Toute l'actualité de la Cybersécurité

NCSC: Leave passwords in the past - passkeys are the future

2026-04-23 12:00:00
Passkeys are the more secure and user-friendly login method and should be the default authentication option for consumers.

Passkeys are more secure than traditional ways to log in

2026-04-23 12:00:00
Passkeys offer a more usable, secure replacement for passwords and are already supported by most modern devices.

Des pirates obtiennent via Teams un accès distant aux postes de salariés

2026-04-23 11:30:53
Selon Microsoft, les attaquants exploitent de plus en plus les outils collaboratifs comme Teams pour obtenir un accès aux postes des salariés. (...)

Scaleway devient l'hébergeur du Health Data Hub

2026-04-23 10:54:11
C’est l’épilogue d’une affaire qui aura duré plus de 7 ans. Le ministère de la Santé a annoncé que (...)

Microsoft Teams Rolls Out Efficiency Mode to Optimize Performance on Low-End Devices

2026-04-23 10:24:18
Microsoft is set to introduce Efficiency Mode in Microsoft Teams, a performance-enhancing feature designed to improve app responsiveness and meeting quality on hardware-constrained devices. The rollout...

Hackers Use Hidden Website Instructions in New Attacks on AI Assistants

2026-04-23 10:20:06
Cybersecurity researchers at Forcepoint uncover new indirect prompt injection attacks that use hidden website code to exploit AI assistants like GitHub Copilot.

Vercel Confirms Security Breach – Set of Customer Account Compromised

2026-04-23 10:03:40
Web infrastructure platform Vercel has disclosed a significant security incident involving unauthorized access to internal systems, tracing the attack chain back to a compromise of Context.ai, a third-party...

New Tropic Trooper Attack Uses Custom Beacon Listener and VS Code Tunnels for Remote Access

2026-04-23 10:01:20
A sophisticated cyberattack campaign linked to the well-known threat group Tropic Trooper has recently surfaced, leveraging military-themed document lures to target Chinese-speaking individuals in Taiwan,...

Can AI Attack the Cloud? Lessons From Building an Autonomous Cloud Offensive Multi-Agent System

2026-04-23 10:00:31
Unit 42 reveals how multi-agent AI systems can autonomously attack cloud environments. Learn critical insights and vital lessons for proactive security. The post Can AI Attack the Cloud? Lessons From...

'Zealot' Shows What AI's Capable of in Staged Cloud Attack

2026-04-23 10:00:00
The proof of concept revealed AI-based attacks unfold too fast for human defenders to respond, and that AI evinced more autonomous behavior than expected.

Avec l'agentique, GitHub Copilot arrive au bout de son modèle économique

2026-04-23 09:46:31
GitHub évoque ouvertement l'inadéquation croissante du modèle à la requête et commence à implémenter des restrictions d'usage. The post Avec l’agentique, GitHub Copilot arrive au bout de...

U.S. CISA adds a flaw in Microsoft Defender to its Known Exploited Vulnerabilities catalog

2026-04-23 09:23:55
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in Microsoft Defender to its Known Exploited Vulnerabilities catalog The U.S. Cybersecurity and Infrastructure Security Agency...

China-Linked GopherWhisper Infects 12 Mongolian Government Systems with Go Backdoors

2026-04-23 09:04:00
Mongolian governmental institutions have emerged as the target of a previously undocumented China-aligned advanced persistent threat (APT) group tracked as GopherWhisper. "The group wields a wide array...

As Mythos Expands What Detection Can't See, Daylight Launches Managed Agentic Threat Hunting

2026-04-23 09:00:39
Detection-based security can't keep up with modern threats. Daylight's new managed service uses agentic AI to run continuous, hypothesis-driven threat hunting at scale—surfacing hidden risks traditional...

Vercel Finds More Compromised Accounts in Context.ai-Linked Breach

2026-04-23 08:40:00
Vercel on Wednesday revealed that it has identified an additional set of customer accounts that were compromised as part of a security incident that enabled unauthorized access to its internal systems. The...

Apple Fixes iOS Flaw That Let FBI Recover Deleted Signal Messages

2026-04-23 08:06:00
Apple has rolled out a software fix for iOS and iPadOS to address a Notification Services flaw that stored notifications marked for deletion on the device. The vulnerability, tracked as CVE-2026-28950...

