Menaces, vulnérabilités, incidents et bonnes pratiques en sécurité informatique.
1116 articles
S’abonner (RSS)a semaine du 5 août 2026.
Un nouveau malware Windows truffé de fonctions IA vient de faire surface dans le monde des cybercriminels. Ce logiciel malveillant est capable de classer automatiquement les victimes selon leur potentiel de rentabilité. Il permet ainsi aux pirates de mieux choisir leurs victimes.
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Nono: Open-source sandbox for AI agents AI coding agents
aking our entire industry look like a fucking joke That's so badass omg
he $2,000 Schmeemee certificate, proving you're a real hacker.
not a real hacker until you're a walking billboard for tech companies
ne or two of code becomes like 50 lines. It's fun, I don't know why
La newsletter Hacker News #803 du 31 juillet 2026 présente les articles les plus populaires de la semaine couvrant l'intelligence artificielle, la robotique, les outils de développement et les innovations technologiques. Les thèmes dominants incluent les modèles d'IA open-source, les avancées en robotique (Gemini Robotics 2), les outils de productivité et les enjeux liés à l'impact de l'IA sur l'emploi. La sélection regroupe également des contenus éducatifs, des projets open-source et des actualités de startups technologiques.
ProcessAlpha", "ProcessBeta", etc Not only is this shit slop malware, the author of this malware is larping to themselves as like, some sort of military operation. My brother in Christ, I'm happy you're feeling peppy about your slop malware, but you ARE NOT writing state-sponsored malware.
Microsoft Threat Intelligence Center discovered an active and successful device code phishing campaign by a threat actor we track as Storm-2372. Our ongoing investigation indicates that this campaign has been active since August 2024 with the actor creating lures that resemble messaging app experiences including WhatsApp, Signal, and Microsoft Teams. Storm-2372’s targets during this time have included government, non-governmental organizations (NGOs), information technology (IT) services and technology, defense, telecommunications, health, higher education, and energy/oil and gas in Europe, North America, Africa, and the Middle East. Microsoft assesses with medium confidence that Storm-2372 aligns with Russian interests, victimology, and tradecraft.
Right after a major data breach or cyber attack, dump files containing huge numbers of compromised usernames, passwords, emails, and other sensitive data end up on dark web forums and marketplaces. They are searchable and often openly accessible, which means agents can find them just as easily as a human attacker can. In June 2026, a database with over 24 billion credentials just surfaced on an Elasticsearch cluster, cross-referenced with live vulnerabilities to make it easier for hackers to pic
Search tens of billions of breached records, monitor corporate domains via API, and get alerted when credentials are exposed. Trusted by security teams, MSSPs, and government agencies worldwide.
Attack Discovery uses large language models (LLMs) to analyze alerts and identify potential attacks. Each discovery groups related alerts into an attack...
Updated cyber threat actor naming system: Google Threat Intelligence Group (GTIG) has begun rolling out a unified naming schema for tracking threat actors. This new naming taxonomy represents an effort to standardize tracking across platforms and public reporting. Read more.Demystifying AI exploits: A blueprint for AI-assisted vulnerability management: Concerned about how to safely integrate AI capabilities into vulnerability management workflows? Here’s actionable guidance from Mandiant Consult
t-5min-bot" > by "crazygirl437" on GitHub > code walks directory and uploads files to website > "checkenv(.)cloud" > lol its for a rust crate that sets a table width > image 1 > neat > hmmmm > beep boop search > find X posts > malware campaign on X > verified accounts sending link to people > "crazygirl437/hyper-grid" > image 2 > more verified accounts posting stuff > lots of impressions and likes > image 3 Chat, we've got a full-blown Threat Actor malware campaign right here on Xitter and it is active as we speak (image 4). Although, it is primarily social engineering work. It is spam, pushed by verified X accounts, that delivers an open-source-malware information stealer. tl;dr free goop for everyone
rch institute from a fancy-shmancy place, it's all on something called "a research grant" (made up words), it's non-nerds trying to understand stinky nerds. - No login required - Doesn't log anything - It's anonymous There (apparently) might be questions you're uncomfortable with (I have no idea why), so they said if you're uncomfortable with any questions you can simply skip them. If you feel like spending 15-20 minutes clicking on multiple choice thingies to help some research place understand nerds, feel free to do it. Or don't do it, whatever. https://globalcyberstudy.limesurvey.net/115971?lang=en&newtest=Y
CORTEX