Vue lecture

Il y a de nouveaux articles disponibles, cliquez pour rafraîchir la page.

NightEagle APT Exploits Microsoft Exchange Flaw to Target China's Military and Tech Sectors

Cybersecurity researchers have shed light on a previously undocumented threat actor called NightEagle (aka APT-Q-95) that has been observed targeting Microsoft Exchange servers as a part of a zero-day exploit chain designed to target government, defense, and technology sectors in China. According to QiAnXin's RedDrip Team, the threat actor has been active since 2023 and has switched network

Your AI Agents Might Be Leaking Data — Watch this Webinar to Learn How to Stop It

Generative AI is changing how businesses work, learn, and innovate. But beneath the surface, something dangerous is happening. AI agents and custom GenAI workflows are creating new, hidden ways for sensitive enterprise data to leak—and most teams don’t even realize it. If you’re building, deploying, or managing AI systems, now is the time to ask: Are your AI agents exposing confidential data

Critical Sudo Vulnerabilities Let Local Users Gain Root Access on Linux, Impacting Major Distros

Cybersecurity researchers have disclosed two security flaws in the Sudo command-line utility for Linux and Unix-like operating systems that could enable local attackers to escalate their privileges to root on susceptible machines. A brief description of the vulnerabilities is below - CVE-2025-32462 (CVSS score: 2.8) - Sudo before 1.9.17p1, when used with a sudoers file that specifies a host

Google Ordered to Pay $314M for Misusing Android Users' Cellular Data Without Permission

Google has been ordered by a court in the U.S. state of California to pay $314 million over charges that it misused Android device users' cellular data when they were idle to passively send information to the company. The verdict marks an end to a legal class-action complaint that was originally filed in August 2019. In their lawsuit, the plaintiffs argued that Google's Android operating system

Amazon Prime Day 2025 : Les bonnes affaires vous attendent, les cybercriminels aussi

L’Amazon Prime Day 2025 aura lieu le 8 juillet. Les acheteurs du monde entier ont préparé leur panier. Les cybercriminels sont sur le qui-vive. Rien qu’en juin, plus de 1 000 nouveaux domaines contenant des noms ressemblant à Amazon sont apparus en ligne. De manière alarmante, 87 % d’entre eux ont déjà été signalés comme […]

The post Amazon Prime Day 2025 : Les bonnes affaires vous attendent, les cybercriminels aussi first appeared on UnderNews.

Fraude numérique en France : 7,6 milliards d’euros envolés en un an

Fraude numérique en France : 7,6 milliards d’euros envolés en un an. Un fléau qui touche plus d’un Français sur deux. Tribune BioCatch — Les Français sont confrontés à une explosion des fraudes en ligne : plus d’un adulte sur deux (54 %) déclare avoir été victime d’une arnaque au cours des 12 derniers mois, […]

The post Fraude numérique en France : 7,6 milliards d’euros envolés en un an first appeared on UnderNews.

Massive Android Fraud Operations Uncovered: IconAds, Kaleidoscope, SMS Malware, NFC Scams

A mobile ad fraud operation dubbed IconAds that consisted of 352 Android apps has been disrupted, according to a new report from HUMAN. The identified apps were designed to load out-of-context ads on a user's screen and hide their icons from the device home screen launcher, making it harder for victims to remove them, per the company's Satori Threat Intelligence and Research Team. The apps have

Over 40 Malicious Firefox Extensions Target Cryptocurrency Wallets, Stealing User Assets

Cybersecurity researchers have uncovered over 40 malicious browser extensions for Mozilla Firefox that are designed to steal cryptocurrency wallet secrets, putting users' digital assets at risk. "These extensions impersonate legitimate wallet tools from widely-used platforms such as Coinbase, MetaMask, Trust Wallet, Phantom, Exodus, OKX, Keplr, MyMonero, Bitget, Leap, Ethereum Wallet, and Filfox

❌