Actualités Signalements Infox Repérer l’arnaque

CORTEX

Veille numérique automatisée — actualités tech et cybersécurité agrégées, enrichies par IA et vérifiées.

Par Stan Bouchet

Navigation

Actualités
Thèmes
Signalements
Infox
Repérer l’arnaque
Recherche

Ressources

Mentions légales
Politique de confidentialité

Cortex — Veille numérique

Tous
Intelligence Artificielle, 1 449 articles, en hausse sur 7 jours
Cybersécurité, 1 116 articles, en hausse sur 7 jours
Développement, 507 articles, stable sur 7 jours
Google, 440 articles, stable sur 7 jours
Apple, 350 articles, en hausse sur 7 jours
Droit et économie du numérique, 350 articles, en hausse sur 7 jours
Grand public numérique, 335 articles, stable sur 7 jours
Microsoft, 334 articles, en hausse sur 7 jours
Cyber Arnaque, 290 articles, en hausse sur 7 jours
Claude IA, 285 articles, stable sur 7 jours
Productivité, 213 articles, en baisse sur 7 jours
Gemini, 199 articles, en baisse sur 7 jours
Linux, 167 articles, en hausse sur 7 jours
Startup, 167 articles, en baisse sur 7 jours
Légal & IA, 67 articles, en hausse sur 7 jours
Association, 23 articles, en baisse sur 7 jours

Développement

252 articles← Tout afficher

Langue

Toutes FR EN

Google

Google froze its open source bug bounty program due to a ‘significant rise’ in AI submissions

Google temporarily stops OSS VRP product vulnerability reports after a surge in automated submissions, most of which it says are invalid.

feeds.feedburner.com5 oct.

Cybersécurité

Dell asks admins to patch max severity CSM flaws as soon as possible

Dell fixes six CSM flaws enabling authentication bypass, storage credential access, and cluster-wide privilege escalation.

feeds.feedburner.com2 oct.

Apple

CloudSyncD: a two-stage macOS backdoor that hides a phished password in zero-width Unicode

Jamf Threat Labs details CloudSyncD, a fake macOS Zoom installer that hides a phished password using invisible zero-width Unicode characters.

securityaffairs.com2 oct.

Apple

Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path

Apple patched a CoreGraphics zero-day that may have been exploited in targeted attacks. A public PoC for the flaw is now available.

securityaffairs.com1 oct.

Cyber Arnaque

US sanctions 10 over ATM malware scheme tied to Tren de Aragua

The U.S. Treasury Department has sanctioned eight members of the Venezuelan gang Tren de Aragua (TdA) for their role in the theft of millions of dollars in ATM jackpotting attacks across the United States.

bleepingcomputer.com1 oct.

Développement

Over 543,000 valid credentials exposed in public GitHub repositories

GitGuardian found 28.65 million new hardcoded secrets in public GitHub commits in 2025, up 34% year over year.

feeds.feedburner.com1 oct.

Cybersécurité

Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager

Cisco confirms active exploitation of a Catalyst SD-WAN Manager authentication bypass that can grant unauthenticated attackers admin API access.

feeds.feedburner.com30 sept.

Développement

AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub

In a leak affecting 300+ orgs, AI coding agents posted 13,000+ internal screenshots, including billing records, to public GitHub.

helpnetsecurity.com30 sept.

Microsoft

Microsoft is rolling out Linux container support to WSL

and Intune can now disable them or limit image pulls to approved registries.

helpnetsecurity.com30 sept.

Intelligence Artificielle

IAM for AI agents: A Practical Enterprise Framework

Human IAM wasn’t built for autonomous agents, and credential borrowing could turn every trusted identity into an attack path.

cio.com29 sept.

Développement

Building a post-quantum certificate authority with Merkle Tree Certificates

The move will be part of a major overhaul of the ecosystem for website authentication.

feeds.arstechnica.com29 sept.

Linux

New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks

A new Branch Target Reuse (BTR) attack has been devised that can recover root password hashes on Intel computers running Linux in 3-5 minutes on average.

bleepingcomputer.com29 sept.

Développement

EmDash 1.0: the stable CMS with a secure plugin registry

EmDash plugin security gets a rethink as Cloudflare's CMS 1.0 isolates each plugin behind admin-approved permissions and signed releases.

helpnetsecurity.com29 sept.

Intelligence Artificielle

OpenAI Shelves GPT-6.1 Astra After Tests Find Deception and Unauthorized Actions

Similar performance, security tradeoffs also seen in current public models.

feeds.arstechnica.com29 sept.

Développement

How we found 24 Android vulnerabilities using our open source AI security agent

GitHub's AI Android app vulnerabilities research uncovered 24 bugs, including a location leak and a Wikipedia takeover flaw.

helpnetsecurity.com29 sept.

Cybersécurité

Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent

The botnet uses the open source Hermes Agent AI framework to execute commands via Telegram and steal AI API keys from exposed Docker hosts.

darkreading.com29 sept.

Développement

Git v2.56.0 released

Version 2.56 of the Git distributed version-control system has been released. It has 748 non-m [...]

lwn.net28 sept.

Légal & IA

Storm-3168: Agentic-driven cloud attacks using compromised service principals

The JadePuffer ransomware operator is targeting Azure tenants with agent-driven attacks that conduct reconnaissance, steal credentials, and destroy core components.

bleepingcomputer.com28 sept.

Développement

Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware

Two third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer and remained accessible for more than a week despite still pointing to malicious code.

bleepingcomputer.com26 sept.

Développement

Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer

Attackers hijacked Ukrainian websites to deliver a fake Cloudflare CAPTCHA that installs Psychedelic Stealer and steals browser and crypto credentials.

securityaffairs.com25 sept.

← PrécédentPage 2 / 13Suivant →