❌

Vue normale

Il y a de nouveaux articles disponibles, cliquez pour rafraîchir la page.
Aujourd’hui — 23 juillet 2025Securité

Google Launches OSS Rebuild to Expose Malicious Code in Widely Used Open-Source Packages

✇The Hacker News
Par : [email protected] (The Hacker News)
23 juillet 2025 à 11:28
Google has announced the launch of a new initiative called OSS Rebuild to bolster the security of the open-source package ecosystems and prevent software supply chain attacks. "As supply chain attacks continue to target widely-used dependencies, OSS Rebuild gives security teams powerful data to avoid compromise without burden on upstream maintainers," Matthew Suozzo, Google Open Source Security

Oui, le mail Free Mobile « Procédure Obligatoire » est une arnaque, ne tombez pas dans le piège

✇Cyberguerre
Par : Amine Baba Aissa
23 juillet 2025 à 11:04

Une nouvelle campagne de phishing aux couleurs de Free Mobile est en cours. Si vous avez reçu un mail de l'opérateur vous demandant de confirmer certaines informations personnelles, il s'agit très probablement d'un piège.

CISA Warns: SysAid Flaws Under Active Attack Enable Remote File Access and SSRF

✇The Hacker News
Par : [email protected] (The Hacker News)
23 juillet 2025 à 08:23
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two security flaws impacting SysAid IT support software to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerabilities in question are listed below - CVE-2025-2775 (CVSS score: 9.3) - An improper restriction of XML external entity (XXE) reference vulnerability in the

CISA Orders Urgent Patching After Chinese Hackers Exploit SharePoint Flaws in Live Attacks

✇The Hacker News
Par : [email protected] (The Hacker News)
23 juillet 2025 à 06:40
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on July 22, 2025, added two Microsoft SharePoint flaws, CVE-2025-49704 and CVE-2025-49706, to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. To that end, Federal Civilian Executive Branch (FCEB) agencies are required to remediate identified vulnerabilities by July 23, 2025. "CISA is

Hier — 22 juillet 2025Securité

Faille Microsoft SharePoint, une affaire d’espionnage chinois ?

✇Cyberguerre
Par : Amine Baba Aissa
22 juillet 2025 à 18:47

L'écosystème cyber est en alerte depuis la découverte de deux vulnérabilités « zero-day » affectant la célèbre solution de gestion collaborative SharePoint de Microsoft. Toujours activement exploitées, ces failles sont au cœur d’une large campagne de piratage menée, selon de nombreux experts, par des groupes de cyberespionnage soutenus par Pékin.

Microsoft Links Ongoing SharePoint Exploits to Three Chinese Hacker Groups

✇The Hacker News
Par : [email protected] (The Hacker News)
22 juillet 2025 à 17:45
Microsoft has formally tied the exploitation of security flaws in internet-facing SharePoint Server instances to two Chinese hacking groups called Linen Typhoon and Violet Typhoon as early as July 7, 2025, corroborating earlier reports. The tech giant said it also observed a third China-based threat actor, which it tracks as Storm-2603, weaponizing the flaws as well to obtain initial access to

Cisco Confirms Active Exploits Targeting ISE Flaws Enabling Unauthenticated Root Access

✇The Hacker News
Par : [email protected] (The Hacker News)
22 juillet 2025 à 15:08
Cisco on Monday updated its advisory of a set of recently disclosed security flaws in Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) to acknowledge active exploitation. "In July 2025, the Cisco PSIRT [Product Security Incident Response Team], became aware of attempted exploitation of some of these vulnerabilities in the wild," the company said in an alert. The

Credential Theft and Remote Access Surge as AllaKore, PureRAT, and Hijack Loader Proliferate

✇The Hacker News
Par : [email protected] (The Hacker News)
22 juillet 2025 à 15:00
Mexican organizations are still being targeted by threat actors to deliver a modified version of AllaKore RAT and SystemBC as part of a long-running campaign.  The activity has been attributed by Arctic Wolf Labs to a financially motivated hacking group called Greedy Sponge. It's believed to be active since early 2021, indiscriminately targeting a wide range of sectors, such as retail,

❌
❌