❌

Vue normale

Il y a de nouveaux articles disponibles, cliquez pour rafraîchir la page.
Aujourd’hui — 7 juillet 2025Securité

TAG-140 Deploys DRAT V2 RAT, Targeting Indian Government, Defense, and Rail Sectors

✇The Hacker News
Par : [email protected] (The Hacker News)
7 juillet 2025 à 06:51
A hacking group with ties other than Pakistan has been found targeting Indian government organizations with a modified variant of a remote access trojan (RAT) called DRAT. The activity has been attributed by Recorded Future's Insikt Group to a threat actor tracked as TAG-140, which it said overlaps with SideCopy, an adversarial collective assessed to be an operational sub-cluster within

À partir d’avant-hierSecurité

Marre d’oublier vos mots de passe ? Proton Pass est en promo uniquement ici

✇Cyberguerre
Par : Adam Langumier
5 juillet 2025 à 13:01

proton pass

[Deal du jour] Un gestionnaire de mots de passe est indispensable si vous multipliez les comptes sur diverses plateformes et sites web. Proton Pass fait partie des meilleurs dans ce domaine, et en passant par Numerama, vous bénéficiez en ce moment d'une belle réduction sur l’abonnement annuel Pass Plus.

Taiwan NSB Alerts Public on Data Risks from TikTok, Weibo, and RedNote Over China Ties

✇The Hacker News
Par : [email protected] (The Hacker News)
5 juillet 2025 à 08:12
Taiwan's National Security Bureau (NSB) has warned that China-developed applications like RedNote (aka Xiaohongshu), Weibo, TikTok, WeChat, and Baidu Cloud pose security risks due to excessive data collection and data transfer to China. The alert comes following an inspection of these apps carried out in coordination with the Ministry of Justice Investigation Bureau (MJIB) and the Criminal

Alert: Exposed JDWP Interfaces Lead to Crypto Mining, Hpingbot Targets SSH for DDoS

✇The Hacker News
Par : [email protected] (The Hacker News)
5 juillet 2025 à 07:44
Threat actors are weaponizing exposed Java Debug Wire Protocol (JDWP) interfaces to obtain code execution capabilities and deploy cryptocurrency miners on compromised hosts. "The attacker used a modified version of XMRig with a hard-"coded configuration, allowing them to avoid suspicious command-line arguments that are often flagged by defenders," Wiz researchers Yaara Shriki and Gili

Comment l’Afrique de l’Ouest pourrait devenir une plaque tournante du cybercrime mondial

✇Cyberguerre
Par : Amine Baba Aissa
4 juillet 2025 à 15:22

Selon un rapport d'Interpol, publié fin juin 2025, les « scam centers » auraient jeté leur dévolu sur l’Afrique de l’Ouest. À la croisée de la cybercriminalité et de la traite d’êtres humains, ces réseaux, venus majoritairement d'Asie du Sud-Est, s'installent de plus en plus dans la région.

NightEagle APT Exploits Microsoft Exchange Flaw to Target China's Military and Tech Sectors

✇The Hacker News
Par : [email protected] (The Hacker News)
4 juillet 2025 à 14:59
Cybersecurity researchers have shed light on a previously undocumented threat actor called NightEagle (aka APT-Q-95) that has been observed targeting Microsoft Exchange servers as a part of a zero-day exploit chain designed to target government, defense, and technology sectors in China. According to QiAnXin's RedDrip Team, the threat actor has been active since 2023 and has switched network

Your AI Agents Might Be Leaking Data — Watch this Webinar to Learn How to Stop It

✇The Hacker News
Par : [email protected] (The Hacker News)
4 juillet 2025 à 11:31
Generative AI is changing how businesses work, learn, and innovate. But beneath the surface, something dangerous is happening. AI agents and custom GenAI workflows are creating new, hidden ways for sensitive enterprise data to leak—and most teams don’t even realize it. If you’re building, deploying, or managing AI systems, now is the time to ask: Are your AI agents exposing confidential data

Critical Sudo Vulnerabilities Let Local Users Gain Root Access on Linux, Impacting Major Distros

✇The Hacker News
Par : [email protected] (The Hacker News)
4 juillet 2025 à 11:30
Cybersecurity researchers have disclosed two security flaws in the Sudo command-line utility for Linux and Unix-like operating systems that could enable local attackers to escalate their privileges to root on susceptible machines. A brief description of the vulnerabilities is below - CVE-2025-32462 (CVSS score: 2.8) - Sudo before 1.9.17p1, when used with a sudoers file that specifies a host

Google Ordered to Pay $314M for Misusing Android Users' Cellular Data Without Permission

✇The Hacker News
Par : [email protected] (The Hacker News)
4 juillet 2025 à 09:17
Google has been ordered by a court in the U.S. state of California to pay $314 million over charges that it misused Android device users' cellular data when they were idle to passively send information to the company. The verdict marks an end to a legal class-action complaint that was originally filed in August 2019. In their lawsuit, the plaintiffs argued that Google's Android operating system

❌
❌