An incident involving the npm package eslint-config-prettier has been uncovered spreading Scavenger RAT
A multi-stage attack delivered via USB devices has been observed installing cryptomining malware using DLL hijacking and PowerShell
We've just deployed some mega updates to our infrastructure at Report URI that will give us much more resilience in the future, allow us to apply updates to our servers even faster, and will probably go totally unnoticed from the outside!Our previous Redis setupI've
Cisco Talos observed the newly identified group compromise a Taiwanese web hosting provider to conduct a range of malicious activities
The Warlock ransomware gang has taken credit for the cyber-attack after the UK telco giant publicly confirmed an incident on August 14
Can you tell the difference between legitimate marketing and deepfake scam ads? It’s not always as easy as you may think.
Al-Tahery Al-Mashriky has been sentenced to 20 months behind bars for hacktism-related offenses
Workday has revealed a breach of its third-party CRM systems in what could be the latest ShinyHunters attack
Updated first FAQ to state that CVE-2020-0674 has now been issued to address this vulnerability. This is an informational change only.
Tenda AC20 16.03.08.12 - Command Injection
Lantronix Provisioning Manager 7.10.3 - XML External Entity Injection (XXE)
Le Département de l'Aude a été victime d'une cyberattaque, les données des usagers, partenaires et fournisseurs des services sociaux départementaux ont été volées. Les usagers sont invités à changer leur mot de passe et à rester vigilant face à toute requête suspecte. Une plainte a été déposée et de...
Soosyze CMS 2.0 - Brute Force Login
Microsoft Windows 10.0.19045 - NTLMv2 Hash Disclosure
L'attaque n'a pas été revendiquée, mais l'enseigne Qilin divulgue des données présentées comme issues des systèmes d'Apex Bulk.
PHPMyAdmin 3.0 - Bruteforce Login Bypass
RiteCMS 3.0.0 - Reflected Cross Site Scripting (XSS)
Ce bulletin d'actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs criticités. Il ne remplace pas l'analyse de l'ensemble des avis et alertes publiés par le CERT-FR dans le cadre d'une analyse de risques pour prioriser l'application des...
BigAnt Office Messenger 5.6.06 - SQL Injection
IGI Global Scientific Publishing suffered a ransomware attack on August 18, 2025, which may have exposed personal identifiable information. The impacted information may include name, date of birth, home address, phone number, and account number. IGI has not received any notice or indication of any o...