CyberBureau

9 SOURCES // 40 SIGNAUX //

EN DIRECT

Flipboard03/11 22:19

Plus de dix pays européens concernés par une nouvelle cyberattaque visant des réfrigérateurs

Après une attaque similaire en France, un dizaine de pays européens sont ciblés par des cyberattaques présumées ayant visé les réfrigérateurs et …

BleepingComputer03/11 22:18

Hackers hijack cPGuard autoupdate to deploy backdoor, steal data

Attackers have compromised the update infrastructure for the cPGuard web security suite to distribute a backdoor and a data-stealing script. [...]

CyberScoop03/11 21:49

Defense and aerospace firm settles with government over allegedly failing to meet cybersecurity contract requirements

ILC settled for $13 million, and its parent company said it resolved the issues before settling without an admission of liability. The post Defense and aerospace firm settles with government over allegedly fail…

Defense News - Global03/11 20:14

US Air Force asks industry for new cruise missile for Ukraine

The U.S. Air Force is looking for contractors to mass produce the Extended Range Attack Munition for Ukraine.

Security Affairs03/11 19:44

Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack

Binance reveals how fake job interviews, malware and internal AI abuse enabled attackers to steal $6.34 billion. The Binance security incident on October 29 shows how a fake recruitment process can become the e…

Geopolitical Futures03/11 19:18

Introducing the Leadership in Geopolitics with George Friedman Executive Education Program

Geopolitical Futures LLC, (GPF) is launching an Executive Education Program called Leadership in Geopolitics with George Friedman. The program is designed specifically for senior leaders of expanding global com…

The Hacker News03/11 18:46

mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious Activity

Customers of the mSecure password manager are being urged to act now to protect the confidential information they store in it, possibly by changing passwords, resetting two-factor authentication (2FA), and remo…

Krebs on Security03/11 02:24

Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies

Google said today it worked with industry partners to dismantle a botnet made up of more than 1.3 million Android TV set-top boxes that ship with malicious software which secretly rents the user's Internet conn…

FDD Long War Journal10/08 18:20

From Guantanamo Bay to ISCAP: The case of Jamal Kiyemba

In 2002, Jamal Kiyemba, a Ugandan national living in the United Kingdom, was arrested in northwest Pakistan after allegedly attempting to join Al Qaeda in Afghanistan and was sent to the US prison facility at G…

Flipboard03/11 21:34

Incident avec Interac: Desjardins explique les ratés de ses communications

«C’est une erreur dans un fichier, donc dans le traitement informatique, qui a créé l’enjeu. On est en train de procéder aux remboursements. S’il y a …

BleepingComputer03/11 21:28

WorkOS says attacker used ARTEX AI to breach internal sales app

Developer platform WorkOS suffered a data breach after a threat actor accessed business contact records and summaries of customer communications. [...]

CyberScoop03/11 18:51

Oklahoma man charged with mailing threats, substances to election officials nationwide

Robin Patrick Martin was charged with conveying false or misleading information and hoaxes and mailing threatening communications in an effort to intimidate election officials. The post Oklahoma man charged wit…

The Hacker News03/11 18:16

Chainstack Reports Production Systems Breach Exposing Customer Data and Password Hashes

Blockchain infrastructure provider Chainstack on Tuesday disclosed that it was targeted in a cyber attack that allowed an unauthorized party to gain access to some parts of its infrastructure. The incident is a…

Security Affairs03/11 16:31

Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions

Synology warns of ransomware attacks exploiting a 2024 flaw in outdated NAS devices, urging users to update DSM immediately. A security fix released in 2024 is now at the centre of ransomware attacks against Sy…

Geopolitical Futures03/11 15:52

Daily Memo: Russian Digital Security, Polish Constitutional Crisis

Contingency plan. Russian President Vladimir Putin has signed a decree that requires owners of private data centers located in Russia to reserve 10 percent of their capacity for state needs. Data center operato…

Defense News - Global03/11 15:14

French defense minister kicks off ‘pact’ with industry in rush to field naval drones

The French government is kicking off a new “pact” with the defense industry aimed at fostering a national ecosystem of drone makers that can quickly make new equipment tailored to its navy’s requirements.

Krebs on Security21/10 15:26

Widespread PHP Flaw May Cause Many Site Outages Today

Expect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to sei…

FDD Long War Journal10/08 17:08

Generation Jihad | Losing ground: Somalia and Mali’s jihad problem

The US is losing leverage in Somalia as frustration with Mogadishu threatens critical African Union support and risks strengthening Al Shabaab’s hold. In Mali, renewed US airstrikes against JNIM raise a paralle…

BleepingComputer03/11 20:05

Binance says fake job interview led to $6.3 billion crypto heist

Cryptocurrency exchange Binance says North Korean hackers used a fake job interview to trick an employee into installing malware that ultimately let them compromise the company's wallet infrastructure and steal…

Flipboard03/11 19:15

Menace, perturbations… Ce que l’on sait de la cyberattaque qui bouscule cette collectivité en Maine-et-Loire

Le flou et l’urgence résument les derniers jours des collectivités de Cholet (Maine-et-Loire). Depuis vendredi 30 octobre 2026, la Ville et …

CyberScoop03/11 17:02

Europol dismantles investment scheme that impacted potential victims in 50 countries

Authorities seized more than 100 servers and searched locations linked to the alleged operation across 17 countries. The post Europol dismantles investment scheme that impacted potential victims in 50 countries…

The Hacker News03/11 16:55

Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft

Binance on Tuesday said the record-setting theft of $6.43 billion in assets from the world's largest cryptocurrency exchange was the culmination of a "sophisticated, multi-stage campaign" that involved the use…

Defense News - Global03/11 14:55

On ‘NATO’s lake,’ Nordic allies worry about escalation with Russia

Sweden, Finland, and their allies now face a challenge in countering Russian behavior without stoking tensions further.

