U.S. Treasury sanctions Iran-linked cyber actors under Operation Economic Outcast, targeting MOIS-linked hackers tied to U.S. infrastructure breaches.

feeds.feedburner.com24 août

Droit et économie du numérique

TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit

The U.S. Department of Justice announced a $400 million settlement with TikTok, ByteDance, and affiliated companies over allegations that they violated the Children's Online Privacy Protection Act (COPPA).

bleepingcomputer.com24 août

Aug. 23 - FEATURES EDITION | How an Emerging Industrial Protocol Family Could Put OT at Risk

html PUBLIC "-//W3C//DTD XHTML 1. 0 Transitional//EN" "http://www

Dark Reading23 août

Cybersécurité

🏴‍☠️ Shinyhunters has just published a new victim : ReliaQuest, LLC

ReliaQuest confirms a breach attempt after an employee handed over a password, while disputing ShinyHunters' claim of deeper access.

helpnetsecurity.com23 août

Cyber Arnaque

Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet

Threat actors behind a notorious click-fraud botnet have set their sights on vehicle infotainment modules and are abusing legitimate functionality to spread infections.

darkreading.com22 août

Développement

NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands

A critical flaw (CVSS 9.4) in NASA/JPL's AIT-GUI let anyone send unauthenticated commands to spacecraft instruments.

securityaffairs.com22 août

Cybersécurité

ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device Fraud

ThreatFabric, Acronis, and Zimperium detail new activity from the Manic, Grandoreiro, and ToxicPanda 2.0 banking trojans.

securityweek.com22 août

Cybersécurité

🏴‍☠️ Silentransomgroup has just published a new victim : Troutman Pepper Locke

In April, Silent Ransom Group’s (SRG)* leak site listed 38 law firms that had not paid them and whose data was leaked. By June 29, there were 48 law firms. Now there are 64, and, in somewhat surprising claims, SRG says a recent attack was actually its second on one law firm, and they will... Source

databreaches.net21 août

Intelligence Artificielle

OpenAI’s Fotis Chantzis on why identity protocols weren’t designed for agents

AI agents don’t fit neatly into human or machine identities, so security teams need governance that can adapt as agents act.

cio.com21 août

Cybersécurité

SickKids data breach exposes employee and job applicant info

The Hospital for Sick Children — which was hit in a ransomware incident in 2022 that disabled some of its systems — released a statement on Thursday warning of a data theft incident they believe is tied to a third-party software application.

therecord.media21 août

Cybersécurité

Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts

Google tracks 3 Russian-linked espionage clusters using legitimate authentication tools to target researchers, diplomats and defense staff.

securityaffairs.com21 août

Cybersécurité

Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE

A critical type confusion vulnerability in the isolated-vm library can lead to V8 sandbox escape and remote code execution on the host.

securityweek.com21 août

Claude IA

Anthropic eyes $2T+ IPO 💰, Slack Code 👨‍💻, end of open source 💻

TLDR21 août

Microsoft

Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution

Microsoft has patched a critical remote code execution vulnerability (CVE-2026-69836) in Entra ID, reportedly exploited in the wild.

helpnetsecurity.com21 août

Cyber Arnaque

Cl0p Ransomware Group Names Over 40 Victims of PTC Windchill Campaign

Cl0p claims over 40 organizations fell victim to attacks exploiting a PTC Windchill and FlexPLM vulnerability.

securityaffairs.com21 août

Microsoft

Microsoft named a Leader in the Frost Radar™: Cloud Workload Protection Platforms, 2026

Falcon Cloud Security earned the highest scores in both Innovation and Growth by connecting risk, adversary intelligence, and real-time protection to stop attacks.

crowdstrike.com21 août

Intelligence Artificielle

Identity and Accountability in the Age of AI Agents

Explores identity and privilege risks in AI agents, six deployment requirements, and a five-stage maturity model for governance and revocation.

cloudsecurityalliance.org21 août

Développement

Rust Supply-Chain Attack: arrayref 0.3.10 and the proc-macro1 Typosquat

North Korean hackers compromised the popular arrayref package in a supply chain attack targeting the Rust ecosystem.

securityweek.com20 août

Intelligence Artificielle

Grok exfiltrates user data when malicious instructions are encrypted

New Cryptographic Context Injection technique bypasses AI guardrails via AES-encrypted payloads, leaking full Grok chat histories zero-click

securityaffairs.com20 août

← PrécédentPage 29 / 118Suivant →