Watch

The Purpose (Burn Quaymix) Official Visualizer out now!

If you’re curious about the secrets of fulfilled creative living, then ask Lauren Spangler. As a creativity coach she helps artists bridge the gap between their boldest visions and their everyday reality. A painter, writer, and musician herself, as well as a wife and mom of two, Lauren’s mission is to empower artists to enjoy the creative freedom they crave without giving up their other roles and priorities. She has helped hundreds of professionals set and achieve their goals, and now she’s here to help you unblock your inner artist and take big steps toward your biggest dreams.

Take the free "Spark or Sputter?" Self-Assessment at www.laurenspangler.com/spark and connect with Lauren on Instagram at @laurenspangler.

Artifice

Ep. 195: Lauren Spangler


🎙️ RadioCSIRT #96 : Vos news quotidiennes Cybersécurité - Dimanche 17 novembre 2024
Au programme aujourd'hui :
💻 Malware distribué via des QR codes malveillants en Suisse
Une campagne utilisant de faux courriers contenant des QR codes infecte des appareils Android avec des logiciels malveillants, notamment une variante du cheval de Troie bancaire Coper.
Plus d'infos : https://www.theregister.com/2024/11/16/swiss_malware_qr/ (https://www.theregister.com/2024/11/16/swiss_malware_qr/)
💻 Telegram remplacé par Signal dans le gouvernement français
Suite à l'arrestation de Pavel Durov, fondateur de Telegram, le gouvernement français oriente ses communications vers Signal pour les échanges non sensibles, et vers Tchap ou Olvid pour les communications internes.
Plus d'infos : https://www.clubic.com/actualite-543821-telegram-out-signal-in-les-consequences-de-l-arrestation-de-pavel-durov-sur-la-facon-de-communiquer-du-gouvernement-francais.html (https://www.clubic.com/actualite-543821-telegram-out-signal-in-les-consequences-de-l-arrestation-de-pavel-durov-sur-la-facon-de-communiquer-du-gouvernement-francais.html)
💻 Faux générateurs vidéo IA diffusant des infostealers
Des sites frauduleux se faisant passer pour des outils IA infectent les systèmes Windows et macOS avec les malwares Lumma Stealer et AMOS, ciblant des données sensibles.
Plus d'infos : https://www.bleepingcomputer.com/news/security/fake-ai-video-generators-infect-windows-macos-with-infostealers/ (https://www.bleepingcomputer.com/news/security/fake-ai-video-generators-infect-windows-macos-with-infostealers/)
💻 Vulnérabilité critique dans les routeurs TP-Link (CVE-2024-11237)
Un débordement de tampon basé sur la pile dans les routeurs VN020 F3v(T) permet l’exécution de code arbitraire via des paquets DHCP DISCOVER malveillants. Aucun correctif n'est encore disponible.
Plus d'infos : https://gbhackers.com/tp-link-dhcp-vulnerability/ (https://gbhackers.com/tp-link-dhcp-vulnerability/)
Pour toute question ou suggestion, contactez-nous au 📞 07 68 72 20 09.
🎧 Écoutez RadioCSIRT sur Apple Podcasts, Deezer, Spotify, Soundcloud, YouTube, Amazon Music et sur notre site officiel https://www.radiocsirt.org (https://www.radiocsirt.org).


Hébergé par Ausha. Visitez ausha.co/fr/politique-de-confidentialite pour plus d'informations.

RadioCSIRT #96 - Vos news quotidienne Cybersécurité du 17 novembre 2024


🎙️ RadioCSIRT #97 : Vos news quotidiennes Cybersécurité - Lundi 18 novembre 2024
Au programme aujourd'hui :
💻 Les hackers ciblent les acheteurs du Black Friday
Des campagnes de phishing sophistiquées, des malwares et des techniques de typosquatting visent les acheteurs en ligne à l’approche du Black Friday.
Plus d'infos : https://gbhackers.com/hackers-attacking-black-friday-shoppers/ (https://gbhackers.com/hackers-attacking-black-friday-shoppers/)
💻 Vulnérabilité critique dans le plugin WordPress "Really Simple Security" (CVE-2024-10924)
Une faille dans l’API REST du plugin permet à des attaquants non authentifiés d'obtenir un accès administrateur. Des millions de sites sont potentiellement exposés.
Plus d'infos : https://www.bleepingcomputer.com/news/security/security-plugin-flaw-in-millions-of-wordpress-sites-gives-admin-access/ (https://www.bleepingcomputer.com/news/security/security-plugin-flaw-in-millions-of-wordpress-sites-gives-admin-access/)
💻 Phishing via des fichiers SVG
Des pièces jointes SVG sont utilisées pour contourner les outils de détection, distribuer des malwares ou héberger des formulaires de phishing sophistiqués.
Plus d'infos : https://www.bleepingcomputer.com/news/security/phishing-emails-increasingly-use-svg-attachments-to-evade-detection/ (https://www.bleepingcomputer.com/news/security/phishing-emails-increasingly-use-svg-attachments-to-evade-detection/)
💻 Exploitation active de la faille CVE-2024-10914 dans les NAS D-Link
Une vulnérabilité critique non corrigée dans des modèles D-Link en fin de vie permet une exécution de commandes à distance via des requêtes HTTP GET malveillantes.
Plus d'infos : https://securityaffairs.com/170995/iot/cve-2024-10914-d-link-nas-flaw-exploited.html (https://securityaffairs.com/170995/iot/cve-2024-10914-d-link-nas-flaw-exploited.html)
📞 Pour toute question ou suggestion, contactez-nous au : 07 68 72 20 09.
🎧 Écoutez RadioCSIRT sur :
Apple Podcasts, Deezer, Spotify, Soundcloud, YouTube, Amazon Music et sur notre site officiel https://www.radiocsirt.org (https://www.radiocsirt.org).


