Hackers over the past six months have relied increasingly more on the browser-in-the-browser (BitB) method to trick users into providing Facebook account credentials. [...]
Apex Legends players over the weekend experienced disruptions during live matches as threat actors hijacked their characters, disconnected them, and changed their nicknames. [...]
University of Hawaii says a ransomware gang breached its Cancer Center in August 2025, stealing data of study participants, including documents from the 1990s containing Social Security numbers. [...]
Threat actors have been observed uploading a set of eight packages on the npm registry that masqueraded as integrations targeting the n8n workflow automation platform to steal developers' OAuth credentials.
One such package, named "n8n-nodes-hfgjf-irtuinvcm-lasdqewriit," mimics a Google Ads integration, and prompts users to link their advertising account in a seemingly legitimate form and then
Le 12 janvier 2026, la fédération française de tennis a annoncé avoir été la cible d’un « acte de cyber-malveillance ». Des informations personnelles des licenciés ont pu être consultées : voici ce que cela implique pour les concernés.
Hackers are claiming to be selling internal source code belonging to Target Corporation, after publishing what appears to be a sample of stolen code repositories on a public software development platform. After BleepingComputer notified Target, the files were taken offline and the retailer's developer Git server was inaccessible. [...]
Apple and Google have confirmed that the next version of Siri will use Gemini and Google Cloud in a multi-year collaboration between the two tech giants. [...]
A single click on what may appear to be a Telegram username or harmless link is all it takes to expose your real IP address to attackers due to how proxy links are handled. Telegram says it will add warnings to proxy links after researchers demonstrated that such one-click interactions could reveal a Telegram user's real IP address. [...]
Dans une publication sur X le 9 janvier 2026, le PDG de Cloudflare a menacé de supprimer les services que son entreprise devait fournir pour les Jeux olympiques d'hiver 2026. La raison ? Une amende que l'autorité de régulation des communications d'Italie, le pays hôte, a infligée au géant américain pour violation des réglementations anti-piratage.
Spanish energy provider Endesa and its Energía XXI operator are notifying customers that hackers accessed the company's systems and accessed contract-related information, which includes personal details. [...]
Microsoft has started retiring the Microsoft Lens PDF scanner app for Android and iOS devices on Friday, January 9th, with plans to remove it from app stores next month. [...]
Microsoft 365 has made file sharing effortless, but that convenience often leaves organizations with little visibility into who can access sensitive data. Tenfold explains how access reviews for shared cloud content can help organizations regain visibility, reduce unnecessary permissions, and prevent data leaks in Microsoft 365. [...]
This week made one thing clear: small oversights can spiral fast. Tools meant to save time and reduce friction turned into easy entry points once basic safeguards were ignored. Attackers didn’t need novel tricks. They used what was already exposed and moved in without resistance.
Scale amplified the damage. A single weak configuration rippled out to millions. A repeatable flaw worked again and
Ce nouveau volet du Kaspersky Security Bulletin examine les tendances qui ont façonné la cybersécurité dans le secteur des télécommunications en 2025 et celles susceptibles de perdurer en 2026. Les activités APT (1), la compromission de la chaîne d’approvisionnement, les perturbations dues aux attaques DDoS et les arnaques à la carte SIM ont continué de mettre la […]
A new wave of GoBruteforcer attacks has targeted databases of cryptocurrency and blockchain projects to co-opt them into a botnet that's capable of brute-forcing user passwords for services such as FTP, MySQL, PostgreSQL, and phpMyAdmin on Linux servers.
"The current wave of campaigns is driven by two factors: the mass reuse of AI-generated server deployment examples that propagate common
Le week-end du 10 janvier 2026 aura été marqué par la rumeur, largement relayée, d’un piratage massif d’Instagram. Source de cette panique ? Des mails de réinitialisation de mot de passe reçus par de nombreux utilisateurs. Instagram a réagi le 11 janvier, assurant avoir corrigé une faille de service, tout en démentant tout piratage.
La cyberattaque ayant visé l’Office français de l’immigration et de l’intégration rappelle une réalité désormais bien connue des experts : les administrations publiques sont devenues une proie de choix par leur écosystème. Prestataires, partenaires, accès distants… chaque identité numérique constitue aujourd’hui un point d’entrée potentiel. Tribune Okta – Au-delà de l’incident en lui-même, cette affaire […]
Connexion
