[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> OpenAI reveals ‘novel’ encryption bypass used in distillation attack 
The company said individuals associated with Chinese company MoonshotAI were behind parts of the attack, but did not offer hard evidence for the claim. The post OpenAI reveals ‘novel’ encryption bypass used in distillation attack  appeared first on CyberScoop.
> Le pirate Storm affiche ses victimes sur une carte interactive !
Le pirate Storm affiche des cibles sur une carte interactive et recrute des affiliés en mode 2.0.
> Ubuntu ImageMagick Security Advisory USN-8859-1 CVE-2026-56367 DoS
Several security issues were fixed in ImageMagick.
> Irony alert: OpenAI whines that Chinese model stole its special IP that it stole from everybody else
US model makers can train on web data - but distilling theirs is a 'national security risk'
> Everest menace de publier des données attribués à Securitas
Everest menace Securitas de publier des données liées à la vidéosurveillance.
> From SELECT to SYSADMIN with SQL Copilot (CVE-2026-65669)
Two weeks back I presented at BlueHat Asia 2026 about my research on Microsoft’s Copilot in SSMS, the SQL Server Management Studio. This post is a write up about the talk, which covered CVE-2026-65669, a SQL Server Elevation of Privilege Vulnerability rated critical by Microsoft. So, make sure your...
> Campus Cyber Summit 2026 : l’IA au cœur des choix cyber
Campus Cyber Summit 2026 à Lille : programme, IA, NIS 2, cyber assurance, OSINT et CTF.
> Élections et ingérences : la CNIL ouvre le débat
Le 16 novembre 2026, la CNIL débattra du ciblage politique, de la désinformation et des ingérences électorales.
> Russian state hackers use new RedFlick technique to push malware
The Russian state actor Star Blizzard has been using a new malware installation tactic dubbed "RedFlick" to deploy its signature CosmicPulse backdoor. [...]
> Automakers routinely share personally identifiable connected-car data with third parties, report says
A new study reveals fresh details about how drivers are exposed to a web of large corporations participating in the advertising ecosystem.
> Fuite de données : le guide interactif de ZATAZ
Fuite de données : ZATAZ propose un guide interactif pour sécuriser ses comptes et organiser ses démarches jusqu’à 90 jours.
> OFAC Sanctions Tren de Aragua Fugitive Who Laundered ATM Heists With Crypto
Summary OFAC designated 10 targets in a Tren de Aragua ATM jackpotting scheme that stole at least $40.73 million from… The post OFAC Sanctions Tren de Aragua Fugitive Who Laundered ATM Heists With Crypto appeared first on Chainalysis.
> Meta’s Muse AI agent sent a total stranger to a user’s home
Meta's Muse AI agent shared a Facebook Marketplace seller's home address with a buyer without asking. Here's what happened.
> DIVD says Zammad zero-days enabled AI-driven network breach
The Dutch Institute for Vulnerability Disclosure (DIVD) says that the breach of its network was possible by exploiting a chain of two zero-day vulnerabilities in the open-source Zammad ticketing system. [...]
> After reports on suicide deaths, Pentagon puts Cyber Command on notice
An August 31 memo obtained by Recorded Future News shows that the Pentagon's assistant secretary for cyber policy made specific demands of U.S. Cyber Command leadership after reports of a cluster of suicide deaths.
> ​​Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026
This year at Microsoft Ignite, we spotlight our AI-first, end-to-end security platform designed to protect identities, devices, data, applications, clouds, infrastructure, and the AI agents now working alongside your teams. The post ​​Secure what’s next: Your guide to Microsoft Security at Microsoft...
> Hackers stole millions of US military personnel records during months-long data breach
The Department of Defense notified millions of current and former U.S. military personnel that their personal information had been stolen in a months-long breach.
> WatchGuard fixes critical Fireware OS flaw allowing remote code execution
WatchGuard fixes 15 Fireware OS flaws, including a critical RCE bug that could give attackers root access to vulnerable Firebox appliances. WatchGuard has released security updates for Fireware OS that address 15 vulnerabilities, including a critical code injection flaw, tracked as CVE-2026-86131 (C...
> Google: Vulnerability disclosures double to 10,000 per month as AI fuels exploitation
Vulnerability disclosures continue to skyrocket, doubling over the course of the year to more than 10,000 each month, Google researchers warned.
> Is sandboxing sufficient to contain rogue agents?
Quick caveats: this is a post on AI safety, written by a cryptography professor. If that troubles you, you should read something else. I try hard not to work on AI (except when the topic occasionally tosses itself in my path), so in this post I’m mostly trying to referee arguments made by others. If...