Australian airline Qantas has confirmed that 5.7 million people have been impacted by a recent data breach, in which threat actors stole customers' data. [...]
Google is sharing more information on how Chrome operates when Android mobile users enable Advanced Protection, highlighting strong security improvements. [...]
Multiple vulnerabilities that remain unpatched in Ruckus Wireless management products could be exploited to fully compromise the network environment they serve. [...]
Ingram Micro has begun restoring systems and business services after suffering a massive SafePay ransomware attack right before the July 4th holiday. [...]
The Initial Access Broker (IAB) known as Gold Melody has been attributed to a campaign that exploits leaked ASP.NET machine keys to obtain unauthorized access to organizations and peddle that access to other threat actors.
The activity is being tracked by Palo Alto Networks Unit 42 under the moniker TGR-CRI-0045, where "TGR" stands for "temporary group" and "CRI" refers to criminal motivation.
JFrog découvre une vulnérabilité critique d’exécution de code à distance (RCE) affectant les clients mcp-remote. Une première mondiale : l’exécution d’un code à distance sur des machines clientes de LLM se connectant à des serveurs MCP compromis ou non fiables. Tribune — L’équipe de recherche en sécurité de JFrog annonce aujourd’hui la découverte d’une vulnérabilité […]
Aujourd’hui, xAI, l’entreprise d’intelligence artificielle (IA) d’Elon Musk a réagi suite à des posts problématiques et « inappropriés » de son chatbot Grok. Cette polémique continue d’alimenter la réticence des entreprises envers cette plateforme d’IA générative, qui fait déjà l’objet de politiques de sécurité renforcées dans certaines organisations. Tribune – A cette occasion, Ray Canzanese, Directeur du […]
La Cybertech Filigran publie un nouveau livre blanc qui met en lumière un angle mort majeur dans la stratégie cyber des entreprises : le « Threat Intelligence Gap », cet écart croissant entre l’évolution rapide des menaces et les capacités réelles de détection et de réaction. Face à la complexité croissante de l’environnement cyber, Filigran appelle les […]
A threat actor with suspected ties to India has been observed targeting a European foreign affairs ministry with malware capable of harvesting sensitive data from compromised hosts.
The activity has been attributed by Trellix Advanced Research Center to an advanced persistent threat (APT) group called DoNot Team, which is also known as APT-C-35, Mint Tempest, Origami Elephant, SECTOR02, and
The U.S. Department of the Treasury sanctioned cyber actor Song Kum Hyok for his association with North Korea's hacking group Andariel and for facilitating IT worker schemes that generated revenue for the Pyongyang regime. [...]
MFA Authenticator apps aren't cutting it anymore. Attackers are bypassing legacy MFA with fake sites and real-time phishing. Token Ring and BioStick stop them cold—with fingerprint-bound hardware. Learn more from Token. [...]
A new vulnerability in ServiceNow, dubbed Count(er) Strike, allows low-privileged users to extract sensitive data from tables to which they should not have access. [...]
The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) on Tuesday sanctioned a member of a North Korean hacking group called Andariel for their role in the infamous remote information technology (IT) worker scheme.
The Treasury said Song Kum Hyok, a 38-year-old North Korean national with an address in the Chinese province of Jilin, enabled the fraudulent operation by using
Run by the team at workflow orchestration and AI platform Tines, the Tines library features over 1,000 pre-built workflows shared by security practitioners from across the community - all free to import and deploy through the platform’s Community Edition.
A recent standout is a workflow that handles malware alerts with CrowdStrike, Oomnitza, GitHub, and PagerDuty. Developed by Lucas Cantor at
A Chinese national has been arrested in Milan, Italy, for his alleged links to a state-sponsored hacking group known as Silk Typhoon and for carrying out cyber attacks against American organizations and government agencies.
The 33-year-old, Xu Zewei, has been charged with nine counts of wire fraud and conspiracy to cause damage to and obtain information by unauthorized access to protected
Ci-dessous, une déclaration de John Hultquist, analyste en chef du Google Threat IntelligenceGroup, sur l’importance de l’arrestation d’un membre présumé de Silk Typhoon. Communiqué. « Cette arrestation couronne plus d’une décennie d’inculpations et d’autres efforts des forces de l’ordre qui étaient généralement considérés comme symboliques. Il était généralement admis que ces acteurs ne se retrouveraient jamais […]
Hausse des menaces par e-mail, multiplication des attaques furtives sur les endpoints et baisse du ransomware : un paysage façonné par l’essor de l’IA. Tribune – WatchGuard® Technologies, leader mondial de la cybersécurité unifiée à destination des fournisseurs de services managés (MSP), dévoile les résultats de son dernier rapport trimestriel sur la sécurité Internet. Ce […]
For the first time in 2025, Microsoft's Patch Tuesday updates did not bundle fixes for exploited security vulnerabilities, but the company acknowledged one of the addressed flaws had been publicly known.
The patches resolve a whopping 130 vulnerabilities, along with 10 other non-Microsoft CVEs that affect Visual Studio, AMD, and its Chromium-based Edge browser. Of these 10 are rated Critical and
ConnexionThe Hacker News
UnderNews
