❌

Vue normale

Il y a de nouveaux articles disponibles, cliquez pour rafraîchir la page.
Aujourd’hui — 28 mars 2026Securité

GitHub fait machine arrière et va bien entraîner ses IA sur vos données

✇Cyberguerre
Par : Amine Baba Aissa
27 mars 2026 à 18:35

GitHub change son fusil d'épaule. Après avoir laissé planer un temps l’idée que les données de ses utilisateurs serviraient avant tout à améliorer Copilot sans forcément être réinjectées dans les modèles d’IA, la plateforme annonce désormais qu’elles seront bel et bien utilisées pour entraîner ses IA, à certaines conditions.

Citrix NetScaler Under Active Recon for CVE-2026-3055 (CVSS 9.3) Memory Overread Bug

✇The Hacker News
Par : [email protected] (The Hacker News)
28 mars 2026 à 10:11
A recently disclosed critical security flaw impacting Citrix NetScaler ADC and NetScaler Gateway is witnessing active reconnaissance activity, according to Defused Cyber and watchTowr. The vulnerability, CVE-2026-3055 (CVSS score: 9.3), refers to a case of insufficient input validation leading to memory overread, which an attacker could exploit to leak potentially sensitive information. Per

CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM Exploitation

✇The Hacker News
Par : [email protected] (The Hacker News)
28 mars 2026 à 08:07
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical security flaw impacting F5 BIG-IP Access Policy Manager (APM) to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability in question is CVE-2025-53521 (CVSS v4 score: 9.3), which could allow a threat actor to achieve remote code execution. "When a

TA446 Deploys DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign

✇The Hacker News
Par : [email protected] (The Hacker News)
28 mars 2026 à 08:07
Proofpoint has disclosed details of a targeted email campaign in which threat actors with ties to Russia are leveraging the recently disclosed DarkSword exploit kit to target iOS devices. The activity has been attributed with high confidence to the Russian state-sponsored threat group known as TA446, which is also tracked by the broader cybersecurity community under the monikers Callisto,

Apple Sends Lock Screen Alerts to Outdated iPhones Over Active Web-Based Exploits

✇The Hacker News
Par : [email protected] (The Hacker News)
27 mars 2026 à 18:22
Apple is now sending Lock Screen notifications to iPhones and iPads running older versions of iOS and iPadOS to alert users of web-based attacks and urge them to install the update. The development was first reported by MacRumors. "Apple is aware of attacks targeting out-of-date iOS software, including the version on your iPhone. Install this critical update to protect your iPhone," the

TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides Stealer in WAV Files

✇The Hacker News
Par : [email protected] (The Hacker News)
27 mars 2026 à 17:53
TeamPCP, the threat actor behind the supply chain attack targeting Trivy, KICS, and litellm, has now compromised the telnyx Python package by pushing two malicious versions to steal sensitive data. The two versions, 4.87.1 and 4.87.2, published to the Python Package Index (PyPI) repository on March 27, 2026, concealed their credential harvesting capabilities within a .WAV file. Users are

Hier — 27 mars 2026Securité

Open VSX Bug Let Malicious VS Code Extensions Bypass Pre-Publish Security Checks

✇The Hacker News
Par : [email protected] (The Hacker News)
27 mars 2026 à 14:57
Cybersecurity researchers have disclosed details of a now-patched bug impacting Open VSX's pre-publish scanning pipeline to cause the tool to allow a malicious Microsoft Visual Studio Code (VS Code) extension to pass the vetting process and go live in the registry. "The pipeline had a single boolean return value that meant both 'no scanners are configured' and 'all scanners failed to run,'" Koi

Le SDK de voix IA « Telnyx » a été compromis dans le cadre de la campagne TeamPCP

✇UnderNews
Par : UnderNews
27 mars 2026 à 15:32

JFrog Security Research vient de mettre au jour une faille majeure affectant la bibliothèque PyPI de telnyx, un SDK essentiel utilisé par les développeurs pour intégrer des agents vocaux IA et des services de messagerie dans leurs applications. Tribune – Avec plus de 3,8 millions de téléchargements au total et près de 700 000 utilisateurs […]

The post Le SDK de voix IA « Telnyx » a été compromis dans le cadre de la campagne TeamPCP first appeared on UnderNews.

Une étude met en lumière les fuites de données qui ont fait le plus de dégâts en 2025

✇UnderNews
Par : UnderNews
27 mars 2026 à 14:41

En 2025, des milliers de fuites et de violations de données ont été recensées, mais quelques incidents très médiatisés ont été à l’origine d’une majorité des préjudices. Le gestionnaire de mots de passe NordPass, en collaboration avec la plateforme de surveillance du dark web NordStellar, a identifié les cinq fuites les plus marquantes de l’année, […]

The post Une étude met en lumière les fuites de données qui ont fait le plus de dégâts en 2025 first appeared on UnderNews.

AitM Phishing Targets TikTok Business Accounts Using Cloudflare Turnstile Evasion

✇The Hacker News
Par : [email protected] (The Hacker News)
27 mars 2026 à 13:03
Threat actors are using adversary-in-the-middle (AitM) phishing pages to seize control of TikTok for Business accounts in a new campaign, according to a report from Push Security. Business accounts associated with social media platforms are a lucrative target, as they can be weaponized by bad actors for malvertising and distributing malware. "TikTok has been historically abused to distribute

We Are At War

✇The Hacker News
Par : [email protected] (The Hacker News)
27 mars 2026 à 12:00
Rising geopolitical tensions are reflected (or in some cases preceded) by cyber operations, while technology itself has become politicized. Let’s admit it: we are in the middle of it.  Introduction: One tech power to rule them all is a thing of the past  The relative safety, peace and prosperity that much of the world has enjoyed since 1945 was not accidental. It emerged from the ashes

❌
❌