CyberBureau

9 SOURCES // 40 SIGNAUX //

EN DIRECT

Flipboard14/11 22:16

Paralysie aérienne aux Etats-Unis : le point sur la situation

Plus de 17.000 vols ont été annulés vendredi et samedi. Les autorités, qui ont écarté toute cyberattaque, s’attendent à un retour à la normale d’ici …

BleepingComputer14/11 17:27

Cursor confirms security breach led to malicious Claude Code extension

Cursor confirmed it suffered a security breach that let hackers distribute a malicious Claude Code extension through its marketplace after stealing credentials from AI infrastructure provider Fireworks AI. [...…

Security Affairs14/11 16:46

Extortion Group Claims Theft of Nearly One Billion Expedia Traveler Records

Russian extortion group n0n claims to have stolen nearly one billion Expedia traveler records through a compromised third-party provider. A newly formed Russian cyber extortion group called n0n claims it has hi…

Geopolitical Futures14/11 13:00

George Answers Your Questions: The Geopolitics of the Midterms

The Geopolitics of the Midterms Nov. 9, 2026 Question: In “The Storm Before the Calm,” you accurately predicted that the 2024-2028 U.S. president would follow the old economic order and also the old institution…

The Hacker News14/11 12:38

Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a high-severity security flaw impacting UnrealIRCd, an open-source Internet Relay Chat (IRC) server, to its Known Exploited Vulne…

CyberScoop13/11 21:20

Researchers continue to find serious vulnerabilities in internet connected refrigerators

VulnCheck disclosed 14 vulnerabilities in Dixell refrigeration units that give an attacker root access, while online honeypots are being flooded with hacks and malicious probes. The post Researchers continue to…

Defense News - Global13/11 17:55

Judges close part of ICC Afghanistan investigations that could look at US troops

The International Criminal Court will close investigations into Afghanistan that previously looked at alleged crimes by U.S. troops and focus only on actions of the Taliban.

Krebs on Security11/11 18:06

Who Runs the Ransomware Group Qilin?

The cybercrime group Qilin has emerged as the world's most active ransomware affiliate program, claiming at least 365 victim organizations in the past three months alone. But even top Russian hackers make opera…

FDD Long War Journal10/08 18:20

From Guantanamo Bay to ISCAP: The case of Jamal Kiyemba

In 2002, Jamal Kiyemba, a Ugandan national living in the United Kingdom, was arrested in northwest Pakistan after allegedly attempting to join Al Qaeda in Afghanistan and was sent to the US prison facility at G…

Flipboard14/11 19:41

TRANSPORTS. Encore des retards après la pagaille monstre dans l’aviation aux États-Unis

4 000 à 5 000 vols ont encore dû être annulés samedi après la panne qui a touché le système aérien américain. Celle-ci est due à l’obsolescence des …

BleepingComputer14/11 15:15

US disrupts North Korean campaign behind $400 million crypto theft

The U.S. government has disrupted a North Korean social engineering campaign called 'FaceStealer', responsible for stealing more than $400 million in cryptocurrency. [...]

Security Affairs14/11 09:08

U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA…

CyberScoop13/11 20:56

Industry guidelines for offensive cyber tools unveiled through international Pall Mall Process

The United States this week signed on to an international set of industry standards for commercial offensive cyber tools that human rights groups and other advocates wish had been stronger. The Pall Mall Proces…

Geopolitical Futures13/11 20:06

BRICS Gains Influence in Africa

(click to enlarge) At the Russia-Africa Economic and Humanitarian Forum held in Moscow late last month, Russian Deputy Foreign Minister Sergei Ryabkov said Africa is one of the primary vectors for the developme…

Defense News - Global13/11 17:04

Italy boosts GCAP fighter spending as Army vehicles take a hit in budget

Italy has hiked its spending on the GCAP fighter this year while reducing funding for new army tanks and fighting vehicles, newly released spending documents have revealed.

The Hacker News13/11 16:53

PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE

A type confusion flaw in PostgreSQL lets a database user who can create objects run code on the server. Updates released yesterday fix it, along with 51 other security flaws. Full protection from this flaw also…

Krebs on Security10/11 21:55

Microsoft Fixes Nearly 1,100 Security Vulnerabilities

Microsoft did another four-digit patch drop today, releasing updates to fix almost 1,100 security vulnerabilities in its Windows operating systems and supported software. This month's Patch Tuesday addresses 63…

FDD Long War Journal10/08 17:08

Generation Jihad | Losing ground: Somalia and Mali’s jihad problem

The US is losing leverage in Somalia as frustration with Mogadishu threatens critical African Union support and risks strengthening Al Shabaab’s hold. In Mali, renewed US airstrikes against JNIM raise a paralle…

Flipboard14/11 19:35

Victime d'une cyberattaque, Maileva, une filiale du groupe La Poste, annonce un vol de données touchant 22 millions de personnes

Maileva "a notifié la Commission nationale de l'informatique et des libertés et déposé une plainte. Une enquête judiciaire est en cours", a précisé …

Security Affairs13/11 21:19

North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure

The DOJ seized over $1.2 billion from North Korea ‘s Binance theft, and says the same hackers are targeting open-source developers The U.S. Department of Justice announced two separate but connected actions aga…

BleepingComputer13/11 19:38

Trezor confirms crypto-stealing implants in three wallets, releases fix

Cryptocurrency hardware wallet maker Trezor has confirmed that three Safe 5 devices sold by Southeast Asian reseller CryptoBilis contained malicious hardware implants designed to steal wallet recovery phrases a…

Defense News - Global13/11 16:32

US Army names officer held on ‘allegations of espionage’

Lt. Col. Brandon Carroll Tyner has been identified as the U.S. soldier arrested earlier this week in the UK for reportedly assisting Russian intelligence.

