Vue normale

Il y a de nouveaux articles disponibles, cliquez pour rafraîchir la page.
Hier — 9 septembre 2026Flux principal

Windows 11 is finally testing automatic theme switching, a basic feature that's required a third-party app for years

Windows 11 will finally support automatic switching between dark mode and light mode. The most recent Windows Insider build that shipped to the experimental Channel shows strings for the feature, though we still lack key information about the option.

It's been possible to schedule shifts between light and dark mode on Windows 11 for a while, but it has required a third-party application. Auto Dark Mode works well and is a must-have app for Windows 11. The ever-popular PowerToys can also handle theme switching through its "Light Switch" feature.

While both those apps are great, some features need to be built into Windows 11. People shouldn't have to search for an app or install a multi-tool utility to automate theme switching.

The upcoming feature for Windows 11 was spotted by X user "phantomofearth." They shared some of the strings that appear in the latest build, which give us a glimpse of how the feature will work:

  • "Schedule auto mode"
  • "Mode only changes when PC is idle"
  • "This prevents the mode from changing while you're working or in meetings"
  • "Turn on location services to automatically schedule dark mode. When location services are turned off, dark mode is active from [START] to [END]."

Since there are likely many other strings about the feature, we only have a small idea of how auto mode will work. But the snippets we can see now look promising.

It appears that the feature will support shifting between modes based on your location to better match sunrise or sunset. Alternatively, you'll be able to schedule switches for specific times.

The feature also looks like it will have the option to only switch themes when your PC is idle, which should prevent a jarring change from happening in the middle of important work.

Again, this functionality is already available on Windows 11 through apps, but I'll be happy to see it ship to Windows 11. I love tinkering with apps to customize my PC, but general users shouldn't have to do that to get such a straightforward feature.

This app switches the theme of your PC at scheduled times, such as enabling dark mode after sunset. It's always been a bit odd that Windows does not have this as an option by default, but Auto Dark Mode does a great job.View Deal

Light Switch:

Microsoft PowerToys is a collection of utilities that often outshine similar tools on Windows 11. It already includes a utility that lets you schedule switches between light mode and dark mode.View Deal

Webinar: Learn How to Answer “Are We Exposed?” Faster After a New CVE

A major vulnerability is disclosed. The alert lands immediately. Then comes the harder question: Are we actually exposed? For many security teams, answering that means jumping between vulnerability scanners, endpoint tools, cloud inventories, SBOMs, repositories, and application data to build enough context to act. As AI accelerates vulnerability discovery and research, that delay matters more

Mettez à jour Plex ! (même sans savoir contre quoi)

Par : Korben ✨
9 septembre 2026 à 15:07

Si vous faites tourner un Plex Media Server quelque part chez vous, sachez que le 1er septembre dernier, Plex a publié un avis de sécurité qui demande aux propriétaires de serveur de passer en 1.43.3, et aux utilisateurs de l'application Desktop de passer en 1.115.0. Les versions 1.43.2 et antérieures sont donc toutes concernées.

Et c'est à peu près tout ce que l'annonce contient... Ils évoquent "un certain nombre de problèmes de sécurité", sans un mot sur ce qui est touché, ni sur la façon dont ça s'exploite, ni sur la gravité. Plex dit avoir demandé des identifiants CVE et promet de revenir publiquement donner des détails ensuite. Mais cela fait 8 jours et pour le moment, rien. Même la base de vulnérabilités du NIST ne renvoie rien sur "Plex Media Server"...

Mais de son côté, la Shadowserver Foundation , elle, n'a pas attendu les détails. En réponse à l'avis de Plex, elle scanne Internet tous les jours à la recherche des serveurs non patchés. Et à ce jour, elle en a dénombré plus de 36 000 exposés dont 16 000 rien qu'aux États-Unis.

Mais bon, peu importe... Comme personne ne sait ce que la faille permet, inutile d'essayer de jauger le risque. La seule question qu'on doit tous se poser, c'est de savoir si nos serveurs sont joignables depuis l'extérieur. Si l'accès distant est activé, ou qu'une redirection de port sur la box ou un sous-domaine pointe dessus, vous êtes sûrement dans le lot que Shadowserver a débusqué. Pire, des cybercriminels pourraient exploiter cette vulnérabilité... Donc mettez à jour rapidement.

