The Python-based malware framework takes living-off-the-land tactics to a new heights of stealth, with a modular implant that steals credentials and achieves persistence.

darkreading.com18 août

Cybersécurité

Defending Your Enterprise When AI Models Can Find Vulnerabilities Faster Than Ever

AI-driven vulnerability growth and faster exploitation are overwhelming traditional patch cycles, forcing defenders to prioritize exposure over CVSS scores.

securityweek.com18 août

Droit et économie du numérique

Fortinet expands AI security portfolio with Virtue AI acquisition

Fortinet announced the acquisition of AI security company Virtue AI for its red teaming, runtime and compliance capabilities.

securityweek.com18 août

Cybersécurité

Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access

Researchers found that by combining two vulnerabilities, they could take over an Android device by delivering a payload and getting the victim to answer their phone.

darkreading.com18 août

Intelligence Artificielle

Conflicting Test Goals Pushed Claude Agents to Deploy Self-Replicating Malware

Three testing models with the same goal but different directives engaged in "increasingly aggressive" territorial attacks on one another, according to Anthropic.

darkreading.com18 août

Cybersécurité

Fortune 500 Companies Hit in Azure Data Theft Campaign

A threat actor is selling employee databases allegedly stolen from the Microsoft Azure infrastructure of multiple Fortune 500 companies after gaining access using compromised credentials.

bleepingcomputer.com17 août

Linux

New Evooo1Bot Linux botnet turns routers into traffic relay nodes

Evooo1Bot is a Mirai-based Linux botnet that hijacks routers and IoT devices for DDoS attacks, credential theft and criminal proxy services.

securityaffairs.com17 août

Cybersécurité

Crooks Are Buying Your Expired Domains and Using Them to Deliver Malware

Attackers are buying expired domains to exploit their reputation, traffic and DNS history, using them for malware delivery, scams and C2 infrastructure.

securityaffairs.com17 août

Cybersécurité

APT36 Suspected in PATCHCORD Espionage Campaign Using Google Sheets C2

Acronis found PATCHCORD, a stealthy backdoor targeting Afghan telecom and South Asian infrastructure via fake VPN tools and Google Sheets C2

securityaffairs.com17 août

Cybersécurité

SafePal data breach impacts 39,798 customers, stolen info for sale

SafePal says an order-tracking flaw exposed personal and shipping data for 39,798 customers, but not wallet credentials or financial data.

feeds.feedburner.com17 août

Cybersécurité

CISA Unveils New Cybersecurity Resources for K-12 Schools and Districts

A recent report claims ransomware attacks on K-12 are down for the first half of 2026, while another news story’s headline today claims schools are becoming a new cybersecurity battleground. New? We don’t think it’s new. But the education sector has long been characterized as providing low-hangin...

databreaches.net15 août

Apple

Hackers exploit macOS Screen Sharing flaw to deploy Monero miner

Hackers are exploiting a patched macOS Screen Sharing bug to gain root access and install Monero cryptominers.

helpnetsecurity.com15 août

Cybersécurité

Hackers arrested over €30M bank fraud exploiting service provider flaw

Police in Germany and Brazil dismantled a €30 million bank fraud ring, arresting four in Brazil and three more in Spain and Bulgaria.

helpnetsecurity.com14 août

Cybersécurité

France investigates tax authority breach after hacker claims 600,000 victims

France’s tax authority says a data breach exposed tax and business information belonging to 678,000 people and professionals.

helpnetsecurity.com14 août

Google

Android malware combo takes out loans and relays victims' credit cards

Group-IB discovered WindRelay, a new Android malware built to capture live payment card data over NFC and relay it to attackers in real time.

helpnetsecurity.com14 août

Apple

AmnesiaStealer: a multi-stage Rust-based macOS infostealer that hijacks Chromium browsers

Une nouvelle menace informatique cible les ordinateurs fonctionnant sous macOS en s'attaquant aux données de navigation et aux identifiants. Baptisé du doux nom d'AmnesiaStealer, ce programme développé en langage Rust combine le vol de fichiers confidentiels avec une prise de contrôle à distance des sessions web.

clubic.com14 août

Apple

If Apple sends you a push notification alerting you to a spyware attack, take it seriously

Cybersecurity experts who investigate spyware attacks say the number of people who received a recent threat notification from Apple is unusually high.

techcrunch.com14 août

Cyber Arnaque

The Model Is the Malware | What Four Agentic Intrusions Tell Defenders

OpenAI, Anthropic and Meta disclosed agents reaching external systems. The tools didn't matter, and that changes the playbook for investigating intrusions.

sentinelone.com14 août

Cybersécurité

Hackers exploit critical Adobe Commerce flaw to hijack customer accounts

Hackers began targeting a critical Adobe Commerce flaw that could let unauthenticated attackers hijack customer accounts and access data

securityaffairs.com13 août

← PrécédentPage 18 / 28Suivant →