Flipboard
Cyberattaque à Chambourcy : la mairie obligée de travailler à l’ancienne
La mairie de Chambourcy (Yvelines) a été victime d’une cyberattaque. En attendant d’évaluer l’ampleur des données compromises, la Ville appelle ses …
9 SOURCES // 40 SIGNAUX //
EN DIRECTBleepingComputer
The Biggest Threat to Your GRC Job Isn’t AI. It’s Ignoring AI.
AI agents are taking over routine governance, risk, and compliance tasks, forcing GRC professionals to rethink the skills needed to stay relevant. Anecdotes examines three essential skills for the AI-driven GRC…
SIGNAL 02OUVRIR ↗
Security Affairs
QNAP Warns Users as Plex2Shell Flaws Are Used to Hack NAS Devices
Taiwanese vendor QNAP urges users to update Plex Media Server after reports of NAS compromises through the Plex2Shell vulnerability chain. QNAP urges users to update Plex Media Server through the QNAP App Cente…
SIGNAL 03OUVRIR ↗
The Hacker News
Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia
The South Asian cyber espionage group known as Bitter (aka APT-C-08, APT-Q-37, Hazy Tiger, Orange Yali, T-APT-17, and TA397) has been observed targeting South Asian organizations with a previously unreported re…
SIGNAL 04OUVRIR ↗
Defense News - Global
Swiss neutrality proponents challenge arms firms in vote on easing of exports
Swiss voters will decide on Nov. 29 whether to block a bill relaxing curbs on weapons exports, in a referendum that touches on Switzerland's evolving neutral tradition.
SIGNAL 05OUVRIR ↗
CyberScoop
AI doesn’t have to go rogue to break the world
AI systems are learning to exploit loopholes in everything from software to tax law. The biggest threat may not be malicious intent, but machines doing exactly what we ask. The post AI doesn’t have to go rogue…
SIGNAL 06OUVRIR ↗
Geopolitical Futures
The Geopolitics of the Midterms
In general, the internal politics of nations pivot on their domestic social, economic and ideological realities. This is true in both democratic and authoritarian societies, although changes occur through very…
SIGNAL 07OUVRIR ↗
Krebs on Security
Want to Rent an Internet Address at the White House?
Several staffers at the White House are using computers or mobile devices equipped with residential proxy services that render their internet address available for others to rent, security experts warned today.…
SIGNAL 08OUVRIR ↗
FDD Long War Journal
From Guantanamo Bay to ISCAP: The case of Jamal Kiyemba
In 2002, Jamal Kiyemba, a Ugandan national living in the United Kingdom, was arrested in northwest Pakistan after allegedly attempting to join Al Qaeda in Afghanistan and was sent to the US prison facility at G…
SIGNAL 09OUVRIR ↗
Flipboard
Les câbles sous-marins au cœur d'une guerre invisible entre les grandes puissances
La France et l’Europe sont victimes chaque semaine de vagues de cyberattaques. Des rappels permanents qu’une guerre hybride est en cours. Elle se joue aussi sous les océans, avec un secteur stratégique de plus…
SIGNAL 10OUVRIR ↗
BleepingComputer
FBI agent stole $2.5 million in crypto from hackers under investigation
A former FBI agent has pleaded guilty to stealing nearly $2.5 million from the wallets of fraud victims and nation-state hackers under investigation. [...]
SIGNAL 11OUVRIR ↗
The Hacker News
⚡ Weekly Recap: SSHole Exploited, APT Root RCE, Robot Takeovers, 15K Hacked Sites, and More
A system doesn't always need a complicated bug to let someone in. Sometimes, a blank password is enough. That's one of the bigger stories this week. And it gets worse when the tools meant to keep systems update…
SIGNAL 12OUVRIR ↗
Security Affairs
CISA and the FBI Warn Of Attacks against Industrial Refrigeration Controllers
US agencies warn attackers are going after industrial refrigeration controllers. The fixes are basic, and most start with getting them off the internet. CISA, the FBI, HHS, USDA and the Department of Transporta…
SIGNAL 13OUVRIR ↗
Defense News - Global
European troops set to train in Poland for postwar Ukraine deployment
Britain and France will lead 2,800 troops from 11 nations in a two-week exercise testing how to move, protect and supply a force to rebuild Ukraine’s military after the war ends.
