Cloud app developer Vercel appears to have suffered a security breach
Much of the talk around cybersecurity these days revolves around AI and the threat it poses to corporate systems when used by nefarious actors.
But the reality on the ground remains a little more mundane than polymorphic AI malware and criminal masterminds putting machine l...
NFC-based payment fraud is expanding geographically and operationally. A campaign active since November 2025 is targeting Android users in Brazil using a new variant of the NGate malware family, this time embedded in a trojanized version of HandyPay, a legitimate NFC relay application available on G...
On April 7, six US government agencies issued a critical advisory warning domestic private sector organizations of potential infrastructural cyberattacks conducted by Iranian-affiliated Advanced Persistent Threat (APT) actors. The advisory stops short of attributing these thre...
A new variant of the NGate malware that steals NFC payment data is targeting Android users by hiding in a trojanized version of HandyPay, a legitimate mobile payments processing tool. [...]
ESET researchers discover another iteration of NGate malware, this time possibly developed with the assistance of AI
Fuite ANTS : pourquoi les indices techniques fragilisent la thèse d’un vol massif de 18 millions d’enregistrements.
North Korea’s Lazarus Group is pegged for a $290m crypto theft at KelpDAO
Fake emails already doing the rounds as ransomware crew boasts about what it allegedly stole UK enterprise software consultancy The Adaptavist Group is investigating a security breach after an intruder logged in with stolen credentials, while a ransomware crew claims it grabbed far more than the com...
Information published.
Bluesky suffered a 24-hour DDoS attack that caused outages. A pro-Iran hacker group claimed responsibility for the disruption. Bluesky experienced a sophisticated DDoS attack that disrupted its services for about 24 hours, starting on April 15. Bluesky is a decentralized, open-source microblogging s...
LunaSpy marque une étape inquiétante : des victimes reçoivent un smartphone déjà infecté, pensé pour espionner et frauder.
Admins are tired of taking photos, so this enables secure on-site unattended enrolment Japanese industrial giant Panasonic has created a new form of QR code it says will only work on designated devices and environments.…
There have been reports of threat actors using a .wav file as a vector for malware.
Credential stuffing is a cyberattack where attackers use stolen usernames and passwords, often obtained from data breaches or bought on the dark web, to gain unauthorized access to accounts on other platforms. These attacks are highly prevalent and a major contributor to data breaches, largely becau...
La fuite attribuée à TfL expose près de 10 millions de profils et relance le débat sur la transparence après une cyberattaque.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added eight new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including three flaws impacting Cisco Catalyst SD-WAN Manager, citing evidence of active exploitation.
The list of vulnerabilities is as fo...
And China is loving it Iranian media is claiming that the US used backdoors and/or botnets to disable networking equipment during the current war, and Chinese state media is dining out on the allegations.…
1 700 policiers visés après des accès injustifiés à des systèmes liés à une enquête sensible.