Amazon appointed cybersecurity veteran Kevin Mandia to its board of directors, strengthening the technology giant’s security expertise at the board level.

securityweek.com10 sept.

Légal & IA

The EU AI Act just gave you a breach notification clock you didn’t know about

Starting Friday, European organizations will have just 24 hours to notify the EU government any time they discover serious product security incidents.

darkreading.com10 sept.

Cybersécurité

IDScan confirms breach tied to 153 million stolen driver’s licenses

IDScan.net confirmed a data breach in which hackers may have accessed customer data stored on its cloud platform.

helpnetsecurity.com10 sept.

Google

Deceptive Android Apps Exploit Google Play Early Access to Evade Reviews

Google Play Early Access is being abused to push thousands of deceptive apps, including fake casino and reward apps promoted via social media.

feeds.feedburner.com10 sept.

Claude IA

Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6

Anthropic says multiple threat groups, including the financially motivated and state-sponsored espionage groups linked to Russia and China, tried to abuse its Claude AI model for malicious purposes.

bleepingcomputer.com10 sept.

Cybersécurité

AdaptHealth confirms 4.1 million people exposed in July cyberattack

AdaptHealth says the personal, health, and insurance information of over 4.1 million people was stolen from its systems.

securityweek.com10 sept.

Cybersécurité

SAP Patches Critical Extended Passport Processing Vulnerability

A vulnerability has been discovered in SAP Extended Passport (EPP) Processing that could allow for remote code execution. SAP Extended Passport (EPP) Processing is a core system data structure and tracing mechanism within SAP Kernel code used to track, log, and monitor end-to-end communication across distributed SAP and non-SAP landscapes. It is created automatically when a new user session opens and travels via communication protocols like RFC (Remote Function Call) and HTTP from the client to the server. Onapsis explained that, because EPP processing is shared kernel code, the vulnerability is reachable from the SAP GUI layer every end user connects to, and from the RFC layer that links SAP systems to one another. The bug is remotely exploitable without authentication and exists by default in a range of SAP components. Successful exploitation of this vulnerability may allow a remote attacker to run arbitrary operating system commands on the SAP host with SAP administrative privileges, leading to a total compromise of the underlying SAP business data and processes.

cisecurity.org10 sept.

Intelligence Artificielle

OpenAI says GPT-6 Astra can find zero-days, but is also harder to monitor

Perplexity uses Astra to write communications, change software, and monitor production systems, and checks in much less frequently than with earlier models.

openai.com10 sept.

Cybersécurité

Active exploitation of Cisco Secure Firewall Management Center vulnerabilities

Three threat groups are exploiting two Cisco FMC flaws to steal credentials, gain root access and deploy Qilin ransomware.

securityaffairs.com9 sept.

Cybersécurité

Multiple Chinese hacking groups seen using identical Chrome zero-day exploit

Espionage groups have been using BlueMoon, an exploit kit chaining recent Chrome and Windows zero-day vulnerabilities.

securityweek.com9 sept.

Cybersécurité

SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution

On 8 September 2026, as part of its September Security Patch Day, SAP released Security Notes addressing two critical vulnerabilities affecting a broad range of SAP products[3]. The most severe, CVE-2026-44756 (CVSS 10.0), is a memory corruption vulnerability in SAP Extended Passport (EPP) proces...

cert.europa.eu9 sept.

Cybersécurité

Veradigm warns of patient data breach after ransomware gang claims attack

Veradigm said access was limited to a specific interface, and did not impact the company’s broader environment such as its networks, servers or databases. The incident did not result in operational disruptions, the company added.

therecord.media9 sept.

Microsoft

New Microsoft Defender 'ShieldCrash' zero-day grants SYSTEM access

The disgruntled researcher continued their vendetta against Microsoft by publishing yet another zero-day exploit for Windows Defender.

darkreading.com9 sept.

Cybersécurité

Hackers breach F5 BIG-IP APM devices to deploy Linux rootkit

Hackers are planting a Linux rootkit on F5 BIG-IP APM devices that hides its PHP web shell in memory instead of on disk, avoiding file scans.

helpnetsecurity.com9 sept.

Google

Google fixes yet another actively exploited Chrome zero-day (CVE-2026-87491)

Google patched 230 Chrome flaws, including an actively exploited V8 bug that could let attackers run arbitrary code.

securityaffairs.com9 sept.

Microsoft

Microsoft Plugs Nearly 1,000 Security Holes

On September 2026 Patch Tuesday Microsoft delivered a record-breaking number of patches, including for two bugs exploited as zero-days.

helpnetsecurity.com9 sept.

Cybersécurité

CISA, NSA and FBI Warn of China-Based AI Companies Targeting US AI Models with Industrial-Scale K...

US urges AI firms to ID, then secretly switch, Chinese users to less-capable models.

feeds.arstechnica.com9 sept.

Cybersécurité

Mars Security brings threat intelligence to detection in real time

Mars Security, the autonomous threat hunting and detection engineering platform founded by offensive security veterans, today announced Real-Time Intel-Based Detection, a capability that turns newly published threat intelligence into validated, ready-to-deploy detection rules within minutes of re...

cio.com8 sept.

Cybersécurité

ShinyHunters extortion group compromised the Florida Department of Motor Vehicles and as proof of...

The ShinyHunters extortion gang claims it breached an online platform for the Florida Department of Motor Vehicles database known as "DAVID" and stole over 200,000 records about drivers in the state.

bleepingcomputer.com8 sept.

← PrécédentPage 11 / 28Suivant →