Apple has now released the first public version of macOS 27.0 Golden Gate, together with security updates taking Tahoe to 26.7, starting its first two years of security-only support, and Sequoia 15…

eclecticlight.co14 sept.

Grand public numérique

Passkey-themed social engineering leads to identity and cloud compromise

Microsoft details a million-email CEO fraud campaign and passkey-themed attacks that compromised cloud accounts and enabled data exfiltration.

feeds.feedburner.com11 sept.

Cyber Arnaque

Conti ransomware gang member sentenced to 4 years in prison

Ukrainian lawyer and Conti malware developer Oleksii Lytvynenko was sentenced to four years in U.S. prison for ransomware attacks.

securityaffairs.com11 sept.

Cybersécurité

SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution

On 8 September 2026, as part of its September Security Patch Day, SAP released Security Notes addressing two critical vulnerabilities affecting a broad range of SAP products[3]. The most severe, CVE-2026-44756 (CVSS 10.0), is a memory corruption vulnerability in SAP Extended Passport (EPP) proces...

cert.europa.eu9 sept.

Microsoft

New Microsoft Defender 'ShieldCrash' zero-day grants SYSTEM access

The disgruntled researcher continued their vendetta against Microsoft by publishing yet another zero-day exploit for Windows Defender.

darkreading.com9 sept.

Cybersécurité

Hackers breach F5 BIG-IP APM devices to deploy Linux rootkit

Hackers are planting a Linux rootkit on F5 BIG-IP APM devices that hides its PHP web shell in memory instead of on disk, avoiding file scans.

helpnetsecurity.com9 sept.

Cybersécurité

The AI cybersecurity arms race is on

AI agents are automating parts of cyberattacks with less human involvement, including vulnerability scanning and troubleshooting.

helpnetsecurity.com8 sept.

Développement

220 million traveler records exposed in Vietnam-linked APIS leak

An exposed Vietnam-linked APIS database contained 220.8 million passenger and crew records, including passport and flight data.

securityaffairs.com8 sept.

Linux

Asahi Linux now supports M3-series Macs

The Asahi Linux project has announced that support for Apple's M3-series chips has been added t [...]

lwn.net7 sept.

Développement

2026 Cloud Security Index: How Risk Differs Across AWS, Azure, and Google Cloud

Intruder analyzed 3,000 organizations, finding exposed services in 76% of AWS accounts versus 8% on Google Cloud.

feeds.feedburner.com7 sept.

Cybersécurité

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Adobe has released an emergency fix for CVE-2026-75650, an actively exploited max-severity zero-day vulnerability dubbed StyleSmuggler, that impacts multiple versions of Magento and Adobe Commerce.

bleepingcomputer.com7 sept.

Intelligence Artificielle

OpenAI's rogue agents were caught communicating via public wikis

Thousands of agents reportedly used a public German wiki as shared memory, showing how network restrictions can fail to contain what autonomous systems do with external services.

cio.com5 sept.

Google

Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day

Google has updated the Chrome browser to address an actively exploited high-severity zero-day flaw in the V8 engine and 11 other vulnerabilities.

bleepingcomputer.com4 sept.

Développement

Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon

CyberKendra reports: A security researcher known as Chaotic Eclipse has released FalconFlank, a proof-of-concept zero-day that escalates privileges on fully patched Windows machines running CrowdStrike Falcon. The researcher — who also uses the aliases Nightmare-Eclipse, MSNightmare, and INFINITE...

databreaches.net3 sept.

Google

Google releases Gemini 3.8 Flash, its third Flash model in six weeks

Google has introduced Gemini 3.8 Flash, available to developers today, and Gemini 3.8 Flash Cyber, reserved for vetted security teams.

helpnetsecurity.com2 sept.

Développement

Attackers Steal METR API Key and Consume AI Credits Worth About $600,000

In one attack, threat actors stole an API key that ultimately led to the consumption of $600,000 in public AI model credits for the security nonprofit.

darkreading.com2 sept.

Cybersécurité

9.5 Million Impacted by Aesto Health Data Breach

The healthcare data company Aesto informed federal regulators this week that more than 9.5 million people had sensitive information leaked during a cyberattack last December.

therecord.media1 sept.

Cybersécurité

Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity

Hackers are exploiting a critical Langflow flaw that lets unauthenticated attackers remotely execute Python code on vulnerable systems.

securityaffairs.com1 sept.

Développement

Nightmare Eclipse Drops ‘HardBreacher’ Kaspersky Product Exploit

Chaotic Eclipse released HardBreacher, a PoC exploit for a Kaspersky Endpoint Security privilege escalation flaw.

securityaffairs.com1 sept.

← PrécédentPage 4 / 13Suivant →