Microsoft a averti ses utilisateurs que des pirates informatiques ciblent les processus de réinitialisation de mots de passe pour accéder à des comptes. Cette activité est attribuée au groupe Storm-2949.
Microsoft a émis cet avertissement concernant des tentatives en cours visant à exploiter les réinitialisations de mots de passe pour obtenir un accès non autorisé. Les pirates impliqués mènent, selon l'entreprise, une campagne méthodique, sophistiquée et multicouche sous le nom de Storm-2949.
Rapporté par l'IA Image générée par IA
Hackers exploited Meta's AI support chatbot to take over Instagram accounts by tricking it into changing associated email addresses. The vulnerability allowed password resets without two-factor authentication after matching locations via VPN. Meta resolved the issue with an emergency patch on May 29.
Seventy-three Microsoft open source packages were compromised late last week with malware that steals credentials from cloud services and developer tools. The malicious code activates when opened in AI coding agents.
Rapporté par l'IA
Security specialists have raised alarms over the vulnerability of online accounts, stating that almost half of all passwords in use today can be broken within minutes.
The US State Department is offering a reward of up to $10 million for information on two Russian state-linked cyber groups behind a phishing campaign targeting Signal and WhatsApp accounts. The operation has compromised thousands of accounts since at least March.
Rapporté par l'IA
Security researcher Alexander Hagenah has released an updated tool called TotalRecall Reloaded that reveals weaknesses in Microsoft Windows 11's Recall feature. Despite Microsoft's security overhauls, the tool can intercept user data after Windows Hello authentication without needing administrator privileges. Microsoft maintains that this does not represent a vulnerability.