Cortex — Veille numérique

Cybersécurité

Ivanti Patches Critical Flaws Across Enterprise Security Products

Multiple vulnerabilities have been discovered in Ivanti products, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the system. Ivanti Endpoint Manager Mobile (Ivanti EPMM) is a mobile management software engine that enables mobile device, application, and content management. Ivanti Neurons is a cloud-based automation platform that unifies IT operations and security management into a single system of record. Ivanti Sentry is an in-line gateway that manages, encrypts, and secures traffic between the mobile device and back-end enterprise systems. Depending on the privileges associated with the system, an attacker could then install programs; view, change, or delete data. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.

cisecurity.org11 sept.

Microsoft

Microsoft says ‘people matter more than AI’ following safety concerns

Passkey-themed social engineering leads to identity and cloud compromise

Protecting organizations from AI-assisted executive impersonation and invoice fraud

Ivanti Patches Critical Flaws Across Enterprise Security Products

Multiple Chinese hacking groups seen using identical Chrome zero-day exploit

New Microsoft Defender 'ShieldCrash' zero-day grants SYSTEM access

Microsoft Plugs Nearly 1,000 Security Holes

Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks

2026 Cloud Security Index: How Risk Differs Across AWS, Azure, and Google Cloud

OpenAI is putting $1 billion behind Daybreak for defenders working without enterprise budgets

Counterfeit installers to system compromise: Tracking a deceptive software download campaign

Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks

Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams

TerminalFix campaign deploys a reverse tunnel through multistage intrusion

CISA Adds Six Known Exploited Vulnerabilities to Catalog

WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords

Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution

Microsoft named a Leader in the Frost Radar™: Cloud Workload Protection Platforms, 2026

TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks

Fortune 500 Companies Hit in Azure Data Theft Campaign