Cortex — actualités tech et cybersécurité

feeds.feedburner.com16 sept.

Hackers target WordPress sites via third-party WooCommerce plugin

Attackers are exploiting CVE-2026-27540 in WooCommerce Wholesale Lead Capture to upload PHP web shells and gain remote code execution.

China Calls Amodei’s AI Proposal a New Cold War Playbook

Calls by technology leaders to slow AI’s development raise questions about their ability and willingness to control the technology, according to Aya Ibrahim, Senior Economic and National Security Fellow at the AI Now Institute.

ainowinstitute.org16 sept.

Apple

Apple Reference Image: A New Approach for Verified Photography

Introducing Apple Reference Image, a new solution for verifiable photography on iPhone. This new, opt-in camera mode lets a photographer create a securely timestamped reference image that accurately depicts what was captured by the iPhone's camera sensor. Apple Reference Image offers a trustworthy, scalable guarantee that a reference image is what it claims to be: a real photograph, captured by a real sensor in an iPhone camera, at a specific period in time.

lobste.rs16 sept.

Google

Webinar: How malicious OAuth apps can lead to Google Workspace breaches

Google Workspace security must evolve as OAuth attacks and AI agents create new paths to sensitive data, accounts, and connected apps.

helpnetsecurity.com16 sept.

Cyber Arnaque

The extension you never installed: KREMLIN forges Chrome's own integrity checks to steal banking ...

A banking malware operation active since mid-2025 has been using a toolkit named KREMLIN to install malicious Chrome and Edge extensions that steal credentials, session tokens, and sensitive data.

bleepingcomputer.com15 sept.

CISA and NIST Release Guidelines to Protect Federal Cloud Identity Systems from Token Theft, Forg...

NIST and CISA finalize cloud token security guidance to help organizations protect access tokens from forgery, theft, and misuse.

For the first time, the US military confirms it has deployed weapons in orbit

This is the first public acknowledgment that the U.S. military put a space weapon in Earth's orbit.

techcrunch.com15 sept.

Exein Secures $270M at $1.7B Valuation for Physical AI Security

IoT cybersecurity startup Exein has raised $270 million at a $1.7 billion valuation to accelerate its global expansion.

securityweek.com15 sept.

Cyber Arnaque

BambooToken Malware Uses MQTT to Control Windows and Linux Systems

Lumen exposes BambooToken, a stealthy 2023-era malware family using MQTT and sideloading to quietly infect targets across Asia and beyond.

Electric and gas utility CenterPoint Energy warns of data breach after dark web post

CenterPoint Energy confirmed a data breach after a hacker claimed to have stolen 7.49 million customer records.

LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server

Critical LiteSpeed Enterprise flaw lets one shared hosting account gain root, bypassing CageFS; patch now to 6.3.7 via forced update.

Productivité

Devil’s advocate? Uncensored Luciferus AI service advertised underground

An uncensored AI service called Luciferus is being sold as a subscription on a hacking forum, capable of generating malware, Sophos found.

feeds.feedburner.com15 sept.

Hackers target exposed Vite dev servers to steal AWS, Azure secrets

Attackers exploit a Vite flaw in exposed dev servers to extract cloud credentials, configuration files, and infrastructure state.

China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE

Two China-linked groups ran identical Chrome/Windows zero-day exploits against NGOs, deploying different backdoors each.

Members of ‘Black Axe’ cybercriminal group extradited from South Africa

Jonathan Greig reports: Five alleged members of the Black Axe cybercriminal organization will make their first court appearance on Monday after being extradited from South Africa. Prosecutors unsealed a 2021 indictment accusing the five men of conducting lucrative romance scams that stole thousan...

databreaches.net15 sept.

Microsoft

Microsoft says ‘people matter more than AI’ following safety concerns

Microsoft publishes "Humanist AI" Code of Conduct covering offensive cyber capabilities, chain of command, and agentic AI guardrails.

securityweek.com15 sept.

Développement

Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports

A Telegram Desktop flaw lets bots inject JavaScript into exported chats, enabling data theft and page manipulation.

Japan's Digital Agency says VPN flaw exposed 246,000 personnel records

Hackers exploited a VPN security flaw and stole the personal information of roughly 240,000 people from Japan’s Digital Agency.

securityweek.com15 sept.

Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation

Cisco warns of a critical zero-day in Secure Email Gateway, exploited in the wild to gain root access through malicious emails.

Homebrew 7.0.0 gets built-in GUI, better security controls

Homebrew 7.0.0 security work closes eight advisories, including a cask flaw that reached sudo, and adds a built-in brew vulns scanner.