RadioCSIRT Cyber Daily News du 19 Septembre 2024

🎙𝗦𝗼𝗿𝘁𝗶𝗲 𝗱𝘂 𝗽𝗼𝗱𝗰𝗮𝘀𝘁 𝗥𝗮𝗱𝗶𝗼𝗖𝗦𝗜𝗥𝗧 – 𝗘́𝗽𝗶𝘀𝗼𝗱𝗲 𝗱𝘂 𝗝𝗲𝘂𝗱𝗶 𝟭𝟵 𝗦𝗲𝗽𝘁𝗲𝗺𝗯𝗿𝗲 𝟮𝟬𝟮𝟰 🎧

🔐 𝗔𝘂 𝗽𝗿𝗼𝗴𝗿𝗮𝗺𝗺𝗲 :

🔍 𝗖𝗜𝗦𝗔 𝗮𝗷𝗼𝘂𝘁𝗲 𝗰𝗶𝗻𝗾 𝗻𝗼𝘂𝘃𝗲𝗹𝗹𝗲𝘀 𝘃𝘂𝗹𝗻𝗲́𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗲́𝘀 𝗮̀ 𝘀𝗼𝗻 𝗰𝗮𝘁𝗮𝗹𝗼𝗴𝘂𝗲 𝗱𝗲𝘀 𝘃𝘂𝗹𝗻𝗲́𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗲́𝘀 𝗲𝘅𝗽𝗹𝗼𝗶𝘁𝗲́𝗲𝘀
𝗦𝗼𝘂𝗿𝗰𝗲 : https://www.cisa.gov/news-events/alerts/2024/09/18/cisa-adds-five-known-exploited-vulnerabilities-catalog

🛠️ 𝗩𝘂𝗹𝗻𝗲́𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗲́ 𝗰𝗿𝗶𝘁𝗶𝗾𝘂𝗲 𝗱𝗮𝗻𝘀 𝗚𝗶𝘁𝗟𝗮𝗯 :
𝗦𝗼𝘂𝗿𝗰𝗲 CERT-FR : https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-0791/

📚 𝗟𝗼𝗰𝗸𝗕𝗶𝘁 𝗿𝗲𝗻𝗱 𝗰𝗼𝗺𝗽𝘁𝗲 𝗱’𝘂𝗻𝗲 𝗮𝘁𝘁𝗮𝗾𝘂𝗲 𝗱𝗲 𝗰𝘆𝗯𝗲𝗿𝗲𝘀𝗽𝗶𝗼𝗻𝗻𝗮𝗴𝗲 𝘃𝗶𝘀𝗮𝗻𝘁 𝗹𝗲 𝗳𝗶𝘀𝗰 𝗮𝗺𝗲́𝗿𝗶𝗰𝗮𝗶𝗻
𝗦𝗼𝘂𝗿𝗰𝗲 : https://www.theregister.com/2024/09/18/lockbit_tax_site_claim/

⚙️ 𝗗𝗿.𝗪𝗲𝗯 𝘀𝘂𝗯𝗶𝘁 𝘂𝗻𝗲 𝗰𝘆𝗯𝗲𝗿𝗮𝘁𝘁𝗮𝗾𝘂𝗲
𝗦𝗼𝘂𝗿𝗰𝗲 : https://securityaffairs.com/168577/hacking/antivirus-firm-dr-web-suffers-cyberattack.html

📉 𝗦𝗰𝗮𝗺 𝗱𝗲 𝘀𝘁𝗿𝗲𝗮𝗺𝗶𝗻𝗴 𝗱𝗲 𝗳𝘂𝗻𝗲́𝗿𝗮𝗶𝗹𝗹𝗲𝘀 𝗲𝗻 𝗽𝗹𝗲𝗶𝗻𝗲 𝗲𝘅𝗽𝗮𝗻𝘀𝗶𝗼𝗻 𝘀𝘂𝗿 𝗙𝗮𝗰𝗲𝗯𝗼𝗼𝗸
𝗦𝗼𝘂𝗿𝗰𝗲 : https://krebsonsecurity.com/2024/09/scam-funeral-streaming-groups-thrive-on-facebook/

📧 𝗞𝗮𝘄𝗮𝘀𝗮𝗸𝗶 𝗠𝗼𝘁𝗼𝗿𝘀 𝗘𝘂𝗿𝗼𝗽𝗲 𝗰𝗶𝗯𝗹𝗲́𝗲 𝗽𝗮𝗿 𝘂𝗻𝗲 𝗰𝘆𝗯𝗲𝗿𝗮𝘁𝘁𝗮𝗾𝘂𝗲
𝗦𝗼𝘂𝗿𝗰𝗲 : https://www.cysecurity.news/2024/09/kawasaki-motors-europe-targeted-by.html

💻 𝗖𝗶𝗦𝗔 𝗲𝘁 𝗙𝗕𝗜 𝗽𝘂𝗯𝗹𝗶𝗲𝗻𝘁 𝘂𝗻𝗲 𝗮𝗹𝗲𝗿𝘁𝗲 𝗽𝗼𝘂𝗿 𝗲́𝗹𝗶𝗺𝗶𝗻𝗲𝗿 𝗹𝗲𝘀 𝘃𝘂𝗹𝗻𝗲́𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗲́𝘀 𝗫𝗦𝗦
𝗦𝗼𝘂𝗿𝗰𝗲 : https://www.cisa.gov/news-events/alerts/2024/09/17/cisa-and-fbi-release-secure-design-alert-eliminating-cross-site-scripting-vulnerabilities

📉 𝗣𝗼𝗹𝗶𝗰𝗲 𝗳𝗿𝗮𝗻𝗰𝗮𝗶𝘀𝗲 : 𝗶𝗻𝗰𝘂𝗹𝗽𝗮𝘁𝗶𝗼𝗻 𝗱𝘂 𝗰𝗿𝗲́𝗮𝘁𝗲𝘂𝗿 𝗱𝗲 𝗹’𝗮𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗰𝗿𝗶𝗺𝗶𝗻𝗲𝗹𝗹𝗲 𝗚𝗵𝗼𝘀𝘁
𝗦𝗼𝘂𝗿𝗰𝗲 : https://www.afp.gov.au/news-centre/media-release/afp-operation-kraken-charges-alleged-head-global-organised-crime-app

📞 𝗤𝘂𝗲𝘀𝘁𝗶𝗼𝗻𝘀 𝗼𝘂 𝘀𝘂𝗴𝗴𝗲𝘀𝘁𝗶𝗼𝗻𝘀 ? 𝗠𝗲𝘀𝘀𝗮𝗴𝗲 𝗮𝘂 𝟬𝟳 𝟲𝟴 𝟳𝟮 𝟮𝟬 𝟬𝟵 !

𝘗𝘰𝘥𝘤𝘢𝘴𝘵𝘥𝘪𝘴𝘱𝘰𝘯𝘪𝘣𝘭𝘦𝘴𝘶𝘳𝘈𝘱𝘱𝘭𝘦𝘗𝘰𝘥𝘤𝘢𝘴𝘵𝘴, 𝘋𝘦𝘦𝘻𝘦𝘳, 𝘚𝘱𝘰𝘵𝘪𝘧𝘺𝘦𝘵𝘈𝘮𝘢𝘻𝘰𝘯𝘔𝘶𝘴𝘪𝘤.