L’ANSSI vient de publier son Panorama 2024 de la cybermenace, mettant en avant une hausse de 15 % des cyberattaques par rapport à 2023 et une intensification des opérations de déstabilisation. Cette tendance confirme que la menace cyber ne fait que croître, avec des attaquants qui exploitent des outils de plus en plus sophistiqués. Tribune – […]

The post Cybersécurité – Rapport ANSSI : +15 % d’attaques en 2024 – Comment réagir en temps réel ? first appeared on UnderNews.

Threat intelligence firm GreyNoise is warning of a "coordinated surge" in the exploitation of Server-Side Request Forgery (SSRF) vulnerabilities spanning multiple platforms. "At least 400 IPs have been seen actively exploiting multiple SSRF CVEs simultaneously, with notable overlap between attack attempts," the company said, adding it observed the activity on March 9, 2025. The countries which

We’ve been hearing the same story for years: AI is coming for your job. In fact, in 2017, McKinsey printed a report, Jobs Lost, Jobs Gained: Workforce Transitions in a Time of Automation, predicting that by 2030, 375 million workers would need to find new jobs or risk being displaced by AI and automation. Queue the anxiety.  There have been ongoing whispers about what roles would be

Microsoft says that some USB printers will start printing random text after installing Windows updates released since late January 2025. [...]

Microsoft on Tuesday released security updates to address 57 security vulnerabilities in its software, including a whopping six zero-days that it said have been actively exploited in the wild. Of the 56 flaws, six are rated Critical, 50 are rated Important, and one is rated Low in severity. Twenty-three of the addressed vulnerabilities are remote code execution bugs and 22 relate to privilege

La mise à jour iOS 18.3.2, disponible depuis le 11 mars 2025, corrige plusieurs bugs importants de sécurité. Elle s'accompagne de mises à jour d'iPadOS, macOS, tvOS et visionOS.

Confrontées à une recrudescence des cyberattaques et à une pénurie de compétences, les équipes de sécurité sont submergées par un nombre croissant de vulnérabilités. Cette situation est exacerbée par l’essor de l’IA générative, perçue comme une menace par près de la moitié des entreprises (47%), qui craignent une escalade technologique avec des attaques plus sophistiquées […]

The post Chokepoints : quelle est cette stratégie cyber qui permet aux responsables sécurité de mieux cibler leurs efforts ? first appeared on UnderNews.

Dans l’environnement commercial rapide d’aujourd’hui, disposer des bons outils peut considérablement améliorer la productivité. L’une des solutions leaders dans le domaine de l’édition de PDF est UPDF. Établi en 2021, UPDF a été conçu avec un objectif clair : fournir un outil d’édition de PDF professionnel accessible et abordable pour tous, améliorant ainsi l’efficacité dans […]

The post Comment UPDF est devenu le leader dans la catégorie des éditeurs PDF sur G2 hiver 2025 first appeared on UnderNews.

Apple on Tuesday released a security update to address a zero-day flaw that it said has been exploited in "extremely sophisticated" attacks. The vulnerability has been assigned the CVE identifier CVE-2025-24201 and is rooted in the WebKit web browser engine component. It has been described as an out-of-bounds write issue that could allow an attacker to craft malicious web content such that it

The threat actor known as Blind Eagle has been linked to a series of ongoing campaigns targeting Colombian institutions and government entities since November 2024. "The monitored campaigns targeted Colombian judicial institutions and other government or private organizations, with high infection rates," Check Point said in a new analysis. "More than 1,600 victims were affected during one of

Six malicious packages have been identified on npm (Node package manager) linked to the notorious North Korean hacking group Lazarus. [...]

Apple has released emergency security updates to patch a zero-day bug the company describes as exploited in "extremely sophisticated" attacks. [...]

Microsoft has released the KB5053606 cumulative update for Windows 10 22H2 and Windows 10 21H2, which fixes numerous bugs, including one preventing SSH connections. [...]

Today is Microsoft's March 2025 Patch Tuesday, which includes security updates for 57 flaws, including six actively exploited zero-day vulnerabilities. [...]

Microsoft has released Windows 11 KB5053598 and KB5053602  cumulative updates for versions 24H2 and 23H2 to fix security vulnerabilities and issues. [...]

Microsoft announced that it will drop support for the Remote Desktop app (available via the Microsoft Store) on May 27 and replace it with its new Windows App. [...]

A newly discovered clipboard hijacking operation dubbed 'MassJacker' uses at least 778,531 cryptocurrency wallet addresses to steal digital assets from compromised computers. [...]

Threat intelligence company GreyNoise warns that a critical PHP remote code execution vulnerability that impacts Windows systems is now under mass exploitation. [...]

Cybercriminals are using AI for help in planning and conducting cyberattacks—but cybersecurity vendors are fighting back. Learn from Acronis Threat Research Unit about how AI-powered security solutions are closing the gap in the battle against AI-driven cyber threats. [...]