📡 Alertes IA : 16 vulnérabilités critiques du 10 août 2026 (dont Linux) Failles 0-day, correctifs d'urgence et vulnérabilités exploitées : le bilan technique des 17 alertes de la semaine du 10 août 2026.
Chaque semaine, dans le Cyberhebdo, nous vous présentons une liste aussi exhaustive que possible des cyberattaques évoquées par la presse dans le monde entier.
…. Instructure, the edtech company behind learning management system Canvas, suffered one of the largest data breaches in the U.S. this year after cybercriminals gained access through a third-party vendor—an increasingly common occurrence in higher ed. Higher education’s m...
IEH was breached by a phishing attack that exposed its Microsoft 365 inbox, including emails and potentially export-controlled military data.
🎥 Le groupe hacktiviste Head Mare exploite des serveurs de visioconférence TrueConf non corrigés pour remplacer les installeurs client par des versions piég...
The RovoBlast attack method abused a vulnerability in Atlassian’s Rovo AI to steal sensitive Confluence, Jira and SharePoint data.
CSS attacks on major webmail services can steal credentials, hijack sessions and manipulate AI tools connected to users’ inboxes.
The maximum-severity vulnerability, which still has no CVE, allows malicious, remote administrator access to the business-analytics platform and its downstream users.
Hackers stole personal, medical, and insurance data of 3.8 million people from Unlimited Technology Systems' data center.
Hackers used social engineering to access the computers of three Levi Strauss employees and steal corporate data.
The North Carolina Ports Authority has confirmed that a cyberattack disrupted IT systems and slowed operations at Port of Wilmington, Port of Morehead City, and Charlotte Inland Port.
The club said Thursday that it had already restored its IT environment from clean backups, allowing operations to continue normally. It added that its ticketing platform and online store were not affected and remain fully operational.
Apple has released updates to macOS 26.6.1, 15.7.9, and 14.8.9 to fix a Screen Sharing vulnerability that could let an attacker “on the network” connect without valid credentials. Update soon.
The UNC6671 vishing extortion group has rebranded from BlackFile and is operating as Redact, Pink, Helix, and Falcon.
200 Swiss government accounts were compromised after hackers exploited Microsoft SharePoint vulnerabilities at federal IT office BIT.
Cisco patches 12 Catalyst SD-WAN and IOS XE flaws, including three 9.9-rated bugs and a 9.8 command injection issue.
A study of more than 6,000 patches found that even working patches can introduce new bugs, break something else, or are open to bypass.
Le composant noyau d'Open vSwitch, un logiciel réseau très répandu sur les serveurs Linux, contient la faille OVSwrap (CVE-2026-64531). Un compte utilisateur ordinaire, sans droit particulier, obtient par cette faille les privilèges root. Un correctif est disponible depuis le 24 juillet, mais toutes les distributions ne l'ont pas encore intégré.
Attackers compile khunt inside Oracle after a web SQL injection, reach Windows SYSTEM, and stage credential data and registry hives locally.
In the span of three weeks, OpenAI, Anthropic, and Meta have all disclosed AI agent sandbox escape events affecting real organizations.
CORTEX