SIGNAL 14OUVRIR ↗
Geopolitical Futures
George Answers Your Questions: Global Tensions in Geopolitics
I was astounded by the number of you who responded to my request for your thoughts on my article from earlier this week, “Global Tensions in Geopolitics,” and how insightful and deep many of your superb comment…
SIGNAL 15OUVRIR ↗
CyberScoop
Authorities accuse trio of using AI deepfakes to defraud $129M from businesses
The middle-aged men allegedly targeted accounting staff at victim companies and impersonated CEOs and lawyers to trick victims into sending large wire transfers. The post Authorities accuse trio of using AI dee…
SIGNAL 16OUVRIR ↗
Krebs on Security
Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies
Google said today it worked with industry partners to dismantle a botnet made up of more than 1.3 million Android TV set-top boxes that ship with malicious software which secretly rents the user's Internet conn…
SIGNAL 17OUVRIR ↗
FDD Long War Journal
Generation Jihad | Losing ground: Somalia and Mali’s jihad problem
The US is losing leverage in Somalia as frustration with Mogadishu threatens critical African Union support and risks strengthening Al Shabaab’s hold. In Mali, renewed US airstrikes against JNIM raise a paralle…
SIGNAL 18OUVRIR ↗
BleepingComputer
US bans MEXC crypto exchange over sanctions evasion, cybercrime links
The US Department of the Treasury has cut off the MEXC Global crypto exchange from the US financial system over sanctions evasion and links with cybercrime gangs. [...]
SIGNAL 19OUVRIR ↗
Flipboard
NIS 2 arrive enfin à l’Assemblée, le gouvernement veut supprimer l’article anti-portes dérobées
Plus de deux ans après la date limite de transposition de NIS 2, les députés entament ce lundi 9 novembre l’examen du projet de loi relatif à la …
SIGNAL 20OUVRIR ↗
The Hacker News
Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars
The login systems behind two car brands' mobile apps could be taken over completely, two security researchers found, allowing them to access any customer's account and, for an owner with a connected car, unlock…
SIGNAL 21OUVRIR ↗
Security Affairs
Fake GitHub Security Tools Infect Over 2,000 PCs With Malware
Fake GitHub security tools are spreading malware that disables defenses, steals sensitive data and infects over 2,000 PCs. Cybersecurity firm Doctor Web has found malware hidden in GitHub projects that look lik…
SIGNAL 22OUVRIR ↗
Defense News - Global
US, Colombian troops kick off exercise amid the Pentagon’s Western Hemisphere pivot
Hundreds of American and Colombian troops kicked off a sprawling military exercise in Colombia this week as the U.S. military sharpens its focus on the Western Hemisphere.
SIGNAL 23OUVRIR ↗
Geopolitical Futures
Weekly Graphic: Making Sense of Hormuz Traffic Data
(click to enlarge) Ships are returning to the Strait of Hormuz, but oil is not. Nearly 770 vessels crossed the strait in October, close to July’s wartime peak of 795, yet the oil they carried out fell to an est…
SIGNAL 24OUVRIR ↗
CyberScoop
Air Force cyber official: need to invest in digital forensics
Wanda Jones-Heath said it’s key to keeping pace with incidents and threats, speaking at a Datadog event Thursday. The post Air Force cyber official: need to invest in digital forensics appeared first on CyberSc…
SIGNAL 25OUVRIR ↗
Krebs on Security
Widespread PHP Flaw May Cause Many Site Outages Today
Expect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to sei…
SIGNAL 26OUVRIR ↗
FDD Long War Journal
Analysis: North Korean missile deployment raises urgency of Ukraine’s Starlink plea
North Korea is reportedly dispatching as many as 120 additional ballistic missiles to Ukraine as the embattled country searches for ways to destroy Russian missile launchers. The post Analysis: North Korean mis…
SIGNAL 27OUVRIR ↗
BleepingComputer
Ukraine dismantles crypto scam network that stole €4.3 million
Ukrainian law enforcement arrested four suspects in a case involving the theft of more than €4.3 million using a network of cryptocurrency investment scam call centers. [...]