Hébergé par Ausha. Visitez ausha.co/fr/politique-de-confidentialite pour plus d'informations.

RadioCSIRT #97 - Vos news quotidienne Cybersécurité du 18 novembre 2024

Blurb for newsletter:
Tools and tips for life, love, sex and relationships on VITC this month with guest speaker Kavita Golia. We’ll be discussing how vulnerability has played its part in getting her to where she is in life and relationships. Kavita is an embodiment, breath, and psychedelic integration coach. Her mission is to help people to get out of their heads, come back to the wisdom of their bodies, and cultivate a deep connection with themselves. Kavita spent her 20's numbing herself with partying, an eating disorder, amongst other things. On her first yoga teacher training she was faced with the reality that she was completely disconnected from herself, the process and steps she took are now what she teaches and guides others through.

Vulnerability In The City w/  Kavita Golia - 14th November 2024


🎙 RadioCSIRT - Épisode #98 : Mardi 19 novembre 2024


📌 Découvrez les sujets d'aujourd'hui :


💻 Trois nouvelles vulnérabilités critiques ajoutées au catalogue de la CISA
La CISA met en lumière des failles exploitables dans Progress Kemp LoadMaster et Palo Alto PAN-OS.
Plus d’infos : https://www.cisa.gov/news-events/alerts/2024/11/18/cisa-adds-three-known-exploited-vulnerabilities-catalog (https://www.cisa.gov/news-events/alerts/2024/11/18/cisa-adds-three-known-exploited-vulnerabilities-catalog)
💻 250 000 $ perdus par une entreprise d’IA dans une attaque BEC
Une faille dans la sécurité des e-mails conduit à une perte importante pour iLearningEngines.
Plus d’infos : https://therecord.media/ai-company-loses-250000-in-bec-cyberattack (https://therecord.media/ai-company-loses-250000-in-bec-cyberattack)
💻 Vulnérabilité zero-day critique découverte dans GeoVision
Une faille d'injection de commande permet des attaques à distance sur des appareils non mis à jour.
Plus d’infos : https://gbhackers.com/geovision-0-day-vulnerability/ (https://gbhackers.com/geovision-0-day-vulnerability/)
💻 Spotify détourné pour promouvoir des logiciels piratés et des cheats de jeux
Les hackers exploitent la plateforme pour diffuser des liens vers des contenus douteux.
Plus d’infos : https://www.bleepingcomputer.com/news/security/spotify-abused-to-promote-pirated-software-and-game-cheats/ (https://www.bleepingcomputer.com/news/security/spotify-abused-to-promote-pirated-software-and-game-cheats/)
💻 Hackers chinois exploitent une vulnérabilité zero-day dans Fortinet VPN
Une faille dans FortiClient Windows permet de voler des identifiants d’accès.
Plus d’infos : https://www.bleepingcomputer.com/news/security/chinese-hackers-exploit-fortinet-vpn-zero-day-to-steal-credentials/ (https://www.bleepingcomputer.com/news/security/chinese-hackers-exploit-fortinet-vpn-zero-day-to-steal-credentials/)


📞 Des questions ou suggestions ? Contactez-nous sur la hotline RadioCSIRT au 07 68 72 20 09 !
📲 Écoutez RadioCSIRT dès maintenant sur vos plateformes préférées :
Apple Podcasts, Deezer, Spotify, Soundcloud, YouTube, Amazon Music, et sur notre site officiel : https://www.radiocsirt.org (https://www.radiocsirt.org)
🚀 Restez informés et sécurisez vos systèmes !


Hébergé par Ausha. Visitez ausha.co/fr/politique-de-confidentialite pour plus d'informations.

RadioCSIRT #98  - Vos news quotidienne Cybersécurité du 19 Novembre 2024

This episode is for anyone who feels like they’re silently carrying the weight of the world—brokenness, shame, or wounds you’ve never been able to share. You’re not alone, and you don’t have to carry it by yourself anymore.

