Trezor discloses data breach affecting nearly 14,000 customers
Hackers stole the names, addresses, emails, and phone numbers of nearly 14,000 Trezor customers from ShipMonk.a
The Model Is the Malware | What Four Agentic Intrusions Tell Defenders
OpenAI, Anthropic and Meta disclosed agents reaching external systems. The tools didn't matter, and that changes the playbook for investigating intrusions.
'Jewelbug' APT Balances State Espionage & Cryptocurrency Theft
The Jewelbug hacker group has been carrying out espionage operations targeting governments and militaries while also engaging in cryptocurrency fraud.
Hackers exploit critical Adobe Commerce flaw to hijack customer accounts
Hackers began targeting a critical Adobe Commerce flaw that could let unauthenticated attackers hijack customer accounts and access data
New StormEncryptor ransomware used by former Medusa affiliate
Microsoft says China-linked Storm-1175 is using a new ransomware called StormEncryptor, replacing Medusa in its latest attacks.
Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access
Exploitation against CVE-2026–59310 began earlier this month, and patching the vulnerability may not be enough to fully mitigate the threat.
Cisco Patches Firewall Zero-Day Exploited for DoS Attacks
A high-severity vulnerability (CVE-2026-20349) is being leveraged by attackers to temporarily interrupt the operation of Cisco firewalls.
Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)
CVE-2026-55040 after a Rapid7 PoC release, forging JWTs to impersonate site users or admins.
Microsoft corrige 398 failles Windows, dont une brèche exploitée par les pirates nord-coréens
Troisième mois consécutif à plusieurs centaines de correctifs pour Windows. Le décompte impressionne, mais une seule vulnérabilité est réellement exploitée. Le casse-tête a changé de nature.
Fuite de données chez Bloctel : des numéros de téléphone ont été piratés, c’est officiel
Bloctel devait protéger les utilisateurs opposés au démarchage téléphonique… mais ce n’était pas un franc succès. Bloctel a tiré officiellement sa…
Hackers leverage new Microsoft SharePoint exploit in attacks
Threat actors have begun exploiting a critical Microsoft SharePoint flaw following the release of PoC exploit code by Rapid7.
Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks
The ransomware-as-a-service operation is finding success against critical infrastructure targets with leaked Conti code and old flaws in firewalls and VPN appliances.
Fresh Windows Zero-Day Exploited in North Korean Cyberattacks
Lazarus targets defense professionals with fake Lockheed Martin jobs, exploiting a Windows zero-day to deploy backdoors.
FBI says cybercriminals are hacking into victims’ online accounts to steal their intimate pictures
Leaked passwords, social engineering and spoofed social media sites are among the tools hackers are using to gather individuals' private content and sell it online, the FBI said.
ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access
Nightmare Eclipse has dropped ShieldBreak, a Windows zero-day exploit that allows any user to gain System privileges.
Patch Tuesday - August 2026
Microsoft has released security patches to address a Windows zero-day vulnerability known as "LegacyHive," disclosed after the July 2026 Patch Tuesday.
Cisco warns of ASA and FTD VPN flaw exploited to crash devices
Cisco says attackers are exploiting CVE-2026-20349 in ASA and FTD, letting crafted HTTP requests trigger DoS via Remote Access SSL VPN.
Kimwolf v7: An Evolution of the Kimwolf Botnet
Saisie en mars, arrestation en mai : les autorités pensaient avoir cassé le botnet. La version 7 tournait déjà depuis février, avec un carnet d'adresses logé sur Ethereum.
August 2026 Patch Tuesday: Microsoft Fixes 421 CVEs, One Exploited Zero-Day
Microsoft patches 398 flaws, including exploited CVE-2026-68820 that lets local attackers reach SYSTEM, plus four unauthenticated 9.8 RCEs.
New Jersey, Alabama Join States Targeted in Water Cyberattacks
Iran-linked hackers targeted water systems in New Jersey and Alabama, bringing confirmed attacks to at least 12 states.
DDoS attacks over 1 Tbps surged fivefold in the second quarter
Cloudflare tire la sonnette d'alarme face à des attaques DDoS record. En six mois, l'entreprise a repoussé 23,2 millions d'attaques DDoS et enregistré un bond spectaculaire de 519% des offensives les plus violentes, celles dépassant 1 Tbps.
CVE-2026-63520: Microsoft SharePoint Remote Code Execution (FIXED)
SharePoint CVE-2026-55040 lets unauthenticated attackers impersonate users and chain with CVE-2026-63520 for code execution
DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure
The DeadLock ransomware operation is using a decentralized infrastructure that relies on blockchain-backed services to protect its communication with victims and data-leak activity.
Cisco Warns of High-Severity ClamAV Vulnerabilities With Public PoC
Cisco warns that 7 ClamAV flaws affect Secure Endpoint Connector products, with two having public PoCs that could enable remote DoS attacks