slh @slh@infosec.exchange

En avril 2018, des hackers sont parvenus à s'infiltrer et voler des données sur le réseau du Jet Propulsion Laboratory de la NASA, via un Raspberry Pi, qui n'était pas autorisé à y être connecté.

https://www.clubic.com/nasa/actualite-861088-hackers-accedent-systemes-nasa-raspberry-pi.html

Le forum du #darknet "French Deep Web-Market" a été saisi par les autorités françaises et 3 hommes ont été mis en examen.
Ce forum permettait de mettre en relation près de « 6000 utilisateurs et 750 vendeurs de drogues, d’armes, de faux papiers, de coordonnées bancaires et d’outils de piratage informatique ».
Crédit image : compte Twitter @x0rz
Article : http://leparisien.fr/amp/faits-divers/darknet-francais-trois-hommes-soupconnes-d-animer-une-importante-plateforme-mis-en-examen-17-06-2019-8094825.php

Kippo is a medium interaction SSH #honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker.
Kippo is inspired, but not based on Kojoney.
https://www.kitploit.com/2019/06/kippo-ssh-honeypot.html

PasteHunter: Scanning pastebin with yara rules
https://securityonline.info/pastehunter-scanning-pastebin-yara-rules/

Scapy-sploit: Python Network Tool is Vulnerable to Denial of Service (DoS) Attack CVE pending
https://www.imperva.com/blog/scapy-sploit-python-network-tool-is-vulnerable-to-denial-of-service-dos-attack-cve-pending/

#Google released the first bilingual #AI #assistant, while assistants like Amazon’s Alexa and Apple’s Siri can understand various languages but can only process one at a time.
https://www.technologyreview.com/f/611976/google-released-the-first-bilingual-ai-assistant/

Piraté, Radiohead rend public 18 heures d’enregistrement de l’album OK Computer.
C'est l'histoire du pirate arrosé. Un petit malin, qui s’était emparé de 18 heures d’enregistrements d’un album de Radiohead dans l’espoir d’obtenir une rançon, a été piégé par le groupe.
https://www.journaldugeek.com/2019/06/16/pirate-radiohead-rend-public-18-heures-denregistrement-de-lalbum-ok-computer/

US powers up attacks against Russia's electrical grid

Aggressive moves by Cyber Command to implant malware are both a warning and an effort to enable crippling attacks if necessary, says The New York Times.

https://www.cnet.com/news/us-cyber-command-powers-up-attacks-against-russias-electrical-grid/

Critical Bug in Medical Infusion Pumps lets Attacker Remotely install Unauthorized Firmware to Change Medication Dosages.
https://www.hackread.com/vulnerable-infusion-pumps-remotely-accessed-to-change-dosages/

#Security #bug would have allowed hackers access to #Google's internal network.
A young Czech bug hunter has found a security flaw in one of Google's backend apps. If exploited by a malicious threat actor, the bug could have allowed hackers a way to steal Google employee cookies for internal apps and hijack accounts, launch extremely convincing spear-phishing attempts, and potentially gain access to other parts of Google's internal network.
https://www.zdnet.com/article/security-bug-would-have-allowed-hackers-access-to-googles-internal-network/

#humor #apple calculating the price of the new #iphone

Does #Alexa illegally record children? #Amazon sued for allegedly storing conversations without consent

Amazon’s Alexa is the target of a pair of lawsuits that allege the voice assistant violates laws in nine states by illegally storing recordings of children on devices such as the Echo or Echo Dot. It’s the latest development in an ongoing debate around Alexa and privacy.

https://www.geekwire.com/2019/alexa-illegally-record-children-amazon-sued-allegedly-storing-conversations-without-consent/

Adobe Shows Off First Research for Tools to Detect Manipulated Photos

Photoshop has long been one of the primary sources of manipulated photos and imagery, so in an attempt to counter the fake news epidemic, Adobe has also started developing tools that can both detect when an image has been manipulated, and reverse the changes to reveal the original.

https://gizmodo.com/adobe-shows-off-first-research-for-tools-to-detect-mani-1835516127

Google lance une plateforme pour créer des jeux vidéo sans coder.
Area 120, l’incubateur de Google, vient de lancer Game Builder. Il s’agit d’un jeu vidéo pour créer des jeux vidéo (et sans saisir de code).
https://www.presse-citron.net/google-lance-une-plateforme-pour-creer-des-jeux-video-sans-coder/

220 euros suffisent pour financer une campagne de désinformation sur internet (730 tweets et 100 commentaires).
Jigsaw, une filiale d’Alphabet, a recruté un prestataire russe pour mener une attaque de trolls contre un site web politique factice. Le but de cette expérience, controversée, était de prouver qu’il est facile de financer une campagne de désinformation sur internet.
https://www.presse-citron.net/220-euros-suffisent-pour-financer-une-campagne-de-desinformation-sur-internet/

DDoS attack that knocked Telegram secure messaging service offline

An attack which targeted users of the Telegram app on Wednesday might be linked to protests in Hong Kong that turned violent.

https://www.tripwire.com/state-of-security/featured/ddos-attack-telegram-offline-hong-kong-protests/

Critical Flaw Reported in Popular Evernote Extension for Chrome Users
https://thehackernews.com/2019/06/evernote-extension-hacking.html