Hackers leverage new Microsoft SharePoint exploit in attacks
Threat actors have begun exploiting a critical Microsoft SharePoint flaw following the release of PoC exploit code by Rapid7.
← Thèmes
💻
Développement
Langages, frameworks, outils et pratiques de développement logiciel.
1908 articles
Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks
The ransomware-as-a-service operation is finding success against critical infrastructure targets with leaked Conti code and old flaws in firewalls and VPN appliances.
Adobe Urges Immediate Patching of Critical ColdFusion, Campaign Classic Flaws
Adobe patches seven ColdFusion, Commerce, and Campaign Classic flaws that could enable code execution, privilege escalation, or denial-of-service.
How a Poisoned Security Scanner Became the Key to Backdooring LiteLLM
95% of the 2,500 organizations supposedly affected by the LiteLLM supply chain attack were exposed by the Trivy hack.
August 2026 Patch Tuesday: Microsoft Fixes 421 CVEs, One Exploited Zero-Day
Microsoft patches 398 flaws, including exploited CVE-2026-68820 that lets local attackers reach SYSTEM, plus four unauthenticated 9.8 RCEs.
DDoS attacks over 1 Tbps surged fivefold in the second quarter
Cloudflare tire la sonnette d'alarme face à des attaques DDoS record. En six mois, l'entreprise a repoussé 23,2 millions d'attaques DDoS et enregistré un bond spectaculaire de 519% des offensives les plus violentes, celles dépassant 1 Tbps.
DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure
The DeadLock ransomware operation is using a decentralized infrastructure that relies on blockchain-backed services to protect its communication with victims and data-leak activity.
Cisco Warns of High-Severity ClamAV Vulnerabilities With Public PoC
Cisco warns that 7 ClamAV flaws affect Secure Endpoint Connector products, with two having public PoCs that could enable remote DoS attacks
Updated GPG key for signing Firefox and Thunderbird Releases
Mozilla announced today that it updated the GPG key used to sign Firefox and Thunderbird releases after it was accidentally exposed on GitHub.
Updated GPG key for signing Firefox and Thunderbird Releases
Mozilla revokes a Firefox and Thunderbird Linux signing subkey after an unencrypted copy landed in a private repository.
Putting frontier cyber models in more trusted hands
OpenAI Daybreak cyber models now run through security partners like IBM and CrowdStrike. Access stays with the partner, not the customer.
Scaling Trusted Access for Cyber with GPT-5.5 and GPT-5.5-Cyber
OpenAI launches GPT-5.6-Cyber, a reduced-safeguard model that completes 95% of advanced cyber requests and finds zero-day flaws.
Import AI 468: 23 RSI ideas; PostTrainBench+; and how trust and transparency interplay with AI ra...
Which galaxy will you choose?
Hackers breach TrueConf to trojanize client installers with backdoors
Head Mare exploits two TrueConf flaws to gain SYSTEM privileges and replace client installers with PhantomCore malware across Russian companies.
OpenAI ralentit le développement d'Astra après des tests de cybersécurité inquiétants
📡 Menaces & IA : 14 dérives et avancées clés du 12 août 2026 (dont OpenAI) Détournement de modèles, nouveaux malwares génératifs et sécurité des agents : le récapitulatif des 14 actualités IA de la semaine du 12 août 2026.
Multiples vulnérabilités dans le noyau Linux de Debian (07 août 2026)
📡 Alertes IA : 16 vulnérabilités critiques du 10 août 2026 (dont Linux) Failles 0-day, correctifs d'urgence et vulnérabilités exploitées : le bilan technique des 17 alertes de la semaine du 10 août 2026.
WeatherNext: AI model achieves breakthrough in forecasting cyclones
Open source WeatherNext model can make accurate predictions with lower-resolution weather data.
Metabase SQLi zero-day exploited in customer data-theft attacks
The maximum-severity vulnerability, which still has no CVE, allows malicious, remote administrator access to the business-analytics platform and its downstream users.
UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data
Apple Fixes Screen Sharing Vulnerability in Tahoe, Sequoia, and Sonoma
Apple has released updates to macOS 26.6.1, 15.7.9, and 14.8.9 to fix a Screen Sharing vulnerability that could let an attacker “on the network” connect without valid credentials. Update soon.
Enterprises power agentic workflows in Cloudflare Agent Cloud with OpenAI
Cloudflare OS brings AI workspaces, zero-trust access, governed connectors, model routing, and enterprise data together in the browser, while new tools help IT teams track AI identities, token spending, and insider risk.
UNC6671 Rebrands: Multi-Brand Vishing Extortion Targets Financial Services and Enterprise Cloud E...
The UNC6671 vishing extortion group has rebranded from BlackFile and is operating as Redact, Pink, Helix, and Falcon.
New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs
Researchers found a way to bypass recent mitigations for Spectre v2 speculative execution side-channel attacks and developed an exploit to leak secrets from Linux machines.
Zapscape - Guest to host escape in KVM/x86
Zapscape could let guest root escape nested KVM and execute code on the Linux host through a shadow-MMU use-after-free; no in-wild exploitation is cla