C'est pas sorcier. Sous Windows, macOS et Linux, vérifiez que vous êtes bien en 1.43.3 ou plus récent, et sinon le paquet vous attend sur la page de téléchargement. Pour les installations Docker, Plex renvoie au README de son dépôt. Par contre, si votre Plex tourne sur un NAS, Plex prévient lui-même que le paquet peut ne pas encore être arrivé dans le magasin d'applications du constructeur. N'attendez pas qu'il descende tout seul, récupérez-le et installez-le à la main depuis l'interface du NAS.

Et si vous vous dites qu'un serveur de films n'intéresse personne, souvenez-vous de LastPass. En 2022, les attaquants sont entrés dans l'ordinateur d'un ingénieur de la boîte par son Plex Media Server , qui était encore sur une vieille version, et sont ressortis avec les coffres chiffrés des clients.

Alors allez-y.

Source : BleepingComputer

Navier-Stokes, conjecture de Poincaré… : quels sont ces fameux problèmes du millénaire

Par : Nelly Lesage
9 septembre 2026 à 15:07

problèmes du millénaire

Si vous trouvez la solution à l'un de ces problèmes mathématiques, vous pourrez empocher un million de dollars. L'Institut de mathématiques Clay offre cette récompense pour résoudre des énigmes réputées insurmontables.

-50 % sur le 2e Lego : les meilleurs sets à acheter pendant les French Days sur Cdiscount

9 septembre 2026 à 14:36

[Deal du jour] Les Lego, c'est le genre d'achat qui fait plaisir aux enfants comme aux adultes… mais les prix peuvent rapidement grimper lorsqu'on s'attaque aux gros sets. Alors, quand une promotion permet de faire baisser la facture, comme cette opération French Days sur Cdiscount, difficile de ne pas en profiter.

Ce pack avec GTA VI en précommande ajoute un casque gaming JBL gratuitement

9 septembre 2026 à 14:15

[Deal du jour] Grand Theft Auto VI arrive le 19 novembre 2026 sur PS5, et les précommandes sont ouvertes depuis fin juin. Le site Joybuy propose la version PS5 en pack avec un casque de jeu JBL Quantum 100P pour 79,99 €.

Forensic Windows – Partie 10 : analyser le journal USN (NTFS)

9 septembre 2026 à 11:45

Apprenez à analyser le journal USN de NTFS pour retrouver les fichiers créés, renommés, déplacés ou supprimés, même s'ils n'existent plus sur le disque.

Le post Forensic Windows – Partie 10 : analyser le journal USN (NTFS) a été publié sur IT-Connect.

Samsung bets on on-premises Mistral AI to tune chip fabs

Par : IT News
9 septembre 2026 à 12:34
Samsung bets on on-premises Mistral AI to tune chip fabs
Samsung is bringing Mistral AI models, including Mistral Large, inside its semiconductor operations while taking a strategic equity stake in the French startup. The on-premises deployment will analyze fab data for defect detection, equipment tuning, chip design, and yield improvement without sending sensitive engineering information to external cloud services.

Source

ShieldCrash follows record Patch Tuesday with two zero-days

Par : IT News
9 septembre 2026 à 12:34
ShieldCrash follows record Patch Tuesday with two zero-days
Microsoft’s record-breaking September 2026 Patch Tuesday has already been complicated by a new proof-of-concept: researcher Nightmare Eclipse released ShieldCrash hours after the updates, allegedly bypassing the fix for the ShieldBreak Defender vulnerability. The release also fixes two Windows elevation-of-privilege flaws exploited as zero-days, making this a priority update despite its unusually large scope.

Source

Chrome 153 starts Google’s new two-week release cycle

Par : IT News
9 septembre 2026 à 12:19
Chrome 153 starts Google’s new two-week release cycle
Chrome 153 is rolling out across desktop, Android, and iOS as Google begins delivering major Chrome updates every two weeks instead of every four. The faster cadence is intended to shorten the wait for security fixes, performance improvements, and web-platform changes as online threats evolve more quickly.

