Cybersécurité

Kimsuky Integrates AI into Attack Operations, From AI-Generated Decoy Documents to a Local LLM

Kimsuky runs Ollama, GPT4All, and Msty offline while testing RAG and collecting AI libraries that could support phishing, malware, and data analysis.

feeds.feedburner.com10 août

Hackers breach TrueConf to trojanize client installers with backdoors

Head Mare exploits two TrueConf flaws to gain SYSTEM privileges and replace client installers with PhantomCore malware across Russian companies.

feeds.feedburner.com10 août

What the Canvas breach tells us about the state of education security

Alcino Donadel reports: …. Instructure, the edtech company behind learning management system Canvas, suffered one of the largest data breaches in the U.S. this year after cybercriminals gained access through a third-party vendor—an increasingly common occurrence in higher ed. Higher education’s m...

databreaches.net9 août

Military device manufacturer discloses cyber incident to SEC

IEH was breached by a phishing attack that exposed its Microsoft 365 inbox, including emails and potentially export-controlled military data.

securityaffairs.com9 août

Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers

The RovoBlast attack method abused a vulnerability in Atlassian’s Rovo AI to steal sensitive Confluence, Jira and SharePoint data.

securityweek.com8 août

CSS: The Hidden Threat Lurking in Your Inbox

CSS attacks on major webmail services can steal credentials, hijack sessions and manipulate AI tools connected to users’ inboxes.

securityaffairs.com8 août

Metabase SQLi zero-day exploited in customer data-theft attacks

The maximum-severity vulnerability, which still has no CVE, allows malicious, remote administrator access to the business-analytics platform and its downstream users.

darkreading.com8 août

3.8 Million Impacted by Unlimited Technology Systems Data Breach

Hackers stole personal, medical, and insurance data of 3.8 million people from Unlimited Technology Systems' data center.

securityaffairs.com7 août

Cyberattack on North Carolina Ports ‘contained’ as Coast Guard, state officials investigate

The North Carolina Ports Authority has confirmed that a cyberattack disrupted IT systems and slowed operations at Port of Wilmington, Port of Morehead City, and Charlotte Inland Port.

bleepingcomputer.com7 août

Apple Fixes Screen Sharing Vulnerability in Tahoe, Sequoia, and Sonoma

Apple has released updates to macOS 26.6.1, 15.7.9, and 14.8.9 to fix a Screen Sharing vulnerability that could let an attacker “on the network” connect without valid credentials. Update soon.

tidbits.com7 août

UNC6671 Rebrands: Multi-Brand Vishing Extortion Targets Financial Services and Enterprise Cloud E...

The UNC6671 vishing extortion group has rebranded from BlackFile and is operating as Redact, Pink, Helix, and Falcon.

securityweek.com6 août

Swiss IT agency hacked, 200 accounts compromised, SharePoint vulns suspected

200 Swiss government accounts were compromised after hackers exploited Microsoft SharePoint vulnerabilities at federal IT office BIT.

helpnetsecurity.com6 août

Three in four AI-generated vulnerability patches leave something broken

A study of more than 6,000 patches found that even working patches can introduce new bugs, break something else, or are open to bypass.

darkreading.com6 août

New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch

Le composant noyau d'Open vSwitch, un logiciel réseau très répandu sur les serveurs Linux, contient la faille OVSwrap (CVE-2026-64531). Un compte utilisateur ordinaire, sans droit particulier, obtient par cette faille les privilèges root. Un correctif est disponible depuis le 24 juillet, mais toutes les distributions ne l'ont pas encore intégré.

clubic.com6 août

Hackers run khunt post-exploitation toolkit from Oracle database

Attackers compile khunt inside Oracle after a web SQL injection, reach Windows SYSTEM, and stage credential data and registry hives locally.

feeds.feedburner.com6 août

An AI model from Meta also hacked another company during testing

In the span of three weeks, OpenAI, Anthropic, and Meta have all disclosed AI agent sandbox escape events affecting real organizations.

darkreading.com6 août

Ransom Cartel ransomware creator sentenced to 16 years in prison

old.reddit.com6 août