❌

Vue normale

Il y a de nouveaux articles disponibles, cliquez pour rafraîchir la page.
Aujourd’hui — 19 novembre 2025Securité

« Les attaquants augmentent leur puissance au même rythme qu’Internet », cette cyberattaque d’une ampleur inédite a discrètement été désamorcée

✇Cyberguerre
Par : Amine Baba Aissa
19 novembre 2025 à 13:15

Le 17 novembre 2025, Microsoft Azure a annoncé avoir subi une attaque DDoS d’une ampleur phénoménale, atteignant 15,72 Tbit par seconde. Cette opération malveillante, survenue quelques semaines plus tôt, serait l’œuvre d’un vaste réseau d’ordinateurs et d’appareils infectés nommé Aisuru.

Application Containment: How to Use Ringfencing to Prevent the Weaponization of Trusted Software

✇The Hacker News
Par : [email protected] (The Hacker News)
19 novembre 2025 à 12:55
The challenge facing security leaders is monumental: Securing environments where failure is not an option. Reliance on traditional security postures, such as Endpoint Detection and Response (EDR) to chase threats after they have already entered the network, is fundamentally risky and contributes significantly to the half-trillion-dollar annual cost of cybercrime. Zero Trust fundamentally shifts

EdgeStepper Implant Reroutes DNS Queries to Deploy Malware via Hijacked Software Updates

✇The Hacker News
Par : [email protected] (The Hacker News)
19 novembre 2025 à 11:00
The threat actor known as PlushDaemon has been observed using a previously undocumented Go-based network backdoor codenamed EdgeStepper to facilitate adversary-in-the-middle (AitM) attacks. EdgeStepper "redirects all DNS queries to an external, malicious hijacking node, effectively rerouting the traffic from legitimate infrastructure used for software updates to attacker-controlled infrastructure

ServiceNow AI Agents Can Be Tricked Into Acting Against Each Other via Second-Order Prompts

✇The Hacker News
Par : [email protected] (The Hacker News)
19 novembre 2025 à 10:59
Malicious actors can exploit default configurations in ServiceNow's Now Assist generative artificial intelligence (AI) platform and leverage its agentic capabilities to conduct prompt injection attacks. The second-order prompt injection, according to AppOmni, makes use of Now Assist's agent-to-agent discovery to execute unauthorized actions, enabling attackers to copy and exfiltrate sensitive

Fortinet Warns of New FortiWeb CVE-2025-58034 Vulnerability Exploited in the Wild

✇The Hacker News
Par : [email protected] (The Hacker News)
19 novembre 2025 à 05:20
Fortinet has warned of a new security flaw in FortiWeb that it said has been exploited in the wild. The medium-severity vulnerability, tracked as CVE-2025-58034, carries a CVSS score of 6.7 out of a maximum of 10.0. "An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiWeb may allow an authenticated attacker to execute

Hier — 18 novembre 2025Securité

Sneaky 2FA Phishing Kit Adds BitB Pop-ups Designed to Mimic the Browser Address Bar

✇The Hacker News
Par : [email protected] (The Hacker News)
18 novembre 2025 à 19:31
The malware authors associated with a Phishing-as-a-Service (PhaaS) kit known as Sneaky 2FA have incorporated Browser-in-the-Browser (BitB) functionality into their arsenal, underscoring the continued evolution of such offerings and further making it easier for less-skilled threat actors to mount attacks at scale. Push Security, in a report shared with The Hacker News, said it observed the use

Meta Expands WhatsApp Security Research with New Proxy Tool and $4M in Bounties This Year

✇The Hacker News
Par : [email protected] (The Hacker News)
18 novembre 2025 à 16:56
Meta on Tuesday said it has made available a tool called WhatsApp Research Proxy to some of its long-time bug bounty researchers to help improve the program and more effectively research the messaging platform's network protocol. The idea is to make it easier to delve into WhatsApp-specific technologies as the application continues to be a lucrative attack surface for state-sponsored actors and

« Comment les voitures sont devenues des ordinateurs sur roues ? », un expert du piratage automobile décrypte les menaces réelles

✇Cyberguerre
Par : Amine Baba Aissa
18 novembre 2025 à 17:35

Dans un entretien accordé au média américain The Record, Kamel Ghali, expert en cybersécurité automobile, dresse un état des lieux de ce qu’il est possible de pirater dans une voiture connectée. Évoquant à la fois des attaques concrètes, les motivations des hackers et les risques théoriques les plus extrêmes, l’expert aide à mieux appréhender un sujet souvent fantasmé.

❌
❌