🔥Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud
📰The next election influence campaign will target your AI chatbot
Someone is seeding the internet with hyperlocal content about political races. Researchers say it’s designed to train AI chatbots to favor candidates across a broad range of issues. The post The...
🔥ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More
Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week's security stories. The rest gets...
🔥Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads
Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed no click or other action from the user,...
🔥Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks
The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS). The activity, observed from
🖥️La découverte d'une faille « critique » sur PS5 lui rapporte 50 000 dollars, et la colère des internautes — Frandroid
Jordy, participant au programme de chasse aux bugs de PlayStation, a été payé 50 000 dollars par la marque pour lui avoir dévoilé une faille jugée …
🔥Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams
A long-running Traffic Distribution System (TDS) known as Help TDS to a Russian-language affiliate program called Hotejka, which appears to be a rebrand of a traffic monetization operation dubbed...
🖥️REPORTAGE. "Trouver les identifiants et entrer dans le réseau" : à Saint-Malo, des élèves ont participé à un exercice de cybersécurité mené par l'armée
Les élèves de l'IUT de Saint-Malo ont pris part, mercredi, à l'événement Def hack. Un exercice organisé par le commandement de la cyberdéfense, qui …
🖥️« Je ne voterai pas pour elle, parce que je suis Ukrainien » : Zelensky renvoie Marine Le Pen à ses lacunes sur la tech militaire de Kiev
Interrogé par le Financial Times sur la promesse de Marine Le Pen de couper l’aide financière française à Kiev, Volodymyr Zelensky a défendu ce que …
📰AdFection: How mercenary spyware invades victims’ devices through targeted advertising
Researchers say the attacks have serious implications for the online advertising world, and regulators. The post AdFection: How mercenary spyware invades victims’ devices through targeted...
🖥️"Madame Le Pen ne maîtrise pas bien certains détails": Volodymyr Zelensky répond à la candidate du RN, qui souhaite couper les aides à l'Ukraine si elle gagne en 2027
Face à la volonté affichée par Marine Le Pen de suspendre l’aide à l’Ukraine si elle accédait à l’Élysée, Volodymyr Zelensky souligne que Kiev …
🖥️Frigos de supermarchés piratés : Claude a reproduit la cyberattaque en 28 minutes
28 minutes. C’est le temps qu’il a fallu à Claude pour reproduire la cyberattaque qui a fait surchauffer les frigos de centaines de supermarchés …
📰Authorities charge alleged OLVX cybercrime marketplace operator in North Macedonia
Officials disrupted the cybercrime marketplace in April and arrested the alleged 20-year-old operator at that time. Illicit sales reportedly exceeded $500,000 since 2023. The post Authorities charge...
📰Microsoft drops an actively exploited zero-day among record high of 1,413 vulnerabilities
In its October Patch Tuesday, the tech giant addressed more defects in one month than any annual total on record. Nearly 4 in 5 vulnerabilities affect Windows. The post Microsoft drops an actively...
📰Senators press Trump admin to rally federal government around AI safety, security
The letter argues federal agencies should more rigorously test AI models for security threats and sandbox evasion, set new safety standards and lean into defensive AI. The post Senators press Trump...
🔥Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud
📰The next election influence campaign will target your AI chatbot
Someone is seeding the internet with hyperlocal content about political races. Researchers say it’s designed to train AI chatbots to favor candidates across a broad range of issues. The post The...
🔥ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More
Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week's security stories. The rest gets...
🔥Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads
Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed no click or other action from the user,...
🔥Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks
The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS). The activity, observed from
🖥️La découverte d'une faille « critique » sur PS5 lui rapporte 50 000 dollars, et la colère des internautes — Frandroid
Jordy, participant au programme de chasse aux bugs de PlayStation, a été payé 50 000 dollars par la marque pour lui avoir dévoilé une faille jugée …
🔥Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams
A long-running Traffic Distribution System (TDS) known as Help TDS to a Russian-language affiliate program called Hotejka, which appears to be a rebrand of a traffic monetization operation dubbed...
🖥️REPORTAGE. "Trouver les identifiants et entrer dans le réseau" : à Saint-Malo, des élèves ont participé à un exercice de cybersécurité mené par l'armée
Les élèves de l'IUT de Saint-Malo ont pris part, mercredi, à l'événement Def hack. Un exercice organisé par le commandement de la cyberdéfense, qui …
🖥️« Je ne voterai pas pour elle, parce que je suis Ukrainien » : Zelensky renvoie Marine Le Pen à ses lacunes sur la tech militaire de Kiev
Interrogé par le Financial Times sur la promesse de Marine Le Pen de couper l’aide financière française à Kiev, Volodymyr Zelensky a défendu ce que …
📰AdFection: How mercenary spyware invades victims’ devices through targeted advertising
Researchers say the attacks have serious implications for the online advertising world, and regulators. The post AdFection: How mercenary spyware invades victims’ devices through targeted...
🖥️"Madame Le Pen ne maîtrise pas bien certains détails": Volodymyr Zelensky répond à la candidate du RN, qui souhaite couper les aides à l'Ukraine si elle gagne en 2027
Face à la volonté affichée par Marine Le Pen de suspendre l’aide à l’Ukraine si elle accédait à l’Élysée, Volodymyr Zelensky souligne que Kiev …
🖥️Frigos de supermarchés piratés : Claude a reproduit la cyberattaque en 28 minutes
28 minutes. C’est le temps qu’il a fallu à Claude pour reproduire la cyberattaque qui a fait surchauffer les frigos de centaines de supermarchés …
📰Authorities charge alleged OLVX cybercrime marketplace operator in North Macedonia
Officials disrupted the cybercrime marketplace in April and arrested the alleged 20-year-old operator at that time. Illicit sales reportedly exceeded $500,000 since 2023. The post Authorities charge...
📰Microsoft drops an actively exploited zero-day among record high of 1,413 vulnerabilities
In its October Patch Tuesday, the tech giant addressed more defects in one month than any annual total on record. Nearly 4 in 5 vulnerabilities affect Windows. The post Microsoft drops an actively...
📰Senators press Trump admin to rally federal government around AI safety, security
The letter argues federal agencies should more rigorously test AI models for security threats and sandbox evasion, set new safety standards and lean into defensive AI. The post Senators press Trump...