OpenAI Agents Coordinated via Makeshift Message Board Ahead of Hugging Face Hack
OpenAI gents exploited a Linux kernel vulnerability tracked as CVE-2026-53362 to escalate privileges on the company’s own systems.
← Thèmes
🛡️
Cybersécurité
Menaces, vulnérabilités, incidents et bonnes pratiques en sécurité informatique.
1307 articles
S’abonner (RSS)State of AI Cybersecurity 2026: 77% of Security Stacks Include AI, But Trust is Lagging
Prophet Security says 40% of teams use AI daily, while 28% of alerts go uninvestigated and 60% report missed alerts caused serious issues.
Australia Arrests 2 Alleged TeamPCP Hackers
The arrests come after a wave of cyberattacks earlier this year targeting tech companies that rely on high-profile and widely used open source software.
Carhartt - 12,933,413 breached accounts
Le groupe d'extorsion ShinyHunters a mis en ligne des données volées à la marque de vêtements américaine, après l'échec d'une tentative de rançon de 3,3 millions de dollars. Carhartt rejoint la longue liste des victimes de ShinyHunters. Le géant américain du vêtement de travail, devenu une marque de mode grand
Recent Citrix NetScaler Vulnerability Exploited in the Wild
Citrix NetScaler ADC and Gateway flaw CVE-2026-8452 is under active attack, with hackers dropping web shells days after a public PoC.
🏴☠️ Qilin has just published a new victim : ATF
The Bureau of Alcohol, Tobacco, Firearms and Explosives confirmed it experienced a cyberattack on a system containing investigation information, as a prolific ransomware gang claimed to have carried out the breach.
Cette "démo" de GTA 6 sur PC cache en réalité un malware
Une "démo de GTA VI" qui pèse 1,1 Mo : le piège était grossier, mais l'engouement autour du jeu le plus attendu de la décennie a suffi à faire tomber des milliers d'internautes. Leurs mots de passe sont peut-être déjà entre de mauvaises mains.
Facturation électronique : le ministre de l'Économie Roland Lescure maintient la mesure, malgré l...
Alors que la réforme de la facturation électronique entre en application pour l’essentiel des entreprises, Next détaille les enjeux.
Fuite de données E.Leclerc : des clients touchés après le piratage d’un... - FrenchBreaches
LCommerce, la société derrière Allo E.Leclerc, vient de révéler que l'un de ses prestataires logistiques a été piraté. L'incident a permis à un pirate de compromettre les données personnelles de certains des clients de l'enseigne.
CISA Adds Six Known Exploited Vulnerabilities to Catalog
CISA adds ownCloud, Linux Kernel, and JFrog Artifactory flaws to its Known Exploited Vulnerabilities catalog
Ep.730 - RadioCSIRT Flash info cybersécurité du mercredi 26 août 2026
🕵️ La NSA organise vendredi à Fort Meade une réunion sur invitation des anciens de Tailored Access Operations, pilotée par le directeur adjoint Tim Kosiba. ...
☕️ OpenAI bannit les comptes ChatGPT d’une opération russe de désinformation
Sans que personne ne s'en aperçoive, des centaines d'agents IA d'OpenAI se sont mis à discuter en secret entre eux cet été. Dirigés par un ChatGPT hors de contrôle, ils ont lancé une vaste cyberattaque. Quelques semaines après cet incident historique, OpenAI révèle ce qu'il s'est vraiment passé. Le roi de l'IA parle d'un véritable « coup de semonce ».
CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing
CISA red teams fully compromised two critical infrastructure orgs. One SOC isolated hosts in minutes; the other never detected the breach.
Exclusive: NSA to host a hacker reunion in bid to rebuild secretive unit
A top U.S. spy agency will resemble a college for a while on Friday, as it hosts a first-of-its-kind reunion for alumni of its most secretive hacking unit. The National Security Agency will welcome back to campus potentially hundreds of former members of the elite group k...
Brief independent investigation of agents’ behavior, reasoning and collaboration in the OpenAI / ...
Two new reports offer nearly 130 pages of details on the OpenAI-Hugging Face cybersecurity incident, many of them previously unreleased.
Boston Scientific says cyberattack disrupted operations globally
Medical company Boston Scientific suffered a cyberattack that hit certain information technology systems, causing a network outage.
CISA: Over 100 Internet-Exposed Water Systems Targeted in July Cyberattacks
CISA urges water utilities to secure internet-exposed PLCs after July attacks showed how easily attackers can compromise them.
US takes down alleged Chinese hacking tools used against Federal Reserve, DOJ and Senate
Jonathan Greig reports; Chinese government hackers used tools known as “QScan” and “QTRouter” to breach multiple federal agencies since 2018, the Department of Justice said in announcing the takedown of the platforms on Wednesday. The tools were run by China-based Nanjing Xinjiuwei Network Techno...
🏴☠️ Direwolf has just published a new victim : National Kidney Registry
Since its emergence in May 2025, DireWolf has attacked several U.S. healthcare entities, as listed among its more than 100 targets on its dedicated leak site. As early analysts reporting on the group have noted, DireWolf encrypts victims’ files as part of their double-extortion attacks. Their “Ab...
Chrome 152 Patches Over 300 Vulnerabilities
Google a déployé Chrome 152, une mise à jour qui corrige 327 vulnérabilités, dont dix jugées critiques. Un chercheur surnommé Goodluck reçoit à lui seul 25 000 dollars pour avoir signalé l'une d'entre elles, une faille critique logée dans le moteur graphique ANGLE.
Inside Elastic's agentic SOC: How we took AI alert triage from 60% to 92% accuracy
Agentic AI lets SOCs investigate alerts and threat hypotheses using network telemetry before escalating evidence-backed cases to analysts.
CISA Warns of Exploited Gitea Vulnerability
Over 8,300 Internet-exposed Gitea instances are still unpatched against a critical security flaw exploited in ongoing remote code execution attacks, according to cybersecurity watchdog Shadowserver.
AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes
AnonyMousKIT is a phishing service targeting stolen iPhone owners to steal Apple ID credentials and remove Activation Lock.
Hospital operator Nutex Health says data stolen in cyberattack
Nutex Health (NASDAQ: NUTX) has suffered a data breach that could involve sensitive business and personal information.