Geopolitical Futures13/11 15:45

Daily Memo: Future of Ukraine Negotiations, Germany’s Auto Industry

Europe at the table. Ukraine and Russia have agreed to include EU representatives in the next round of negotiations, U.S. envoy Jared Kushner announced. He explained that Washington expects to discuss a new Eur…

The Hacker News13/11 15:27

New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs

Two attacks made public this week allow a malicious host to read data inside AMD SEV-SNP-protected virtual machines (VMs), which are built to keep the server's operator out. One of them, Mior, can also modify a…

CyberScoop13/11 00:32

US seizes North Korean hacking infrastructure, $1.2 billion in cryptocurrency stolen from Binance

The infrastructure, said to belong to APT38, contained footage used to fool victims over video calls. The post US seizes North Korean hacking infrastructure, $1.2 billion in cryptocurrency stolen from Binance a…

Krebs on Security05/11 04:36

Want to Rent an Internet Address at the White House?

Several staffers at the White House are using computers or mobile devices equipped with residential proxy services that render their internet address available for others to rent, security experts warned today.…

FDD Long War Journal07/08 17:36

Analysis: North Korean missile deployment raises urgency of Ukraine’s Starlink plea

North Korea is reportedly dispatching as many as 120 additional ballistic missiles to Ukraine as the embattled country searches for ways to destroy Russian missile launchers. The post Analysis: North Korean mis…

Flipboard14/11 14:59

Sécurité : 5 astuces pour créer des mots de passes solides (et mémorables)

Utiliser un gestionnaire de mots de passe reste la solution la plus pratique pour protéger ses comptes personnels. Mais tout le monde n’a pas envie …

BleepingComputer13/11 17:31

German military drone operations disrupted by cyberattack

German defense technology company Quantum Systems confirmed that it detected an incident in late October that was part of an active cyberattack by "hostile actors." [...]

Security Affairs13/11 14:35

Gootloader Malware Disrupted After Infecting 25,000 Computers

International law enforcement disrupts Gootloader, seizing domains and taking down over 100 servers linked to 25,000 infected computers. The U.S. Department of Justice announced that law enforcement has removed…

The Hacker News13/11 14:28

FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls

The U.S. Federal Bureau of Investigation (FBI) has established that threat actors tied to the Democratic People's Republic of Korea (DPRK aka North Korea) have stolen more than $400 million worth of cryptocurre…

Defense News - Global13/11 14:22

Turkey and Egypt weigh joint naval shipbuilding projects

Turkey and Egypt are taking steps to strengthen their cooperation in the maritime domain, with joint shipbuilding opportunities on the table.

Geopolitical Futures13/11 11:00

North Korea: A Surprising Linchpin in the Russian Alliance

One of the most unexpected developments in the war in Ukraine is how robust Russia’s alliance network has proved to be. It functions less as a single geopolitical bloc and more as a network of unofficial commit…

CyberScoop12/11 20:58

Rogue remote-access campaign spread through ScreenConnect add-on, researchers say

ConnectWise disabled five third-party extensions across about 400 partner environments after researchers linked a worm-like toolkit to one of them. The post Rogue remote-access campaign spread through ScreenCon…

Krebs on Security03/11 02:24

Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies

Google said today it worked with industry partners to dismantle a botnet made up of more than 1.3 million Android TV set-top boxes that ship with malicious software which secretly rents the user's Internet conn…

FDD Long War Journal06/08 21:10

Sudanese Armed Forces gains in civil war force strategic adjustment from paramilitia rival

The Sudanese military's recapture of the Al Sadarat highway marks its most significant success against the Rapid Support Forces (RSF) in the fourth year of the Sudanese civil war. However, the RSF's shift towar…

Flipboard14/11 14:09

Après la panne d’Outlook et de Microsoft, cette conséquence était prévisible (et c’est encore une mauvaise nouvelle)

Même si la panne massive ayant touché les services du géant américain de la tech est désormais fixée, restez vigilants face à certains courriels dans …

BleepingComputer13/11 16:21

Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiper

Vulnerable Check Point Security Gateway instances have been targeted in PHP2Shell attacks that deployed data-wiping malware on VMware ESXi hosts. [...]

The Hacker News13/11 13:54

Trezor Confirms Hidden Implants in CryptoBilis-Sold Wallets That Can Steal Recovery Phrases

Three Trezor Safe 5 wallets bought from the reseller CryptoBilis contain an implant, an extra circuit board that can copy their recovery phrases, hardware wallet maker Trezor said yesterday. The implant reads t…

Security Affairs13/11 11:35

Unpatched Check Point Gateways Are Being Wiped exploiting PHP2Shell

Unpatched Check Point gateways were hacked worldwide, leading to root access, backdoors, network intrusion and destructive wiper attacks. Starting on 30 October, an attacker scanned and exploited Check Point Se…