Reducing memory requirements to control costs in a new wave of kit
La société Nihon Shisan Souken, une filiale de Aoyama Zaisan Network, a publié un deuxième rapport concernant une cyberattaque par rançongiciel survenue le 14 mai. L'attaque, détectée le 9 mai, a entraîné le chiffrement des fichiers sur les serveurs de la société et de sa filiale, Daito Fudosan Co.,...
We investigate how a coordinated supply chain campaign that compromised npm and PyPI packages also backdoored the official Cemu Nintendo Wii U emulator GitHub release, reaching nearly 20,000 Linux users.
La Krum Public Library, située au Texas, a été victime d'une attaque par ransomware sophistiquée le 14 mai 2026. L'incident a entraîné une interruption temporaire de l'accès aux ordinateurs, de l'impression et du Wi-Fi, ainsi qu'une limitation du service de prêt. Bien que les attaquants aient exigé...
Sophos X-Ops looks at the Atomic macOS Stealer and its capabilitiesCategories: Threat ResearchTags: MacOS, AMOS, infostealer
Apache HertzBeat 1.8.0 - Remote Code Execution
ePati Antikor NGFW 2.0.1301 - Authentication Bypass
An analysis of backdoored node-ipc npm releases that add an obfuscated credential collection and DNS exfiltration payload to the CommonJS entrypoint.
PJPROJECT 2.16 - Heap Bufferoverflow
WordPress Plugin Supsystic Contact Form 1.7.36 - SSTI
Palo Alto Networks found and fixed 75 flaws this month, up from its usual five
The apparent revenge deletion of US federal databases after the dismissal of twin brothers from an online hosting company is another reminder to IT and HR leaders that tough off-boarding procedures have to be implemented to prevent insider attacks.
Destructive attacks eithe...
Welcome to the largest educational data breach in history - affecting nearly 9,000 institutions, every Ivy League university, and 30 million students mid-finals. When Canvas's parent company refused to pay and announced they had deployed "security patches" instead, the hackers were less than impress...
If a setting fails in the forest and nobody hears it ...
Two independent studies found that Anthropic's Claude Mythos Preview and OpenAI's GPT-5.5 have outpaced every trend line researchers were tracking. No one is sure if this is a one-time leap or the new normal.
The post Researchers say AI just broke every benchmark for autonomous cyber capability appe...
West Pharmaceutical Services disclosed that it was the target of a cyberattack that resulted in data exfiltration and system encryption. [...]
The committee held a closed briefing Wednesday with company reps, and more oversight is in the works.
The post Closed briefing sets stage for House hearing on Anthropic’s Mythos and cyber risks appeared first on CyberScoop.
The Iran-linked hacking group MuddyWater (a.k.a. Seedworm, Static Kitten) launched a broad cyber-espionage campaign targeting at least nine high-profile organizations across multiple sectors and countries. [...]
This article guides you on how to use Amazon GuardDuty to identify and mitigate cryptocurrency mining threats in your Amazon Web Services (AWS) environment. You’ll learn about the specialized detection capabilities of GuardDuty and best practices to build a multi-layered defense strategy that protec...