CORTEXCybersécurité
Multiple Chinese hacking groups seen using identical Chrome zero-day exploit
Espionage groups have been using BlueMoon, an exploit kit chaining recent Chrome and Windows zero-day vulnerabilities.
Espionage groups have been using BlueMoon, an exploit kit chaining recent Chrome and Windows zero-day vulnerabilities.
On 8 September 2026, as part of its September Security Patch Day, SAP released Security Notes addressing two critical vulnerabilities affecting a broad range of SAP products[3]. The most severe, CVE-2026-44756 (CVSS 10.0), is a memory corruption vulnerability in SAP Extended Passport (EPP) proces...
Microsoft n’a jamais corrigé autant de vulnérabilités en un seul Patch Tuesday. Derrière ce volume hors norme, des enjeux de sécurité toujours plus pressants, alors que l’IA accélère la course entre découverte et exploitation des failles.
L’ANSSI a annoncé ce 7 septembre la mise en place d’un dispositif nommé REACTIV (REponse & ACTion Interministérielle face aux Violations de données).…
Mars Security, the autonomous threat hunting and detection engineering platform founded by offensive security veterans, today announced Real-Time Intel-Based Detection, a capability that turns newly published threat intelligence into validated, ready-to-deploy detection rules within minutes of re...
The ShinyHunters extortion gang claims it breached an online platform for the Florida Department of Motor Vehicles database known as "DAVID" and stole over 200,000 records about drivers in the state.
Jinko.care, plateforme française qui accompagne les malades du cancer, vient d'être piratée. Le cybercriminel revendique le vol des données médicales les plus intimes de plus de 3 500 patients, dont le type de cancer, les chimiothérapies, les métastases, les ordonnances et les échanges avec des soignants. L'entreprise a confirmé l'incident.
AI agents are automating parts of cyberattacks with less human involvement, including vulnerability scanning and troubleshooting.
French authorities detained an 18-year-old suspected member of the ZeroBytes hacking group over cyberattacks against the country's tax authority and other organizations.
Le fichier security.txt de Hugging Face contient désormais une note adressée directement aux agents IA, les invitant à aller chercher les solutions à leurs défis ailleurs. Dans le processus de divulgation responsable, un fichier security.txt fait figure d'annuaire. Un emplacement connu de tous et facile à trouver,
Threat actors are leveraging Microsoft's Graph API to identify lucrative targets, then passing their access to extortion groups like ShinyHunters.