Microsoft Learn va retirer la plupart de ses dépôts GitHub publics de documentation d'ici fin 2026. Les corrections via pull request vont disparaître. Dommage.

Le post Microsoft Learn : la plupart des dépôts GitHub de documentation vont fermer d’ici fin 2026 a été publié sur IT-Connect.

Jusqu’à quand votre version de Windows 11 recevra-t-elle des mises à jour de sécurité ? La réponse dépend de la version installée sur votre PC — 26H2, 25H2, 24H2… — mais aussi de votre édition : Famille, Professionnel, Entreprise ou Éducation. Chaque version possède sa propre date de fin de support. Une fois cette échéance … Lire la suite

Source

OpenSSL has fixed a high-severity DTLS bug that could expose fragments of heap memory in plaintext or crash affected applications. The issue, tracked as CVE-2026-84782, affects software that uses OpenSSL for DTLS, including some WebRTC and internet calling setups.

Source

Unknown attackers are moving beyond initial NetScaler compromise and using root access to plant two new payloads, WHIPSHOT and SLAPSHOT, on Citrix ADC and Gateway appliances. The campaign builds on the same ongoing NetScaler exploitation that has already hit organizations across North America and Europe, but now shows how intruders are modifying appliance configs to keep control and pivot deeper into internal networks.

Source

Anthropic says Zhipu’s open-weight GLM-5.3 can build working cyber exploits almost as well as Claude Mythos Preview, while its safeguards are easy to strip away. The company’s tests put GLM-5.3 close behind Anthropic’s restricted model on exploit development, and show that a public version can be pushed from refusing harmful requests to complying at high rates.

Source

Microsoft has started rolling out Windows 11 26H2, and the good news for administrators is that Microsoft currently lists no active upgrade-blocking issues. Even so, the release health page still shows three recently mitigated problems that can affect post-install stability: USB audio failures, broken trust relationships on some domain-joined devices, and black screens in certain virtual desktop setups.

Source

AI coding agents are now being blamed for a privacy leak that put internal screenshots, billing records and unreleased product views into public GitHub repositories. Glow says the images were often stored under developers’ personal accounts, making them visible to outsiders while staying outside corporate security scans.

Source

Microsoft has confirmed that Windows 11 version 26H2 is the final release that will officially support PCs built around Qualcomm’s Snapdragon 850. Devices can still take the 26H2 update, but they will not be eligible for 27H2 and later versions, leaving admins with a two-year security window on current support.

Source

L’ISO de Windows 11 est un indispensable pour tous les utilisateurs du système. Elle permet non seulement d’installer Windows 11 sur un nouveau PC ou sur un disque vierge, de réparer Windows 11 lors le système est endommagé, mais aussi de réinitialiser Windows 11 afin de restaurer son ordinateur dans son état d’usine ou dans … Lire la suite

Source

Exploitez les Shadow Copies (VSS) en forensic Windows : inventaire avec vssadmin, accès via mklink, extraction avec ShadowCopyView, avec un exemple concret.

Le post Forensic Windows – Partie 14 : explorer les Shadow Copies (VSS) a été publié sur IT-Connect.

L'ANSSI a publié son rapport sur la cyberattaque de la DGFiP, entre identifiants volés par des infostealers, absence de MFA et exfiltrations jamais détectées.

Le post Cyberattaque DGFiP de l’été 2026 : ce que révèle le rapport de l’ANSSI a été publié sur IT-Connect.

OpenAI says its models can be tricked by self-replicating prompt injections that behave like an AI worm, and it is now training future systems on those attacks to make them harder to exploit. The company says the threat showed up in red-team testing, not in a real-world breach, but it highlights how agentic tools that read email, files, and chat can be turned into attack relays.

Source

The EU Cyber Resilience Act is now forcing container and Kubernetes teams to treat security as a product obligation, not an optional best practice. The law covers commercially supported container images, Helm charts and operators sold into EU markets, and it will require long-term patching, SBOM tracking and faster vulnerability reporting as enforcement phases in.

Source

Claude Compliance API integrations now let enterprises feed chat transcripts, file uploads, Cowork and Claude Code activity into the security and compliance tools they already run. The new integrations reach more than 100 vendors, including CrowdStrike, Microsoft Purview, Splunk, Palo Alto Networks, Cloudflare and Zscaler.

Source

Microsoft 365 Groups expose conversation, thread, and post data through Microsoft Graph, but that still does not make them equivalent to Outlook mailbox access. The key issue is that Graph can work with group conversations at a structured level, yet it does not cover the full set of mailbox elements available through the Outlook mailbox API.

Source

OpenClaw is getting an enterprise edition as Red Hat, Nvidia, OpenAI and others try to make agentic AI acceptable for corporate use. The project, now called OpenClaw Enterprise Edition, is meant to add stronger security, governance and auditability after businesses and security analysts warned that the original tool was too risky to deploy widely.

Source

Researchers have revived Spectre v2 in a new form called Branch Target Reuse, or BTR, and shown it can pry secrets from just-in-time code caches in browsers, language runtimes, and the Linux kernel. The attack abuses stale branch-prediction entries left behind after JIT code is freed and reused, turning them into a speculative execute-after-free primitive that can leak data even when some defenses are enabled.

Source

Visual Studio’s September 2026 Stable Channel update changes Bring Your Own Model so it now runs only through the new Agent (Preview) built on the GitHub Copilot SDK harness, which means older Ask and Agent modes are out and external Ollama models must be added again. The same release also brings native Podman container debugging and one-click NuGet vulnerability fixes inside the Error List.

Source

OpenAI used DevDay 2026 to push ChatGPT higher upmarket with a new $500 Pro tier, while also adding a Decisions API for fast routing and classification and rolling out major Codex upgrades for cloud-based coding work. The company also expanded sign-in and agent features across third-party apps and enterprise tools, signaling a broader push to make ChatGPT and Codex part of everyday work workflows.

Source