Développement

Australia Arrests 2 Alleged TeamPCP Hackers

The arrests come after a wave of cyberattacks earlier this year targeting tech companies that rely on high-profile and widely used open source software.

techcrunch.com27 août

CISA Adds Six Known Exploited Vulnerabilities to Catalog

U.S. CISA adds ownCloud, Linux Kernel, and JFrog Artifactory flaws to its Known Exploited Vulnerabilities catalog.

securityaffairs.com27 août

Linux Foundation to Govern TRACE, an Open Standard for AI Runtime Attestation

Linux Foundation takes on TRACE, a hardware-backed evidence layer from OPAQUE, AMD, Intel and Microsoft for verifying AI agent behavior.

helpnetsecurity.com26 août

24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages

Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect visitors to attacker-controlled websites.

bleepingcomputer.com25 août

Import AI 470: No rights for machines; automating environment generation with SPADE; and building...

Differential acceleration of cyber, math, and AI

importai.substack.com24 août

91 Spring CVEs: The AI Vulnerability Consumption Problem

Spring updates patch 91 vulnerabilities, bringing the total count to over 200 in 2026, a surge powered by Broadcom’s use of AI.

securityweek.com24 août

NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands

A critical flaw (CVSS 9.4) in NASA/JPL's AIT-GUI let anyone send unauthenticated commands to spacecraft instruments.

securityaffairs.com22 août

Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE

A critical type confusion vulnerability in the isolated-vm library can lead to V8 sandbox escape and remote code execution on the host.

securityweek.com21 août

Anthropic eyes $2T+ IPO 💰, Slack Code 👨‍💻, end of open source 💻

TLDR21 août

Microsoft named a Leader in the Frost Radar™: Cloud Workload Protection Platforms, 2026

Falcon Cloud Security earned the highest scores in both Innovation and Growth by connecting risk, adversary intelligence, and real-time protection to stop attacks.

crowdstrike.com21 août

Rust Supply-Chain Attack: arrayref 0.3.10 and the proc-macro1 Typosquat

North Korean hackers compromised the popular arrayref package in a supply chain attack targeting the Rust ecosystem.

securityweek.com20 août

Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets

Hackers are exploiting CVE-2026-64849, a critical SSRF vulnerability in MLflow, to steal credentials and secrets.

securityweek.com20 août

Propagate user authorization context in AI agents with Amazon Bedrock AgentCore

AWS details AI access controls for Amazon Bedrock AgentCore, helping restrict agents to data each user is authorized to access.

helpnetsecurity.com20 août

Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second

Researchers leak a JWT from a co-located Cloudflare Worker via Spectre at up to 12 bits per second; Cloudflare says the attack is mitigated.

feeds.feedburner.com20 août

CareCloud Data Breach Impact Grows to 3.7 Million Individuals

U.S. healthcare IT company CareCloud disclosed that the data breach incident it suffered earlier this year has impacted more than 3.7 million individuals.

bleepingcomputer.com19 août

TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks

The Python-based malware framework takes living-off-the-land tactics to a new heights of stealth, with a modular implant that steals credentials and achieves persistence.

darkreading.com18 août

macOS Tahoe 26.6.2 Update! Everything you need to know.

Apple has just released a security update for Safari in macOS Sonoma and Sequoia, bringing it to version 26.6.1. This addresses some of the vulnerabilities previously addressed in recent security u…

eclecticlight.co18 août