Last weekend, the  @JPIIHealingCenter   hosted the first-ever Restored Men’s Healing Conference, and it was powerful. Men from all over the country (and even other countries!) showed up with open hearts, some for the very first time. These were men who had been silently suffering for years—dealing with wounds from abandonment, addiction, rejection, or just feeling like they’re not enough. Over the weekend, we watched God work in incredible ways as men opened up, shared their stories, and allowed Christ to step into those broken places. It was humbling and hopeful.

In this episode, Victor and I unpack some of the key takeaways from the conference and dive deep into the struggles many of us face but rarely talk about. We’ll cover why we feel like we need to hide our pain, how self-reliance is a trap, and most importantly, how God’s grace can reshape the broken parts of our lives.

Here’s the truth: Healing is possible. You can start today. You don’t have to have it all figured out; you just have to take one step forward. Let’s talk about how.

PS - Advanced giving with #igivecatholic on #givingtuesday is now LIVE 🚨

You can give today. Your support creates safe, transformative spaces for men in need. 👉 https://bit.ly/40TfJHs

___________________________________________________________________________

⏰ Timestamps:

00:00 – Intro: Welcoming everyone back to The Pew and a shoutout to attendees of the Restored Men’s Healing Conference.
03:15 – Silent Suffering: Why so many men carry hidden burdens and how the conference revealed the depth of that pain.
08:40 – The False Mask of Self-Reliance: How trying to handle everything on your own can lead to deeper wounds.
12:25 – Vulnerability as Strength: Breaking the myth that opening up makes you weak—it’s actually the key to healing.
16:05 – God the Potter: Exploring the biblical imagery of God reshaping us like clay and why it’s so relevant to our lives.
20:50 – Action Steps for Healing: From confession to community, practical ways to start finding freedom in Christ.
26:45 – A Story of Grace: Heartfelt moments from the conference where men experienced breakthrough and restoration.
33:10 – Final Thoughts: Why you’re never too far gone for God’s love and how to take the next step forward.
36:00 – Prayer: Wrapping up the episode with a prayer for healing and trust in God’s provision.

Silently Suffering


🎙 RadioCSIRT  #99 : Vos News quotidiennes Cybersécurité du  Mercredi 20 novembre 2024
📌 Découvrez les sujets d'aujourd'hui :
💻 Apple corrige deux vulnérabilités zero-day exploitées sur des Mac Intel, IOS...
Plus d’infos : https://www.bleepingcomputer.com/news/security/apple-fixes-two-zero-days-used-in-attacks-on-intel-based-macs/ (https://www.bleepingcomputer.com/news/security/apple-fixes-two-zero-days-used-in-attacks-on-intel-based-macs/)


💻 Un administrateur présumé du ransomware Phobos extradé vers les États-Unis
Plus d’infos : https://www.theregister.com/2024/11/19/suspected_phobos_admin/ (https://www.theregister.com/2024/11/19/suspected_phobos_admin/)


💻 Le botnet Ngioweb exploité pour alimenter un service de proxy résidentiel
Plus d’infos : https://thehackernews.com/2024/11/ngioweb-botnet-fuels-nsocks-residential.html (https://thehackernews.com/2024/11/ngioweb-botnet-fuels-nsocks-residential.html)


💻 Un câble sous-marin sectionné en mer Baltique : la Russie suspectée
Plus d’infos : https://www.zdnet.fr/actualites/un-cable-sous-marin-sectionne-en-mer-baltique-la-russie-soupconnee-401603.htm (https://www.zdnet.fr/actualites/un-cable-sous-marin-sectionne-en-mer-baltique-la-russie-soupconnee-401603.htm)


💻 Nouvelles vulnérabilités critiques dans Trend Micro, Palo Alto Networks et GLPI
Plus d’infos :
https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-1002/
https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-1001/
https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-0996/
💻 Un nouvel outil de craquage SMTP vendu sur des forums clandestins
Plus d’infos : https://www.cysecurity.news/2024/11/new-smtp-cracking-tool-for-2024-sold-on.html (https://www.cysecurity.news/2024/11/new-smtp-cracking-tool-for-2024-sold-on.html)
💻 Analyse binaire sous Linux : Reverse Engineering et découverte de vulnérabilités
Plus d’infos : https://www.linuxjournal.com/content/linux-binary-analysis-reverse-engineering-and-vulnerability-discovery (https://www.linuxjournal.com/content/linux-binary-analysis-reverse-engineering-and-vulnerability-discovery)


📞 Des questions ou suggestions ? Contactez-nous sur la hotline RadioCSIRT au 07 68 72 20 09 !


📲 Écoutez RadioCSIRT dès maintenant sur vos plateformes préférées :
Apple Podcasts, Deezer, Spotify, Soundcloud, YouTube, Amazon Music, et sur notre site officiel : https://www.radiocsirt.org (https://www.radiocsirt.org)


🚀 Restez informés et sécurisez vos systèmes !


