Cybersécurité

Oh, I'm going through it now, they're trying to understand the psychology of Threat Actors versus...

t.me30 juil.

Hello Little People Living Inside My Computer (LPLIMC), Some place hit me up and asked if I'd sh...

rch institute from a fancy-shmancy place, it's all on something called "a research grant" (made up words), it's non-nerds trying to understand stinky nerds. - No login required - Doesn't log anything - It's anonymous There (apparently) might be questions you're uncomfortable with (I have no idea why), so they said if you're uncomfortable with any questions you can simply skip them. If you feel like spending 15-20 minutes clicking on multiple choice thingies to help some research place understand nerds, feel free to do it. Or don't do it, whatever. https://globalcyberstudy.limesurvey.net/115971?lang=en&newtest=Y

t.me30 juil.

Related research on GenAI detection and agent threats

This research examines how Model Context Protocol (MCP) tools expand the attack surface for autonomous agents, detailing exploit vectors such as tool poisoning, orchestration injection, and rug-pull redefinitions alongside practical defense strategies.

Post-exploitation: credential harvest, lateral movement, and self-migrating C2

Contribute to elastic/detection-rules development by creating an account on GitHub.

SIEM rules for unusual egress and self-migrating command and control

Contribute to elastic/detection-rules development by creating an account on GitHub.

Hi I've uploaded another 150,000 malwares to the internet. I haven't pushed the update file yet,...

ary (homeless guy at the gas station) Cheers, Pic unrelated

t.me29 juil.

Automated vulnerability patching

Learn how to shorten PR cycle times, improve code quality, and reduce risk with Rovo Dev’s AI-powered code review.

CVE-2026-47876 — ESXi host code execution through VMXNET3

Security, compliance, and operational resilience resources applicable to VMware Cloud Foundation and VMware vSphere. This repository is an official VMware repository managed by Broadcom staff. - vm...

Clarity creates better decisions

Threat intelligence, or cyber threat intelligence, is security data and information an organization gathers and analyzes to understand the threat landscape.

IR Trends Q2 2026: Phishing and weaponized remote management tools drive attack chains

As mentioned, phishing was the top means of gaining initial access this quarter, accounting for over half of engagements where initial access could be determined — an increase from 35 percent last quarter. Many phishing engagements included MFA-bypass techniques, such as OAuth device-code phishing and AiTM frameworks, allowing adversaries to intercept session tokens. Other observed means of achieving initial access included exploitation of public-facing applications and drive-by compromise.

Microsoft affirme battre tout le monde en détection de failles avec MAI-Cyber-1-Flash

Microsoft n’hésite pas à déclarer que son modèle, profondément intégré à MDASH, a été « perfectionné par les meilleurs experts en cybersécurité du secteur et renforcé dans le plus grand domaine de sécurité au monde ». Ce qui lui permet, toujours selon Microsoft, de battre tout le monde dans le domaine de la détection de failles, y compris Mythos, GPT 5.6 Sol, GPT 5.5 Cyber et Gemini 3.5 Flash Cyber. Avec 95,95 % au test CyberGym, Microsoft dépasse d’au moins 10 points la concurrence. Mais attent

Microsoft dévoile Project Perception, sa propre armée d’agents IA pour la cybersécurité

Microsoft a présenté le 27 juillet 2026 une architecture de sécurité entièrement bâtie sur l'IA agentique, avec une préversion publique annoncée pour le 3 août 2026. La cybersécurité est devenue l'un des terrains de bataille les plus visibles de la course à l'IA, et chaque acteur y va désormais de son programme

numerama.com28 juil.

Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP

In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU protection in ip6_default_advmss() ip6_default_advmss() needs rcu protection to make sure the net structure it reads does not disappear. View CVE Details Affected Products Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP Vendor:Siemens Product Version:SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) >= V3.1.6, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0) >= V3.1.6, SIMATIC S7-1500 CPU 1518F-4

Security context built for AI

Effective reasoning requires more than raw signals. Agents need context. Microsoft transforms its breadth of visibility, threat intelligence and security expertise into a security context that connects security data, knowledge and semantics across the digital estate. The result is a continuously updated representation of an organization’s assets, identities, relationships, risks and activities that gives agents a shared, near real-time, understanding of the environment they are helping to defend

Activate your Defender's Advantage today

Gain insights on today’s hot cyber defense topics observed on the frontlines by Mandiant and the Google Threat Intelligence Group.

Dawg, I don't want to sound like a hater, but you need to CHILL OUT. Your goopies just got atten...

Un utilisateur minimise l'importance d'une incident de sécurité impliquant un jeu vidéo en le comparant à des menaces cybercriminelles majeures comme les rançongiciels, les botnets et les groupes parrainés par des États. Il souligne que les autorités fédérales se concentrent sur des crimes bien plus graves et que l'attention médiatisée est disproportionnée.

t.me27 juil.

Also, apparently Meccha Chameleon people follow me on Telegram. Hello MecchaChameleon malware pe...

L'auteur adresse un message aux développeurs du malware MecchaChameleon, analysant leur stratégie de distribution via des cartes personnalisées malveillantes et leur utilisation présumée de PureRAT. Il détaille ses observations de rétro-ingénierie du payload C# en soulignant les faiblesses de l'obfuscation, de la mise en scène et de la dissimulation du code.

t.me27 juil.