Cybersecurity researchers are calling attention to a search engine optimization (SEO) poisoning campaign likely undertaken by a Chinese-speaking threat actor using a malware called BadIIS in attacks targeting East and Southeast Asia, particularly with a focus on Vietnam. The activity, dubbed Operation Rewrite, is being tracked by Palo Alto Networks Unit 42 under the moniker CL-UNK-1037, where "

Depuis le 20 septembre, plusieurs aéroports européens font face à des vols retardés ou annulés. En cause, une cyberattaque ayant visé Collins Aerospace, l’un des principaux fournisseurs mondiaux de systèmes critiques pour l’aviation civile. Alors qu’une enquête est en cours, les premiers éléments commencent à préciser la nature de l’attaque.

The disruptions over the weekend at several major European airports were caused by a ransomware attack targeting the check-in and boarding systems. [...]

​A vulnerability in the American Archive of Public Broadcasting's website allowed downloading of protected and private media for years, with the flaw quietly patched this month. [...]

Automotive manufacturing giant Stellantis has confirmed that attackers stole some of its North American customers' data after gaining access to a third-party service provider's platform. [...]

A new method and proof-of-concept tool called EDR-Freeze demonstrates that evading security solutions is possible from user mode with Microsoft's Windows Error Reporting (WER) system. [...]

Microsoft has removed a compatibility hold that prevented devices with integrated cameras from installing Windows 11 24H2 due to a face detection bug causing app freezes. [...]

Mozilla has announced a new feature that enables Firefox extension developers to roll back to previously approved versions, allowing them to quickly address critical bugs and issues. [...]

LastPass is warning users of a campaign that targets macOS users with malicious software impersonating popular products delivered through fraudulent GitHub repositories. [...]

Phishing isn't just email anymore. Attackers now use social media, chat apps & malicious ads to steal credentials. Push Security explains the latest tactics and shows how to stop multi-channel phishing where it happens — inside the browser. [...]

L’équipe mondiale de recherche et d’analyse (GReAT) de Kaspersky a découvert des publicités sur le Darknet proposant des services de deepfake vidéo et audio en temps réel. Les prix commencent à 50 dollars pour les vidéos falsifiées et à 30 dollars pour les messages vocaux fabriqués, les coûts augmentant en fonction de la complexité et […]

The post Kaspersky révèle que les services de génération de deepfake sont désormais 400 fois moins chers first appeared on UnderNews.

Face à l’intensification, à la sophistication et à la rapidité croissante des cyberattaques, les RSSI sont plus que jamais sous pression. Ils doivent démontrer que leurs investissements en IA produisent des résultats concrets : réduction des risques, détection et réponse plus rapides, des équipes plus performantes et une confiance renforcée. Mais comment distinguer des solutions […]

The post Cybersécurité : 5 questions clés pour distinguer valeur de l’IA et buzz marketing first appeared on UnderNews.

Organizations in Belarus, Kazakhstan, and Russia have emerged as the target of a phishing campaign undertaken by a previously undocumented hacking group called ComicForm since at least April 2025. The activity primarily targeted industrial, financial, tourism, biotechnology, research, and trade sectors, cybersecurity company F6 said in an analysis published last week. The attack chain involves

La Chine a annoncé ce 22 septembre 2025 le lancement d'une nouvelle campagne de surveillance d’Internet. Officiellement, il s’agit de lutter contre les contenus qui « attisent des émotions négatives » et « sèment le pessimisme ». Mais en pratique, le texte vise aussi ceux qui critiquent la situation économique du pays : chômage, ralentissement, coût de la vie.

Microsoft has confirmed a known issue that prevents some apps from playing Digital Rights Management (DRM) protected video content or displaying and recording live TV. [...]

The security landscape now moves at a pace no patch cycle can match. Attackers aren’t waiting for quarterly updates or monthly fixes—they adapt within hours, blending fresh techniques with old, forgotten flaws to create new openings. A vulnerability closed yesterday can become the blueprint for tomorrow’s breach. This week’s recap explores the trends driving that constant churn: how threat

We hear this a lot: “We’ve got hundreds of service accounts and AI agents running in the background. We didn’t create most of them. We don’t know who owns them. How are we supposed to secure them?” Every enterprise today runs on more than users. Behind the scenes, thousands of non-human identities, from service accounts to API tokens to AI agents, access systems, move data, and execute tasks

À travers un communiqué publié le 20 septembre 2025, l’ANTS a démenti les rumeurs affirmant que 13 millions de données sensibles issues de l’agence étaient en vente sur le dark web. Ce dénouement met fin à un brouhaha de plusieurs mois qui aura mis en lumière les mécaniques de désinformation de l’écosystème cyber.

A gamer seeking financial support for cancer treatment lost $32,000 after downloading from Steam a verified game named BlockBlasters that drained his cryptocurrency wallet. [...]