Hébergé par Ausha. Visitez ausha.co/fr/politique-de-confidentialite pour plus d'informations.

RadioCSIRT #99 - Vos news quotidiennes Cybersécurité du 20 Novembre 2024

"Priyonti’s Silence" is the third installment in an emotional trilogy, capturing the deep complexities of love, loss, and longing. The song stems from a day of unspoken expectations and quiet heartbreak. It reflects the narrator’s hope for a connection that feels increasingly distant. With symbolic references to the boiling water that softens or hardens, the song explores how love and silence can simultaneously transform us, leaving the narrator both vulnerable and resilient. The bittersweet memory of naming her Priyonti underscores a painful realization—what once symbolized closeness now echoes with rejection.

The song was born from the raw emotions of unanswered messages, the realization of being restricted from her social space, and the silence on the eve of her birthday. Despite everything, the narrator’s yearning and warmth remain, making this song an ode to the lingering hope in the face of heartbreak.

Priyonti’s Silence

In this heartfelt remix of Rod Wave’s powerful original, BabyQuay pays tribute to the friends and family who have left us too soon. "Angels with a Passion" is a poignant reminder to honor their memory while finding strength to keep moving forward. Each lyric echoes the pain of loss, woven with hope and resilience, urging listeners to carry on in the face of adversity.
Dedicated to those we cherish—Rip, Metro, Jahaint, Swervo, Nick, Zack, Kenzie, Macklin, Deja, Wonda, Michael (dad), Brazy (Ira), Taylor, Polo, Tayja, Damien, Shylock, and everyone else who has touched our lives—this remix resonates with the spirit of perseverance and love. Join BabyQuay in celebrating the lives of those we've lost, as we transform our grief into motivation, remembering that their light continues to guide us.

Angels With A Passion (Hey, Deja!)

"Live It Up!" is a motivational anthem that’s all about embracing the struggles, staying resilient, and living life to the fullest. It’s a reminder to never give up, no matter how hard things get. The track channels that energy of pushing through tough times, turning challenges into fuel, and finding the positive in every setback. It’s about embracing the grind, pushing past adversity, and always looking forward to better days ahead.

This song is for anyone who’s ever felt like giving up but chooses to keep fighting. It’s a celebration of strength, resilience, and the power of perspective—understanding that every struggle is an opportunity to grow and live even harder. "Live It Up!" is your reminder that life is short, so make every moment count, and never stop striving for your best. Embrace the ups and downs, because it’s all part of the journey to greatness.

Live It Up!

Get It Started


🎙️ RadioCSIRT #100 : Vos news quotidiennes Cybersécurité - Jeudi 21 novembre 2024


Au programme aujourd'hui :

💻 Bluesky victime d'arnaques crypto après avoir atteint 20 millions d’utilisateurs
Les utilisateurs de la plateforme décentralisée sont ciblés par des attaques utilisant des faux tokens et des campagnes de phishing sophistiquées.
Plus d'infos : https://www.bleepingcomputer.com/news/security/now-bluesky-hit-with-crypto-scams-as-it-crosses-20-million-users/ (https://www.bleepingcomputer.com/news/security/now-bluesky-hit-with-crypto-scams-as-it-crosses-20-million-users/)
💻 Finastra enquête sur une potentielle violation de données
Un fournisseur tiers de la fintech Finastra est suspecté d’avoir exposé des informations sensibles, incluant des identifiants bancaires et des transactions.
Plus d'infos : https://krebsonsecurity.com/2024/11/fintech-giant-finastra-investigating-data-breach/ (https://krebsonsecurity.com/2024/11/fintech-giant-finastra-investigating-data-breach/)
💻 Ford confirme une fuite de données liée à un fournisseur tiers
Des informations clients et des détails confidentiels sur la chaîne d'approvisionnement ont été publiés sur un forum de ransomwares.
Plus d'infos : https://securityaffairs.com/171217/breaking-news/ford-admits-data-breach-linked-third-party-supplier.html (https://securityaffairs.com/171217/breaking-news/ford-admits-data-breach-linked-third-party-supplier.html)
💻 Faille de sécurité dans iOS (CVE-2024-12345)
Une vulnérabilité critique identifiée dans le système iOS d'Apple permet l’exécution de code à distance via des applications malveillantes. L'ANSSI recommande une mise à jour immédiate.
Plus d'infos : https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-1004/ (https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-1004/)
📞 Pour toute question ou suggestion, contactez-nous au : 07 68 72 20 09.
🎧 Écoutez RadioCSIRT sur :
Apple Podcasts, Deezer, Spotify, Soundcloud, YouTube, Amazon Music et sur notre site officiel https://www.radiocsirt.org (https://www.radiocsirt.org).


