Toute l'actualité de la Cybersécurité

Malicious npm and PyPI packages linked to Lazarus APT fake recruiter campaign

2026-02-15 18:13:28
Researchers found malicious npm and PyPI packages tied to a fake recruitment campaign linked to North Korea's Lazarus Group. ReversingLabs researcher uncovered new malicious packages on npm and PyPI...

THM — ValenFind

2026-02-15 18:08:29
This is a medium-rated room on TryHackMe for the 2026 Valentine’s Day CTF Challenge.Continue reading on InfoSec Write-ups »

Phishing — Merry Clickmas | Tryhackme | Day-2

2026-02-15 18:08:08
Advent of Cyber 2025 | WalkthroughHey my dear readers_ Today, we are solving the TryHackMe Advent of Cyber Prep Track 2025. Advent of Cyber wasn't just about theory — it was about hands-on learning,...

HAWK_II — Cryptography Challenge Writeup

2026-02-15 18:07:57
AI Image Generated by Sora/GPTChallenge: HAWK_II Category: Cryptography Difficulty: Medium Flag: 0xfun{tOO_LLL_256_B_kkkkKZ_t4e_f14g_F14g}Challenge OverviewHAWK_II is a cryptography challenge based on...

Linux CLI — Shells Bells | Tryhackme | Day-1

2026-02-15 18:06:28
Linux CLI — Shells Bells | Tryhackme | Day-1Advent of Cyber 2025 | WalkthroughHey my dear readers_ Today, we are solving the TryHackMe Advent of Cyber Prep Track 2025. Advent of Cyber wasn't...

Piercing the Veil of Timelapse: Encrypted Keys & The LAPS Revelation ️

2026-02-15 18:05:56
Breaking SSL barriers and exposing hidden history. 100% completion rooted in precision and faith. 🎯🙏Continue reading on InfoSec Write-ups »

The “Dumb” Editor That Got Too Smart: When Feature Bloat Leads to RCE

2026-02-15 18:05:53
Notepad was supposed to be the safe harbor of Windows utilities. Then Microsoft added Markdown, and things got complicated.Oops notepadFor nearly 30 years, notepad.exe was the gold standard of “dumb”...

I Wasn't Looking at the Target — I Was Watching the Hackers First

2026-02-15 18:04:33
Free Link 🎈Continue reading on InfoSec Write-ups »

Expanding React2Shell for Serverless Lambda Function

2026-02-15 18:04:28
Originally posted on our website: https://www.prodefense.io/blog/react2shell-for-lambdasIntroductionSince the React2Shell vulnerability (CVE-2025–55182) became public, most organizations have either...

How a Forgotten QA Page Led to an 0 Bounty: Unauthorized Document Access

2026-02-15 18:04:15
Before starting with the blog, i would like to introduce myself a bit. My name is Gopi and i hold a Bachelors degree in Mechanical engineering and a Masters degree in Automotive systems engineering. I...

Hacking OpenClaw

2026-02-15 17:52:35
Finding, accessing, and hacking exposed Clawdbot/Moltbot/OpenClaw instancesContinue reading on InfoSec Write-ups »

CTM360: Lumma Stealer and Ninja Browser malware campaign abusing Google Groups

2026-02-15 16:30:41
CTM360 reports 4,000+ malicious Google Groups and 3,500+ Google-hosted URLs used to spread the Lumma Stealer infostealing malware and a trojanized "Ninja Browser." The report details how attackers abuse...

The HackerNoon Newsletter: AI Exposes the Fragility of Good Enough Data Operations (2/15/2026)

2026-02-15 16:03:30
How are you, hacker? 🪐 What's happening in tech today, February 15, 2026? The HackerNoon Newsletter brings the HackerNoon ...

Stripe's x402 Turned Bitcoin's Micropayments Dream Into a Bot Economy

2026-02-15 15:42:37
Stripe's x402 integration lets AI agents autonomously pay for services using USDC on Base—solving the micropayment problem Bitcoin promised but never delivered. Except the beneficiaries aren't humans;...

Did OpenAI's Pentagon Deal Influence the Retirement of GPT-4o?

2026-02-15 15:30:31
Three recent moves — OpenAI's deployment of ChatGPT to GenAI.mil, the retirement of GPT-4o, and tighter GPT-5.2 restrictions — have fueled concern among researchers and developers who argue that...

Pastebin comments push ClickFix JavaScript attack to hijack crypto swaps

2026-02-15 15:17:27
Threat actors are abusing Pastebin comments to distribute a new ClickFix-style attack that tricks cryptocurrency users into executing malicious JavaScript in their browser, allowing attackers to hijack...

Will Crypto Survive the Quantum Computing Era?

2026-02-15 15:16:29
Quantum computing is often linked to broken passwords, cracked codes, and collapsing digital security. If fully developed, it'd threaten the existence of cryptocurrencies and many other systems as well....

LLM-as-a-Judge: How to Build an Automated Evaluation Pipeline You Can Trust

2026-02-15 14:52:45
LLM-as-a-Judge uses one language model to evaluate another, enabling scalable, criteria-based scoring of LLM outputs. This guide explains the method, its common biases, and walks through a complete LangChain...

EU Orders Apple, Meta to Open iOS and Messaging to Competitors

2026-02-15 14:30:06
The Digital Markets Act (DMA) has joined the General Data Protection Regulation (GDPR) The act, which entered into effect in May 2023, introduces new compliance requirements on “gatekeepers,” defined...

Microsoft Discloses DNS-Based ClickFix Attack Using Nslookup for Malware Staging

2026-02-15 14:10:00
Microsoft has disclosed details of a new version of the ClickFix social engineering tactic in which the attackers trick unsuspecting users into running commands that carry out a Domain Name System (DNS)...

Go's Cryptography Packages Were Audited: The Results

2026-02-15 14:00:02
Go ships with a full suite of cryptography packages in the standard library to help developers build secure applications. Google recently contracted the independent security firm [Trail of Bits] to complete...

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 84

2026-02-15 13:57:38
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Stan Ghouls targeting Russia and Uzbekistan with...

Website Blocking Gone Too Far: Homework and Censored Suicide Prevention Sites Were Also Blocked

2026-02-15 13:00:03
School districts all over the country, like Rockwood in the western suburbs of St. Louis, go much further, limiting not only what images students can see but what words they can read.

Windows 11 KB5077181 Security Update Causing Some Devices to Restart in an Infinite Loop

2026-02-15 11:37:47
Microsoft’s February 10, 2026, security update KB5077181 for Windows 11 versions 24H2 (build 26200.7840) and 25H2 (build 26100.7840) has triggered widespread reports of critical boot failures just...

Fuites de données en série : le pire n'est plus le piratage… mais ce qui arrive après

2026-02-15 11:27:23
Chaque semaine, de nouvelles entreprises et administrations rejoignent la liste des victimes de cyberattaques. Derrière ces fuites à répétition, ce sont des millions de données personnelles qui circulent...

PentestAgent – AI Penetration Testing Tool With Prebuilt Attack Playbooks and HexStrike Integration

2026-02-15 04:45:43
PentestAgent, an open-source AI agent framework from developer Masic (GH05TCREW), has introduced enhanced capabilities, including prebuilt attack playbooks and seamless HexStrike integration. Released...