Développement

New Evooo1Bot Linux botnet turns routers into traffic relay nodes

Evooo1Bot is a Mirai-based Linux botnet that hijacks routers and IoT devices for DDoS attacks, credential theft and criminal proxy services.

securityaffairs.com17 août

Mustang Panda Upgrades CoolClient With a Kernel Rootkit

HoneyMyte upgraded CoolClient with a signed kernel driver that hides processes, files and network activity, making detection hard.

securityaffairs.com17 août

Google announces Gemini 3.7 Flash just three weeks after previous release

Trois semaines après le précédent, Google sort un nouveau modèle et divise son tarif par deux. Son modèle de pointe, lui, se fait toujours attendre depuis le mois de mai.

01net.com14 août

AWS Certificate Manager will discontinue email validation to prove domain validation for certific...

AWS Certificate Manager will stop renewing email-validated certificates in September 2027. Customers should migrate to DNS validation.

helpnetsecurity.com14 août

AmnesiaStealer: a multi-stage Rust-based macOS infostealer that hijacks Chromium browsers

Une nouvelle menace informatique cible les ordinateurs fonctionnant sous macOS en s'attaquant aux données de navigation et aux identifiants. Baptisé du doux nom d'AmnesiaStealer, ce programme développé en langage Rust combine le vol de fichiers confidentiels avec une prise de contrôle à distance des sessions web.

clubic.com14 août

Where an AI Watermark Can Hide in Plain Text

Multiple 'watermark removers' have surfaced days after Anthropic began watermarking text generated by Claude, including an open source project with over 4,500 GitHub stars and paid AI detection evasion services. None of the tools' claims about defeating the text watermark can be verified, as Anthropic has not released a detector.

bleepingcomputer.com13 août

Hackers leverage new Microsoft SharePoint exploit in attacks

Threat actors have begun exploiting a critical Microsoft SharePoint flaw following the release of PoC exploit code by Rapid7.

helpnetsecurity.com12 août

How a Poisoned Security Scanner Became the Key to Backdooring LiteLLM

95% of the 2,500 organizations supposedly affected by the LiteLLM supply chain attack were exposed by the Trivy hack.

securityweek.com12 août

DDoS attacks over 1 Tbps surged fivefold in the second quarter

Cloudflare tire la sonnette d'alarme face à des attaques DDoS record. En six mois, l'entreprise a repoussé 23,2 millions d'attaques DDoS et enregistré un bond spectaculaire de 519% des offensives les plus violentes, celles dépassant 1 Tbps.

01net.com11 août

DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

The DeadLock ransomware operation is using a decentralized infrastructure that relies on blockchain-backed services to protect its communication with victims and data-leak activity.

bleepingcomputer.com11 août

Updated GPG key for signing Firefox and Thunderbird Releases

Mozilla announced today that it updated the GPG key used to sign Firefox and Thunderbird releases after it was accidentally exposed on GitHub.

bleepingcomputer.com11 août

WeatherNext: AI model achieves breakthrough in forecasting cyclones

Open source WeatherNext model can make accurate predictions with lower-resolution weather data.

feeds.arstechnica.com8 août

Metabase SQLi zero-day exploited in customer data-theft attacks

The maximum-severity vulnerability, which still has no CVE, allows malicious, remote administrator access to the business-analytics platform and its downstream users.

darkreading.com8 août

UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data

old.reddit.com8 août

Apple Fixes Screen Sharing Vulnerability in Tahoe, Sequoia, and Sonoma

Apple has released updates to macOS 26.6.1, 15.7.9, and 14.8.9 to fix a Screen Sharing vulnerability that could let an attacker “on the network” connect without valid credentials. Update soon.

tidbits.com7 août

Enterprises power agentic workflows in Cloudflare Agent Cloud with OpenAI

Cloudflare OS brings AI workspaces, zero-trust access, governed connectors, model routing, and enterprise data together in the browser, while new tools help IT teams track AI identities, token spending, and insider risk.

cio.com7 août

UNC6671 Rebrands: Multi-Brand Vishing Extortion Targets Financial Services and Enterprise Cloud E...

The UNC6671 vishing extortion group has rebranded from BlackFile and is operating as Redact, Pink, Helix, and Falcon.

securityweek.com6 août