiceprints’
JACQUES - Un récent sondage démontre que la sécurité d’applications n’est pas une préoccupation majeure pour les grosses institutions financières:
STEVE - 20210529 - Amazon Sidewalk - Amazon devices will soon automatically share your Internet with neighbors - En fonction 8 juin 2021
STEVE - Amazon’s Sidewalk Network Is Turned On by Default. Here’s How to Turn It Off
Crew
Steve Waterhouse
Jacques Sauvé
Richer Dinelle
Crédits
Montage audio par Hackfest Communication
Music RAZ - Recorded Dreams - In The Beginning
Locaux virtuels par 8x8
Shamelessplug
iHack 19 juin
Formation cybersécurité aux entreprises - Séminaire de Sherbrooke - Réussi!
FIC 2021 (7, 8 & 9 septembre)
15 au 19 novembre, Hack in Paris
Hackfest Shop
Join Hackfest/La French Connection Discord
Hackfest à 12 ans, mais 13e édition! :)
Shownotes and Links
JACQUES - Des milliers de serveurs VMware vCenter vulnérables et exposés publiquement
STEVE - 20210527 - Re-Checking Your Pulse: Updates on Chinese APT Actors Compromising Pulse Secure VPN Devices
STEVE - 20210531 - Faulty emailing tool prevented Accellion from notifying customers of attacks
STEVE - 20210530 - The SolarWinds hackers aren’t back—they never went away
RICHER - Il pirate cinq téléphones et une Tesla
JACQUES - On sait maintenant que la compagnie d’assurance CNA a payé $40M de dollars aux pirates qui ont attaqué leur réseau:
https://grahamcluley.com/cyber-insurance-giant-cna-paid-out-40-million-to-its-ransomware-attackers/
https://www.bloomberg.com/news/articles/2021-05-20/cna-financial-paid-40-million-in-ransom-after-march-cyberattack
STEVE - 20210603 - Chinese cybercriminals spent three years creating a new backdoor to spy on governments
https://www.zdnet.com/article/chinese-cybercriminals-spent-three-years-creating-a-new-backdoor-to-spy-on-governments/
https://research.checkpoint.com/2021/chinese-apt-group-targets-southeast-asian-government-with-previously-unknown-backdoor/
RICHER - TeamTNT targets Kubernetes instances - nearly 50k ip compromised
STEVE - 2010604 - SIM swapping victim alleges T-Mobile failed to stop $20,000 cryptocurrency scam
STEVE - 20210602 - Huawei officially replaces Android with HarmonyOS, which is also Android
STEVE - 20210604 - Hackers Breached Colonial Pipeline Using Compromised Password
STEVE - 20200603 - TikTok just gave itself permission to collect biometric data on US users, including ‘faceprints and voiceprints’
JACQUES - Un récent sondage démontre que la sécurité d’applications n’est pas une préoccupation majeure pour les grosses institutions financières:
STEVE - 20210529 - Amazon Sidewalk - Amazon devices will soon automatically share your Internet with neighbors - En fonction 8 juin 2021
STEVE - Amazon’s Sidewalk Network Is Turned On by Default. Here’s How to Turn It Off
Crew
Steve Waterhouse
Jacques Sauvé
Richer Dinelle
Crédits
Montage audio par Hackfest Communication
Music RAZ - Recorded Dreams - In The Beginning
Locaux virtuels par 8x8
