French authorities detained an 18-year-old suspected member of the ZeroBytes hacking group over cyberattacks against the country's tax authority and other organizations.

therecord.media8 sept.

Cyber Arnaque

Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks

Threat actors are leveraging Microsoft's Graph API to identify lucrative targets, then passing their access to extortion groups like ShinyHunters.

darkreading.com8 sept.

Cybersécurité

Hackers drain $320M in Bitcoin from Liquid Network, claim they’re the good guys

Crypto exchange network Liquid Network lost $320M overnight, then got most of it back after the hackers demanded a bug fix instead of a ransom

securityaffairs.com7 sept.

Cybersécurité

Mathspace discloses data breach affecting over 1 million people

Mathspace says hackers stole the personal information of over 1 million individuals from a self-hosted Metabase instance.

securityweek.com7 sept.

Cybersécurité

Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted

This is the second data breach affecting a company that hardware crypto wallet maker Trezor relies on.

techcrunch.com7 sept.

Cyber Arnaque

JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies

JSCeal hides crypto-stealing malware in V8 bytecode, but researchers built a tool to decompile it and expose its advanced theft capabilities.

securityaffairs.com7 sept.

Cybersécurité

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Adobe has released an emergency fix for CVE-2026-75650, an actively exploited max-severity zero-day vulnerability dubbed StyleSmuggler, that impacts multiple versions of Magento and Adobe Commerce.

bleepingcomputer.com7 sept.

Cybersécurité

Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication

MikroTik has patched six RouterOS vulnerabilities, including flaws dubbed MikroTrick and chained in the wild to take over devices.

securityweek.com6 sept.

Cybersécurité

US offers $10 million for info on Iranian allegedly behind cyberattacks on critical infrastructure

Jonathan Greig reports: A $10 million reward has been posted by the State Department for information on the whereabouts of senior Iranian official Amir Yaryab. Yaryab allegedly leads the Islamic Revolutionary Guard Corps’ (IRGC) Cyber-Electronic Command (CEC). U.S. officials accused Yaryab of dir...

databreaches.net6 sept.

Cybersécurité

Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities

Attackers are exploiting 2 new PaperCut flaws to steal credentials and gain privileged access in education-sector attacks across the US and EU

securityaffairs.com5 sept.

Cybersécurité

VMware Workstation and Fusion Updates Patch Critical Vulnerability

Broadcom patched two VMware Workstation and Fusion flaws that let local VM administrators execute code on the host; no exploitation is known.

feeds.feedburner.com5 sept.

Intelligence Artificielle

OpenAI's rogue agents were caught communicating via public wikis

Thousands of agents reportedly used a public German wiki as shared memory, showing how network restrictions can fail to contain what autonomous systems do with external services.

cio.com5 sept.

Cyber Arnaque

ASCII smuggling crosses over from AI prompt injection to phishing evasion

Threat actors have adopted the ASCII smuggling technique in phishing campaigns, using invisible Unicode characters to evade email security filters.

bleepingcomputer.com4 sept.

Cybersécurité

HPE patches critical ArubaOS-CX remote code execution flaw

HPE has patched multiple vulnerabilities in AOS-CX, including critical-severity flaws leading to remote code execution.

securityweek.com4 sept.

Cybersécurité

12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover

PostgreSQL fixes CVE-2026-6471, which lets replication accounts load libraries and run code when logical WAL is enabled.

feeds.feedburner.com4 sept.

Google

Google Patches 6th Chrome Zero-Day of 2026

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog.

securityaffairs.com4 sept.

Cybersécurité

Preparing for the Post-Quantum Era: A Call to Action

In a joint advisory released Thursday, the G7 Cyber Security Working Group and the U.S. Cybersecurity and Infrastructure Security Agency, CISA, said organizations should begin moving to post-quantum cryptography now.

therecord.media4 sept.

Google

Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day

Google has updated the Chrome browser to address an actively exploited high-severity zero-day flaw in the V8 engine and 11 other vulnerabilities.

bleepingcomputer.com4 sept.

Cybersécurité

Critical Elementor Pro flaw exploited to take over WordPress sites

Attackers are exploiting Super Forms and Elementor Pro flaws to upload PHP files and execute code on WordPress sites.

feeds.feedburner.com4 sept.

← PrécédentPage 12 / 28Suivant →