Hébergé par Ausha. Visitez ausha.co/fr/politique-de-confidentialite pour plus d'informations.

RadioCSIRT #100 - Vos News quotidiennes Cybersécurité du 21 Novembre 2024


🎙️ RadioCSIRT #101 : Vos news quotidiennes Cybersécurité - Vendredi 22 novembre 2024
Au programme aujourd'hui :
💻 L’USDA adopte l’authentification FIDO pour contrer le phishing
Le Département américain de l'Agriculture met en place une authentification sans mot de passe pour éliminer les attaques basées sur le vol de crédentiels.
Plus d'infos : https://www.cisa.gov/news-events/news/usda-stops-credential-phishing-fido-authentication (https://www.cisa.gov/news-events/news/usda-stops-credential-phishing-fido-authentication)
💻 Démantèlement de PopeyeTools, un marché noir de cartes de crédit volées
Les forces de l’ordre ferment une plateforme vendant des millions de données financières issues de skimming et d'attaques sur points de vente.
Plus d'infos : https://therecord.media/popeyetools-stolen-credit-cards-marketplace-takedown (https://therecord.media/popeyetools-stolen-credit-cards-marketplace-takedown)
💻 Meta désactive 2 millions de comptes liés aux arnaques “Pig Butchering”
Des escrocs utilisaient des faux profils pour manipuler des victimes dans des fraudes d’investissement en ligne.
Plus d'infos : https://therecord.media/meta-takedown-pig-butchering-2million-accounts (https://therecord.media/meta-takedown-pig-butchering-2million-accounts)
💻 Cinq membres du groupe Scattered Spider arrêtés
Les autorités américaines arrêtent des cybercriminels impliqués dans des attaques de SIM swapping et de spear-phishing visant des entreprises.
Plus d'infos : https://krebsonsecurity.com/2024/11/feds-charge-five-men-in-scattered-spider-roundup/ (https://krebsonsecurity.com/2024/11/feds-charge-five-men-in-scattered-spider-roundup/)
💻 Vulnérabilités critiques identifiées dans Drupal, Wireshark et PHP
Le CERT-FR alerte sur des failles dans des logiciels couramment utilisés, permettant des exécutions de code à distance et des compromissions de données.
Plus d'infos Drupal :https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-1009/
Plus d'infos Wireshark :https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-1008/
Plus d'infos PHP : https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-1007/ (https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-1007/)
💻 Arnaques au support technique via email "Sad Announcement"
Une nouvelle campagne de phishing utilise des messages émouvants pour rediriger les victimes vers des pop-ups d’alertes frauduleuses.
Plus d'infos : https://www.malwarebytes.com/blog/news/2024/11/sad-announcement-email-leads-to-tech-support-scam (https://www.malwarebytes.com/blog/news/2024/11/sad-announcement-email-leads-to-tech-support-scam)
📞 Pour toute question ou suggestion, contactez-nous au : 07 68 72 20 09.
🎧 Écoutez RadioCSIRT sur :
Apple Podcasts, Deezer, Spotify, Soundcloud, YouTube, Amazon Music et sur notre site officiel https://www.radiocsirt.org (https://www.radiocsirt.org).


Hébergé par Ausha. Visitez ausha.co/fr/politique-de-confidentialite pour plus d'informations.

RadioCSIRT #101 - Vos News quotidiennes Cybersécurité du 22 Novembre 2024

"Enough (ft. Quantum Lyricist)" is an alternative rock ballad that explores the raw and heart-wrenching experience of feeling unseen, unloved, and unworthy. It tells the story of someone who has gone 35 years without feeling the warmth of love’s embrace, reflecting on years of emotional isolation, longing, and the courage to persevere despite it all.

The song starts delicately, with haunting piano melodies and vocals steeped in vulnerability, building into powerful crescendos that convey the ache of hope and determination. With themes of resilience, self-worth, and the complexity of human connection, "Enough" delivers an emotional gut punch that lingers long after the final note.

This combines a cinematic soundscape with the grittiness of alternative rock, blending raw vocals, dramatic strings, and atmospheric elements to capture the depths of desolation and the strength found in survival.

Enough (ft. Quantum Lyricist)

"Can You Tell Me (Would You Still Love Me Today)" by Bruce W Nunnally is a touching exploration of love's enduring nature, nestled within his album "Love Songs and Other Thoughts." 

The song captures a tender vulnerability as it poses the question of whether love would persist if circumstances were to change. The lyrics invite listeners to reflect on the strength and depth of their own relationships, emphasizing the importance of reassurance and commitment. The melody complements the introspective theme, with its gentle rhythm and heartfelt delivery enhancing the emotional resonance of the words. 

Nunnally's ability to weave universal questions into his music makes this track relatable and poignant, offering a beautiful reminder of the timeless quest for love and assurance.