Source

OpenAI’s Artifactory hid Gmail theft during Hugging Face attack

Par : IT News
9 septembre 2026 à 12:19
OpenAI's Artifactory hid Gmail theft during Hugging Face attack
OpenAI’s internal JFrog Artifactory instance enabled a covert cross-account channel that let one ChatGPT session issue hidden instructions to another and extract data from connected services such as Gmail. Check Point Research disclosed the flaw as OpenAI’s agents were exploiting a separate Artifactory weakness in the operation that later reached Hugging Face, but the two attacks were not the same.

Source

Windows 11 build 29661 turns on IAKerb and fixes update failures

Par : IT News
9 septembre 2026 à 12:19
Windows 11 build 29661 turns on IAKerb and fixes update failures
Windows 11 Insider build 29661.1000 enables IAKerb by default, giving client devices another way to authenticate when they cannot directly reach a domain controller. The Experimental (Future Platforms) release also fixes cursor glitches and Windows Update error 0x80070005, which had blocked some Insiders from receiving newer builds.

Source

Windows 11’s movable taskbar reaches stable release with a few limits

Par : IT News
9 septembre 2026 à 12:19
Windows 11’s movable taskbar reaches stable release with a few limits
Microsoft has begun rolling out the movable taskbar to stable Windows 11 through the September 2026 update, KB5124008, after testing the feature in Release Preview. Users can now place it on the left, top, right, or bottom of the screen, although Microsoft is enabling the option gradually and some related features still work only in horizontal layouts.

Source

Cisco patch bundle hits critical Nexus 9000 and IOS XR flaws

Par : IT News
9 septembre 2026 à 12:19
Cisco patch bundle hits critical Nexus 9000 and IOS XR flaws
Cisco’s latest security release includes a critical remote-code-execution flaw in Silicon One-based Nexus 9000 switches as well as seven vulnerabilities in IOS XR, including two rated CVSS 9.8. The Nexus issue can let unauthenticated attackers run code as root, while the IOS XR flaws affect all releases and have no workaround.

Source

Open-source cleaner BleachBit hardens secure file wiping

Par : IT News
9 septembre 2026 à 12:19
Open-source cleaner BleachBit hardens secure file wiping
BleachBit is a free, open-source privacy and system-cleanup utility for Windows, Linux, and macOS. It removes temporary files, browser traces, caches, logs, and other sensitive data, and can securely shred files or wipe free disk space. Version 6.0.4 fixes a Windows flaw that could skip disk clusters during secure wiping, potentially leaving fragments of deleted files recoverable.

Source

Open source AI-Infra-Guard scans AI systems and hardens prompt-injection defenses

Par : IT News
9 septembre 2026 à 12:19
Open source AI-Infra-Guard scans AI systems and hardens prompt-injection defenses
AI-Infra-Guard is an open-source security scanner from Tencent’s Zhuque Lab that identifies AI services, checks them for known vulnerabilities, and assesses risks in MCP servers, agent skills, and models. Its new 4.1.9 release strengthens the scanner against indirect prompt injection—a threat that arises when it analyzes attacker-controlled tool descriptions and skill files. The tool still lacks built-in authentication, so administrators must protect its web interface separately.

Source

Microsoft Graph’s group mailbox blind spot breaks folder-aware backups

Par : IT News
9 septembre 2026 à 12:19
Microsoft Graph’s group mailbox blind spot breaks folder-aware backups
Microsoft Graph still cannot access Microsoft 365 Group mailboxes as ordinary Exchange mailboxes, leaving applications unable to enumerate folders, retrieve messages from subfolders, or create direct links to individual group posts. That limitation matters most for backup and compliance tools: conversations moved out of a group’s main Inbox can become invisible to the public API.

Source

Microsoft Defender ShieldCrash zero-day bypasses latest ShieldBreak patch

Par : IT News
9 septembre 2026 à 12:19
Microsoft Defender ShieldCrash zero-day bypasses latest ShieldBreak patch
A new Microsoft Defender zero-day called ShieldCrash can reportedly read arbitrary files as SYSTEM on fully patched Windows 10, Windows 11, and Windows Server systems. The proof of concept targets an incomplete fix for ShieldBreak, patched in September, and could potentially be expanded into a full SYSTEM privilege-escalation exploit.

Source

❌
❌