Une cyberattaque a récemment touché la mairie de la ville de Lorient. Des données personnelles d'agents municipaux ont été mises en vente sur un célèbre forum de pirates.

Facebook is warning that a FreeType vulnerability in all versions up to 2.13 can lead to arbitrary code execution, with reports that the flaw has been exploited in attacks. [...]

CISA says the Medusa ransomware operation has impacted over 300 organizations in critical infrastructure sectors in the United States until last month. [...]

A new Android spyware named 'KoSpy' is linked to North Korean threat actors who have infiltrated Google Play and third-party app store APKPure through at least five malicious apps. [...]

Indian authorities arrested Aleksej Besciokov, the co-founder and one of the administrators of the Russian Garantex crypto-exchange while vacationing with his family in Varkala, India. [...]

Mozilla is warning Firefox users to update their browsers to the latest version to avoid facing disruption and security risks caused by the upcoming expiration of one of the company's root certificates. [...]

Slovak cybersecurity company ESET says a newly patched zero-day vulnerability in the Windows Win32 Kernel Subsystem has been exploited in attacks since March 2023. [...]

Traditional Data Loss Prevention (DLP) solutions weren't built for today's browser-driven workplace. Now sensitive data moves moves through SaaS apps, AI tools, and personal accounts, bypassing legacy security controls. Learn from Keep Aware how real-time browser security can stop data leaks before they happen. [...]

Chinese hackers are deploying custom backdoors on Juniper Networks Junos OS MX routers that have reached end-of-life (EoL) and no longer receive security updates. [...]

The China-nexus cyber espionage group tracked as UNC3886 has been observed targeting end-of-life MX routers from Juniper Networks as part of a campaign designed to deploy custom backdoors, highlighting their ability to focus on internal networking infrastructure. "The backdoors had varying custom capabilities, including active and passive backdoor functions, as well as an embedded script that

Après une enquête de plusieurs mois remontant à la mi-2024, Mandiant publie ses conclusions sur une campagne d’espionnage furtive menée par un acteur chinois (UNC3886 ) qui a déployé des logiciels malveillants personnalisés sur des routeurs Junos OS de Juniper Networks en fin de vie. Tribune – Mandiant a travaillé avec Juniper Networks pour enquêter […]

The post Un acteur de l’espionnage de type « China-Nexus » cible les routeurs de Juniper Networks first appeared on UnderNews.

L’ANSSI vient de publier son Panorama 2024 de la cybermenace, mettant en avant une hausse de 15 % des cyberattaques par rapport à 2023 et une intensification des opérations de déstabilisation. Cette tendance confirme que la menace cyber ne fait que croître, avec des attaquants qui exploitent des outils de plus en plus sophistiqués. Tribune – […]

The post Cybersécurité – Rapport ANSSI : +15 % d’attaques en 2024 – Comment réagir en temps réel ? first appeared on UnderNews.

Threat intelligence firm GreyNoise is warning of a "coordinated surge" in the exploitation of Server-Side Request Forgery (SSRF) vulnerabilities spanning multiple platforms. "At least 400 IPs have been seen actively exploiting multiple SSRF CVEs simultaneously, with notable overlap between attack attempts," the company said, adding it observed the activity on March 9, 2025. The countries which

We’ve been hearing the same story for years: AI is coming for your job. In fact, in 2017, McKinsey printed a report, Jobs Lost, Jobs Gained: Workforce Transitions in a Time of Automation, predicting that by 2030, 375 million workers would need to find new jobs or risk being displaced by AI and automation. Queue the anxiety.  There have been ongoing whispers about what roles would be

Microsoft says that some USB printers will start printing random text after installing Windows updates released since late January 2025. [...]

Microsoft on Tuesday released security updates to address 57 security vulnerabilities in its software, including a whopping six zero-days that it said have been actively exploited in the wild. Of the 56 flaws, six are rated Critical, 50 are rated Important, and one is rated Low in severity. Twenty-three of the addressed vulnerabilities are remote code execution bugs and 22 relate to privilege

La mise à jour iOS 18.3.2, disponible depuis le 11 mars 2025, corrige plusieurs bugs importants de sécurité. Elle s'accompagne de mises à jour d'iPadOS, macOS, tvOS et visionOS.

Confrontées à une recrudescence des cyberattaques et à une pénurie de compétences, les équipes de sécurité sont submergées par un nombre croissant de vulnérabilités. Cette situation est exacerbée par l’essor de l’IA générative, perçue comme une menace par près de la moitié des entreprises (47%), qui craignent une escalade technologique avec des attaques plus sophistiquées […]

The post Chokepoints : quelle est cette stratégie cyber qui permet aux responsables sécurité de mieux cibler leurs efforts ? first appeared on UnderNews.

Dans l’environnement commercial rapide d’aujourd’hui, disposer des bons outils peut considérablement améliorer la productivité. L’une des solutions leaders dans le domaine de l’édition de PDF est UPDF. Établi en 2021, UPDF a été conçu avec un objectif clair : fournir un outil d’édition de PDF professionnel accessible et abordable pour tous, améliorant ainsi l’efficacité dans […]

The post Comment UPDF est devenu le leader dans la catégorie des éditeurs PDF sur G2 hiver 2025 first appeared on UnderNews.