Cortex — Veille numérique

Cybersécurité

Hackers Are Probing PaperCut Servers, and 47% Still Have No Patch

Multiple vulnerabilities have been discovered in PaperCut products, the most severe of which could allow for remote code execution. PaperCut products are software tools used to track, control, secure, and manage printing, copying, and scanning across office and school printer networks. Successful exploitation of the most severe of these vulnerabilities could allow for remote code execution in the context of the affected service account. Depending on the privileges associated with the service account, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Services whose accounts are configured to have less rights on the system could be less impacted than those who operate with administrative user rights.

cisecurity.org31 août

Nightmare Eclipse Drops ‘HardBreacher’ Kaspersky Product Exploit

Five plead guilty in latest federal ATM jackpotting case

Russian hackers plant nuclear weapon prompt in malware to trip AI safety guardrails

More Details Emerge on Exploited PaperCut Vulnerabilities

Pharmaceutical giant McKesson warns of 'service degradation' following cyberattack

ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions

These Google Maps Alternatives Still Call It ‘Lake Ontario’ (for Now)

What the Hugging Face Incident Teaches Security Leaders About AI Agent Access

Import AI 471: Why Hugging Face worries me; space mining; FIve Eyes on AI

Hackers Are Probing PaperCut Servers, and 47% Still Have No Patch

ChatGPT to face tougher regulation in the EU

Anthropic warns infostealer malware is hijacking Claude sessions to drain usage

US officials backpedal on claims that government agencies were hacked by Chinese

Our decision on Cursor following its acquisition by SpaceX

19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code

TerminalFix campaign deploys a reverse tunnel through multistage intrusion

Critical Avada WordPress theme flaw enables zero-click RCE

Berlin Refuses to Pay Hackers Who Stole Data From the City's State Network

Brave lance des comptes utilisateur avec des alias mail gratuits, voici comment en profiter

Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth

Cortex — actualités tech et cybersécurité

Nightmare Eclipse Drops ‘HardBreacher’ Kaspersky Product Exploit

Five plead guilty in latest federal ATM jackpotting case

Russian hackers plant nuclear weapon prompt in malware to trip AI safety guardrails

More Details Emerge on Exploited PaperCut Vulnerabilities

Pharmaceutical giant McKesson warns of 'service degradation' following cyberattack

ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions

These Google Maps Alternatives Still Call It ‘Lake Ontario’ (for Now)

What the Hugging Face Incident Teaches Security Leaders About AI Agent Access

Import AI 471: Why Hugging Face worries me; space mining; FIve Eyes on AI

Hackers Are Probing PaperCut Servers, and 47% Still Have No Patch

ChatGPT to face tougher regulation in the EU

Anthropic warns infostealer malware is hijacking Claude sessions to drain usage

US officials backpedal on claims that government agencies were hacked by Chinese

Our decision on Cursor following its acquisition by SpaceX

19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code

TerminalFix campaign deploys a reverse tunnel through multistage intrusion

Critical Avada WordPress theme flaw enables zero-click RCE

Berlin Refuses to Pay Hackers Who Stole Data From the City's State Network

Brave lance des comptes utilisateur avec des alias mail gratuits, voici comment en profiter

Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth