Episode 0x182 (Hebdo) - 5 juin 2021

5 juin 2021 Shamelessplug iHack 19 juin Formation cybersécurité aux entreprises - Séminaire de Sherbrooke - Réussi! FIC 2021 (7, 8 & 9 septembre) 15 au 19 novembre, Hack in Paris Hackfest Shop Join Hackfest/La French Connection Discord Hackfest à 12 ans, mais 13e édition! :) Shownotes and Links JACQUES - Des milliers de serveurs VMware vCenter vulnérables et exposés publiquement STEVE - 20210527 - Re-Checking Your Pulse: Updates on Chinese APT Actors Compromising Pulse Secure VPN Devices STEVE - 20210531 - Faulty emailing tool prevented Accellion from notifying customers of attacks STEVE - 20210530 - The SolarWinds hackers aren’t back—they never went away RICHER - Il pirate cinq téléphones et une Tesla JACQUES - On sait maintenant que la compagnie d’assurance CNA a payé $40M de dollars aux pirates qui ont attaqué leur réseau: https://grahamcluley.com/cyber-insurance-giant-cna-paid-out-40-million-to-its-ransomware-attackers/ https://www.bloomberg.com/news/articles/2021-05-20/cna-financial-paid-40-million-in-ransom-after-march-cyberattack STEVE - 20210603 - Chinese cybercriminals spent three years creating a new backdoor to spy on governments https://www.zdnet.com/article/chinese-cybercriminals-spent-three-years-creating-a-new-backdoor-to-spy-on-governments/ https://research.checkpoint.com/2021/chinese-apt-group-targets-southeast-asian-government-with-previously-unknown-backdoor/ RICHER - TeamTNT targets Kubernetes instances - nearly 50k ip compromised STEVE - 2010604 - SIM swapping victim alleges T-Mobile failed to stop $20,000 cryptocurrency scam STEVE - 20210602 - Huawei officially replaces Android with HarmonyOS, which is also Android STEVE - 20210604 - Hackers Breached Colonial Pipeline Using Compromised Password STEVE - 20200603 - TikTok just gave itself permission to collect biometric data on US users, including ‘faceprints and voiceprints’ JACQUES - Un récent sondage démontre que la sécurité d’applications n’est pas une préoccupation majeure pour les grosses institutions financières: STEVE - 20210529 - Amazon Sidewalk - Amazon devices will soon automatically share your Internet with neighbors - En fonction 8 juin 2021 STEVE - Amazon’s Sidewalk Network Is Turned On by Default. Here’s How to Turn It Off Crew Steve Waterhouse Jacques Sauvé Richer Dinelle Crédits Montage audio par Hackfest Communication Music RAZ - Recorded Dreams - In The Beginning Locaux virtuels par 8x8