The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) has sanctioned three North Korean nationals and a company for supporting fraudulent IT worker schemes that generated illicit revenue for the Democratic People's Republic of Korea (DPRK) government. [...]

Russian aerospace and defense industries have become the target of a cyber espionage campaign that delivers a backdoor called EAGLET to facilitate data exfiltration. The activity, dubbed Operation CargoTalon, has been assigned to a threat cluster tracked as UNG0901 (short for Unknown Group 901). "The campaign is aimed at targeting employees of Voronezh Aircraft Production Association (VASO), one

Depuis le 23 juillet 2025, un cybercriminel prétend avoir en sa possession des documents secret défense appartenant à Naval Group. À moins de 24 heures de l'échéance fixée par le corbeau virtuel, le leader européen du naval de défense confirme avoir détecté un potentiel incident, mais précise qu’une enquête est en cours afin d’évaluer précisément la menace.

Threat hunters have disclosed two different malware campaigns that have targeted vulnerabilities and misconfigurations across cloud environments to deliver cryptocurrency miners. The threat activity clusters have been codenamed Soco404 and Koske by cloud security firms Wiz and Aqua, respectively. Soco404 "targets both Linux and Windows systems, deploying platform-specific malware," Wiz

A recent analysis of enterprise data suggests that generative AI tools developed in China are being used extensively by employees in the US and UK, often without oversight or approval from security teams. The study, conducted by Harmonic Security, also identifies hundreds of instances in which sensitive data was uploaded to platforms hosted in China, raising concerns over compliance, data

Christina Marie Chapman, a 50-year-old woman from Arizona, was sentenced to 102 months in prison after pleading guilty to her involvement in a scheme that enabled North Korean IT workers to infiltrate 309 U.S. companies. [...]

ESET Research has been monitoring attacks involving the recently discovered ToolShell zero-day vulnerabilities

Before rushing to prove that you're not a robot, be wary of deceptive human verification pages as an increasingly popular vector for delivering malware

Microsoft has removed a compatibility hold that prevented some Easy Anti-Cheat users from installing the Windows 11 2024 Update because of a known issue that triggers restarts with blue screen of death (BSOD) errors. [...]

Check Point Research dévoile les tendances du phishing par marque au 2ème trimestre 2025 : Microsoft reste en tête, Spotify réapparaît dans le classement. Les technologies et services numériques dominent toujours le paysage du phishing, soulignant la menace croissante pour la confiance des consommateurs. Tribune – Check Point Research (CPR), la division Renseignement sur les […]

The post Check Point Research dévoile les tendances du phishing par marque au 2ème trimestre 2025 first appeared on UnderNews.

Près de la moitié des français actifs ont déjà été victimes d’une cyberattaque, révélant un besoin critique de gestion du risque humain dans les organisations françaises. Tribune – KnowBe4, la plateforme de cybersécurité de renommée mondiale spécialisée dans la gestion du risque humain, publie un nouveau rapport mettant en lumière un niveau préoccupant de vulnérabilité […]

The post KnowBe4 révèle que les français sont particulièrement vulnérables aux cyberattaques first appeared on UnderNews.

Près d’un salarié français sur deux a déjà été victime d’une cyberattaque réussie : voilà le constat que dresse KnowBe4 dans un rapport publié le 24 juillet 2025. Selon la société de cybersécurité américaine, les Français se sentiraient moins armés que d'autres salariés dans le monde face au cybermenaces.

SentinelOne vient de publier l’édition 2025 de son Cloud Security Survey Report, réalisée en partenariat avec CyberEdge Group*. Tribune – Dans cette étude, SentinelOne met en lumière l’un des enjeux les plus critiques pour les équipes de sécurité – la protection des environnements cloud – et révèle une situation préoccupante : entre la multiplication des […]

The post 92 % des entreprises dépassées par la multiplication des outils et la surcharge d’alertes et de faux positifs first appeared on UnderNews.

Law enforcement has seized the dark web extortion sites of the BlackSuit ransomware operation, which has targeted and breached the networks of hundreds of organizations worldwide over the past several years. [...]

ChatGPT Agent is now rolling out to users with $20 Plus subscription, but OpenAI warns that it will take a few days for the rollout to finish. [...]

A new Linux malware named Koske may have been developed with artificial intelligence and is using seemingly benign JPEG images of panda bears to deploy malware directly into system memory. [...]

A threat actor called EncryptHub has compromised a game on Steam to distribute info-stealing malware to unsuspecting users downloading the title. [...]

Mitel Networks has released security updates to patch a critical-severity authentication bypass vulnerability impacting its MiVoice MX-ONE enterprise communications platform. [...]

Mitel has released security updates to address a critical security flaw in MiVoice MX-ONE that could allow an attacker to bypass authentication protections. "An authentication bypass vulnerability has been identified in the Provisioning Manager component of Mitel MiVoice MX-ONE, which, if successfully exploited, could allow an unauthenticated attacker to conduct an authentication bypass attack