Lyrics
When we met, We fell in love
And we knew right from the start
If we met a-gain to-mor-row
would you love me just as hard

Chorus
Can you tell me
Would you love me still to-day
Would you know be-fore the morn-ing
That I was the One and Stay?

I have known you for so long
And I loved you from the start
If we met a-gain to-mor-row I would give you all my heart

Chorus

Do you know the way to tell
If our love was meant to be?
If we met a-gain to-mor-row 
Would you know You will love me?

Chorus
Solo
Chorus

Mandolin, Oboe, Guitar, Piano, Guitars

Love Songs & Other Thoughts

Can You Tell Me? (Bruce Vocals)

Can You Tell Me (Bruce Vocals)


🎙️ RadioCSIRT #102 : Vos news quotidiennes Cybersécurité - Samedi 23 novembre 2024
Au programme aujourd'hui :
💻 TAG-110 et leurs outils HATVIBE et CHERRYSPY
Des hackers russes exploitent des vulnérabilités pour déployer des malwares sophistiqués ciblant des organisations en Asie et en Europe.
Plus d'infos : https://thehackernews.com/2024/11/russian-hackers-deploy-hatvibe-and.html (https://thehackernews.com/2024/11/russian-hackers-deploy-hatvibe-and.html)
💻 Attaques Wi-Fi "Nearest Neighbor" par Fancy Bear
Des espions russes utilisent des réseaux Wi-Fi adjacents pour pénétrer les infrastructures des cibles.
Plus d'infos : https://arstechnica.com/security/2024/11/spies-hack-wi-fi-networks-in-far-off-land-to-launch-attack-on-target-next-door/ (https://arstechnica.com/security/2024/11/spies-hack-wi-fi-networks-in-far-off-land-to-launch-attack-on-target-next-door/)
💻 Microsoft appelle à des actions fermes contre les cyberattaques russes
Brad Smith, président de Microsoft, exhorte à une coopération internationale pour lutter contre les cybermenaces étatiques.
Plus d'infos : https://arstechnica.com/security/2024/11/microsoft-president-asks-trump-to-push-harder-against-russian-hacks/ (https://arstechnica.com/security/2024/11/microsoft-president-asks-trump-to-push-harder-against-russian-hacks/)
💻 Les gestionnaires de mots de passe intégrés, pratiques mais risqués
Les navigateurs comme Chrome ou Edge présentent des vulnérabilités dans leur stockage de mots de passe.
Plus d'infos : https://www.clubic.com/actualite-544694-les-gestionnaires-de-mots-de-passe-des-navigateurs-pratiques-mais-pas-fiables.html (https://www.clubic.com/actualite-544694-les-gestionnaires-de-mots-de-passe-des-navigateurs-pratiques-mais-pas-fiables.html)
💻 Top 25 des vulnérabilités logicielles les plus critiques pour 2024
La CISA dévoile une liste des failles logicielles les plus exploitées pour sensibiliser les développeurs et entreprises.
Plus d'infos : https://www.cisa.gov/news-events/alerts/2024/11/20/2024-cwe-top-25-most-dangerous-software-weaknesses (https://www.cisa.gov/news-events/alerts/2024/11/20/2024-cwe-top-25-most-dangerous-software-weaknesses)
📞 Pour toute question ou suggestion, contactez-nous au : 07 68 72 20 09.
🎧 Écoutez RadioCSIRT sur :
Apple Podcasts, Deezer, Spotify, Soundcloud, YouTube, Amazon Music et sur notre site officiel https://www.radiocsirt.org (https://www.radiocsirt.org).


Hébergé par Ausha. Visitez ausha.co/fr/politique-de-confidentialite pour plus d'informations.

