❌

Vue normale

Il y a de nouveaux articles disponibles, cliquez pour rafraîchir la page.
Aujourd’hui — 23 décembre 2025Securité

DJI sur liste noire : cette décision américaine peut-elle bouleverser le marché des drones ?

✇Cyberguerre
Par : Amine Baba Aissa
23 décembre 2025 à 13:10

Les États-Unis viennent d’inscrire les drones étrangers sur une liste noire de sécurité nationale, empêchant toute nouvelle homologation de modèles fabriqués hors du pays. Une décision qui cible en particulier les géants chinois du secteur et pourrait rebattre les cartes d’un marché largement dominé par DJI.

INTERPOL Arrests 574 in Africa; Ukrainian Ransomware Affiliate Pleads Guilty

✇The Hacker News
Par : [email protected] (The Hacker News)
23 décembre 2025 à 12:35
A law enforcement operation coordinated by INTERPOL has led to the recovery of $3 million and the arrest of 574 suspects by authorities from 19 countries, amidst a continued crackdown on cybercrime networks in Africa. The coordinated effort, named Operation Sentinel, took place between October 27 and November 27, 2025, and mainly focused on business email compromise (BEC), digital extortion, and

Passwd: A walkthrough of the Google Workspace Password Manager

✇The Hacker News
Par : [email protected] (The Hacker News)
23 décembre 2025 à 12:30
Passwd is designed specifically for organizations operating within Google Workspace. Rather than competing as a general consumer password manager, its purpose is narrow, and business-focused: secure credential storage, controlled sharing, and seamless Workspace integration. The platform emphasizes practicality over feature overload, aiming to provide a reliable system for teams that already rely

U.S. DoJ Seizes Fraud Domain Behind $14.6 Million Bank Account Takeover Scheme

✇The Hacker News
Par : [email protected] (The Hacker News)
23 décembre 2025 à 09:15
The U.S. Justice Department (DoJ) on Monday announced the seizure of a web domain and database that it said was used to further a criminal scheme designed to target and defraud Americans by means of bank account takeover fraud. The domain in question, web3adspanels[.]org, was used as a backend web panel to host and manipulate illegally harvested bank login credentials. Users to the website are

Une faille critique touche n8n : êtes-vous concernés ?

✇Cyberguerre
Par : Amine Baba Aissa
23 décembre 2025 à 10:52

Un grave bug de sécurité met en danger des dizaines de milliers d’instances n8n exposées sur Internet. Notée 9,9 sur 10, la vulnérabilité CVE‑2025‑68613 permet à un utilisateur d’exécuter du code arbitraire sur le serveur, bien au-delà de ce que la plateforme est censée autoriser.

Critical n8n Flaw (CVSS 9.9) Enables Arbitrary Code Execution Across Thousands of Instances

✇The Hacker News
Par : [email protected] (The Hacker News)
23 décembre 2025 à 08:34
A critical security vulnerability has been disclosed in the n8n workflow automation platform that, if successfully exploited, could result in arbitrary code execution under certain circumstances. The vulnerability, tracked as CVE-2025-68613, carries a CVSS score of 9.9 out of a maximum of 10.0. The package has about 57,000 weekly downloads, according to statistics on npm. "Under certain

FCC Bans Foreign-Made Drones and Key Parts Over U.S. National Security Risks

✇The Hacker News
Par : [email protected] (The Hacker News)
23 décembre 2025 à 07:58
The U.S. Federal Communications Commission (FCC) on Monday announced a ban on all drones and critical components made in a foreign country, citing national security concerns. To that end, the agency has added to its Covered List Uncrewed aircraft systems (UAS) and UAS critical components produced in a foreign country, and all communications and video surveillance equipment and services pursuant

Hier — 22 décembre 2025Securité

CISA flags ASUS Live Update CVE, but the attack is years old

✇BleepingComputer
Par : Ax Sharma
22 décembre 2025 à 12:09
An ASUS Live Update vulnerability tracked as CVE-2025-59374 has been making the rounds in infosec feeds, with some headlines implying recent or ongoing exploitation. A closer look, however, shows the CVE documents a historic supply-chain attack in an End-of-Life (EoL) software product, not a new attack. [...]

Fake WhatsApp API Package on npm Steals Messages, Contacts, and Login Tokens

✇The Hacker News
Par : [email protected] (The Hacker News)
22 décembre 2025 à 17:28
Cybersecurity researchers have disclosed details of a new malicious package on the npm repository that works as a fully functional WhatsApp API, but also contains the ability to intercept every message and link the attacker's device to a victim's WhatsApp account. The package, named "lotusbail," has been downloaded over 56,000 times since it was first uploaded to the registry by a user named "

❌
❌