Microsoft is rolling out a new backup system in September for its Authenticator app on iOS, removing the requirement to use a Microsoft personal account to back up TOTP secrets and account names. [...]

Microsoft has confirmed a widespread issue in Windows Server Update Services (WSUS) that prevents organizations from syncing with Microsoft Update and deploying the latest Windows updates. [...]

Australian airline Qantas has confirmed that 5.7 million people have been impacted by a recent data breach, in which threat actors stole customers' data. [...]

Google is sharing more information on how Chrome operates when Android mobile users enable Advanced Protection, highlighting strong security improvements. [...]

Bitcoin Depot, an operator of Bitcoin ATMs, is notifying customers of a data breach incident that has exposed their sensitive information. [...]

Multiple vulnerabilities that remain unpatched in Ruckus Wireless management products could be exploited to fully compromise the network environment they serve. [...]

Ingram Micro has begun restoring systems and business services after suffering a massive SafePay ransomware attack right before the July 4th holiday. [...]

The Initial Access Broker (IAB) known as Gold Melody has been attributed to a campaign that exploits leaked ASP.NET machine keys to obtain unauthorized access to organizations and peddle that access to other threat actors. The activity is being tracked by Palo Alto Networks Unit 42 under the moniker TGR-CRI-0045, where "TGR" stands for "temporary group" and "CRI" refers to criminal motivation.

JFrog découvre une vulnérabilité critique d’exécution de code à distance (RCE) affectant les clients mcp-remote. Une première mondiale : l’exécution d’un code à distance sur des machines clientes de LLM se connectant à des serveurs MCP compromis ou non fiables. Tribune — L’équipe de recherche en sécurité de JFrog annonce aujourd’hui la découverte d’une vulnérabilité […]

The post Frog découvre une vulnérabilité RCE majeure ciblant les clients MCP first appeared on UnderNews.

Aujourd’hui, xAI, l’entreprise d’intelligence artificielle (IA) d’Elon Musk a réagi suite à des posts problématiques et « inappropriés » de son chatbot Grok. Cette polémique continue d’alimenter la réticence des entreprises envers cette plateforme d’IA générative, qui fait déjà l’objet de politiques de sécurité renforcées dans certaines organisations. Tribune – A cette occasion, Ray Canzanese, Directeur du […]

The post Bloquer ou non Grok AI, un choix de sécurité pour les organisations first appeared on UnderNews.

La Cybertech Filigran publie un nouveau livre blanc qui met en lumière un angle mort majeur dans la stratégie cyber des entreprises : le « Threat Intelligence Gap », cet écart croissant entre l’évolution rapide des menaces et les capacités réelles de détection et de réaction. Face à la complexité croissante de l’environnement cyber, Filigran appelle les […]

The post Cybersécurité : Filigran alerte sur « l’Intelligence Gap » qui mine l’efficacité des RSSI first appeared on UnderNews.

A threat actor with suspected ties to India has been observed targeting a European foreign affairs ministry with malware capable of harvesting sensitive data from compromised hosts. The activity has been attributed by Trellix Advanced Research Center to an advanced persistent threat (APT) group called DoNot Team, which is also known as APT-C-35, Mint Tempest, Origami Elephant, SECTOR02, and

The U.S. Department of the Treasury sanctioned cyber actor Song Kum Hyok for his association with North Korea's hacking group Andariel and for facilitating IT worker schemes that generated revenue for the Pyongyang regime. [...]

MFA Authenticator apps aren't cutting it anymore. Attackers are bypassing legacy MFA with fake sites and real-time phishing. Token Ring and BioStick stop them cold—with fingerprint-bound hardware. Learn more from Token. [...]

A new vulnerability in ServiceNow, dubbed Count(er) Strike, allows low-privileged users to extract sensitive data from tables to which they should not have access. [...]

The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) on Tuesday sanctioned a member of a North Korean hacking group called Andariel for their role in the infamous remote information technology (IT) worker scheme. The Treasury said Song Kum Hyok, a 38-year-old North Korean national with an address in the Chinese province of Jilin, enabled the fraudulent operation by using

Run by the team at workflow orchestration and AI platform Tines, the Tines library features over 1,000 pre-built workflows shared by security practitioners from across the community - all free to import and deploy through the platform’s Community Edition. A recent standout is a workflow that handles malware alerts with CrowdStrike, Oomnitza, GitHub, and PagerDuty. Developed by Lucas Cantor at

A Chinese national has been arrested in Milan, Italy, for his alleged links to a state-sponsored hacking group known as Silk Typhoon and for carrying out cyber attacks against American organizations and government agencies. The 33-year-old, Xu Zewei, has been charged with nine counts of wire fraud and conspiracy to cause damage to and obtain information by unauthorized access to protected

Ci-dessous, une déclaration de John Hultquist, analyste en chef du Google Threat IntelligenceGroup, sur l’importance de l’arrestation d’un membre présumé de Silk Typhoon. Communiqué. « Cette arrestation couronne plus d’une décennie d’inculpations et d’autres efforts des forces de l’ordre qui étaient généralement considérés comme symboliques. Il était généralement admis que ces acteurs ne se retrouveraient jamais […]

The post Arrestation membre Silk Typhoon – Déclaration du GTIG first appeared on UnderNews.