RadioCSIRT #102 - Vos News quotidiennes Cybersécurité du 23 novembre 2024


🎙️ RadioCSIRT #103 : Vos news quotidiennes Cybersécurité - Dimanche 24 novembre 2024
Au programme aujourd'hui :
💻 Bilan de la CISA sur les infrastructures critiques
Retour sur une évaluation "red team" de la CISA simulant des cyberattaques ciblant une organisation du secteur des infrastructures critiques aux États-Unis.
Plus d'infos : https://www.cisa.gov/news-events/alerts/2024/11/21/cisa-releases-insights-red-team-assessment-us-critical-infrastructure-sector-organization (https://www.cisa.gov/news-events/alerts/2024/11/21/cisa-releases-insights-red-team-assessment-us-critical-infrastructure-sector-organization)
💻 Webinaire NIST sur la confidentialité et les compétences en cybersécurité
Le NIST explore l'évolution des compétences en matière de confidentialité au sein des équipes de sécurité et des politiques de gouvernance.
Plus d'infos : https://www.nist.gov/news-events/events/2025/01/nice-webinar-privacy-workforce-evolves-and-matures (https://www.nist.gov/news-events/events/2025/01/nice-webinar-privacy-workforce-evolves-and-matures)
💻 Failles des pare-feu Palo Alto Networks exploitées
Des vulnérabilités critiques exploitables permettent le contrôle des systèmes de sécurité des réseaux NGFW.
Plus d'infos : https://therecord.media/palo-alto-networks-firewall-vulnerabilities-exploited-patched (https://therecord.media/palo-alto-networks-firewall-vulnerabilities-exploited-patched)
💻 NIST : Une task force IA pour la sécurité nationale
Lancement d’une équipe dédiée à l’impact de l’IA sur les normes et la sécurité des systèmes nationaux.
Plus d'infos : https://www.defenseone.com/policy/2024/11/nist-sets-new-task-force-ai-and-national-security/401266/ (https://www.defenseone.com/policy/2024/11/nist-sets-new-task-force-ai-and-national-security/401266/)
💻 Abus du pilote Avast pour contourner les défenses
Des hackers utilisent un pilote anti-rootkit d’Avast pour désactiver des outils de sécurité.
Plus d'infos : https://www.bleepingcomputer.com/news/security/hackers-abuse-avast-anti-rootkit-driver-to-disable-defenses/ (https://www.bleepingcomputer.com/news/security/hackers-abuse-avast-anti-rootkit-driver-to-disable-defenses/)
💻 Recommandations de l'ANSSI sur les services DNS
L'ANSSI propose des solutions pour sécuriser les infrastructures DNS et limiter les risques associés.
Plus d'infos : https://cyber.gouv.fr/publications/recommandations-relatives-aux-architectures-des-services-dns (https://cyber.gouv.fr/publications/recommandations-relatives-aux-architectures-des-services-dns)
📞 Pour toute question ou suggestion, contactez-nous au : 07 68 72 20 09.
🎧 Écoutez RadioCSIRT sur :
Apple Podcasts, Deezer, Spotify, Soundcloud, YouTube, Amazon Music et sur notre site officiel https://www.radiocsirt.org (https://www.radiocsirt.org).


Hébergé par Ausha. Visitez ausha.co/fr/politique-de-confidentialite pour plus d'informations.

RadioCSIRT #103 - Vos News quotidiennes Cybersécurité du 24Novembre 2024


🎙️ RadioCSIRT #104 : Vos news quotidiennes Cybersécurité - Lundi 25 novembre 2024
Au programme aujourd'hui :
💻 Les pires mots de passe de 2024 révélés
Un bêtisier dévoile les combinaisons les plus vulnérables utilisées cette année, telles que "123456" et "password".
Plus d'infos : https://www.zdnet.fr/actualites/betisier-des-experts-en-cybersecurite-devoilent-les-pires-mots-de-passe-401818.htm (https://www.zdnet.fr/actualites/betisier-des-experts-en-cybersecurite-devoilent-les-pires-mots-de-passe-401818.htm)
💻 DEFCON : Une démonstration sur les systèmes IoT des stations d’eau
Un chercheur expose les vulnérabilités des systèmes SCADA, montrant comment altérer la qualité de l'eau potable.
Plus d'infos : https://www.theregister.com/2024/11/24/water_defcon_hacker/ (https://www.theregister.com/2024/11/24/water_defcon_hacker/)
💻 Vulnérabilités critiques dans needrestart
Des failles dans cet utilitaire Linux permettent une élévation des privilèges jusqu'à root, affectant des distributions populaires.
Plus d'infos : https://www.theregister.com/2024/11/21/qualys_needrestart_linux_vulnerabilities/ (https://www.theregister.com/2024/11/21/qualys_needrestart_linux_vulnerabilities/)
💻 Campagne d'influence GLASSBRIDGE exposée par Google
Une opération pro-chinoise exploite un réseau de faux médias relayant des contenus d'État.
Plus d'infos : https://thehackernews.com/2024/11/google-exposes-glassbridge-pro-china.html (https://thehackernews.com/2024/11/google-exposes-glassbridge-pro-china.html)
💻 Hackers nord-coréens et escroqueries LinkedIn pilotées par IA
Le groupe Sapphire Sleet vole 10 millions de dollars via des campagnes sophistiquées de social engineering.
Plus d'infos : https://thehackernews.com/2024/11/north-korean-hackers-steal-10m-with-ai.html (https://thehackernews.com/2024/11/north-korean-hackers-steal-10m-with-ai.html)
💻 Vulnérabilités dans les produits IBM
Des failles critiques touchent AIX, QRadar, WebSphere et d'autres solutions IBM, permettant exécution de code et attaques XSS.
Plus d'infos : https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-1015/ (https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-1015/)
💻 Vulnérabilité XSS dans Centreon Web
Une injection de code indirect permet à des attaquants d'exploiter des versions non corrigées du logiciel.
Plus d'infos : https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-1011/ (https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-1011/)
📞 Pour toute question ou suggestion, contactez-nous au : 07 68 72 20 09.
🎧 Écoutez RadioCSIRT sur :
Apple Podcasts, Deezer, Spotify, Soundcloud, YouTube, Amazon Music et sur notre site officiel https://www.radiocsirt.org (https://www.radiocsirt.org).