Why AI in Revenue Operations Fails Without Governed No-Code Architecture

2026-04-23 08:00:47
Most RevOps AI fails not due to weak models, but poor architecture. When pricing, approvals, and contracts live in disconnected systems, AI produces unreliable outputs. Governed no-code platforms like...

Roblox clamps down on chats and age checks as legal pressure builds

2026-04-23 07:57:37
Roblox is paying millions to settle child safety claims while rolling out strict age checks and chat limits that could reshape how kids use the platform.

Microsoft Graph API misused by new GoGra Linux malware for hidden communication

2026-04-23 07:49:13
A new GoGra Linux malware uses Microsoft Graph API and an Outlook inbox to deliver payloads, making it stealthy and hard to detect. A new Linux version of the GoGra backdoor uses Microsoft's Graph API...

GSR Launches Crypto Core3 ETF (BESO)

2026-04-23 07:10:59
New York, New York, April 22nd, 2026/Chainwire/--GSR, crypto's capital markets partner, today launched its first digital asset exchange-traded fund (ETF), the GSR Crypto Core3 ETF (NASDAQ: BESO) (“Core3”)....

Critical Pack2TheRoot Vulnerability Let Attackers Gain Root Access or Compromise the System

2026-04-23 06:51:09
A high-severity privilege escalation vulnerability, dubbed Pack2TheRoot (CVE-2026-41651, CVSS 3.1: 8.8), has been publicly disclosed by Deutsche Telekom’s Red Team, affecting multiple major Linux...

0 Bounty: Privilege Escalation via API — From Scheduler to Team Admin

2026-04-23 06:03:15
Hi Everyone! I recently discovered a Broken Access Control / Privilege Escalation vulnerability in a SaaS platform (ExampleCenter) that allowed a low-privileged user (Scheduler role) to perform editor-level...

How To Hack Part 5

2026-04-23 06:03:05
Linux Capture The Flag Bandit Level 13Continue reading on InfoSec Write-ups »

How to Become a SOC Analyst in 2025 (With Zero IT Experience)

2026-04-23 06:02:46
Six months ago I was a retail manager fixing pricing errors and calming customers. Today I monitor real security threats for a Fortune 500…Continue reading on InfoSec Write-ups »

When “Safe” Isn't Safe: Turning a Simple HTML Injection into a Real Security Story.

2026-04-23 06:02:19
In bug bounty hunting, not every vulnerability needs flashy payloads or JavaScript execution to matter. Sometimes, the simplest flaws — when placed in the right context — can quietly undermine...

SCP for Data Exfiltration on Pentests

2026-04-23 06:02:08
When you are on an internal and you've got a great foothold the last place you want drama is at the very end: getting the data out. That is exactly where Nathan Anderson's latest post on the Raxis...

Browser Extensions Are the New Malware Dropper

2026-04-23 06:01:56
That <useful/> little Chrome extension you installed 6 months ago? Yeah. We need to talk.The Threat Nobody Is Thinking About !!Quick question. When was the last time your security team audited...

One Tool to Rule Them All: File Metadata & Static Analysis for Malware Analysts and SOC Teams

2026-04-23 06:01:14
Extract hashes, PE/ELF/Mach-O metadata, strings, YARA hits, and deep static analysis — without ever running the file.IntrodactionWhether you're triaging a suspicious attachment, building a file-intel...

Deliberately Vulnerable Android App Covering Every OWASP Mobile Top 10 Class

2026-04-23 06:00:47
A hands-on reference for mobile security researchers, bug bounty hunters, and anyone preparing for Android penetration testing.Continue reading on InfoSec Write-ups »

WaTF Bank Walkthrough (Part 2): Exploiting Android App Security Flaws

2026-04-23 05:59:58
Android Mobile Application Security Testing Write-UpIntroductionContinuing from Part 1, where we explored fundamental weaknesses in the WaTF Bank application — including root detection bypass,...

