Some attacks this week didn't need much of a trick. A fake support call, a trusted extension, a shared link, or a device with no password. Small things that people barely think about. Yet each was enough to cause serious trouble.
Then there were the bigger messes. Billions stolen, hidden networks of hacked devices, poisoned software, and attackers finding new ways to turn normal tools against
A botnet of more than 1.3 million Android devices, mostly TV set-top boxes, lost control of its servers in late October in a takedown led by Google.
Google says it is highly confident that device maker Videostrong intentionally put a backdoor in the boxes and sold access to criminals.
They used the boxes for ad fraud and to pass other people's internet traffic through owners' home
Cybersecurity researchers have disclosed details of a cyber espionage campaign targeting Israel and the Kurdistan Region of Iraq by an Iran state-aligned threat actor between August and October 2026.
According to a report published by Dream Research Labs, the campaign has led to the compromise of a high-profile individual in Israel, along with additional compromises affecting a government cloud
Alors que les entreprises intègrent rapidement des LLM de pointe dans leurs environnements de production, les cybercriminels se sont tournés vers une nouvelle tactique lucrative : détourner l’accès des entreprises à ces modèles pour alimenter leurs opérations malveillantes et/ou revendre cet accès à d’autres acteurs de la menace. Tribune – Dans un nouveau rapport de renseignement […]
Le secteur des crypto-monnaies vient d’être frappé par deux incidents majeurs : le piratage de Binance, potentiellement le plus grand vol de l’histoire du secteur, et une attaque ciblant Polymarket via un script tiers. Poste interne ou dépendance web externe, ces deux cas rappellent la vulnérabilité de l’écosystème crypto face à des attaques sophistiquées, potentiellement […]
Une voix familière vous demande un transfert urgent. Une vidéo montre un dirigeant recommandant un placement. Un message parfaitement rédigé réclame un code de connexion. Ces situations doivent conduire à vérifier la demande, même lorsque le contenu paraît crédible. Face aux usages frauduleux de l’intelligence artificielle, la protection repose d’abord sur la manière de confirmer […]
Chinese hackers used ARTEX, an open-source, multi-agent AI penetration-testing framework, in attacks against more than 200 organizations across 14 countries. [...]
Financial technology company Abrigo has restored its Sageworks risk management application, except for borrower-facing capabilities, following an outage triggered by "irregular activity" in its environment. [...]
Google and industry partners have dismantled the XCPE malware botnet consisting of more than 1.3 million Android TV streaming TV boxes that Google says its manufacturer intentionally infected with malware to generate revenue through cybercrime activities. [...]
The maintainer of BTCPay Server, an open-source cryptocurrency payment processor, has urged users to install the latest version as hackers have been draining "hot wallets" on instances running older versions. [...]
Mobile carriers can retain years of call and text metadata, exposing sensitive details about customers' relationships, locations, and daily routines if breached. Cape examines the privacy risks of long-term telecom data retention and how its mobile service reduces exposure by automatically deleting call records. [...]
A cyberattack on refrigeration systems has disrupted stores run by multiple supermarket chains across several European countries after hackers remotely changed temperature settings on freezers and cooling systems. [...]
Microsoft has resolved a known issue that prevented some users from activating the Smart App Control security feature after installing the October 2026 KB5127648 Windows 11 security update. [...]
Two critical flaws in Langflow could let a remote attacker with no account bypass authentication or run arbitrary code, IBM said last week.
Langflow is an open-source tool for building AI agents and workflows, and its vulnerability reports go to IBM. Every release from 1.0.0 through 1.12.8 has the flaws, and the only fix is version 1.13.0.
Neither flaw is in CISA's Known
Forty percent of security teams now use AI every day, and another 56% are testing it. Only 4% have no plans to adopt it, according to Prophet Security's State of AI in Security Operations 2026 survey of more than 250 CISOs, SOC leaders and practitioners. For the teams still testing, the next decision is whether their own SOC is ready.
AI SOC readiness has two parts: whether a SOC has the
Des dizaines de magasins ont vu la température de leurs réfrigérateurs et congélateurs grimper le 2 novembre, notamment en Belgique, au Luxembourg et en Suède. Le mode opératoire décrit en Belgique est le même que celui de l’attaque qui a frappé la France en octobre.
Over 1,000 Internet-exposed GitLab servers are still unpatched against a maximum-severity flaw actively exploited in remote code execution attacks. [...]
Taiwanese network-attached storage (NAS) appliance maker Synology warned customers to update their devices immediately due to a surge in C3RB3r ransomware attacks. [...]
Attackers posing as IT support on Microsoft Teams talked employees into giving them remote control of their PCs. They then used insecure Active Directory Certificate Services (AD CS) settings to obtain login certificates for privileged accounts, including one for a domain controller.
Microsoft said in a report that it investigated two such intrusions, one of which resulted in company
Connexion
