CyberBureau

9 SOURCES // 40 SIGNAUX //

EN DIRECT

Flipboard31/10 08:55

Les données de 38'000 élèves ont été piratées dans le canton de Vaud

Une cyberattaque a touché une plateforme informatique utilisée par les établissements vaudois de formation postobligatoire. Les données de quelque …

The Hacker News31/10 08:27

Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active e…

CyberScoop30/10 21:30

China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days

Vapor Panda targeted more than 200 organizations spanning at least 14 countries, according to CrowdStrike. The ongoing campaign is remarkably successful and operating at shocking speed. The post China-backed th…

Security Affairs30/10 21:22

Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries

Yoba malware uses fake ChatGPT and Claude apps to sideload malware through signed installers and deploy a cryptocurrency miner. Check Point Research has spent two months tracking a campaign it calls Yoba, which…

BleepingComputer30/10 21:09

Critical Linux kernel flaw allows remote root attacks on MPTCP servers

Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute commands as root on servers running Multipath TCP…

Defense News - Global30/10 17:57

‘Open the hives’ — Why France is turning tank gunners into FPV pilots

Cpl. Igor started a new job this year, swapping the sights of a 105 mm gun on the French Army's AMX 10 RC reconnaissance vehicle for first-person view goggles and a handheld controller.

Geopolitical Futures30/10 17:26

Weekly Graphic: Deadlock Likely After Israel’s Election

(click to enlarge) Israel’s Oct. 27 election produced a hung Knesset, with Prime Minister Benjamin Netanyahu’s bloc securing 54 seats, seven short of a governing majority, while the Jewish-led opposition won 48…

Krebs on Security21/10 15:26

Widespread PHP Flaw May Cause Many Site Outages Today

Expect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to sei…

FDD Long War Journal10/08 18:20

From Guantanamo Bay to ISCAP: The case of Jamal Kiyemba

In 2002, Jamal Kiyemba, a Ugandan national living in the United Kingdom, was arrested in northwest Pakistan after allegedly attempting to join Al Qaeda in Afghanistan and was sent to the US prison facility at G…

Flipboard31/10 08:15

Cyberattaque de Binance : le K.-O. de CZ

Changpeng Zhao, cofondateur et principal actionnaire de Binance, a assisté impuissant à la cyberattaque à 6,3 milliards de dollars dont a été victime …

The Hacker News31/10 05:33

A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats

A malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it, allowing them to read their private conversations, researchers at the security firm Parameter showed…

Security Affairs30/10 20:25

U.S. CISA adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Gi…

CyberScoop30/10 17:07

Apple notifications alert victims in 99 countries about mercenary spyware infections

The notifications come shortly before the Pall Mall Process is nearing final negotiations on guidelines for the use of commercial hacking tools. The post Apple notifications alert victims in 99 countries about…

Defense News - Global30/10 15:58

From tanks to space, Norway and Germany forge ahead with ‘Hansa’ defense pact

German tank maker KNDS and Norway’s Ritek have begun producing Leopard 2A8 tanks in Norway, adding a land-based industrial foothold to a security partnership spanning submarines, missiles and military operation…

BleepingComputer30/10 15:58

Trezor warns of suspected crypto-theft implant in hardware wallet

Hardware wallet device maker Trezor has received credible reports about a suspected hardware crypto-theft implant in a Trezor Safe 5 sold by its reseller CryptoBilis in Southeast Asia. [...]

Geopolitical Futures30/10 15:28

Daily Memo: Israeli Election, US War Plans

Election results. Prime Minister Benjamin Netanyahu’s parliamentary bloc won 53 seats in the next Knesset, short of the 61 seats required to form a majority government, according to the final count of Tuesday’s…

Krebs on Security19/10 13:48

Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site

U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained…

FDD Long War Journal10/08 17:08

Generation Jihad | Losing ground: Somalia and Mali’s jihad problem

The US is losing leverage in Somalia as frustration with Mogadishu threatens critical African Union support and risks strengthening Al Shabaab’s hold. In Mali, renewed US airstrikes against JNIM raise a paralle…

Flipboard31/10 07:25

Armes biochimiques, cyberattaques géantes, perte de contrôle... Ce que dit le dossier d'entrée en Bourse d'Anthropic sur les dangers de l'IA

L'entreprise américaine, qui développe notamment l'intelligence artificielle générative Claude, a publié un long document en vue de sa prochaine …

The Hacker News31/10 04:56

Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%

Threat actors are launching about 8,226 network-layer distributed denial-of-service (DDoS) attacks per hour, Cloudflare revealed Thursday. The web infrastructure and security company said it autonomously mitiga…

