CORTEX

Veille numérique automatisée — actualités tech et cybersécurité agrégées, enrichies par IA et vérifiées.

Navigation

Actualités
Thèmes
Signalements
Infox
Repérer l’arnaque
Recherche

Ressources

Mentions légales
Politique de confidentialité

Tous Apple, 1461 articles Claude IA, 838 articles Cyber Arnaque, 485 articles Gemini, 349 articles Grand public numérique, 2734 articles Linux, 281 articles Légal & IA, 136 articles Microsoft, 663 articles Productivité, 558 articles Google, 617 articles Cybersécurité, 2076 articles Intelligence Artificielle, 2047 articles

#cyber-arnaque

← Tout afficher

Iranian cyber targeting of dissidents, activists and journalists

Government agencies are warning that Iranian state-linked hackers are using a Windows malware strain named CHOSEN BRICK to target dissidents, activists, and journalists worldwide.

bleepingcomputer.com16 sept.

Vulnérabilités : l’écosystème open source face aux dilemmes du tout IA

📡 Menaces & IA : 15 dérives et avancées clés du 16 septembre 2026 (dont OpenAI) Détournement de modèles, nouveaux malwares génératifs et sécurité des agents : le récapitulatif des 15 actualités IA de la semaine du 16 septembre 2026.

t.me16 sept.

cybersécurité

📡 IDScan confirme le vol de 153 millions de permis de conduire Après la vente de 153 millions d...

La newsletter dcod du 16 septembre 2026 fait le point sur les dernières actualités en cybersécurité. Elle aborde la confirmation par IDScan du vol de 153 millions de permis de conduire suite à une intrusion cloud, le lancement du guichet d'alerte SRP par l'ENISA dans le cadre du Cyber Resilience Act, ainsi qu'un bilan des récentes cyberattaques par ransomware et des vulnérabilités zero-day critiques.

DCOD • Cybersécurité16 sept.

The extension you never installed: KREMLIN forges Chrome's own integrity checks to steal banking ...

A banking malware operation active since mid-2025 has been using a toolkit named KREMLIN to install malicious Chrome and Edge extensions that steal credentials, session tokens, and sensitive data.

bleepingcomputer.com15 sept.

BambooToken Malware Uses MQTT to Control Windows and Linux Systems

Lumen exposes BambooToken, a stealthy 2023-era malware family using MQTT and sideloading to quietly infect targets across Asia and beyond.

securityaffairs.com15 sept.

Hackers hijack HBO Max Reddit account to push malware in ClickFix ads

Le compte officiel de HBO Max sur Reddit a été piraté puis utilisé pour publier une centaine de publicités malveillantes. Derrière de faux téléchargements, le piège s'est refermé sur les internautes. En bonus, des données ont pu être volées.

journaldugeek.com15 sept.

New Android malware encrypts files, steals data, and harasses victims

MantaX Otax exfiltre les SMS, les mots de passe à usage unique et les profils WhatsApp des smartphones Android avant de chiffrer les documents des victimes. Repéré par les chercheurs de Zimperium, ce logiciel malveillant harcèle ensuite ses cibles par des messages vocaux menaçants et des images clignotantes jusqu’au paiement d’une rançon.

clubic.com13 sept.

China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor

Chinese hackers are exploiting CVE-2026-51990, a critical one-click RCE vulnerability in Tencent's Sogou Input Method, to deploy backdoors.

securityweek.com13 sept.

Passkey-themed social engineering leads to identity and cloud compromise

Microsoft details a million-email CEO fraud campaign and passkey-themed attacks that compromised cloud accounts and enabled data exfiltration.

feeds.feedburner.com11 sept.

Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors

Threat actors have been chaining three JFrog Artifactory vulnerabilities to gain admin privileges and deploy backdoors.

securityweek.com11 sept.

Protecting organizations from AI-assisted executive impersonation and invoice fraud

Researchers analyzed a flood of fraudulent business emails and found that the threat actors had doubled-up on tactics to make them appear legitimate, including help from AI.

therecord.media11 sept.

Companies may be measuring phishing resilience the wrong way

Analysis of 2.47 million simulated attacks shows why organizations should measure credential leaks and reporting—not just clicks.

securityweek.com11 sept.

Trezor: 347,000 users targeted in phishing attacks after Brevo breach

Hackers compromised the Brevo marketing platform and used that access to send phishing emails to Trezor, BitBox, and CoinTracking users.

securityweek.com11 sept.

Conti ransomware gang member sentenced to 4 years in prison

Ukrainian lawyer and Conti malware developer Oleksii Lytvynenko was sentenced to four years in U.S. prison for ransomware attacks.

securityaffairs.com11 sept.

Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks

The GoldFactory threat group exploits the Android Work Profile feature to deliver the Gigabud Trojan, while Mantax Otax spreads separately.

darkreading.com11 sept.

Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6

Anthropic says multiple threat groups, including the financially motivated and state-sponsored espionage groups linked to Russia and China, tried to abuse its Claude AI model for malicious purposes.

bleepingcomputer.com10 sept.

Active exploitation of Cisco Secure Firewall Management Center vulnerabilities

Three threat groups are exploiting two Cisco FMC flaws to steal credentials, gain root access and deploy Qilin ransomware.

securityaffairs.com9 sept.

US disrupts Xinbi Guarantee marketplace fueling the cyber scam economy

The U.S. government also carried out a seizure of $52.8 million from 52 wallets connected to the platform.

therecord.media9 sept.

Veradigm warns of patient data breach after ransomware gang claims attack

Veradigm said access was limited to a specific interface, and did not impact the company’s broader environment such as its networks, servers or databases. The incident did not result in operational disruptions, the company added.

therecord.media9 sept.

Hackers breach F5 BIG-IP APM devices to deploy Linux rootkit

Hackers are planting a Linux rootkit on F5 BIG-IP APM devices that hides its PHP web shell in memory instead of on disk, avoiding file scans.

helpnetsecurity.com9 sept.

← PrécédentPage 5 / 25Suivant →