Episode 0x182 (Hebdo) - 5 juin 2021

La French Connection

5 juin 2021

Shamelessplug

• iHack 19 juin
• Formation cybersécurité aux entreprises - Séminaire de Sherbrooke - Réussi!
• FIC 2021 (7, 8 & 9 septembre)
• 15 au 19 novembre, Hack in Paris
• Hackfest Shop
• Join Hackfest/La French Connection Discord
• Hackfest à 12 ans, mais 13e édition! :)

Shownotes and Links

1. JACQUES - Des milliers de serveurs VMware vCenter vulnérables et exposés publiquement
2. STEVE - 20210527 - Re-Checking Your Pulse: Updates on Chinese APT Actors Compromising Pulse Secure VPN Devices
3. STEVE - 20210531 - Faulty emailing tool prevented Accellion from notifying customers of attacks
4. STEVE - 20210530 - The SolarWinds hackers aren’t back—they never went away
5. RICHER - Il pirate cinq téléphones et une Tesla
6. JACQUES - On sait maintenant que la compagnie d’assurance CNA a payé $40M de dollars aux pirates qui ont attaqué leur réseau:
   • https://grahamcluley.com/cyber-insurance-giant-cna-paid-out-40-million-to-its-ransomware-attackers/
   • https://www.bloomberg.com/news/articles/2021-05-20/cna-financial-paid-40-million-in-ransom-after-march-cyberattack
7. STEVE - 20210603 - Chinese cybercriminals spent three years creating a new backdoor to spy on governments
   • https://www.zdnet.com/article/chinese-cybercriminals-spent-three-years-creating-a-new-backdoor-to-spy-on-governments/
   • https://research.checkpoint.com/2021/chinese-apt-group-targets-southeast-asian-government-with-previously-unknown-backdoor/
8. RICHER - TeamTNT targets Kubernetes instances - nearly 50k ip compromised
9. STEVE - 2010604 - SIM swapping victim alleges T-Mobile failed to stop $20,000 cryptocurrency scam
10. STEVE - 20210602 - Huawei officially replaces Android with HarmonyOS, which is also Android
11. STEVE - 20210604 - Hackers Breached Colonial Pipeline Using Compromised Password
12. STEVE - 20200603 - TikTok just gave itself permission to collect biometric data on US users, including ‘faceprints and voiceprints’
13. JACQUES - Un récent sondage démontre que la sécurité d’applications n’est pas une préoccupation majeure pour les grosses institutions financières:
14. STEVE - 20210529 - Amazon Sidewalk - Amazon devices will soon automatically share your Internet with neighbors - En fonction 8 juin 2021
15. STEVE - Amazon’s Sidewalk Network Is Turned On by Default. Here’s How to Turn It Off

Crew

• Steve Waterhouse
• Jacques Sauvé
• Richer Dinelle

Crédits

• Montage audio par Hackfest Communication
• Music RAZ - Recorded Dreams - In The Beginning
• Locaux virtuels par 8x8

Chapitres

1. Intro (00:00:00)

2. Les nouvelles et opinions (00:00:17)

3. Outro (01:05:00)