❌

Vue normale

Il y a de nouveaux articles disponibles, cliquez pour rafraîchir la page.
Aujourd’hui — 15 juillet 2025Securité

Des images satellites montrent l’impact des frappes iraniennes sur la base américaine au Qatar (photos)

✇Cyberguerre
Par : Amine Baba Aissa
15 juillet 2025 à 12:00

Depuis le 11 juillet 2025, de nombreux clichés récoltés par l'OSINT montrent l'impact des frappes iraniennes contre la base américaine d'Al Udeid au Qatar. Survenue dans la nuit du 23 au 24 juin 2025, cette salve de missiles balistiques était une réponse aux frappes américaines sur des installations nucléaires iraniennes.

North Korean Hackers Flood npm Registry with XORIndex Malware in Ongoing Attack Campaign

✇The Hacker News
Par : [email protected] (The Hacker News)
15 juillet 2025 à 09:17
The North Korean threat actors linked to the Contagious Interview campaign have been observed publishing another set of 67 malicious packages to the npm registry, underscoring ongoing attempts to poison the open-source ecosystem via software supply chain attacks. The packages, per Socket, have attracted more than 17,000 downloads, and incorporate a previously undocumented version of a malware

Arnaques à la tâche : Pourquoi vous ne devriez jamais payer pour être payé

✇UnderNews
Par : UnderNews
15 juillet 2025 à 10:08

Certaines escroqueries peuvent sembler incroyables, mais elles arrivent pourtant à nous attirer dans leurs filets. Benoit Grünemwald, expert en cybersécurité explique comment éviter de se faire piéger par des arnaques dont la thématique est l’emploi et utilisent la gamification. Tribune ESET – Il peut tous nous arriver de traverser une période difficile dans notre vie, […]

The post Arnaques à la tâche : Pourquoi vous ne devriez jamais payer pour être payé first appeared on UnderNews.
Hier — 14 juillet 2025Securité

The Unusual Suspect: Git Repos

✇The Hacker News
Par : [email protected] (The Hacker News)
14 juillet 2025 à 19:06
While phishing and ransomware dominate headlines, another critical risk quietly persists across most enterprises: exposed Git repositories leaking sensitive data. A risk that silently creates shadow access into core systems Git is the backbone of modern software development, hosting millions of repositories and serving thousands of organizations worldwide. Yet, amid the daily hustle of shipping

New PHP-Based Interlock RAT Variant Uses FileFix Delivery Mechanism to Target Multiple Industries

✇The Hacker News
Par : [email protected] (The Hacker News)
14 juillet 2025 à 18:52
Threat actors behind the Interlock ransomware group have unleashed a new PHP variant of its bespoke remote access trojan (RAT) as part of a widespread campaign using a variant of ClickFix called FileFix. "Since May 2025, activity related to the Interlock RAT has been observed in connection with the LandUpdate808 (aka KongTuke) web-inject threat clusters," The DFIR Report said in a technical

⚡ Weekly Recap: Scattered Spider Arrests, Car Exploits, macOS Malware, Fortinet RCE and More

✇The Hacker News
Par : [email protected] (The Hacker News)
14 juillet 2025 à 14:52
In cybersecurity, precision matters—and there’s little room for error. A small mistake, missed setting, or quiet misconfiguration can quickly lead to much bigger problems. The signs we’re seeing this week highlight deeper issues behind what might look like routine incidents: outdated tools, slow response to risks, and the ongoing gap between compliance and real security. For anyone responsible

CBI Shuts Down £390K U.K. Tech Support Scam, Arrests Key Operatives in Noida Call Center

✇The Hacker News
Par : [email protected] (The Hacker News)
14 juillet 2025 à 10:00
India's Central Bureau of Investigation (CBI) has announced that it has taken steps to dismantle what it said was a transnational cybercrime syndicate that carried out "sophisticated" tech support scams targeting citizens of Australia and the United Kingdom. The fraudulent scheme is estimated to have led to losses worth more than £390,000 ($525,000) in the United Kingdom alone. The law

eSIM Vulnerability in Kigen's eUICC Cards Exposes Billions of IoT Devices to Malicious Attacks

✇The Hacker News
Par : [email protected] (The Hacker News)
14 juillet 2025 à 07:27
Cybersecurity researchers have discovered a new hacking technique that exploits weaknesses in the eSIM technology used in modern smartphones, exposing users to severe risks. The issues impact the Kigen eUICC card. According to the Irish company's website, more than two billion SIMs in IoT devices have been enabled as of December 2020. The findings come from Security Explorations, a research lab

À partir d’avant-hierSecurité

Scanner les acheteurs de cigarettes par caméra augmentée ? La CNIL dit non

✇Cyberguerre
Par : Amine Baba Aissa
11 juillet 2025 à 17:33

Après avoir étudié le sujet pendant près de quatre mois, la CNIL a rendu son verdict : le recours à des caméras augmentées pour contrôler l’âge des clients chez les buralistes n’est pas la solution adéquate pour lutter contre la consommation de tabac ou de jeux d’argent chez les mineurs en France.

GPUHammer: New RowHammer Attack Variant Degrades AI Models on NVIDIA GPUs

✇The Hacker News
Par : [email protected] (The Hacker News)
12 juillet 2025 à 19:14
NVIDIA is urging customers to enable System-level Error Correction Codes (ECC) as a defense against a variant of a RowHammer attack demonstrated against its graphics processing units (GPUs). "Risk of successful exploitation from RowHammer attacks varies based on DRAM device, platform, design specification, and system settings," the GPU maker said in an advisory released this week. Dubbed

Over 600 Laravel Apps Exposed to Remote Code Execution Due to Leaked APP_KEYs on GitHub

✇The Hacker News
Par : [email protected] (The Hacker News)
12 juillet 2025 à 14:45
Cybersecurity researchers have discovered a serious security issue that allows leaked Laravel APP_KEYs to be weaponized to gain remote code execution capabilities on hundreds of applications. "Laravel's APP_KEY, essential for encrypting sensitive data, is often leaked publicly (e.g., on GitHub)," GitGuardian said. "If attackers get access to this key, they can exploit a deserialization flaw to

❌
❌