❌

Vue normale

Il y a de nouveaux articles disponibles, cliquez pour rafraîchir la page.
Aujourd’hui — 10 mars 2026Securité

Qui peut réellement voir votre bébé ? Un chercheur français révèle une immense faille dans les babyphones du commerce

✇Cyberguerre
Par : Amine Baba Aissa
10 mars 2026 à 08:10

Un chercheur français en cybersécurité a découvert que plus d'un million de caméras et babyphones connectés étaient totalement exposés sur Internet : sans mot de passe, sans protection, accessibles à tous. Derrière cette faille béante se cache un fabricant chinois peu connu du grand public, Meari Technology, dont la technologie équipe en réalité des centaines de marques vendues partout en France et dans le monde.

CISA Flags SolarWinds, Ivanti, and Workspace One Vulnerabilities as Actively Exploited

✇The Hacker News
Par : [email protected] (The Hacker News)
10 mars 2026 à 07:17
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added three security flaws to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerability list is as follows - CVE-2021-22054 (CVSS score: 7.5) - A server-side request forgery (SSRF) vulnerability in Omnissa Workspace One UEM (formerly VMware Workspace One UEM) that

Hier — 9 mars 2026Securité

Malicious npm Package Posing as OpenClaw Installer Deploys RAT, Steals macOS Credentials

✇The Hacker News
Par : [email protected] (The Hacker News)
9 mars 2026 à 19:31
Cybersecurity researchers have discovered a malicious npm package that masquerades as an OpenClaw installer to deploy a remote access trojan (RAT) and steal sensitive data from compromised hosts. The package, named "@openclaw-ai/openclawai," was uploaded to the registry by a user named "openclaw-ai" on March 3, 2026. It has been downloaded 178 times to date. The library is still available for

ShinyHunters claims ongoing Salesforce Aura data theft attacks

✇BleepingComputer
Par : Bill Toulas
9 mars 2026 à 18:12
Salesforce is warning customers that hackers are targeting websites with misconfigured Experience Cloud platforms that give guest users access to more data than intended. However, the ShinyHunters extortion gang claims to be actively exploiting a new bug to steal data from instances. [...]

UNC4899 Breached Crypto Firm After Developer AirDropped Trojanized File to Work Device

✇The Hacker News
Par : [email protected] (The Hacker News)
9 mars 2026 à 15:50
The North Korean threat actor known as UNC4899 is suspected to be behind a sophisticated cloud compromise campaign targeting a cryptocurrency organization in 2025 to steal millions of dollars in cryptocurrency. The activity has been attributed with moderate confidence to the state-sponsored adversary, which is also tracked under the cryptonyms Jade Sleet, PUKCHONG, Slow Pisces, and

⚡ Weekly Recap: Qualcomm 0-Day, iOS Exploit Chains, AirSnitch Attack & Vibe-Coded Malware

✇The Hacker News
Par : [email protected] (The Hacker News)
9 mars 2026 à 14:46
Another week in cybersecurity. Another week of "you've got to be kidding me." Attackers were busy. Defenders were busy. And somewhere in the middle, a whole lot of people had a very bad Monday morning. That's kind of just how it goes now. The good news? There were some actual wins this week. Real ones. The kind where the good guys showed up, did the work, and made a dent. It doesn't always

Can the Security Platform Finally Deliver for the Mid-Market?

✇The Hacker News
Par : [email protected] (The Hacker News)
9 mars 2026 à 12:45
Mid-market organizations are constantly striving to achieve security levels on a par with their enterprise peers. With heightened awareness of supply chain attacks, your customers and business partners are defining the security level you must meet. What if you could be the enabler for your organization to remain competitive — and help win business — by easily demonstrating that you meet these

Chrome Extension Turns Malicious After Ownership Transfer, Enabling Code Injection and Data Theft

✇The Hacker News
Par : [email protected] (The Hacker News)
9 mars 2026 à 11:28
Two Google Chrome extensions have turned malicious after what appears to be a case of ownership transfer, offering attackers a way to push malware to downstream customers, inject arbitrary code, and harvest sensitive data. The extensions in question, both originally associated with a developer named "[email protected]" (BuildMelon), are listed below - QuickLens - Search Screen with

De nouvelles campagnes de phishing exploitent l’espace de noms de domaine réservé

✇UnderNews
Par : UnderNews
9 mars 2026 à 09:49

De nouvelles recherches d’Infoblox Threat Intel montrent comment des cybercriminels détournent un élément fondamental d’Internet pour contourner de nombreux contrôles de sécurité actuels. Tribune – Les attaques de phishing sont omniprésentes, mais leurs méthodes suivent généralement des schémas et tendances bien identifiés. Une étude menée par Infoblox Threat Intel met cependant en lumière une nouvelle […]

The post De nouvelles campagnes de phishing exploitent l’espace de noms de domaine réservé first appeared on UnderNews.

Le phishing s’invite dans la guerre : des hackers ont piégé des Israéliens avec une fausse appli d’alerte aux roquettes

✇Cyberguerre
Par : Amine Baba Aissa
9 mars 2026 à 10:56

Des chercheurs de la société Acronis ont décortiqué une campagne malveillante ciblant des civils israéliens via une version corrompue de Red Alert, l'application officielle d'avertissement en cas de tirs de roquettes.

Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical Infrastructure

✇The Hacker News
Par : [email protected] (The Hacker News)
9 mars 2026 à 08:21
High-value organizations located in South, Southeast, and East Asia have been targeted by a Chinese threat actor as part of a years-long campaign. The activity, which has targeted aviation, energy, government, law enforcement, pharmaceutical, technology, and telecommunications sectors, has been attributed by Palo Alto Networks Unit 42 to a previously undocumented threat activity group dubbed

❌
❌