❌

Vue normale

Il y a de nouveaux articles disponibles, cliquez pour rafraîchir la page.
Hier — 13 juin 2026Securité

U.S. Orders Anthropic to Suspend Fable 5 and Mythos 5 Access for Foreign Nationals

✇The Hacker News
Par : [email protected] (The Hacker News)
13 juin 2026 à 07:42
Anthropic said on Friday it will "abruptly disable" its most advanced artificial intelligence (AI) models, Claude Fable 5 and Mythos 5, for all users after the U.S. government ordered it to suspend access to the models for foreign nationals, whether inside or outside the U.S., citing national security concerns. The AI company said it received an order at 5:21 p.m. ET, instructing it to suspend

Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit

✇The Hacker News
Par : [email protected] (The Hacker News)
12 juin 2026 à 21:33
Attackers took over more than 400 packages in the Arch User Repository (AUR) this week and rewrote their build scripts to install a credential stealer on any machine that built them. The malware is a Rust binary built to harvest developer secrets. When it lands with root, it can also load an eBPF rootkit to hide itself. The AUR is Arch Linux's community package collection, and it is separate

US Gov asks Anthropic to ban 'foreign national' access to Fable, Mythos

✇BleepingComputer
Par : Ax Sharma
13 juin 2026 à 12:01
The US government has ordered Anthropic to block all foreign nationals from accessing Fable 5 and Mythos 5, forcing the company to suspend both models worldwide. Anthropic is complying but disputes the basis, calling the cited jailbreak narrow and the capability widely available elsewhere. [...]

Google Sues Chinese Smishing Network Accused of Using Gemini AI in Phishing

✇The Hacker News
Par : [email protected] (The Hacker News)
12 juin 2026 à 20:59
Google on Friday said it's pursuing legal action against a Chinese cybercrime network, accusing it of using its Gemini artificial intelligence (AI) agent to send phishing text messages targeting Americans. The network is said to be behind the development and management of a phishing-as-a-service (PhaaS) software kit called Outsider, per the tech giant. "The operation weaponized Gemini to help

China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade

✇The Hacker News
Par : [email protected] (The Hacker News)
12 juin 2026 à 20:17
Instead of hiding on the laptops and servers defenders watch most closely, a China-nexus group spent close to a decade hidden inside the Linux login system itself. Sygnia, which tracks the group as Velvet Ant, says it backdoored the PAM and OpenSSH components that decide who is allowed to sign in, planting its access where ordinary cleanup could not reach it. The network it targeted had no

Coup de tonnerre : Anthropic désactive Claude Fable 5 et Mythos sur ordre de Washington

✇Cyberguerre
Par : Amine Baba Aissa
13 juin 2026 à 08:11

Le gouvernement américain a ordonné le 12 juin la désactivation immédiate de Fable 5 et Mythos 5, invoquant la sécurité nationale après la découverte d'un possible jailbreak. Anthropic se conforme à la directive tout en contestant publiquement sa légitimité.

L’Empire d’Elon Musk ciblé : l’Iran menace de frapper directement le réseau Starlink

✇Cyberguerre
Par : Julien Lausson
12 juin 2026 à 15:02

Face aux frappes américaines, Téhéran réplique sur le terrain de la cyber-guerre asymétrique. Accusé de complicité tactique avec le Pentagone et de briser la censure locale, le réseau satellitaire Starlink de SpaceX est désormais dans le viseur des Gardiens de la révolution.

À partir d’avant-hierSecurité

ShinyHunters cible le secteur de l’éducation via une faille « zero-day » d’Oracle PeopleSoft

✇UnderNews
Par : UnderNews
12 juin 2026 à 15:16

Mandiant et le Google Threat Intelligence Group (GTIG) viennent de publier une étude sur la campagne d’extorsion menée par UNC6240 (alias ShinyHunters), qui exploite une faille « zero-day » pour compromettre l’infrastructure Oracle PeopleSoft. Communiqué – Après avoir détecté des activités de scan et d’exploitation de la part des acteurs malveillants, le GTIG a envoyé des notifications […]

The post ShinyHunters cible le secteur de l’éducation via une faille « zero-day » d’Oracle PeopleSoft first appeared on UnderNews.

Agentjacking Attack Tricks AI Coding Agents Into Running Malicious Code

✇The Hacker News
Par : [email protected] (The Hacker News)
12 juin 2026 à 14:04
Cybersecurity researchers have described what they say is a new class of attack that can trick artificial intelligence (AI) coding agents into running arbitrary code on developer machines. Called Agentjacking by Tenet Security, the attack can be triggered by means of a fake error report crafted using Sentry, an open-source error-tracking and performance-monitoring platform. "The attack

Rethinking MDR as Attackers and Defenders Embrace AI

✇The Hacker News
Par : [email protected] (The Hacker News)
12 juin 2026 à 13:00
For most of the past decade, managed detection and response was the answer to a real problem. Security teams couldn't staff around the clock, couldn't hire enough analysts, and needed someone else to handle the alert queue. MDR stepped in. It worked well enough. Until now. The threat landscape has changed faster than the MDR model can adapt. Attackers are using AI to move faster, generate more

LangGraph Flaw Chain Exposes Self-Hosted AI Agents to Remote Code Execution

✇The Hacker News
Par : [email protected] (The Hacker News)
12 juin 2026 à 11:50
Cybersecurity researchers have disclosed details of three now-patched security flaws impacting LangGraph, including a critical vulnerability chain that could result in remote code execution. LangGraph is an open-source framework created by LangChain to build complex, stateful, and multi-agent artificial intelligence (AI) agentic applications. "An SQL injection in LangGraph's function could

INTERPOL Operation Takes Down Sniper Dz Phishing Platform, Arrests Administrator

✇The Hacker News
Par : [email protected] (The Hacker News)
12 juin 2026 à 10:52
An INTERPOL-led operation last month resulted in the disruption of Sniper Dz, a decade-long phishing-as-a-service (PhaaS) platform, Group-IB said Thursday. The effort, codenamed Operation Ramz, took place between October 2025 and February 2026, and saw authorities from 13 countries in the Middle East and North Africa (MENA) region making 201 arrests. Included among them was Guedz, the primary

❌
❌