Security Affairs30/10 18:50

$6.3 Billion Stolen from Binance in Attack Attributed to North Korea

Binance links a $6.3 billion crypto theft to a compromised DevOps laptop, with North Korean hackers blamed by blockchain analysts. Binance was investigating suspicious transfers that early estimates put at up t…

CyberScoop30/10 15:58

California officials confirm grand jury subpoenas as states, civil groups brace to protect elections from federal encroachment

Los Angeles County officials told CyberScoop they received multiple grand jury subpoenas investigating alleged election fraud. States and civil groups call it a federal power play. The post California officials…

Defense News - Global30/10 14:56

Ukraine completes work on new missile defense system, awaits European partner components

Ukraine has completed its share of Freyja, the multinational antiballistic shield that Europe and Kyiv are racing to bring together.

BleepingComputer30/10 14:36

Malicious Claude Code extension on Cursor planted SSH backdoors

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to malware desig…

Geopolitical Futures30/10 10:00

Xi Is Preparing China for a Harder Era

The Fifth Plenary Session of the 20th Central Committee of the Chinese Communist Party, held in Beijing from Oct. 26 to 29, represents a significant moment in China’s domestic politics and its broader geopoliti…

Krebs on Security14/10 14:22

U.K. Sanctions Cryptomus for RU Money Laundering

The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet market…

FDD Long War Journal07/08 17:36

Analysis: North Korean missile deployment raises urgency of Ukraine’s Starlink plea

North Korea is reportedly dispatching as many as 120 additional ballistic missiles to Ukraine as the embattled country searches for ways to destroy Russian missile launchers. The post Analysis: North Korean mis…

Flipboard31/10 05:52

Des conserves, des lampes-torches, un stock d'eau... Les Britanniques invités à s'équiper de kits de survie

Un kit d'urgence pour tenir 3 jours en toute autonomie. Face aux risques de cyberattaques, de catastrophes naturelles ou de blackouts électriques, le …

The Hacker News30/10 16:58

Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide

Chinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetration testing framework called ARTEX in attacks aimed at high-value targets simultaneously. T…

CyberScoop30/10 15:14

Defense contractor pleads guilty to aiding North Korean remote worker scheme

The 62-year-old allowed co-conspirators to use his identity and top secret security clearance to apply for almost 100 jobs last year. The scheme’s success rate was limited. The post Defense contractor pleads gu…

BleepingComputer30/10 14:00

SS7 and Diameter Attacks: How Signaling Flaws Expose Your Phone

Flaws in SS7 and Diameter signaling protocols can allow attackers to track phone locations, intercept calls and SMS verification codes, and impersonate subscribers without compromising their devices. Cape expla…

Security Affairs30/10 12:06

How to prioritize remediation after a pentest: a practitioner workflow

A practical pentest workflow combines CVSS, EPSS and business impact to validate findings, prioritize fixes and document remediation decisions. Remediation prioritization after a pentest is the process of ranki…

Defense News - Global30/10 10:48

Pentagon tells Europeans to cool their rhetoric on Russia, sources say

Pentagon officials have in recent weeks asked several NATO countries to tone down their rhetoric regarding the threat posed by Russia, sources told Reuters.

Geopolitical Futures29/10 21:23

Can Elections Change Geopolitics?

How will this week's major elections move the needle in global geopolitics? On this episode of Talking Geopolitics, GPF Chairman George Friedman joins host Christian Smith to break down the impact of elections…

Krebs on Security13/10 23:24

Microsoft Patches More Than 1,400 Security Flaws

Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000 fixes, whic…

FDD Long War Journal06/08 21:10

Sudanese Armed Forces gains in civil war force strategic adjustment from paramilitia rival

The Sudanese military's recapture of the Al Sadarat highway marks its most significant success against the Rapid Support Forces (RSF) in the fourth year of the Sudanese civil war. However, the RSF's shift towar…

Flipboard30/10 19:02

Victime d'un "piratage", ce supermarché de l'Oise annonce un retour à la normale dans ses rayons frais

Victime d'un "piratage" de sa chaîne de froid le week-end dernier, le Carrefour Market de Béthisy-Saint-Pierre a informé ses clients d'un "retour à …

The Hacker News30/10 15:17

TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them

TeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connected to control it. In a TeamViewer session, the computer that connects and takes control is…

CyberScoop30/10 14:33

Syrian hacker who served Assad regime gets 42 months in US prison

Ahmad Umar Agha is best known for posting a fake Associated Press tweet claiming President Obama was injured in a White House bombing. The post Syrian hacker who served Assad regime gets 42 months in US prison…

BleepingComputer30/10 13:00

CISA says max severity GitLab flaw now exploited in the wild

Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US Cybersecurity and Infrastructure Security Agency (CISA). [...]