🖥️« C'est inacceptable » : le patron de Coopérative U dénonce une cyberattaque massive sur les frigos visant les produits frais
Après l’annonce de la cyberattaque massive qui a touché de nombreux frigos dans différentes enseignes de supermarchés, l’heure est à l'estimation des …
📰FTC says ‘sextortion’ protection companies deceived customers about services
A federal lawsuit claims that Dmitry Belkin and his companies routinely failed to deliver on services to protect customers, generated fake evidence and denied refunds to victims. The post FTC says...
🔥Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets
Small artificial intelligence (AI) models may be months away from developing capabilities to self-replicate on IoT devices like smart ovens and off-brand Android TV boxes, according to a warning from
🔥Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it...
🔥Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti has released fixes...
🔥SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects...
🔥GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking
GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was possible for an attacker to push new versions of a...
📰West African scammers targeted in joint international government-industry operation
Participants said it was the largest joint scam operation to date and the first focused on the region. The post West African scammers targeted in joint international government-industry operation...
🖥️Cyberattaque nationale contre les supermarchés : la situation est encore pire que prévu, une seconde cible dans la tourmente
Deux supermarchés ont subi une rupture de la chaîne du froid, quelques heures après la cyberattaque nationale. Les magasins sont équipés de …
🖥️Anthropic avertit que l'IA va bientôt se répliquer et se propager hors des centres de données
L'entreprise affirme que, d'ici quelques mois, des modèles d'IA pourraient se copier et se diffuser sur des objets connectés, comme des fours intelligents et des téléviseurs, ce qui les rendrait...
🖥️« Attrape-moi si tu peux » : la traque rocambolesque d’un jeune escroc qui narguait la police et usurpait l’identité de commissaires et de magistrats
Le 11 septembre, un Français de 25 ans a été mis en examen et écroué pour « escroquerie » et « blanchiment aggravé ». D’Israël, ce Parisien avait mis …
🖥️L'attaque des supermarchés devient plus mystérieuse: un Leclerc touché à son tour mais ses frigos sont équipés par un autre fabricant que celui jusqu'ici visé
La cyberattaque qui frappe les installations frigorifiques de centaines de supermarchés français pourrait être plus étendue qu'on ne le pensait. Un …
📰Flock can now issue CVEs for its own products. Should we trust it?
Flock joined the CVE Program as a CNA, giving the company authority to assign IDs to vulnerabilities in its own surveillance cameras and license plate readers. The post Flock can now issue CVEs for...
📰IonQ to buy zero-trust security firm Elisity in deal valued at up to $1.3 billion
The acquisition pairs Elisity's zero-trust access controls with IonQ's post-quantum cryptography business as federal agencies and major companies accelerate timelines for quantum-ready encryption....
📰Your AI agent is only as safe as the packages it downloads
NVIDIA's new agent safety platform puts enforcement in the right place. It still must know what it is letting through. The post Your AI agent is only as safe as the packages it downloads appeared...
🖥️« C'est inacceptable » : le patron de Coopérative U dénonce une cyberattaque massive sur les frigos visant les produits frais
Après l’annonce de la cyberattaque massive qui a touché de nombreux frigos dans différentes enseignes de supermarchés, l’heure est à l'estimation des …
📰FTC says ‘sextortion’ protection companies deceived customers about services
A federal lawsuit claims that Dmitry Belkin and his companies routinely failed to deliver on services to protect customers, generated fake evidence and denied refunds to victims. The post FTC says...
🔥Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets
Small artificial intelligence (AI) models may be months away from developing capabilities to self-replicate on IoT devices like smart ovens and off-brand Android TV boxes, according to a warning from
🔥Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it...
🔥Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti has released fixes...
🔥SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects...
🔥GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking
GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was possible for an attacker to push new versions of a...
📰West African scammers targeted in joint international government-industry operation
Participants said it was the largest joint scam operation to date and the first focused on the region. The post West African scammers targeted in joint international government-industry operation...
🖥️Cyberattaque nationale contre les supermarchés : la situation est encore pire que prévu, une seconde cible dans la tourmente
Deux supermarchés ont subi une rupture de la chaîne du froid, quelques heures après la cyberattaque nationale. Les magasins sont équipés de …
🖥️Anthropic avertit que l'IA va bientôt se répliquer et se propager hors des centres de données
L'entreprise affirme que, d'ici quelques mois, des modèles d'IA pourraient se copier et se diffuser sur des objets connectés, comme des fours intelligents et des téléviseurs, ce qui les rendrait...
🖥️« Attrape-moi si tu peux » : la traque rocambolesque d’un jeune escroc qui narguait la police et usurpait l’identité de commissaires et de magistrats
Le 11 septembre, un Français de 25 ans a été mis en examen et écroué pour « escroquerie » et « blanchiment aggravé ». D’Israël, ce Parisien avait mis …
🖥️L'attaque des supermarchés devient plus mystérieuse: un Leclerc touché à son tour mais ses frigos sont équipés par un autre fabricant que celui jusqu'ici visé
La cyberattaque qui frappe les installations frigorifiques de centaines de supermarchés français pourrait être plus étendue qu'on ne le pensait. Un …
📰Flock can now issue CVEs for its own products. Should we trust it?
Flock joined the CVE Program as a CNA, giving the company authority to assign IDs to vulnerabilities in its own surveillance cameras and license plate readers. The post Flock can now issue CVEs for...
📰IonQ to buy zero-trust security firm Elisity in deal valued at up to $1.3 billion
The acquisition pairs Elisity's zero-trust access controls with IonQ's post-quantum cryptography business as federal agencies and major companies accelerate timelines for quantum-ready encryption....
📰Your AI agent is only as safe as the packages it downloads
NVIDIA's new agent safety platform puts enforcement in the right place. It still must know what it is letting through. The post Your AI agent is only as safe as the packages it downloads appeared...