SIGNAL 28OUVRIR ↗
Flipboard
Le centre américain de sécurité de l’IA CAISSI sans direction et rapproché de la Maison Blanche
Des critiques craignent que ses conclusions sur les risques, des cyberattaques aux armes biologiques, ne soient atténuées pour ménager l’industrie technologique. L'organisme gouvernemental américain chargé de t…
SIGNAL 29OUVRIR ↗
The Hacker News
Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety
Some people who set up a Keplr crypto wallet with their Google or Apple account have had money stolen by an attacker. Keplr uses a company called Web3Auth to run that Google and Apple sign-in. The attacker used…
SIGNAL 30OUVRIR ↗
Security Affairs
The BBC has a plan for a Black Sky event, and it runs on FM radio
The BBC plans to use emergency FM radio to keep the UK informed during prolonged blackouts, with a self-sufficient studio ready for 72 hours. If electricity fails across the UK for days, the BBC says it has a p…
SIGNAL 31OUVRIR ↗
Defense News - Global
Russia using own version of Starlink for military comms over Ukraine, Kyiv says
Russia is already using its new Rassvet satellite network — billed as a homegrown version of Starlink — for military communications over Ukraine, according to Ukrainian military intelligence.
SIGNAL 32OUVRIR ↗
Geopolitical Futures
Daily Memo: Preparing for Another Strike
Iran preparations. U.S. President Donald Trump met with his national security team to discuss the possibility of resuming military operations against Iran, senior officials told Fox News. U.S. Central Command i…
SIGNAL 33OUVRIR ↗
CyberScoop
OpenAI debuts GPT-6 Cyber, touting better performance — and safety guardrails
After a summer of sandbox escaping hacks, OpenAI said their new model was trained to be more cautious around user intent and less sensitive to “reward hacking” behaviors. The post OpenAI debuts GPT-6 Cyber, tou…
SIGNAL 34OUVRIR ↗
Krebs on Security
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained…
SIGNAL 35OUVRIR ↗
FDD Long War Journal
Sudanese Armed Forces gains in civil war force strategic adjustment from paramilitia rival
The Sudanese military's recapture of the Al Sadarat highway marks its most significant success against the Rapid Support Forces (RSF) in the fourth year of the Sudanese civil war. However, the RSF's shift towar…
SIGNAL 36OUVRIR ↗
Flipboard
Valais: le site du canton en panne, la piste d’une cyberattaque écartée
Alors que débute la session de novembre du Grand Conseil, le site web du canton du Valais ne fonctionne plus. Le travail du Parlement n’est toutefois …
SIGNAL 37OUVRIR ↗
The Hacker News
LNbits Urges All Operators to Shut Down Their Bitcoin Lightning Wallet Servers Amid Attacks
Everyone running LNbits, a free, open-source Bitcoin Lightning wallet system, should shut down their servers now because of a wave of attacks, the project said yesterday. It has several security fixes to releas…
SIGNAL 38OUVRIR ↗
Security Affairs
Don’t Hand Propaganda a Gift: Reading the Brenner Base Tunnel SE Breach Calmly
Brenner Base Tunnel SE confirms a breach and Everest claims 812 GB. What we know, what we don’t, and why overblown alarm helps propaganda more than the attackers. Brenner Base Tunnel (BBT) SE, the company build…
SIGNAL 39OUVRIR ↗
BleepingComputer
Iris Ohyama data cloud breach exposes info of 7.7 million customers
Japanese manufacturer Iris Ohyama, the operator of the Iris Plaza shopping platform, disclosed that personal information belonging to about 7.7 million people may have been exposed after unauthorized access to…
SIGNAL 40OUVRIR ↗
Flipboard
Cyberattaque à Chambourcy : la mairie obligée de travailler à l’ancienne
La mairie de Chambourcy (Yvelines) a été victime d’une cyberattaque. En attendant d’évaluer l’ampleur des données compromises, la Ville appelle ses …
SIGNAL 01OUVRIR ↗
BleepingComputer
The Biggest Threat to Your GRC Job Isn’t AI. It’s Ignoring AI.
