Cortex — Veille numérique

Cybersécurité

Kiteworks patches max severity code injection vulnerability

A vulnerability has been discovered in Kiteworks EPG (Email Security Gateway) that could allow for arbitrary code execution. Kiteworks Email Protection Gateway (EPG) is a cloud-based security solution that automates end-to-end encryption, decryption, and policy enforcement for inbound and outbound enterprise emails. A combination of input-handling flaws in publicly reachable endpoints of the Kiteworks Email Protection Gateway may potentially allow an unauthenticated remote attacker to achieve arbitrary code execution. Successful exploitation of this vulnerability could allow for arbitrary code execution as root, which may lead to the complete compromise of the affected device.

cisecurity.org2 oct.

Apple Wants to Make It Harder to Run Agentic AI on Your Mac

Helping small businesses put AI to work

OpenAI bets enterprises are ready to delegate real work to autonomous agents

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor

Dell asks admins to patch max severity CSM flaws as soon as possible

City of Vicksburg, Mississippi, shuts down computers after cyberattack

Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks

Microsoft says threat actors are ahead in the early AI race

OpenAI cuts ties with 3 safety researchers, WSJ reports

CloudSyncD: a two-stage macOS backdoor that hides a phished password in zero-width Unicode

Researchers find Chinese hacking campaigns targeting AI firms, Asian governments

Microsoft’s X account hacked in crypto pump-and-dump scheme

Iranian accused of hacking American universities extradited from Montenegro

Android 17 makes it harder for spyware to cover its tracks

Autonomous AI agents tried to hack US, Canadian government websites

OpenAI software attempted to secretly scrape data from dozens of prominent websites

Fortinet warns of critical FortiMail flaw exploited in zero-day attacks

Kiteworks patches max severity code injection vulnerability

How AI Changes the SDLC Beyond Faster Coding

Cortex — actualités tech et cybersécurité

Apple Wants to Make It Harder to Run Agentic AI on Your Mac

Helping small businesses put AI to work

OpenAI bets enterprises are ready to delegate real work to autonomous agents

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor

Dell asks admins to patch max severity CSM flaws as soon as possible

City of Vicksburg, Mississippi, shuts down computers after cyberattack

Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks

Microsoft says threat actors are ahead in the early AI race

OpenAI cuts ties with 3 safety researchers, WSJ reports

CloudSyncD: a two-stage macOS backdoor that hides a phished password in zero-width Unicode

Researchers find Chinese hacking campaigns targeting AI firms, Asian governments

Microsoft’s X account hacked in crypto pump-and-dump scheme

Iranian accused of hacking American universities extradited from Montenegro

Android 17 makes it harder for spyware to cover its tracks

Autonomous AI agents tried to hack US, Canadian government websites

OpenAI software attempted to secretly scrape data from dozens of prominent websites

Fortinet warns of critical FortiMail flaw exploited in zero-day attacks

Kiteworks patches max severity code injection vulnerability

How AI Changes the SDLC Beyond Faster Coding