Ce bulletin d'actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs criticités. Il ne remplace pas l'analyse de l'ensemble des avis et alertes publiés par le CERT-FR dans le cadre d'une analyse de risques pour prioriser l'application des...
We tested Sonnet 5, Composer 2.5, and GPT 5.5 using set security rules to see whether using them produces measurably more secure code.
La Societatea Națională de Radiocomunicații S.A. (SNR) a détecté un incident de cybersécurité de type ransomware le 19 octobre 2026. L'incident est actuellement sous investigation par le Directorat Național de Securitate Cibernetică (DNSC). Des mesures de limitation ont été prises, notamment la susp...
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation, information disclosure or denial of service. For the stable distribution (trixie), these problems have been fixed in version 4.20.4+39-gf1e1321c87-0+deb13u1.
Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute commands as root or SYSTEM on affected servers. [...]
Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, reshaping both the techniques used by attackers and the tools available to defenders. AI agents can aut...
Here is the YARA rule I used to detect "Orphaned VBA Projects Inside DWG Files".
Two vulnerabilities were discovered in HAProxy, a fast and reliable load balancing reverse proxy, which could result in denial of service. For the stable distribution (trixie), these problems have been fixed in version 3.0.11-1+deb13u4. We recommend that you upgrade your haproxy packages.
The update for cifs-utils announced in DSA 6567-1 introduced a regression when using the sec=krb5 and cruid mount options. Updated packages are now available to correct this issue. For the stable distribution (trixie), this problem has been fixed in version 2:7.4-1+deb13u2.
CikaBika Bot uses fake documents to infect Windows systems, then abuses Discord and Ngrok to execute commands, spy on victims, and steal files. Darktrace researchers have documented a new campaign distributing a remote access trojan called CikaBika Bot, written in Rust and controlled entirely throug...
CyberSN’s Cybersecurity Jobs Report provides visibility into the US cybersecurity job market. It’s a mixed bag.
The post US Cybersecurity Job Postings Fall 26% as AI Security Engineer Demand Soars appeared first on SecurityWeek.
La Chine veut encadrer les exportations de 23 technologies d’IA, sur fond de rivalité stratégique avec Washington.
FFTir : un pirate vend 40 Go de données, dont des photos et certificats médicaux de licenciés sportifs.
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter IronChain Ransomware Threatens Businesses with Permanent Data Loss and Costly Downtime  AI models may be capable of self-replicating without acces...
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. North Korean IT Workers Used Stolen US Identities to...
ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants.
The disabled identities are liste...
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Strands Box: Open-source sandbox for AI agents AWS released Strands Box, an open source sandbox for AI agents that pairs operating-system isolation with rules that can weigh what an agent has already do...
In May 2026, the French holiday rental network Gîtes de France suffered a data breach affecting some of its departmental branches. The incident exposed hundreds of thousands of customer records, including 118k unique email addresses alongside names, phone numbers, postal addresses and booking detail...
Drive Specifications Matter (Complete)
Loxone, une entreprise autrichienne de technologie pour l'automatisation de bâtiments, a confirmé avoir été victime d'une cyberattaque sur ses systèmes internes le 18 octobre 2026. L'attaque semble être de type rançongiciel (ransomware), avec des menaces de publication de données exfiltrées (environ...