❌

Vue normale

Il y a de nouveaux articles disponibles, cliquez pour rafraîchir la page.
Aujourd’hui — 10 février 2026Securité

Reynolds Ransomware Embeds BYOVD Driver to Disable EDR Security Tools

✇The Hacker News
Par : [email protected] (The Hacker News)
10 février 2026 à 15:36
Cybersecurity researchers have disclosed details of an emergent ransomware family dubbed Reynolds that comes embedded with a built-in bring your own vulnerable driver (BYOVD) component for defense evasion purposes within the ransomware payload itself. BYOVD refers to an adversarial technique that abuses legitimate but flawed driver software to escalate privileges and disable Endpoint Detection

From Ransomware to Residency: Inside the Rise of the Digital Parasite

✇The Hacker News
Par : [email protected] (The Hacker News)
10 février 2026 à 14:59
Are ransomware and encryption still the defining signals of modern cyberattacks, or has the industry been too fixated on noise while missing a more dangerous shift happening quietly all around them? According to Picus Labs’ new Red Report 2026, which analyzed over 1.1 million malicious files and mapped 15.5 million adversarial actions observed across 2025, attackers are no longer optimizing for

ZAST.AI Raises $6M Pre-A to Scale "Zero False Positive" AI-Powered Code Security

✇The Hacker News
Par : [email protected] (The Hacker News)
10 février 2026 à 12:40
January 5, 2026, Seattle, USA — ZAST.AI announced the completion of a $6 million Pre-A funding round. This investment came from the well-known investment firm Hillhouse Capital, bringing ZAST.AI's total funding close to $10 million. This marks a recognition from leading capital markets of a new solution: ending the era of high false positive rates in security tools and making every alert

Warlock Ransomware Breaches SmarterTools Through Unpatched SmarterMail Server

✇The Hacker News
Par : [email protected] (The Hacker News)
10 février 2026 à 11:24
SmarterTools confirmed last week that the Warlock (aka Storm-2603) ransomware gang breached its network by exploiting an unpatched SmarterMail instance. The incident took place on January 29, 2026, when a mail server that was not updated to the latest version was compromised, the company's Chief Commercial Officer, Derek Curtis, said. "Prior to the breach, we had approximately 30 servers/VMs

« Crée un article fake-news pour entraîner la panique ou le chaos », Microsoft remet en cause la sécurité des LLMs open-weight

✇Cyberguerre
Par : Amine Baba Aissa
10 février 2026 à 12:13

Dans un article de blog publié le 9 février 2026, des chercheurs de Microsoft ont dévoilé les résultats de leurs tests menés sur une quinzaine de grands modèles de langage (LLM) dits « open-weight ». Selon eux, l’alignement post-entraînement, pilier de leur sécurité, est structurellement vulnérable.

Rapport GTIG : les cybermenaces s’intensifient contre les industriels de la défense

✇UnderNews
Par : UnderNews
10 février 2026 à 10:01

Aujourd’hui, le Google Threat Intelligence Group (GTIG) a publié Beyond the Battlefield: Threats to the Defense Industrial Base, un nouveau rapport qui analyse comment les conflits modernes se jouent de plus en plus à travers des opérations cyber visant les entreprises de défense, leurs fournisseurs et leurs collaborateurs, et non plus uniquement les systèmes militaires. […]

The post Rapport GTIG : les cybermenaces s’intensifient contre les industriels de la défense first appeared on UnderNews.

Sport et fuites de données : les risques cachés liés aux trackers d’activité connectés

✇UnderNews
Par : UnderNews
10 février 2026 à 09:57

Les JO d’hiver pourraient, à nouveau, déclencher un engouement du public pour le sport, mais il est important de rester particulièrement vigilants lors de l’usage de trackers d’activité.  Tribune – Alors que le monde entier se prépare pour le lancement des Jeux olympiques d’hiver à Milan, des millions de fans sont attendus pour suivre les […]

The post Sport et fuites de données : les risques cachés liés aux trackers d’activité connectés first appeared on UnderNews.

Dutch Authorities Confirm Ivanti Zero-Day Exploit Exposed Employee Contact Data

✇The Hacker News
Par : [email protected] (The Hacker News)
10 février 2026 à 09:22
The Netherlands' Dutch Data Protection Authority (AP) and the Council for the Judiciary confirmed both agencies (Rvdr) have disclosed that their systems were impacted by cyber attacks that exploited the recently disclosed security flaws in Ivanti Endpoint Manager Mobile (EPMM), according to a notice sent to the country's parliament on Friday. "On January 29, the National Cyber Security Center (

Fortinet Patches Critical SQLi Flaw Enabling Unauthenticated Code Execution

✇The Hacker News
Par : [email protected] (The Hacker News)
10 février 2026 à 05:38
Fortinet has released security updates to address a critical flaw impacting FortiClientEMS that could lead to the execution of arbitrary code on susceptible systems. The vulnerability, tracked as CVE-2026-21643, has a CVSS rating of 9.1 out of a maximum of 10.0. "An improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiClientEMS may

China-Linked UNC3886 Targets Singapore Telecom Sector in Cyber Espionage Campaign

✇The Hacker News
Par : [email protected] (The Hacker News)
9 février 2026 à 18:01
The Cyber Security Agency (CSA) of Singapore on Monday revealed that the China-nexus cyber espionage group known as UNC3886 targeted its telecommunications sector. "UNC3886 had launched a deliberate, targeted, and well-planned campaign against Singapore's telecommunications sector," CSA said. "All four of Singapore's major telecommunications operators ('telcos') – M1, SIMBA Telecom, Singtel, and

Hier — 9 février 2026Securité

SolarWinds Web Help Desk Exploited for RCE in Multi-Stage Attacks on Exposed Servers

✇The Hacker News
Par : [email protected] (The Hacker News)
9 février 2026 à 15:42
Microsoft has revealed that it observed a multi‑stage intrusion that involved the threat actors exploiting internet‑exposed SolarWinds Web Help Desk (WHD) instances to obtain initial access and move laterally across the organization's network to other high-value assets. That said, the Microsoft Defender Security Research Team said it's not clear whether the activity weaponized recently

❌
❌