Attackers can exploit a security bug in NVIDIA's tool to gain unauthenticated access to the local model server through the Ollama API, paving the way for persistent AI agent corruption.

darkreading.com26 août

Linux

Linux Foundation to Govern TRACE, an Open Standard for AI Runtime Attestation

Linux Foundation takes on TRACE, a hardware-backed evidence layer from OPAQUE, AMD, Intel and Microsoft for verifying AI agent behavior.

helpnetsecurity.com26 août

Cybersécurité

24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages

Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect visitors to attacker-controlled websites.

bleepingcomputer.com25 août

Grand public numérique

Police arrests dozens of suspects in global cybercrime crackdown

Arnaques sentimentales, faux placements en crypto, sextorsion de mineurs...Interpol vient de porter un coup majeur aux réseaux criminels ouest-africains. Baptisée « Operation Jackal IV », cette offensive a débouché sur l'identification de 263 suspects et 58 arrestations du Nigeria à la Roumanie, en passant par l'Argentine et l'Afrique du Sud.

01net.com25 août

Cybersécurité

A Tale of Two SOCs: Insights From Two Red Team Assessments

Same tactics, very different results. This advisory compares defensive outcomes from two red team assessments. Learn what drove detection and implement key actions to protect your organization from cyber threats.

lobste.rs25 août

Cyber Arnaque

Cybercriminals Turn GTA VI Leaks Into Malware Bait

Grand Theft Auto fans, eager for news about one of the most anticipated video games of all time, appear especially vulnerable to this new cyberattack.

techcrunch.com25 août

Intelligence Artificielle

OpenAI says its Jalapeño chip can power faster AI responses than the competition

OpenAI still isn’t giving up Nvidia chips, though.

theverge.com25 août

Uber Fined Nearly $1 Billion by Dutch Regulators Over Automated Suspensions of Driver Accounts

Uber faces an €825M GDPR fine for automatically suspending drivers without human review, highlighting the risks of AI decisions.

securityaffairs.com25 août

Cybersécurité

Large DDoS attack knocks Norwegian public services offline

Digdir Cyberattack: Pro-Russian hacker group claimed responsibility for a cyberattack against multiple Norwegian government digital services.

securityweek.com25 août

Grand public numérique

WhatsApp Adds Multiple Passkeys and Stronger 2SV in Account Security Update

WhatsApp added new security enhancements, including stronger two-step verification and more information about calls from unknown numbers.

helpnetsecurity.com25 août

Cyber Arnaque

Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning

WeedHack's C2 infrastructure is down but over 10 fake Minecraft client sites still spread the infostealer.

securityaffairs.com25 août

Intelligence Artificielle

Alabama launches investigation into OpenAI’s hack of Hugging Face

The state is investigating whether OpenAI’s ‘inability or unwillingness to ensure the safety of its products’ endangers citizens.

theverge.com25 août

Cybersécurité

Hackers target WordPress sites in miniOrange auth bypass attacks

Two miniOrange SAML WordPress plugin auth bypasses were exploited while paid editions never appeared in any vulnerability database.

securityaffairs.com25 août

Cybersécurité

CISA Warns of Exploited Oracle WebLogic Vulnerability

Threat actors have been exploiting CVE-2026-21962, a critical Oracle HTTP Server and WebLogic vulnerability patched in January.

securityweek.com25 août

Claude IA

Anthropic’s best AI model struggles to attract users as cheaper tools thrive

Enterprises appear to be prioritizing cheaper AI tools instead.

cio.com25 août

Cyber Arnaque

WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords

ClickFix-style threat campaigns are using a new trick to evade detection and deliver Amatera, an increasingly prevalent infostealer.

darkreading.com25 août

Cybersécurité

Rethinking Application Security for the AI Era

This review provides a baseline of the vulnerability landscape before AI-enabled vulnerability discovery becomes widespread to help organizations fix preventable software flaws, close exposure gaps and strengthen resilience against real-world cyber threats.

cisa.gov24 août

Cybersécurité

91 Spring CVEs: The AI Vulnerability Consumption Problem

Spring updates patch 91 vulnerabilities, bringing the total count to over 200 in 2026, a surge powered by Broadcom’s use of AI.

securityweek.com24 août

Cybersécurité

Private equity firm Apollo confirms data breach amid hacking wave targeting financial giants

Eduard Kovacs reports: Private equity giant Apollo Global Management has disclosed a data breach that exposed sensitive personal information. According to a data breach notice sent to affected individuals, a social engineering attack enabled threat actors to access some of the company’s cloud pla...

databreaches.net24 août

← PrécédentPage 28 / 118Suivant →