Geopolitical Futures03/11 11:00

Geosectarianism Reordered: The Iran War, Mecca Accord and the New US Grand Strategy

The war in Iran is fundamentally affecting the struggle between the Middle East’s Sunni and Shiite Muslims – a process that has been compounded by Washington’s decision to shift security burdens onto regional p…

Security Affairs03/11 09:52

Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers

Google dismantled a 1.3 million-device botnet allegedly built by Android TV box maker Videostrong to enable ad fraud and proxy abuse. Google and its partners dismantled a backdoor called XCPE that had enrolled…

Krebs on Security19/10 13:48

Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site

U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained…

FDD Long War Journal07/08 17:36

Analysis: North Korean missile deployment raises urgency of Ukraine’s Starlink plea

North Korea is reportedly dispatching as many as 120 additional ballistic missiles to Ukraine as the embattled country searches for ways to destroy Russian missile launchers. The post Analysis: North Korean mis…

BleepingComputer03/11 18:51

Google: LLMjacking attacks rack up $1 million in cloud AI charges

Large language model hijacking attacks, also known as LLMjacking, are generating large fraudulent cloud charges, with some organizations losing more than $100,000 per day. [...]

Flipboard03/11 18:21

Faux entretien d'embauche, logiciels malveillants, détournement d'IA : Binance révèle l'effarant mode opératoire du piratage record

Les hackers avaient préparé leur attaque dès le mois de juin, soit plus de quatre mois avant de déclencher le piratage le plus important de …

CyberScoop03/11 16:13

Ballot scanner malfunctions, flurry of federal legal actions test election officials on final day of voting

Rumors of malfeasance spread on X despite no evidence, as election officials continue to fight off numerous legal challenges from the Trump administration in the last 48 hours. The post Ballot scanner malfuncti…

The Hacker News03/11 15:59

Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access

Barracuda has disclosed details of two vulnerabilities affecting its products that, if chained together, could allow an attacker to bypass authorization controls and gain root access to a susceptible device. Th…

Defense News - Global03/11 12:56

India orders next-gen corvettes for $5.7b under broad naval modernization push

New Delhi is spending big money on new corvettes from domestic shipbuilders, carrier-capable fighters from France and submarines from Germany.

Security Affairs03/11 07:21

NIS2 Makes Board Members Personally Liable for Access Control Decisions

NIS2 Article 20 makes management bodies answerable for the access controls they approve, and boards are starting to ask for proof that those controls work. NIS2 board accountability gives directors a more direc…

Geopolitical Futures02/11 16:26

Daily Memo: Iranian Threats, European Defense

Threatening retaliation. Following a meeting with the country’s military leadership, Iranian Supreme Leader Mojtaba Khamenei issued a statement threatening the U.S. and Israel if they launch more strikes agains…

Krebs on Security14/10 14:22

U.K. Sanctions Cryptomus for RU Money Laundering

The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet market…

FDD Long War Journal06/08 21:10

Sudanese Armed Forces gains in civil war force strategic adjustment from paramilitia rival

The Sudanese military's recapture of the Al Sadarat highway marks its most significant success against the Rapid Support Forces (RSF) in the fourth year of the Sudanese civil war. However, the RSF's shift towar…

Flipboard03/11 16:31

"Lorsque les rayons des magasins seront vides, et que des entreprises auront fait faillite": le directeur de la cybersécurité britannique craint une "hausse sans précédent" de cyberattaques venues de Russie et de Chine d'ici 2028

Dans son rapport annuel, le Centre national britannique de cybersécurité a indiqué que nos voisins d'outre-manche doivent se préparer à une vague …

CyberScoop03/11 15:44

CrowdStrike moves to acquire Fiddler and Dreadnode, adding AI observability and testing to its security platform

CrowdStrike is extending its platform to watch, test and explain autonomous AI agents, as enterprises face behavior-based risks that conventional security tools cannot catch. The post CrowdStrike moves to acqui…

The Hacker News03/11 15:41

Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges

Google on Monday warned that threat actors are hijacking enterprise access to Large Language Models (LLMs) to fraudulently leverage expensive computing resources and AI services. The tactic is called LLMjacking…

BleepingComputer03/11 15:06

Barracuda warns of critical flaws allowing root access to devices

Cybersecurity company Barracuda Networks warned customers to patch two vulnerabilities that can let attackers run commands with root privileges. [...]