CORTEXFresh Windows Zero-Day Exploited in North Korean Cyberattacks
Lazarus targets defense professionals with fake Lockheed Martin jobs, exploiting a Windows zero-day to deploy backdoors.
Menaces, vulnérabilités, incidents et bonnes pratiques en sécurité informatique.
1122 articles
S’abonner (RSS)Lazarus targets defense professionals with fake Lockheed Martin jobs, exploiting a Windows zero-day to deploy backdoors.
Adobe patches seven ColdFusion, Commerce, and Campaign Classic flaws that could enable code execution, privilege escalation, or denial-of-service.
Leaked passwords, social engineering and spoofed social media sites are among the tools hackers are using to gather individuals' private content and sell it online, the FBI said.
Nightmare Eclipse has dropped ShieldBreak, a Windows zero-day exploit that allows any user to gain System privileges.
95% of the 2,500 organizations supposedly affected by the LiteLLM supply chain attack were exposed by the Trivy hack.
Microsoft has released security patches to address a Windows zero-day vulnerability known as "LegacyHive," disclosed after the July 2026 Patch Tuesday.
Cisco says attackers are exploiting CVE-2026-20349 in ASA and FTD, letting crafted HTTP requests trigger DoS via Remote Access SSL VPN.
Saisie en mars, arrestation en mai : les autorités pensaient avoir cassé le botnet. La version 7 tournait déjà depuis février, avec un carnet d'adresses logé sur Ethereum.
A vulnerability has been discovered in Zoom Clients that could allow for remote code execution. Zoom is a cloud-based communications platform that allows users to connect via video, audio, chat, and content sharing. Successful exploitation could allow an attacker to target meeting participants, execute code without user interaction, steal data, activate cameras or microphones, and install malware.
Microsoft patches 398 flaws, including exploited CVE-2026-68820 that lets local attackers reach SYSTEM, plus four unauthenticated 9.8 RCEs.
Iran-linked hackers targeted water systems in New Jersey and Alabama, bringing confirmed attacks to at least 12 states.
Canal+ obtient quatorze ordonnances contre l’IPTV pirate, visant FAI, DNS, VPN et moteurs avant une réforme du blocage sportif automatisé en France
Cloudflare tire la sonnette d'alarme face à des attaques DDoS record. En six mois, l'entreprise a repoussé 23,2 millions d'attaques DDoS et enregistré un bond spectaculaire de 519% des offensives les plus violentes, celles dépassant 1 Tbps.
SharePoint CVE-2026-55040 lets unauthenticated attackers impersonate users and chain with CVE-2026-63520 for code execution
The DeadLock ransomware operation is using a decentralized infrastructure that relies on blockchain-backed services to protect its communication with victims and data-leak activity.
Federal lawmakers and cybersecurity leaders have launched parallel initiatives to protect US water infrastructure from growing cyber threats
Cisco warns that 7 ClamAV flaws affect Secure Endpoint Connector products, with two having public PoCs that could enable remote DoS attacks
Why passkey apps treat Windows differently than other operating systems.
t fichiers générés par Claude.
BdThemes' compromised JSON feed exploits XSS in seven WordPress plugins, creating rogue admins and installing a PHP web shell without plugin updates.
Cette newsletter du 14 août 2026 couvre quatre actualités majeures en cybersécurité et IA : l'incarcération injustifiée d'une personne due à une erreur d'identifiant Kik, dix fuites de données significatives incluant Meta, les abus de surveillance liés aux caméras Flock déployées aux États-Unis, et quatorze développements clés concernant les menaces et avancées de l'IA. Les thèmes centraux portent sur les erreurs judiciaires numériques, les compromissions de données, les atteintes à la vie privée et les risques associés aux modèles d'IA.
The Gunra ransomware gang is breaching critical infrastructure organizations through vulnerabilities in popular brands of firewalls, the FBI and South Korea’s government warned.
🎧🎙️ Bienvenue dans votre Flash cybersécurité du jour ⚡️🔐 FBI• Vol d'images intimes dans les comptes en ligneLe FBI alerte sur des cybercriminels qui compr...
Le transporteur de Valve en Europe, CEVA Logistics, a été victime d'une cyberattaque fin juillet. Noms, adresses et téléphones des acheteurs de matériel Steam sont compromis.