AI agents are taking over routine governance, risk, and compliance tasks, forcing GRC professionals to rethink the skills needed to stay relevant. Anecdotes examines three essential skills for the AI-driven GRC…
SIGNAL 02OUVRIR ↗
Security Affairs
QNAP Warns Users as Plex2Shell Flaws Are Used to Hack NAS Devices
Taiwanese vendor QNAP urges users to update Plex Media Server after reports of NAS compromises through the Plex2Shell vulnerability chain. QNAP urges users to update Plex Media Server through the QNAP App Cente…
SIGNAL 03OUVRIR ↗
The Hacker News
Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia
The South Asian cyber espionage group known as Bitter (aka APT-C-08, APT-Q-37, Hazy Tiger, Orange Yali, T-APT-17, and TA397) has been observed targeting South Asian organizations with a previously unreported re…
SIGNAL 04OUVRIR ↗
Defense News - Global
Swiss neutrality proponents challenge arms firms in vote on easing of exports
Swiss voters will decide on Nov. 29 whether to block a bill relaxing curbs on weapons exports, in a referendum that touches on Switzerland's evolving neutral tradition.
SIGNAL 05OUVRIR ↗
CyberScoop
AI doesn’t have to go rogue to break the world
AI systems are learning to exploit loopholes in everything from software to tax law. The biggest threat may not be malicious intent, but machines doing exactly what we ask. The post AI doesn’t have to go rogue…
SIGNAL 06OUVRIR ↗
Geopolitical Futures
The Geopolitics of the Midterms
In general, the internal politics of nations pivot on their domestic social, economic and ideological realities. This is true in both democratic and authoritarian societies, although changes occur through very…
SIGNAL 07OUVRIR ↗
Krebs on Security
Want to Rent an Internet Address at the White House?
Several staffers at the White House are using computers or mobile devices equipped with residential proxy services that render their internet address available for others to rent, security experts warned today.…
SIGNAL 08OUVRIR ↗
FDD Long War Journal
From Guantanamo Bay to ISCAP: The case of Jamal Kiyemba
In 2002, Jamal Kiyemba, a Ugandan national living in the United Kingdom, was arrested in northwest Pakistan after allegedly attempting to join Al Qaeda in Afghanistan and was sent to the US prison facility at G…
SIGNAL 09OUVRIR ↗
Flipboard
Les câbles sous-marins au cœur d'une guerre invisible entre les grandes puissances
La France et l’Europe sont victimes chaque semaine de vagues de cyberattaques. Des rappels permanents qu’une guerre hybride est en cours. Elle se joue aussi sous les océans, avec un secteur stratégique de plus…
SIGNAL 10OUVRIR ↗
BleepingComputer
FBI agent stole $2.5 million in crypto from hackers under investigation
A former FBI agent has pleaded guilty to stealing nearly $2.5 million from the wallets of fraud victims and nation-state hackers under investigation. [...]
SIGNAL 11OUVRIR ↗
The Hacker News
⚡ Weekly Recap: SSHole Exploited, APT Root RCE, Robot Takeovers, 15K Hacked Sites, and More
A system doesn't always need a complicated bug to let someone in. Sometimes, a blank password is enough. That's one of the bigger stories this week. And it gets worse when the tools meant to keep systems update…
SIGNAL 12OUVRIR ↗
Security Affairs
CISA and the FBI Warn Of Attacks against Industrial Refrigeration Controllers
US agencies warn attackers are going after industrial refrigeration controllers. The fixes are basic, and most start with getting them off the internet. CISA, the FBI, HHS, USDA and the Department of Transporta…
SIGNAL 13OUVRIR ↗
Defense News - Global
European troops set to train in Poland for postwar Ukraine deployment
Britain and France will lead 2,800 troops from 11 nations in a two-week exercise testing how to move, protect and supply a force to rebuild Ukraine’s military after the war ends.