Hébergé par Ausha. Visitez ausha.co/fr/politique-de-confidentialite pour plus d'informations.

RadioCSIRT #104 - Vos News quotidiennes Cybersécurité du 25 novembre 2024

London’s community voice, broadcasting live from a converted shipping container atop of Netil Market

🌟 **Join Me on This Musical Journey!** 🌟  
Hey there, music lovers!
Specific note for now: This is like my journal right now. So it isn't a marketing thing for me. It's about healing.
Limited Time: Made most of my catalogue available for a bit so people can see my journey. All work is written, composed, mixed, and produced by me. Yes, I'm a singer. Lyrics are legally mine :) so before you judge, listen to the stories, they are mine, my memories. Thanks! More info below in bio. AI hate comments, and spam messages will be deleted.
🎶
I’m Quantum Lyricist, a storyteller at heart with a rich and eclectic background. I've been writing since at least 10 years old (found proof), if not earlier.
After thriving in the vibrant theatre and music scene of Korea, I’ve recently found my voice and am excited to share my journey with you.
This is just the beginning, and I don’t know where it will lead, but I hope it’s somewhere bright.
Each song, like 'Painful Dance' and 'Echoes of Existence,' is a chapter in my story, blending personal experiences with imaginative world-building.
I refuse to be confined to a single genre, inviting you to experience the diversity of my tracks.
I've been learning computer programming since I was 11, teaching myself HTML by looking at source code.
Recently, I rediscovered my affinity for working with different technologies.
Using my years of musical background and training, I sing and play instruments.
I started incorporating AI to help adapt my old writings from over 30 years of writing and to heal.
I can do the classic pen-to-paper writing of musical theory, but I face some challenges in the process due to my own issues.
I work with multiple AI systems, coding, my voice, multiple AI voices, SoundTrap mixing, and other tools, so it’s not all strictly AI.
If anything, AI gives me a base melody, which I then use my coding skills and musical knowledge to design the song.
It isn’t just a roll-of-the-dice situation for all the haters.
If you enjoy my music, please follow, like, and repost; it would mean the world to me.
Thank you for joining me on this journey.
Let's create something beautiful together.
🎵

As an artist, BabyQuay creates for the people and does it all for his father. His music is a reflection of the struggle, growth, and resilience that come with life’s challenges. Drawing inspiration from a variety of experiences—both personal and observational—he blends hard-hitting trap with raw emotion to speak on the realities of love, loss, and survival. BabyQuay's sound captures the intensity of the streets, the depth of relationships, and the internal battles we all face, offering a soundtrack for those navigating their own journeys.

With a mission to share his truth and elevate others along the way, BabyQuay remains focused on leaving a legacy that honors his roots and the lessons that shaped him. Every track is a piece of his story, created to inspire and connect with listeners who understand the grind.

EMAIL FOR ALL INQUIRIES
nolimitquayyy@outlook.com

Welcome to the pew. The place where everyday catholic guys, talk about everyday catholic things, in front of the one person that can do something about it. Jesus Christ

Great art almost feels like magic—it opens our minds to brand new ideas, and teaches us to see ourselves and our world more clearly. Of course, behind all great art, there are artists. And that’s where the real magic happens…

As we go beneath the art itself to explore how different artists do what they do, we see glimpses of the sorts of creativity, resilience, and bravery that lead to the art that moves our world. And maybe we can learn to borrow some of that magic for our very own thinking.

Join professional musician Emily Merrell for conversations with artists of all kinds. Together, we examine the mysteries of our own experiences, our muses and fears, our gifts and foibles, our beliefs about the origins of creativity, and the secret magic we’ve discovered in our unique creative processes. 

Mediums include: studio art, graphic design, dance, cooking, illustration, creative writing, storytelling, comedy, music composition, music performance, film making, acting, production, fashion design, photography, and more.

Visit https://emilymerrellmusic.com/artifice-podcast/  for more information.

- Theme Song "As You Are" by Emily Merrell @emilymerrellmusic
- Illustration and Graphic Design by Sarah Keele @sarahkeeleart
- Photography by Jen Palmer @jenpalmerphoto
- HMU by Shawna Turner @shawnaturnerdesigns

Bruce Nunnally, a talented Texas songwriter, captivates audiences with his thoughtful and sometimes humorous songs that delve into the intricacies of life, love, and truth. His music resonates with listeners, offering a blend of insightful storytelling and catchy melodies that reflect both personal and universal experiences. By following Bruce, you'll be the first to receive updates on his latest compositions, performances, and insights into his creative process. Whether you're a long-time fan or new to his music, Bruce's work promises to entertain and inspire.

New tracks tagged #Vulnerability