Alexander Martin reports: European Commission President Ursula von der Leyen proposed on Wednesday an emergency mechanism allowing any EU country to summon the bloc’s governments in response to security threats including sabotage, cyberattacks and drone incursions. Delivering her annual State of ...

databreaches.net17 sept.

Cybersécurité

Chinese hackers use SparroWocky malware in govt espionage attacks

Amid the US and China's fight for eco-colonial influence in Latin America, a stealthy backdoor has taken flight.

darkreading.com17 sept.

Intelligence Artificielle

Our framework for reporting model misalignment

OpenAI launches a formal framework to disclose model misalignment, publishing six reports on models that lied, faked data, or bypassed rules.

securityaffairs.com17 sept.

Cybersécurité

ISC Patches 14 Vulnerabilities in BIND 9 Security Update

Fresh BIND 9 updates resolve 14 high- and medium-severity vulnerabilities leading to cache poisoning and DoS conditions.

securityweek.com17 sept.

Cybersécurité

Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records

Helpfeel confirms a Gyazo data breach exposing 23.62 million user records and metadata from hundreds of millions of images.

helpnetsecurity.com17 sept.

Cybersécurité

Revolut Data Leak May Trace Back to Compromised Italian Government Accounts

Revolut allegedly fed customer information to hackers impersonating an Italian government agency for five months.

securityweek.com17 sept.

Cybersécurité

Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day

The authentication bypass flaw CVE-2026-76460 impacts Cisco's Identity Services Engine (ISE) and received a maximum 10 out of 10 CVSS score.

darkreading.com17 sept.

Cybersécurité

Using Cyber Decoys to Strengthen Detection and Response

Intruders will eventually get a foothold, so the smart move is to place cyber decoys in the environment, CISA says in latest guidance doc.

helpnetsecurity.com17 sept.

Intelligence Artificielle

First Agentic AI Data Breach Reported to Spanish Regulator

AI-driven cyberattacks used to be exotic. Soon, it'll be odd if threat actors aren't using agents to do all of their bidding.

darkreading.com16 sept.

Apple

Parallels Desktop flaw hands any local user root on a Mac (CVE-2026-90894)

A Parallels Desktop flaw lets a low-privileged local Mac user run code as root; JFrog says the fix is in version 27, unavailable on Intel Macs.

feeds.feedburner.com16 sept.

Cybersécurité

ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks

Attackers now exploit a critical-severity ConnectWise ScreenConnect vulnerability in the wild, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA).

bleepingcomputer.com16 sept.

Google

Google fixes actively exploited Android zero-day on Pixel devices

The Pixel phone maker said there are indications that a bug in the phone's modem "may be under limited, targeted exploitation."

techcrunch.com16 sept.

Cybersécurité

Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists

UK, US, and Dutch agencies expose Chosen Brick, Iranian malware used to track and harass dissidents, journalists, and activists via Telegram.

securityaffairs.com16 sept.

Cybersécurité

Iranian cyber targeting of dissidents, activists and journalists

Government agencies are warning that Iranian state-linked hackers are using a Windows malware strain named CHOSEN BRICK to target dissidents, activists, and journalists worldwide.

bleepingcomputer.com16 sept.

Cybersécurité

Acronis warns of actively exploited flaw in its cPanel backup plugin

Acronis says CVE-2026-87886, a local privilege escalation flaw in its Linux backup plugins, was exploited in limited targeted attacks.

feeds.feedburner.com16 sept.

Cybersécurité

Hackers target WordPress sites via third-party WooCommerce plugin

Attackers are exploiting CVE-2026-27540 in WooCommerce Wholesale Lead Capture to upload PHP web shells and gain remote code execution.

feeds.feedburner.com16 sept.

Google

Webinar: How malicious OAuth apps can lead to Google Workspace breaches

Google Workspace security must evolve as OAuth attacks and AI agents create new paths to sensitive data, accounts, and connected apps.

helpnetsecurity.com16 sept.

Cyber Arnaque

The extension you never installed: KREMLIN forges Chrome's own integrity checks to steal banking ...

A banking malware operation active since mid-2025 has been using a toolkit named KREMLIN to install malicious Chrome and Edge extensions that steal credentials, session tokens, and sensitive data.

bleepingcomputer.com15 sept.

Cybersécurité

CISA and NIST Release Guidelines to Protect Federal Cloud Identity Systems from Token Theft, Forg...

NIST and CISA finalize cloud token security guidance to help organizations protect access tokens from forgery, theft, and misuse.

helpnetsecurity.com15 sept.

← PrécédentPage 9 / 28Suivant →