> TODAY'S SUMMARY (68 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Northflank has experienced a security breach, prompting customers to rotate their API keys due to unauthorized access. A new Android exploit, the "SMS of Death," has surfaced, allowing attackers to remotely crash unpatched devices. Chainalysis disclosed a breach involving customer data exposure, while a critical vulnerability in Drupal Commerce is being actively exploited. The number of DDoS attacks has surged, with Cloudflare reporting an increase of 38% in Q3. Meanwhile, malicious extensions and AI-driven infostealers like VOLTA are emerging as advanced threats, leveraging AI for victim profiling and data theft.
|
// AI-powered summary generated at 20:00
NRW says it has found no evidence data was misused after spreadsheet published in error five years ago
Sekoia and Kudelski Security have observed that North Korea's Lazarus umbrella is split into six distinct clusters, focused on espionage, financial theft and sanctions evasion
Minetest could be made to crash or run programs if it received specially crafted network traffic from an authenticated user.
MiniUPnPd could be made to crash or expose sensitive information if it received specially crafted network traffic.
Microsoft a dévoilé Project Zenith, un Windows 11 clé en main où tout est prêt pour les développeurs. Mais attention au prérequis : 64 Go de mémoire unifiée.
Le post Project Zenith : Microsoft dévoile un Windows 11 spécial pour le code et l’IA a été publié sur IT-Connect.
Brave a publié des benchmarks face à Chrome, Edge et Firefox sur ordinateur : 44 % de CPU en moins, pages chargées 20 % plus vite, mais attention au LCP.
Le post Brave affirme charger les pages 20 % plus vite que Chrome, Edge et Firefox a été publié sur IT-Connect.
OpenAI appears to be testing a new "Writing Style" feature for ChatGPT that can learn how you write by looking at examples from your connected apps. [...]
Dès mi-septembre 2026, Exchange Online va limiter puis bloquer les e-mails des serveurs Exchange 2016 et 2019 sans le patch d'octobre 2025. Voici quoi faire.
Le post Exchange Online va bloquer les e-mails des serveurs Exchange 2016 et 2019 non mis à jour a été publié sur IT-Connect.
Hackers are exploiting a chain of two recently disclosed vulnerabilities in MikroTik routers to take control of devices with SSH services exposed to the internet. [...]
It was discovered that Minetest did not properly sanitize the Lua sandbox environment
when using LuaJIT. A malicious mod could escape the sandbox to execute arbitrary code
and gain full file system access on the server. An attacker could use this issue to
compromise the server.
If you ever linked your Dropbox account to a Lenovo ID - perhaps to make life easier when logging in via a Lenovo laptop - you might want to take heed.
Read more in my article on the Hot for Security blog.
Microsoft désactive par défaut les prédictions de texte dans Word et Outlook. La fonction reste disponible, mais il faudra l'activer vous-même. Voici pourquoi.
Le post Word et Outlook : Microsoft va désactiver par défaut les prédictions de texte a été publié sur IT-Connect.
Mullvad arrêtera ses serveurs publics DoH (DNS-over-HTTPS) le 2 novembre 2026 et soutiendra Quad9 à la place. Voici qui est concerné et comment migrer.
Le post Vous utilisez les serveurs DNS de Mullvad ? Ils s’arrêteront le 2 novembre 2026 a été publié sur IT-Connect.
JSCeal hides crypto-stealing malware in V8 bytecode, but researchers built a tool to decompile it and expose its advanced theft capabilities. JSCeal is a cryptocurrency stealer that Check Point Research has tracked since early 2025. Unlike most malware, it hides its code in a format that makes analy...
Découvrez comment réussir un réseau d’écrans en magasin ou en entreprise : choix du CMS, back-office industriel, gestion du réseau, etc.
Le post Sur quels critères techniques choisir une solution d’affichage multi-écrans / multi-sites ? a été publié sur IT-Connect.
Defending against cyber foes is among factors hitting food price inflation, report finds
ConnectWise has shared temporary mitigation measures for a new ScreenConnect Remote Access vulnerability that it plans to patch later this week. [...]
A security issue was fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
It was discovered that MiniUPnPd contained an integer underflow
vulnerability in SOAPAction header parsing. A remote attacker could
use this issue to cause a denial of service or information disclosure
by sending a malformed SOAPAction header with a single quote.