📰Leak site publishes data on more than 41,000 DHS employees obtained by hacktivists
The Department of Peace group shared it with Swiss hacker/journalist maia arson crimew and DDoSecrets put it online. The post Leak site publishes data on more than 41,000 DHS employees obtained by...
📰Lawsuit against Ex-Overstock CEO tied to 2020 election film falls apart over question of ‘actual malice’
The lawsuit, brought by a former executive at Dominion Voting Systems, concerns comments made in a 2020 film financed by Byrne titled “The Deep Rig.” The post Lawsuit against Ex-Overstock CEO...
🔥Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and...
🖥️PHP2Shell : les failles critiques intègrent le catalogue des vulnérabilités exploitées
La CISA vient d’ajouter les failles associées à PHP2Shell à son catalogue des vulnérabilités exploitées. Pour les administrateurs n’ayant pas encore …
🔥Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.
Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android's usual confirmation screens, and to update them in the background. To qualify, a...
🖥️Les failles PHP à nouveau exploitées : une vaste cyberattaque chinoise fait des ravages avec l'IA
Les failles critiques de PHP viennent de faire de nouvelles victimes. Les chercheurs ont découvert une cyberattaque ambitieuse, attribuée à des …
🔥Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win
A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge's sandbox, a security researcher has shown. Orange Tsai
🔥PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the...
📰Researchers uncover Volt Typhoon’s covert, ephemeral network
The China-linked threat group has used the “Silent Train” framework, built on a series of rapidly rotating compromised devices, to infiltrate hundreds of critical infrastructure networks. The...
🖥️« Un bug éternel » : cette faille critique se cache dans le démarrage de la plupart des serveurs du monde, et la corriger relève du casse-tête
Une vulnérabilité critique dans EDK2, le code sur lequel repose le démarrage de l’immense majorité des serveurs, permet d’exécuter du code avant même …
📰Prosecutors charge Madagascar scammers in NFT-stealing scheme based on fake online dating profiles
The scammers affected approximately 800 victims and led to losses of more than half a million dollars, the Justice Department said. The post Prosecutors charge Madagascar scammers in NFT-stealing...
🖥️230 000 comptes clients piratés : la compagnie des transports strasbourgeois victime d'une vaste cyberattaque
Les données de 40 % des comptes clients ont été piratées sur le site internet de la CTS à Strasbourg (Bas-Rhin). La compagnie de transport appelle à …
🔥Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch
Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm Defused Cyber. The vulnerability in question is
🖥️Etats-Unis: la Commission électorale, garante de la transparence des dépenses pour les élections de mi-mandats, a été victime d'une cyberattaque
L'organisme chargé de contrôler et rendre public les fonds utilisés pour les différents candidats aux élections de mi-mandats a dû mettre certains de …
📰Before you file that AI bug report, OpenAI has some advice
Open-source maintainers are so overwhelmed by AI-generated security reports that some have stopped accepting them. OpenAI’s Daybreak lead says the fix is higher-quality findings and far more...
📰Leak site publishes data on more than 41,000 DHS employees obtained by hacktivists
The Department of Peace group shared it with Swiss hacker/journalist maia arson crimew and DDoSecrets put it online. The post Leak site publishes data on more than 41,000 DHS employees obtained by...
📰Lawsuit against Ex-Overstock CEO tied to 2020 election film falls apart over question of ‘actual malice’
The lawsuit, brought by a former executive at Dominion Voting Systems, concerns comments made in a 2020 film financed by Byrne titled “The Deep Rig.” The post Lawsuit against Ex-Overstock CEO...
🔥Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and...
🖥️PHP2Shell : les failles critiques intègrent le catalogue des vulnérabilités exploitées
La CISA vient d’ajouter les failles associées à PHP2Shell à son catalogue des vulnérabilités exploitées. Pour les administrateurs n’ayant pas encore …
🔥Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.
Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android's usual confirmation screens, and to update them in the background. To qualify, a...
🖥️Les failles PHP à nouveau exploitées : une vaste cyberattaque chinoise fait des ravages avec l'IA
Les failles critiques de PHP viennent de faire de nouvelles victimes. Les chercheurs ont découvert une cyberattaque ambitieuse, attribuée à des …
🔥Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win
A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge's sandbox, a security researcher has shown. Orange Tsai
🔥PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the...
📰Researchers uncover Volt Typhoon’s covert, ephemeral network
The China-linked threat group has used the “Silent Train” framework, built on a series of rapidly rotating compromised devices, to infiltrate hundreds of critical infrastructure networks. The...
🖥️« Un bug éternel » : cette faille critique se cache dans le démarrage de la plupart des serveurs du monde, et la corriger relève du casse-tête
Une vulnérabilité critique dans EDK2, le code sur lequel repose le démarrage de l’immense majorité des serveurs, permet d’exécuter du code avant même …
📰Prosecutors charge Madagascar scammers in NFT-stealing scheme based on fake online dating profiles
The scammers affected approximately 800 victims and led to losses of more than half a million dollars, the Justice Department said. The post Prosecutors charge Madagascar scammers in NFT-stealing...
🖥️230 000 comptes clients piratés : la compagnie des transports strasbourgeois victime d'une vaste cyberattaque
Les données de 40 % des comptes clients ont été piratées sur le site internet de la CTS à Strasbourg (Bas-Rhin). La compagnie de transport appelle à …
🔥Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch
Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm Defused Cyber. The vulnerability in question is
🖥️Etats-Unis: la Commission électorale, garante de la transparence des dépenses pour les élections de mi-mandats, a été victime d'une cyberattaque
L'organisme chargé de contrôler et rendre public les fonds utilisés pour les différents candidats aux élections de mi-mandats a dû mettre certains de …
📰Before you file that AI bug report, OpenAI has some advice
Open-source maintainers are so overwhelmed by AI-generated security reports that some have stopped accepting them. OpenAI’s Daybreak lead says the fix is higher-quality findings and far more...