❌

Vue normale

Il y a de nouveaux articles disponibles, cliquez pour rafraîchir la page.
Aujourd’hui — 5 septembre 2025Securité

Automation Is Redefining Pentest Delivery

✇The Hacker News
Par : [email protected] (The Hacker News)
5 septembre 2025 à 10:00
Pentesting remains one of the most effective ways to identify real-world security weaknesses before adversaries do. But as the threat landscape has evolved, the way we deliver pentest results hasn't kept pace. Most organizations still rely on traditional reporting methods—static PDFs, emailed documents, and spreadsheet-based tracking. The problem? These outdated workflows introduce delays,

VirusTotal Finds 44 Undetected SVG Files Used to Deploy Base64-Encoded Phishing Pages

✇The Hacker News
Par : [email protected] (The Hacker News)
5 septembre 2025 à 08:13
Cybersecurity researchers have flagged a new malware campaign that has leveraged Scalable Vector Graphics (SVG) files as part of phishing attacks impersonating the Colombian judicial system. The SVG files, according to VirusTotal, are distributed via email and designed to execute an embedded JavaScript payload, which then decodes and injects a Base64-encoded HTML phishing page masquerading as a

Cybersécurité : comment Polytechnique forme les experts et managers de demain [Sponso]

✇Cyberguerre
Par : humanoid xp
5 septembre 2025 à 07:47

Cet article a été réalisé en collaboration avec École Polytechnique Executive Education

Polytechnique propose une formation en cybersécurité pour les cadres de haut niveau, qui délivre un diplôme d’établissement de niveau Bac+5 de l’Institut Polytechnique de Paris. Un webinaire de présentation de la formation aura lieu le 11 septembre prochain.

Cet article a été réalisé en collaboration avec École Polytechnique Executive Education

Il s’agit d’un contenu créé par des rédacteurs indépendants au sein de l’entité Humanoid xp. L’équipe éditoriale de Numerama n’a pas participé à sa création. Nous nous engageons auprès de nos lecteurs pour que ces contenus soient intéressants, qualitatifs et correspondent à leurs intérêts.

En savoir plus

Hier — 4 septembre 2025Securité

Russian APT28 Deploys “NotDoor” Outlook Backdoor Against Companies in NATO Countries

✇The Hacker News
Par : [email protected] (The Hacker News)
4 septembre 2025 à 20:10
The Russian state-sponsored hacking group tracked as APT28 has been attributed to a new Microsoft Outlook backdoor called NotDoor in attacks targeting multiple companies from different sectors in NATO member countries. NotDoor "is a VBA macro for Outlook designed to monitor incoming emails for a specific trigger word," S2 Grupo's LAB52 threat intelligence team said. "When such an email is

GhostRedirector Hacks 65 Windows Servers Using Rungan Backdoor and Gamshen IIS Module

✇The Hacker News
Par : [email protected] (The Hacker News)
4 septembre 2025 à 19:58
Cybersecurity researchers have lifted the lid on a previously undocumented threat cluster dubbed GhostRedirector that has managed to compromise at least 65 Windows servers primarily located in Brazil, Thailand, and Vietnam. The attacks, per Slovak cybersecurity company ESET, led to the deployment of a passive C++ backdoor called Rungan and a native Internet Information Services (IIS) module

6 browser-based attacks all security teams should be ready for in 2025

✇BleepingComputer
Par : Sponsored by Push Security
4 septembre 2025 à 16:01
The browser is now the frontline for cyberattacks. From phishing kits and ClickFix lures to malicious OAuth apps and extensions, attackers are targeting the very place your employees access business-critical apps. Push Security explains how to defend where breaches begin. [...]

Après l’amende record de la CNIL, que risquent réellement Google et Shein en cas d’absence de mise en conformité ?

✇Cyberguerre
Par : Amine Baba Aissa
4 septembre 2025 à 18:08

Le mercredi 3 septembre 2025, la Commission Nationale de l’Informatique et des Libertés (CNIL) a annoncé une sanction record à l'encontre de Google et Shein. Accusés de ne pas avoir respecté les réglementations européennes concernant la collecte des cookies et le consentement des utilisateurs, les multinationales doivent s'acquitter respectivement d'une amende de 325 et 150 millions d'euros. Mais quelles sont les mesures prévues en cas de non-paiement ?

Cybercriminals Exploit X’s Grok AI to Bypass Ad Protections and Spread Malware to Millions

✇The Hacker News
Par : [email protected] (The Hacker News)
4 septembre 2025 à 12:21
Cybersecurity researchers have flagged a new technique that cybercriminals have adopted to bypass social media platform X's malvertising protections and propagate malicious links using its artificial intelligence (AI) assistant Grok. The findings were highlighted by Nati Tal, head of Guardio Labs, in a series of posts on X. The technique has been codenamed Grokking. The approach is designed to

Google Fined $379 Million by French Regulator for Cookie Consent Violations

✇The Hacker News
Par : [email protected] (The Hacker News)
4 septembre 2025 à 12:09
The French data protection authority has fined Google and Chinese e-commerce giant Shein $379 million (€325 million) and $175 million (€150 million), respectively, for violating cookie rules. Both companies set advertising cookies on users' browsers without securing their consent, the National Commission on Informatics and Liberty (CNIL) said. Shein has since updated its systems to comply with

CISA Flags TP-Link Router Flaws CVE-2023-50224 and CVE-2025-9377 as Actively Exploited

✇The Hacker News
Par : [email protected] (The Hacker News)
4 septembre 2025 à 12:03
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added two security flaws impacting TP-Link wireless routers to its Known Exploited Vulnerabilities (KEV) catalog, noting that there is evidence of them being exploited in the wild. The vulnerabilities in question are listed below - CVE-2023-50224 (CVSS score: 6.5) - An authentication bypass by spoofing vulnerability

❌
❌