La Chine a annoncé ce 22 septembre 2025 le lancement d'une nouvelle campagne de surveillance d’Internet. Officiellement, il s’agit de lutter contre les contenus qui « attisent des émotions négatives » et « sèment le pessimisme ». Mais en pratique, le texte vise aussi ceux qui critiquent la situation économique du pays : chômage, ralentissement, coût de la vie.

Microsoft has confirmed a known issue that prevents some apps from playing Digital Rights Management (DRM) protected video content or displaying and recording live TV. [...]

The security landscape now moves at a pace no patch cycle can match. Attackers aren’t waiting for quarterly updates or monthly fixes—they adapt within hours, blending fresh techniques with old, forgotten flaws to create new openings. A vulnerability closed yesterday can become the blueprint for tomorrow’s breach. This week’s recap explores the trends driving that constant churn: how threat

We hear this a lot: “We’ve got hundreds of service accounts and AI agents running in the background. We didn’t create most of them. We don’t know who owns them. How are we supposed to secure them?” Every enterprise today runs on more than users. Behind the scenes, thousands of non-human identities, from service accounts to API tokens to AI agents, access systems, move data, and execute tasks

À travers un communiqué publié le 20 septembre 2025, l’ANTS a démenti les rumeurs affirmant que 13 millions de données sensibles issues de l’agence étaient en vente sur le dark web. Ce dénouement met fin à un brouhaha de plusieurs mois qui aura mis en lumière les mécaniques de désinformation de l’écosystème cyber.

A gamer seeking financial support for cancer treatment lost $32,000 after downloading from Steam a verified game named BlockBlasters that drained his cryptocurrency wallet. [...]

Le visa H-1B, qui permet à des milliers de travailleurs qualifiés venus de l’étranger de rejoindre les États-Unis, va coûter beaucoup plus cher aux entreprises. Donald Trump a annoncé le 19 septembre 2025 une taxe de 100 000 dollars par employé, une décision qui pourrait bouleverser l’équilibre de la Silicon Valley.

Le week-end du 20 et 21 septembre 2025, plusieurs aéroports européens ont connu de très nombreux retards et annulations. La faute à une cyberattaque qui a ciblé le système d'enregistrement des passagers, commun à de nombreux aéroports européens.

Une application Android sur trois et plus de la moitié des applications iOS divulguent des données sensibles, exposant ainsi les entreprises à des risques majeurs. Zimperium, spécialiste mondial de la sécurité mobile met en garde : les applications mobiles sont désormais le principal vecteur des attaques basées sur les API. Elles exposent les entreprises à […]

The post Zimperium alerte sur les applications mobiles, devenues la cible privilégiée des attaques API first appeared on UnderNews.

A critical token validation failure in Microsoft Entra ID (previously Azure Active Directory) could have allowed attackers to impersonate any user, including Global Administrators, across any tenant. The vulnerability, tracked as CVE-2025-55241, has been assigned the maximum CVSS score of 10.0. It has been described by Microsoft as a privilege escalation flaw in Azure Entra. There is no

A critical combination of legacy components could have allowed complete access to the Microsoft Entra ID tenant of every company in the world. [...]

Le 20 septembre 2025, plusieurs aéroports européens ont connu de très nombreux retards et annulations. La faute à une cyberattaque qui a mis à mal le système d'enregistrement des passagers.

Threat actors with ties to the Democratic People's Republic of Korea (aka DPRK or North Korea) have been observed leveraging ClickFix-style lures to deliver a known malware called BeaverTail and InvisibleFerret. "The threat actor used ClickFix lures to target marketing and trader roles in cryptocurrency and retail sector organizations rather than targeting software development roles," GitLab

The Royal Canadian Mounted Police has shut down the TradeOgre cryptocurrency exchange and seized more than $40 million believed to originate from criminal activities. [...]

Notorious APT group Turla collaborates with Gamaredon, both FSB-associated groups, to compromise high‑profile targets in Ukraine

LastPass is warning of an ongoing, widespread information stealer campaign targeting Apple macOS users through fake GitHub repositories that distribute malware-laced programs masquerading as legitimate tools. "In the case of LastPass, the fraudulent repositories redirected potential victims to a repository that downloads the Atomic infostealer malware," researchers Alex Cox, Mike Kosak, and

Cybersecurity researchers have discovered what they say is the earliest example known to date of a malware that bakes in Large Language Model (LLM) capabilities. The malware has been codenamed MalTerminal by SentinelOne SentinelLABS research team. The findings were presented at the LABScon 2025 security conference. In a report examining the malicious use of LLMs, the cybersecurity company said

Cybersecurity researchers have disclosed a zero-click flaw in OpenAI ChatGPT's Deep Research agent that could allow an attacker to leak sensitive Gmail inbox data with a single crafted email without any user action. The new class of attack has been codenamed ShadowLeak by Radware. Following responsible disclosure on June 18, 2025, the issue was addressed by OpenAI in early August. "The attack

Les chercheurs en menaces de Proofpoint viennent de publier une nouvelle étude identifiant une campagne de cyber-espionnage inédite menée par TA415 (APT41), un acteur de la menace aligné sur la Chine. Les cybercriminels ont notamment usurpé l’identité du député américain John Moolenaar. TRIBUNE Proofpoint – Cette campagne exploite l’incertitude croissante dans les relations économiques sino-américaines. […]

The post Une campagne de spearphishing chinoise cible le gouvernement américain first appeared on UnderNews.