Apple Fixes Notification Privacy Flaw That Allowed FBI to Access Deleted Signal Messages

2026-04-23 05:56:59
Apple released iOS 26.4.2 and iPadOS 26.4.2 on April 22, 2026, to patch a critical notification privacy vulnerability that allowed law enforcement to extract Signal message content from iPhones — even...

AI Coding Tip 016 - Your Pull Requests Should Teach Your Next AI Agent

2026-04-23 05:13:36
Improve the AI tools, rules, skills, and workflows you use in every pull request so your team and future agents can learn, reproduce, and improve on every change.

Yield Bearing Stablecoins: Market Segment Analysis and Regulatory Approaches

2026-04-23 05:13:15
This article analyzes the market dynamics of yield-bearing stablecoins, spotlighting leading products such as Sky's sUSDS, Ethena's sUSDe, and USDY.

The Era of Artificial Intelligence and Smart Devices: Gateway or Graveyard for Smartphones?

2026-04-23 05:12:23
Explore how AI agents, wearables, and smartphones are reshaping commerce in India and why mobile devices still remain central.

Why Your aI Agent Burns 4x the Tokens on a Simple pR Review

2026-04-23 05:08:41
gh pr view --comments misses thread replies, leaving code review agents blind. Here's how gh pr-review fixes it with deterministic JSON.

Prompt Quality Score Earns a 71 Proof of Usefulness Score by Building a Pre-Flight Scoring API for LLM Prompts

2026-04-23 05:02:58
Prompt Quality Score (PQS) grades AI prompts across 8 dimensions before LLM inference. One week after launch: 320+ API calls, 89% of real prompts scoring D or F, first certified partner live, and a...

Your AI Model Can Fail Quietly While Every Dashboard Stays Green

2026-04-23 05:01:25
Traditional monitoring misses what breaks AI models. Here's how to track drift, data quality, and model behavior in production.

The 8 Powerhouse: Resurrecting a 'Parts-Only' T450 into a 2026 Linux HackPad

2026-04-23 04:59:29
Resurrected a dead ThinkPad T450 for 8. Performed a full teardown, repasted the thermal internals, and optimized the soul of the machine with Arch Linux. The result? A high-performance, distraction-free...

I Watched Our AI Pipeline Silently Fail While Kubernetes Said Everything Was Fine

2026-04-23 04:58:14
CPU is the wrong signal for LLM workloads. When inference requests queue up, GPU workers saturate and latency spikes — but CPU stays low, so Kubernetes never scales. The fix: use KEDA to scale on queue...

Bitcoin's Quantum Migration Playbook — Every Proposal Compared

2026-04-23 04:57:59
Google's March 2026 research slashed the qubit threshold for breaking Bitcoin's encryption by 20x, putting ~6.9 million BTC at risk. Seven proposals are now competing to quantum-proof Bitcoin: BIP-360...

Mageia 9 Light-Locker Bug Fix Update Announcement MGAA-2026-0030

2026-04-23 01:42:26
MGAA-2026-0030 - Updated light-locker packages fix bug

Fedora 43 sudo Important CVE-2026-35535 Remote Access Issue

2026-04-23 01:12:22
Fix CVE-2026-35535

Fedora 43 Pie 1.4.1 Update PHP Installer FEDORA-2026-3f4283f831

2026-04-23 01:11:58
Version 1.4.1 Update bundled Composer to 2.9.7 Version 1.4.0 New features! Prompt to install missing system dependencies

Fedora 43 pgAdmin 4 Critical Axios Exec Issue FEDORA-2026-e9ecdd44c4

2026-04-23 01:11:54
Update axios to 1.15.0, fixes CVE-2026-40175 and CVE-2025-62718. Update to pgadmin4-9.14.

Fedora 43 Python3 Documentation Critical Update for Buffer Overflow Issues

2026-04-23 01:11:42
New minor version of the Python interpreter

Fedora 43 Python3.14 Minor Update Security Notice 2026-5b4ff2ef7d

2026-04-23 01:11:42
New minor version of the Python interpreter

Checkmarx KICS Official Docker Repo Compromised to Inject Malicious Code

2026-04-23 01:00:19
A significant supply chain attack targeting the official checkmarx/kics Docker Hub repository, where threat actors pushed trojanized images capable of harvesting and exfiltrating sensitive developer credentials...