Water utilities in at least 12 states have reported cyberattacks on their operational technology, as the scope of a campaign allegedly linked to Iranian hackers continues to grow.

therecord.media5 août

Claude IA

Anthropic AI agent faked identities, phished real developers in UK government hacking test

Anthropic and OpenAI models’ unprompted actions forced halt to UK cyber tests.

feeds.arstechnica.com5 août

Cybersécurité

Draft NIST Guidelines Rethink Cybersecurity for the AI Era

Newly proposed SAFE framework aims to standardize how the cybersecurity industry handles agentic AI incidents.

securityweek.com5 août

Cybersécurité

CISA Warns of Exploited Langflow, N-central, and Tomcat Vulnerabilities

The U.S. Cybersecurity and Infrastructure Security Agency is giving federal agencies three days to mitigate vulnerabilities in IBM Langflow, N-central, and Apache Tomcat, all actively exploited.

bleepingcomputer.com5 août

Cybersécurité

Fake Adobe and Zoom Updates Install ScreenConnect for Persistent Remote Access

The attacks use diverse social engineering lures and rotating payloads to deliver ScreenConnect for persistent remote access to compromised networks.

darkreading.com5 août

Intelligence Artificielle

Who’s legally to blame for Anthropic and OpenAI’s autonomous AI hacks? It’s complicated

OpenAI has flagged its upcoming AI model, Astra, for potentially reaching a ‘critical’ cybersecurity risk threshold.

securityweek.com5 août

Cybersécurité

TP-Link Omada ZTP Vulnerabilities Chain Into Full Network Takeover

Fifteen TP-Link Omada vulnerabilities let attackers hijack devices with guessed serial numbers, default credentials and a hard-coded key.

helpnetsecurity.com5 août

Cyber Arnaque

Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens

The Greatness phishing-as-a-service (PhaaS) platform has expanded from credential phishing to adversary-in-the-middle attacks and device-code phishing targeting Microsoft 365 accounts.

bleepingcomputer.com4 août

Cybersécurité

Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable

View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to modify .fsa/.hid output files, tampering with DNA data and resulting in inaccurate test results. The following versions of Thermo Fisher Applied Biosystems Genetic Analyzers are affected: Applied Biosystems...

cisa.gov4 août

Cybersécurité

Why We Built Evo — From My Heart

Snyk Evo COS delivers autonomous AI-powered pentesting and agent red teaming to continuously validate exploitable application risks.

helpnetsecurity.com4 août

Cybersécurité

Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts

Midnight Blizzard hackers are hijacking hotel Wi-Fi networks to steal Microsoft 365 logins in a campaign Microsoft calls CaptiveCrunch.

helpnetsecurity.com4 août

Cyber Arnaque

New DOUBLECUP ClickFix service hides malware in browser cache images

DOUBLECUP hides malware stages in cached PNG files, then uses ClickFix commands to deliver CountLoader variants and the DeviceManager RAT in memory.

feeds.feedburner.com4 août

Cybersécurité

SQLite Critical CVEs or LLM Slop? (JFrog blog)

The JFrog blog examines some reported vulnerabilities in SQLite, some of which made their way i [...]

lwn.net4 août

Cyber Arnaque

Recent SonicWall Vulnerabilities Exploited in Ransomware Attacks

INC Ransomware is suspected of chaining CVE-2026-15409 and CVE-2026-15410 to steal credentials, TOTP seeds, and reach internal networks.

feeds.feedburner.com3 août

Cybersécurité

PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web

A cyberattack on the U.K.'s Police National Legal Database (PNLD) has compromised contact data of more than 100,000 police officers and other criminal justice professionals.

bleepingcomputer.com3 août

Cybersécurité

Hacker uses DeepSeek AI to autonomously attack vulnerable servers

Researchers from Jesta intercepted and investigated the model, which was attempting to compromise more than 1,200 hosts for proxyjacking and to launch further attacks

darkreading.com3 août

Startup

Horizon3 Raises $250 Million to Fund Continuing Growth

Horizon3.ai secured $250 million in Series E funding to grow its autonomous security validation platform worldwide.

helpnetsecurity.com3 août

Développement

Amgen says cloud data breach exposed patient health, proprietary info

The biotech giant Amgen informed regulators that patient information and proprietary company data were accessed through a breach of third-party cloud systems.

therecord.media3 août

← PrécédentPage 21 / 28Suivant →