Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M
Bitget says attackers exploited a third-party zero-day to steal $387.5 million and move laterally into its wallet environment.
← Thèmes
🛡️
Cybersécurité
Menaces, vulnérabilités, incidents et bonnes pratiques en sécurité informatique.
1280 articles
S’abonner (RSS)Who’s liable when AI agents go rogue?
OpenAI makes others suffer "the harms of its unsafe decision-making," nonprofit says.
Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT
Unknown attackers exploit a patched Citrix NetScaler flaw to gain root access and deploy web shells and a tunneler.
Piratage des impôts : l’ANSSI révèle comment les hackers sont passés sous les radars pendant des ...
Vol de données fiscales : l'ANSSI confirme les mauvaises pratiques cyber de Bercy
Japan's Keio confirms ransomware attack disrupted business systems
Keio, a major Japanese railway operator, was hit by ransomware, disrupting business systems and forcing the company to shut down its network.
Star Blizzard refines phishing and malware delivery with the RedFlick technique
The Russian state actor Star Blizzard has been using a new malware installation tactic dubbed "RedFlick" to deploy its signature CosmicPulse backdoor.
Building a post-quantum certificate authority with Merkle Tree Certificates
The move will be part of a major overhaul of the ecosystem for website authentication.
Claude est en panne, les signalements explosent : voici ce que l’on sait
Claude connaît une panne importante ce mardi après-midi. Le problème touche le chatbot d’Anthropic, mais aussi Claude Code, Claude Cowork, sa plateforme et certaines requêtes envoyées à son API.
How we will do better for Australia
The artificial intelligence giant acknowledged it botched its response to the incidents and should have done more to promptly notify and work with the Australian government in the days after it discovered the breaches.
New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks
A new Branch Target Reuse (BTR) attack has been devised that can recover root password hashes on Intel computers running Linux in 3-5 minutes on average.
Pentagon Personnel Agency Data Breach Impacts 3 Million People
The Pentagon's Defense Manpower Data Center (DMDC) is notifying millions of military personnel and their families of a data breach.
Apple corrige une faille zero-day sur iPhone, iPad et Mac, installez vite la mise à jour
L'heure est grave pour les détenteurs d'appareils Apple, une faille de sécurité majeure a été découverte exploitant les données de iOS 26 et inférieur.
ChromeOS : Google garantit dix ans de mises à jour, jusqu’en 2034 ...
Malgré le lancement de Googlebook OS, Google va continuer à prendre en charge son autre système d’exploitation pour PC, Chrome OS, pendant des années. Cependant, la firme prévoit déjà de mettre fin à cette prise en charge en 2034.
Russian pizza chain with 1,500 locations confirms cyberattack following hacker claims
Dodo Pizza has confirmed a cyberattack on its IT systems, admitting that attackers may have accessed personal data of a portion of its
Malicious Custom GPT on chatgpt.com lures users into installing a RAT
Des cybercriminels se servent désormais de GPT personnalisés pour alimenter une campagne ClickFix. Mis en avant dans des annonces Google, ces assistants conduisent les internautes vers de faux contrôles de sécurité qui les incitent à exécuter eux-mêmes la commande à l’origine de l’infection.
L’astuce de serveur que j’applique partout depuis 20 ans…
How we found 24 Android vulnerabilities using our open source AI security agent
GitHub's AI Android app vulnerabilities research uncovered 24 bugs, including a location leak and a Wikipedia takeover flaw.
OpenAI halts frontier-model training amid string of agent misalignment incidents
OpenAI paused tool-use training, evaluation, and inference after an RL agent reached a public chatbot through insufficient DNS filtering.
Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent
The botnet uses the open source Hermes Agent AI framework to execute commands via Telegram and steal AI API keys from exposed Docker hosts.
Apple Patches Zero-Day Exploit Alongside September 2026 OS Fixes
Attackers are exploiting CVE-2026-86950, an out-of-bounds write flaw, in an extremely sophisticated fashion, according to Apple.
NeedyMantis: Unpacking a post-compromise malware family used in targeted operations
Microsoft observed a China-based actor using a previously unidentified malware framework in targeted intrusions against telcos, universities, medical, and government-related organizations.
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
Anyone following the recent arrest of Pepijn van der Stap, the previously convicted hac ker known as "Umbreon," was likely shocked today when the prosecution an
Agents IA : NVIDIA veut imposer les règles au silicium
Derrière l’effet d’annonce, le géant fabless devra prouver l’efficacité de ses garde-fous.
À 16 ans, il découvre une immense faille chez Microsoft en utilisant sa propre IA : 17 300 millia...
Un jeune chercheur de 16 ans a identifié une faille sur un logiciel interne de Microsoft qui a exposé 17 300 milliards de lignes de données. Celui-ci l’a signalé à la firme de Redmond dans le cadre d’un programme de “bug bounty”.