❌

Vue normale

Il y a de nouveaux articles disponibles, cliquez pour rafraîchir la page.
Aujourd’hui — 3 novembre 2026Securité

Cyberattaque de Binance : Flare détecte 74 identifiants professionnels dans des données dérobées par des infostealers

✇UnderNews
Par : UnderNews
3 novembre 2026 à 09:43

À la suite de la cyberattaque ayant visé Binance, Assaf Morag, chercheur en cybersécurité chez Flare, spécialiste du renseignement sur les cybermenaces, s’est penché sur cinq années de données dérobées par des logiciels malveillants de type infostealer. Son analyse a permis de retrouver 219 journaux de vol de données contenant 74 noms d’utilisateur distincts associés […]

The post Cyberattaque de Binance : Flare détecte 74 identifiants professionnels dans des données dérobées par des infostealers first appeared on UnderNews.

Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot Wallets

✇The Hacker News
Par : [email protected] (The Hacker News)
3 novembre 2026 à 09:31
BTCPay Server, a self-hosted, open-source cryptocurrency payment processor, has urged users to install the latest version of its software in response to reports of Bitcoin and Litecoin being stolen from hot wallets on instances running older versions. "Our investigation found that these attacks targeted servers running BTCPay Server 2.4.1 (released on 23 July 2026) or earlier," BTCPay Server

Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw

✇The Hacker News
Par : [email protected] (The Hacker News)
3 novembre 2026 à 08:43
Synology is urging customers to update the DiskStation Manager (DSM) software powering its Network Attached Storage (NAS) devices following ransomware attacks. The Taiwanese vendor said it observed threat actors exploiting a vulnerability patched in December 2024 to target devices running outdated versions of DSM. "These attacks aim to encrypt data and extort ransom," it said in a statement

New Wave of Refrigeration Cyberattacks Hits Supermarkets Across Europe, Forcing Stores to Pull Food

✇The Hacker News
Par : [email protected] (The Hacker News)
3 novembre 2026 à 08:27
Attackers remotely changed the settings on refrigeration controls at supermarkets in Belgium, Sweden, Estonia and other European countries overnight into Monday, November 2, warming fridges and freezers. No chain reported more than several dozen affected stores, and some had to throw away chilled and frozen food or take it off the shelf. Danfoss, a Danish maker of refrigeration controls,&nbsp

Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors

✇The Hacker News
Par : [email protected] (The Hacker News)
3 novembre 2026 à 06:34
A maximum-severity security flaw impacting Siemens SIMATIC IoT2050 Advanced devices has come under active exploitation, VulnCheck has revealed. The vulnerability, tracked as CVE-2026-58115 (CVSS score: 10.0), is a case of missing authentication for a critical function that could be exploited by an unauthenticated remote attacker to run arbitrary code. "SIMATIC IoT2050 Advanced devices running

Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials

✇The Hacker News
Par : [email protected] (The Hacker News)
3 novembre 2026 à 06:34
Threat actors are attempting to exploit an unpatched maximum-severity security vulnerability in the CryptoPayment Gateway WordPress plugin, according to findings from Defused Cyber. The vulnerability in question is CVE-2026-81648, which carries a CVSS score of 10.0. Successful exploitation of the flaw could permit unauthenticated users to delete arbitrary files on the server and extract

Hier — 2 novembre 2026Securité

⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More

✇The Hacker News
Par : [email protected] (The Hacker News)
2 novembre 2026 à 17:57
Some attacks this week didn't need much of a trick. A fake support call, a trusted extension, a shared link, or a device with no password. Small things that people barely think about. Yet each was enough to cause serious trouble. Then there were the bigger messes. Billions stolen, hidden networks of hacked devices, poisoned software, and attackers finding new ways to turn normal tools against

Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access

✇The Hacker News
Par : [email protected] (The Hacker News)
2 novembre 2026 à 16:50
A botnet of more than 1.3 million Android devices, mostly TV set-top boxes, lost control of its servers in late October in a takedown led by Google. Google says it is highly confident that device maker Videostrong intentionally put a backdoor in the boxes and sold access to criminals. They used the boxes for ad fraud and to pass other people's internet traffic through owners' home

DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment

✇The Hacker News
Par : [email protected] (The Hacker News)
2 novembre 2026 à 15:46
Cybersecurity researchers have disclosed details of a cyber espionage campaign targeting Israel and the Kurdistan Region of Iraq by an Iran state-aligned threat actor between August and October 2026. According to a report published by Dream Research Labs, the campaign has led to the compromise of a high-profile individual in Israel, along with additional compromises affecting a government cloud

Google analyse l’impact financier du LLM Jacking

✇UnderNews
Par : UnderNews
2 novembre 2026 à 17:04

Alors que les entreprises intègrent rapidement des LLM de pointe dans leurs environnements de production, les cybercriminels se sont tournés vers une nouvelle tactique lucrative : détourner l’accès des entreprises à ces modèles pour alimenter leurs opérations malveillantes et/ou revendre cet accès à d’autres acteurs de la menace. Tribune – Dans un nouveau rapport de renseignement […]

The post Google analyse l’impact financier du LLM Jacking first appeared on UnderNews.

Piratages de Binance et Polymarket : l’écosystème crypto ciblé

✇UnderNews
Par : UnderNews
2 novembre 2026 à 14:52

Le secteur des crypto-monnaies vient d’être frappé par deux incidents majeurs : le piratage de Binance, potentiellement le plus grand vol de l’histoire du secteur, et une attaque ciblant Polymarket via un script tiers. Poste interne ou dépendance web externe, ces deux cas rappellent la vulnérabilité de l’écosystème crypto face à des attaques sophistiquées, potentiellement […]

The post Piratages de Binance et Polymarket : l’écosystème crypto ciblé first appeared on UnderNews.

Arnaques par IA et deepfakes, les réflexes qui protègent vraiment

✇UnderNews
Par : UnderNews
2 novembre 2026 à 14:48

Une voix familière vous demande un transfert urgent. Une vidéo montre un dirigeant recommandant un placement. Un message parfaitement rédigé réclame un code de connexion. Ces situations doivent conduire à vérifier la demande, même lorsque le contenu paraît crédible. Face aux usages frauduleux de l’intelligence artificielle, la protection repose d’abord sur la manière de confirmer […]

The post Arnaques par IA et deepfakes, les réflexes qui protègent vraiment first appeared on UnderNews.

Google disrupts million-device XCPE Android malware botnet, bans TV box maker

✇BleepingComputer
Par : Lawrence Abrams
2 novembre 2026 à 19:16
Google and industry partners have dismantled the XCPE malware botnet consisting of more than 1.3 million Android TV streaming TV boxes that Google says its manufacturer intentionally infected with malware to generate revenue through cybercrime activities. [...]

Your Mobile Carrier Stores Your Call Logs for Years

✇BleepingComputer
Par : Sponsored by Cape
2 novembre 2026 à 16:01
Mobile carriers can retain years of call and text metadata, exposing sensitive details about customers' relationships, locations, and daily routines if breached. Cape examines the privacy risks of long-term telecom data retention and how its mobile service reduces exposure by automatically deleting call records. [...]
❌
❌