CORTEXNovel Private APN Pivot Let Hackers Sabotage Second Polish Energy Facility
Attackers pivoted through a private cellular APN to shut a turbine and water treatment system at a Polish CHP plant serving 50,000 residents.
Menaces, vulnérabilités, incidents et bonnes pratiques en sécurité informatique.
1122 articles
S’abonner (RSS)Attackers pivoted through a private cellular APN to shut a turbine and water treatment system at a Polish CHP plant serving 50,000 residents.
L'Europe veut taper fort sur les sites qui diffusent du sport en streaming illégal. Un nouveau rapport préconise d'obliger tout le monde, des fournisseurs d'accès jusqu'aux VPN, à couper les flux piratés en moins de 30 minutes.
CEVA Logistics suffered a cyberattack disrupting European operations, with eight warehouses affected and shipments halted at impacted sites.
Kimsuky runs Ollama, GPT4All, and Msty offline while testing RAG and collecting AI libraries that could support phishing, malware, and data analysis.
Head Mare exploits two TrueConf flaws to gain SYSTEM privileges and replace client installers with PhantomCore malware across Russian companies.
Un logiciel espion chinois refait surface. Plus redoutable que par le passé, le malware LightSpy peut voler vos messages, votre localisation, vos mots de passe… et effacer votre téléphone à distance. Il vient d'être repéré dans plus de 13 pays, dont les États-Unis et plusieurs nations européennes. Une simple commande de poulet frit a suffi à démasquer l'un des cerveaux à l'origine de l'opération...
To help customers fend off ongoing attacks, N-able released a second security hotfix for its N‑central RMM solution, popular with MSPs.
semaine du 12 août 2026.
📡 Alertes IA : 16 vulnérabilités critiques du 10 août 2026 (dont Linux) Failles 0-day, correctifs d'urgence et vulnérabilités exploitées : le bilan technique des 17 alertes de la semaine du 10 août 2026.
Chaque semaine, dans le Cyberhebdo, nous vous présentons une liste aussi exhaustive que possible des cyberattaques évoquées par la presse dans le monde entier.
Alcino Donadel reports: …. Instructure, the edtech company behind learning management system Canvas, suffered one of the largest data breaches in the U.S. this year after cybercriminals gained access through a third-party vendor—an increasingly common occurrence in higher ed. Higher education’s m...
IEH was breached by a phishing attack that exposed its Microsoft 365 inbox, including emails and potentially export-controlled military data.
🎥 Le groupe hacktiviste Head Mare exploite des serveurs de visioconférence TrueConf non corrigés pour remplacer les installeurs client par des versions piég...
The RovoBlast attack method abused a vulnerability in Atlassian’s Rovo AI to steal sensitive Confluence, Jira and SharePoint data.
CSS attacks on major webmail services can steal credentials, hijack sessions and manipulate AI tools connected to users’ inboxes.
The maximum-severity vulnerability, which still has no CVE, allows malicious, remote administrator access to the business-analytics platform and its downstream users.
Hackers stole personal, medical, and insurance data of 3.8 million people from Unlimited Technology Systems' data center.
Hackers used social engineering to access the computers of three Levi Strauss employees and steal corporate data.
The North Carolina Ports Authority has confirmed that a cyberattack disrupted IT systems and slowed operations at Port of Wilmington, Port of Morehead City, and Charlotte Inland Port.
The club said Thursday that it had already restored its IT environment from clean backups, allowing operations to continue normally. It added that its ticketing platform and online store were not affected and remain fully operational.
Apple has released updates to macOS 26.6.1, 15.7.9, and 14.8.9 to fix a Screen Sharing vulnerability that could let an attacker “on the network” connect without valid credentials. Update soon.
The UNC6671 vishing extortion group has rebranded from BlackFile and is operating as Redact, Pink, Helix, and Falcon.
200 Swiss government accounts were compromised after hackers exploited Microsoft SharePoint vulnerabilities at federal IT office BIT.
Cisco patches 12 Catalyst SD-WAN and IOS XE flaws, including three 9.9-rated bugs and a 9.8 command injection issue.