SIGNAL 14OUVRIR ↗
Geopolitical Futures
George Answers Your Questions: Global Tensions in Geopolitics
I was astounded by the number of you who responded to my request for your thoughts on my article from earlier this week, “Global Tensions in Geopolitics,” and how insightful and deep many of your superb comment…
SIGNAL 15OUVRIR ↗
CyberScoop
Authorities accuse trio of using AI deepfakes to defraud $129M from businesses
The middle-aged men allegedly targeted accounting staff at victim companies and impersonated CEOs and lawyers to trick victims into sending large wire transfers. The post Authorities accuse trio of using AI dee…
SIGNAL 16OUVRIR ↗
Krebs on Security
Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies
Google said today it worked with industry partners to dismantle a botnet made up of more than 1.3 million Android TV set-top boxes that ship with malicious software which secretly rents the user's Internet conn…
SIGNAL 17OUVRIR ↗
FDD Long War Journal
Generation Jihad | Losing ground: Somalia and Mali’s jihad problem
The US is losing leverage in Somalia as frustration with Mogadishu threatens critical African Union support and risks strengthening Al Shabaab’s hold. In Mali, renewed US airstrikes against JNIM raise a paralle…
SIGNAL 18OUVRIR ↗
BleepingComputer
US bans MEXC crypto exchange over sanctions evasion, cybercrime links
The US Department of the Treasury has cut off the MEXC Global crypto exchange from the US financial system over sanctions evasion and links with cybercrime gangs. [...]
SIGNAL 19OUVRIR ↗
Flipboard
NIS 2 arrive enfin à l’Assemblée, le gouvernement veut supprimer l’article anti-portes dérobées
Plus de deux ans après la date limite de transposition de NIS 2, les députés entament ce lundi 9 novembre l’examen du projet de loi relatif à la …
SIGNAL 20OUVRIR ↗
The Hacker News
Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars
The login systems behind two car brands' mobile apps could be taken over completely, two security researchers found, allowing them to access any customer's account and, for an owner with a connected car, unlock…
SIGNAL 21OUVRIR ↗
Security Affairs
Fake GitHub Security Tools Infect Over 2,000 PCs With Malware
Fake GitHub security tools are spreading malware that disables defenses, steals sensitive data and infects over 2,000 PCs. Cybersecurity firm Doctor Web has found malware hidden in GitHub projects that look lik…
SIGNAL 22OUVRIR ↗
Defense News - Global
US, Colombian troops kick off exercise amid the Pentagon’s Western Hemisphere pivot
Hundreds of American and Colombian troops kicked off a sprawling military exercise in Colombia this week as the U.S. military sharpens its focus on the Western Hemisphere.
SIGNAL 23OUVRIR ↗
Geopolitical Futures
Weekly Graphic: Making Sense of Hormuz Traffic Data
(click to enlarge) Ships are returning to the Strait of Hormuz, but oil is not. Nearly 770 vessels crossed the strait in October, close to July’s wartime peak of 795, yet the oil they carried out fell to an est…
SIGNAL 24OUVRIR ↗
CyberScoop
Air Force cyber official: need to invest in digital forensics
Wanda Jones-Heath said it’s key to keeping pace with incidents and threats, speaking at a Datadog event Thursday. The post Air Force cyber official: need to invest in digital forensics appeared first on CyberSc…
SIGNAL 25OUVRIR ↗
Krebs on Security
Widespread PHP Flaw May Cause Many Site Outages Today
Expect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to sei…
SIGNAL 26OUVRIR ↗
FDD Long War Journal
Analysis: North Korean missile deployment raises urgency of Ukraine’s Starlink plea
North Korea is reportedly dispatching as many as 120 additional ballistic missiles to Ukraine as the embattled country searches for ways to destroy Russian missile launchers. The post Analysis: North Korean mis…
SIGNAL 27OUVRIR ↗
BleepingComputer
Ukraine dismantles crypto scam network that stole €4.3 million
Ukrainian law enforcement arrested four suspects in a case involving the theft of more than €4.3 million using a network of cryptocurrency investment scam call centers. [...]
