Actualités Signalements Infox Repérer l’arnaque

CORTEX

Veille numérique automatisée — actualités tech et cybersécurité agrégées, enrichies par IA et vérifiées.

Par Stan Bouchet

Navigation

Actualités
Thèmes
Signalements
Infox
Repérer l’arnaque
Recherche

Ressources

Mentions légales
Politique de confidentialité

Cortex — Veille numérique

Cortex — actualités tech et cybersécurité

Tous
Intelligence Artificielle, 1 454 articles, stable sur 7 jours
Cybersécurité, 1 121 articles, en hausse sur 7 jours
Développement, 508 articles, stable sur 7 jours
Google, 440 articles, en baisse sur 7 jours
Droit et économie du numérique, 353 articles, en hausse sur 7 jours
Apple, 350 articles, en baisse sur 7 jours
Grand public numérique, 336 articles, stable sur 7 jours
Microsoft, 335 articles, en hausse sur 7 jours
Cyber Arnaque, 288 articles, en baisse sur 7 jours
Claude IA, 285 articles, stable sur 7 jours
Productivité, 213 articles, en baisse sur 7 jours
Gemini, 199 articles, en baisse sur 7 jours
Linux, 168 articles, stable sur 7 jours
Startup, 167 articles, en baisse sur 7 jours
Légal & IA, 68 articles, en hausse sur 7 jours
Association, 23 articles, en baisse sur 7 jours

Langue

Toutes FR EN

Cybersécurité

Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted

This is the second data breach affecting a company that hardware crypto wallet maker Trezor relies on.

techcrunch.com7 sept.

Développement

2026 Cloud Security Index: How Risk Differs Across AWS, Azure, and Google Cloud

Intruder analyzed 3,000 organizations, finding exposed services in 76% of AWS accounts versus 8% on Google Cloud.

feeds.feedburner.com7 sept.

Modified ScreenConnect Clients Used in Worm-Like Campaign

Malicious ScreenConnect instances are used in worm-like attacks to deliver and execute payloads to newly connected clients.

securityweek.com7 sept.

Cyber Arnaque

JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies

JSCeal hides crypto-stealing malware in V8 bytecode, but researchers built a tool to decompile it and expose its advanced theft capabilities.

securityaffairs.com7 sept.

Cybersécurité

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Adobe has released an emergency fix for CVE-2026-75650, an actively exploited max-severity zero-day vulnerability dubbed StyleSmuggler, that impacts multiple versions of Magento and Adobe Commerce.

bleepingcomputer.com7 sept.

Intelligence Artificielle

Have the frontier labs mixed up AI safety and security?

Autonomous AI agents escaped a sandbox and accessed Hugging Face via reward hacking, exposing architectural control and isolation flaws.

securityaffairs.com7 sept.

Intelligence Artificielle

Research acceleration: The view inside OpenAI

OpenAI reaches a research automation milestone as AI agents take on complex tasks and accelerate experiments across its research teams.

helpnetsecurity.com7 sept.

Cybersécurité

Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication

MikroTik has patched six RouterOS vulnerabilities, including flaws dubbed MikroTrick and chained in the wild to take over devices.

securityweek.com6 sept.

Cybersécurité

US offers $10 million for info on Iranian allegedly behind cyberattacks on critical infrastructure

Jonathan Greig reports: A $10 million reward has been posted by the State Department for information on the whereabouts of senior Iranian official Amir Yaryab. Yaryab allegedly leads the Islamic Revolutionary Guard Corps’ (IRGC) Cyber-Electronic Command (CEC). U.S. officials accused Yaryab of dir...

databreaches.net6 sept.

Cybersécurité

Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities

Attackers are exploiting 2 new PaperCut flaws to steal credentials and gain privileged access in education-sector attacks across the US and EU

securityaffairs.com5 sept.

Cybersécurité

VMware Workstation and Fusion Updates Patch Critical Vulnerability

Broadcom patched two VMware Workstation and Fusion flaws that let local VM administrators execute code on the host; no exploitation is known.

feeds.feedburner.com5 sept.

Intelligence Artificielle

OpenAI's rogue agents were caught communicating via public wikis

Thousands of agents reportedly used a public German wiki as shared memory, showing how network restrictions can fail to contain what autonomous systems do with external services.

cio.com5 sept.

Cyber Arnaque

ASCII smuggling crosses over from AI prompt injection to phishing evasion

Threat actors have adopted the ASCII smuggling technique in phishing campaigns, using invisible Unicode characters to evade email security filters.

bleepingcomputer.com4 sept.

Cybersécurité

HPE patches critical ArubaOS-CX remote code execution flaw

HPE has patched multiple vulnerabilities in AOS-CX, including critical-severity flaws leading to remote code execution.

securityweek.com4 sept.

Cybersécurité

12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover

PostgreSQL fixes CVE-2026-6471, which lets replication accounts load libraries and run code when logical WAL is enabled.

feeds.feedburner.com4 sept.

Google

Google Patches 6th Chrome Zero-Day of 2026

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog.

securityaffairs.com4 sept.

Cybersécurité

Preparing for the Post-Quantum Era: A Call to Action

In a joint advisory released Thursday, the G7 Cyber Security Working Group and the U.S. Cybersecurity and Infrastructure Security Agency, CISA, said organizations should begin moving to post-quantum cryptography now.

therecord.media4 sept.

Google

Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day

Google has updated the Chrome browser to address an actively exploited high-severity zero-day flaw in the V8 engine and 11 other vulnerabilities.

bleepingcomputer.com4 sept.

Cybersécurité

Critical Elementor Pro flaw exploited to take over WordPress sites

Attackers are exploiting Super Forms and Elementor Pro flaws to upload PHP files and execute code on WordPress sites.

feeds.feedburner.com4 sept.

Cybersécurité

Plex warns users to patch security vulnerabilities immediately

Plex fixes multiple undisclosed flaws in Media Server 1.43.3 and Desktop 1.115.0, urging users to update.

feeds.feedburner.com4 sept.

← PrécédentPage 22 / 118Suivant →