Cybersecurity researchers have disclosed details of fraudulent activity targeting users across the Middle East and North Africa by employing various fraudulent Facebook accounts impersonating politicians, public figures, and trusted organizations.
"These accounts promoted fake offers, including fre...
Palo Alto Networks has revealed that it has observed "active exploitation" of a recently disclosed PAN-OS vulnerability by an unknown threat actor to obtain unauthorized access to GlobalProtect portals.
The vulnerability in question is CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw...
In this interview with Help Net Security, Nichole Windholz, CISO at Onspring, talks about the limits of automated GRC systems and continuous control monitoring. She explains why color-coded dashboards can hide nuance, how teams can check the data feeding their tools, and which risks resist measureme...
The curl project will not accept or otherwise handle any vulnerability reports during the month of July 2026. We call it the curl summer of bliss. curl’s submission form on Hackerone will be paused starting July 1, 2026. Summer of bliss starts: July 1, 2026. 00:00 CEST Submissions resume: August 3 2...
CI/CD Abuse Detector is an open-source project that uses a large language model to flag suspicious changes to continuous integration and continuous deployment pipelines, workflows, and automation configurations. The repository contains drop-in templates for GitHub Actions, GitLab CI, and Azure DevOp...
Plus de 400 paquets de l'Arch User Repository (AUR) ont été compromis pour diffuser un rootkit et un infostealer ciblant les identifiants des développeurs.
Le post Arch Linux : plus de 400 paquets de l’AUR piégés par un rootkit et un infostealer a été publié sur IT-Connect.
Deep learning systems on phones, cars, and other edge devices increasingly run on custom silicon. Specialized chips such as FPGAs and ASICs give these systems the speed and low power consumption that edge applications need. Many of these chips come from third-party design houses and foundries, which...
Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSiteLight switches. How on earth is it so hard to find decent light switches?! It sounds ridiculous until you actually spend enough time looking for ones th...
Defense contractors build AI systems that task drones automatically and propose kill-chains to support soldiers. Several of these contractors have partnered with frontier AI companies to put advanced models into military tools. Anduril works with OpenAI, Palantir works with Microsoft, and Lockheed M...
In March 2026, the commercial real estate finance company Berkadia was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they alleged was taken from Berkadia's Salesforce instance, including over 300k unique email addresses as well as names, physica...
Le déraillement des compétences en cybersécurité expose PME et État: analyse des failles, besoins en formation et pistes de montée en maturité.
Le post La pénurie de compétences Cyber s’amplifie en France a été publié sur IT-Connect.
At most U.S. technology companies, machines now write the bulk of the code that ships each week. The engineer’s job has shifted toward reviewing what the AI produces, and that review gives the code high marks. Leaders rate AI-generated code as higher quality than the code their own people write, pra...
In March 2026, the student information system Infinite Campus was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they alleged was taken from Infinite Campus, containing 137k unique email addresses along with names, phone numbers, physical addresses...
Un pirate revendique 62 208 données d’employés RATP, avec identifiants, fonctions et informations internes.
Ce bulletin d'actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs criticités. Il ne remplace pas l'analyse de l'ensemble des avis et alertes publiés par le CERT-FR dans le cadre d'une analyse de risques pour prioriser l'application des...
This post explores four vectors for threat actors to abuse Azure Storage to maliciously encrypt victim blobs, including step-by-step explanations and event codes for detection.
L'Ajuntament de Ciudad Real a annoncé un incident de cybersécurité affectant la plateforme de gestion de la Zone à Émissions Réduites. La plateforme a été temporairement suspendue pour permettre l'investigation de l'incident. L'Ajuntament a modifié les mots de passe des utilisateurs et limité certai...
La SEEG, Société d’énergie et d’eau du Gabon, a été victime d’un « acte de sabotage » informatique majeur. L'attaque, survenue dans la nuit du 14 au 15 juin 2026, a provoqué l'effondrement de près de 95 % de ses infrastructures et systèmes informatiques. Après près de deux mois de crise, la SEEG aff...