SIGNAL 28OUVRIR ↗
Flipboard
Le centre américain de sécurité de l’IA CAISSI sans direction et rapproché de la Maison Blanche
Des critiques craignent que ses conclusions sur les risques, des cyberattaques aux armes biologiques, ne soient atténuées pour ménager l’industrie technologique. L'organisme gouvernemental américain chargé de t…
SIGNAL 29OUVRIR ↗
The Hacker News
Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety
Some people who set up a Keplr crypto wallet with their Google or Apple account have had money stolen by an attacker. Keplr uses a company called Web3Auth to run that Google and Apple sign-in. The attacker used…
SIGNAL 30OUVRIR ↗
Security Affairs
The BBC has a plan for a Black Sky event, and it runs on FM radio
The BBC plans to use emergency FM radio to keep the UK informed during prolonged blackouts, with a self-sufficient studio ready for 72 hours. If electricity fails across the UK for days, the BBC says it has a p…
SIGNAL 31OUVRIR ↗
Defense News - Global
Russia using own version of Starlink for military comms over Ukraine, Kyiv says
Russia is already using its new Rassvet satellite network — billed as a homegrown version of Starlink — for military communications over Ukraine, according to Ukrainian military intelligence.
SIGNAL 32OUVRIR ↗
Geopolitical Futures
Daily Memo: Preparing for Another Strike
Iran preparations. U.S. President Donald Trump met with his national security team to discuss the possibility of resuming military operations against Iran, senior officials told Fox News. U.S. Central Command i…
SIGNAL 33OUVRIR ↗
CyberScoop
OpenAI debuts GPT-6 Cyber, touting better performance — and safety guardrails
After a summer of sandbox escaping hacks, OpenAI said their new model was trained to be more cautious around user intent and less sensitive to “reward hacking” behaviors. The post OpenAI debuts GPT-6 Cyber, tou…
SIGNAL 34OUVRIR ↗
Krebs on Security
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained…
SIGNAL 35OUVRIR ↗
FDD Long War Journal
Sudanese Armed Forces gains in civil war force strategic adjustment from paramilitia rival
The Sudanese military's recapture of the Al Sadarat highway marks its most significant success against the Rapid Support Forces (RSF) in the fourth year of the Sudanese civil war. However, the RSF's shift towar…
SIGNAL 36OUVRIR ↗
Flipboard
Valais: le site du canton en panne, la piste d’une cyberattaque écartée
Alors que débute la session de novembre du Grand Conseil, le site web du canton du Valais ne fonctionne plus. Le travail du Parlement n’est toutefois …
SIGNAL 37OUVRIR ↗
The Hacker News
LNbits Urges All Operators to Shut Down Their Bitcoin Lightning Wallet Servers Amid Attacks
Everyone running LNbits, a free, open-source Bitcoin Lightning wallet system, should shut down their servers now because of a wave of attacks, the project said yesterday. It has several security fixes to releas…
SIGNAL 38OUVRIR ↗
Security Affairs
Don’t Hand Propaganda a Gift: Reading the Brenner Base Tunnel SE Breach Calmly
Brenner Base Tunnel SE confirms a breach and Everest claims 812 GB. What we know, what we don’t, and why overblown alarm helps propaganda more than the attackers. Brenner Base Tunnel (BBT) SE, the company build…
SIGNAL 39OUVRIR ↗
BleepingComputer
Iris Ohyama data cloud breach exposes info of 7.7 million customers
Japanese manufacturer Iris Ohyama, the operator of the Iris Plaza shopping platform, disclosed that personal information belonging to about 7.7 million people may have been exposed after unauthorized access to…
SIGNAL 40OUVRIR ↗