TFun dot org – Information Security newsfeed from around the world in English and French. Find it all in one place… here.

Safari, other mobile browsers affected by address bar spoofing flaws

21/10/202021/10/2020Zeljka Zorz

Security researcher Rafay Baloch has discovered address bar spoofing vulnerabilities in several mobile browsers, which could allow attackers to trick users into sharing sensitive information through legitimate-looking phishing sites. “With ever growing sophistication of spear phishing attacks, exploitation of browser-based vulnerabilities such as address bar spoofing may exacerbate the success of spear phishing attacks and […]

Bitcoin 'Mixer' Fined $60 Million

21/10/202021/10/2020RedOne

FinCEN: Helix and Coin Ninja Sites Violated Anti-Money Laundering LawsThe Treasury Department has fined the owner of two bitcoin “mixing” sites $60 million for violating anti-money laundering laws. It’s the first time the department’s Financial Crimes Enforcement Network has issued a civil monetary penalty against the operator of a cryptocurrency site. Source: Bank Info Security […]

6 Takeaways: Russian Spies Accused of Destructive Hacking

21/10/202021/10/2020RedOne

Experts Say Day of Reckoning Overdue; How Might Moscow Respond?U.S. officials have accused the Russian government of behaving “maliciously or irresponsibly” by taking steps such as crashing Ukraine power grids in the dead of winter and causing more than $10 billion in damages via NotPetya malware. But why make the accusations now? And how might […]

Tom Kellermann on the Price of Digital Transformation

21/10/202021/10/2020RedOne

Analysis of Latest Global Incident Response Threat ReportVMware Carbon Black is out with its latest Global Incident Response Threat Report, which describes “the perfect storm” for increasingly sophisticated attacks heading into 2021. Cybersecurity strategist Tom Kellermann discusses what that means – and how these trends should inform our defensive strategies. Source: Bank Info Security Tom […]

Live Webinar | Cloud Security: Overcoming Hybrid Environment Management Challenges

21/10/202021/10/2020RedOne

Source: Bank Info Security Live Webinar | Cloud Security: Overcoming Hybrid Environment Management Challenges

Trickbot Rebounds After 'Takedown'

21/10/202021/10/2020RedOne

CrowdStrike: Botnet’s Activity Has Already Picked UpThe recent “takedown” of Trickbot by Microsoft and others had only a temporary effect; the botnet’s activity levels have already rebounded, according to Crowdstrike and other security firms. Source: Bank Info Security Trickbot Rebounds After 'Takedown'

A Deepfake Porn Bot Is Being Used to Abuse Thousands of Women

21/10/202021/10/2020Matt Burgess

An AI tool that ‘removes’ items of clothing from photos has targeted more than 100,000 women, some of whom appear to be under the age of 18. Source: Wired A Deepfake Porn Bot Is Being Used to Abuse Thousands of Women

Étude : quelle est la perception des Français concernant la collecte et l’utilisation de leurs données personnelles ?

21/10/202021/10/2020UnderNews

A la veille du lancement de la nouvelle version de l’application de « contact tracing » rebaptisée « Tous Anti-Covid », beaucoup continuent de se poser des questions quant à son utilité. En effet, lors de son lancement en juin dernier, l’application française « StopCovid » n’avait pas rencontré le succès escompté alors que les applications similaires avaient décollé dans les […]

Lightning Network discloses "concerning" crypto vulnerabilities

21/10/202021/10/2020Ax Sharma

The team behind Lightning Network have disclosed full details on multiple vulnerabilities that had been partially disclosed on October 9th, 2020. Attackers could have exploited these vulnerabilities to cause DoS and to disrupt crypto transactions by intercepting “smart contracts” made between two parties. […] Source: leepingcomputer.com Lightning Network discloses "concerning" crypto vulnerabilities

Phishing & entreprise : Quels sont services les plus ciblés par les cyberattaquants ?

21/10/202021/10/2020UnderNews

Les salariés des TPE/PME consultent fréquemment divers sites web et plateformes en ligne durant leur journée de travail, selon une étude Kaspersky. Ceux-ci incluent notamment YouTube, Facebook, les différents services de Google et WhatsApp – certaines de ces applications étant aussi les plus utilisées par les cyberattaquants comme un tremplin pour le phishing. The post […]