Veille : Cyber EN
Actualité de la cybersécurité dans les médias anglophones.
Mis à jour le 22 octobre 2026 à 17:06 · 133 liens sur 30 jours
Hacker Conversations: Corey Thuen and the Evil Bit (nouvel onglet)
Corey Thuen hires hackers for what he calls ‘the evil bit’ — an adversarial streak he believes is either there or it isn’t.
Machine speed attacks require machine speed detection and response (nouvel onglet)
Attackers can steal credentials and begin exfiltrating data within minutes, often before security teams can respond. Exaforce examines real-world attacks involving stolen GitHub tokens, malicious AI…
INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown (nouvel onglet)
INTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909 malicious networks and recovered more than $105 million in illicit funds. In tandem, the effort saw law…
Amazon says PHP2Shell exploitation began 4 days before patches (nouvel onglet)
Security researchers at Amazon Threat Intelligence say attackers began targeting the PHP2Shell flaws four days before security patches were released on Wednesday.
Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform (nouvel onglet)
The Amsterdam-based company plans to use the funding for research and development and commercial expansion in Europe and the Middle East.
Signal Vulnerability Lets Malicious Callers Block Hang-Ups (nouvel onglet)
Affecting the open source calling library RingRTC, the bug prevented calls from ending properly.
Tech and Security Companies Respond to PHP2Shell Vulnerabilities (nouvel onglet)
Vendors are checking their products for PHP2Shell, security firms are shipping detections, and governments are urging immediate patching.
The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat (nouvel onglet)
Right now, there is probably an AI agent running on a laptop somewhere in your network. It stores API keys and database passwords, can access your internal systems, and works without anyone watching…
GitLab warns of new max severity code execution vulnerability (nouvel onglet)
GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable servers.
Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation (nouvel onglet)
Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed "anomalous activity" related to systems that store customer environment variables. Upon further investigation, the company found…
Splunk, SolarWinds Release Fresh Security Updates (nouvel onglet)
Patched vulnerabilities could allow attackers to execute code, elevate privileges, and leak sensitive information.
OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL (nouvel onglet)
A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer's Windows or WSL machine when the developer signed in. OpenCode connects to MCP (Model…
Cisco Patches 34 Vulnerabilities Across Multiple Products (nouvel onglet)
Critical-severity security defects could lead to command execution, authentication bypass, and XSS attacks.
PHP2Shell Exploitation Started Days Before Patches (nouvel onglet)
Initial attempts were observed on October 17, and mass activity began shortly after patches were released.
LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release (nouvel onglet)
LiteLLM on Wednesday disclosed that threat actors compromised "multiple independent security controls" to push a malicious version of the Python package containing a credential stealer and a…
Authorities disrupt nearly 11,000 cybercrime networks in Africa (nouvel onglet)
Law enforcement agencies have disrupted nearly 11,000 cybercriminal networks and arrested more than 1,400 people in Operation Serengeti III, which targeted business email compromise, ransomware, and…
Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions (nouvel onglet)
Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug in the Brotli decompression code that Node.js…
Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU (nouvel onglet)
Nearly 100 vulnerabilities have been assigned a critical severity rating and Fusion Middleware received the most patches.
Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on Facebook (nouvel onglet)
The $25 billion award far exceeds a $5 billion fine the Federal Trade Commission levied against Facebook in 2019.
New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification (nouvel onglet)
A remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed, releasing working proof-of-concept code. By sending a small batch of…
Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed (nouvel onglet)
Amazon's Threat Intelligence team on Wednesday said it detected an attempt to exploit the newly disclosed PHP2Shell vulnerabilities on October 17, 2026, against its MadPot honeypot service, as the…
UAE Transitions 50% of Gov't Services to Agentic AI (nouvel onglet)
The United Arab Emirates says it's creating a foundation of security and safety as it transforms its public service footprint.
China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack (nouvel onglet)
Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Backup application. During the incident…
Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks (nouvel onglet)
Chrome is getting new scam protections that use Gemini to detect deceptive websites and warn users when they copy suspicious commands from ClickFix attacks.
Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected (nouvel onglet)
Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware on up to 26,739 customers' servers.
TiDB Breach Exposes Flawed Cloud Security Assumptions (nouvel onglet)
Cloud providers may be storing sensitive customer data, without either party knowing it. But when a provider is breached, the data comes home to roost.
Lazarus hackers use post-quantum cryptography for malware delivery (nouvel onglet)
North Korean hackers are using a post-quantum cryptographic mechanism to secure malicious payload delivery in new operations that combine old and new malware.
Marvell, Microsoft & Oracle Work to Standardize Data Center Hardware Security (nouvel onglet)
The effort is aimed at standardizing a NIST FIPS 140-3 Level 3 integrated HSM for cloud and hyperscale data center infrastructure.
Cloud Security Alliance Survey Finds Data Loss Prevention Often Detects Data Loss Only After It Happens (nouvel onglet)
Research finds that, among respondents experiencing data loss, only 16% said DLP blocked their most significant incidents before data left the organization.
'PHP2Shell' Bugs Signal Red Alert for Security Industry (nouvel onglet)
Security teams are scrambling to remediate two critical PHP vulnerabilities following leaked details and reports of exploitation attempts.
Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases (nouvel onglet)
GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version of the software going back to 7.0, released in…
CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers (nouvel onglet)
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server.
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor (nouvel onglet)
The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket…
Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections (nouvel onglet)
Protections have been added against scams and social engineering, including new site warnings and server-side Gemini analysis.
OVHcloud GitHub Compromise Tied to GlassWorm Threat Actors (nouvel onglet)
A developer's GitHub account that was compromised several months earlier was used to push malicious code to unsuspecting users.
OpenAI's GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing So (nouvel onglet)
OpenAI has revealed that two artificial intelligence (AI) agents powered by GPT-6.1 Sol and GPT-6 Astra weakened misalignment monitoring while making requested software changes during two internal…
OpenAI agents disabled safety monitoring, one lied about it (nouvel onglet)
OpenAI agents powered by the GPT-6.1 Sol and GPT-6 Astra models weakened misalignment monitoring during two internal tasks, interpreting coding instructions as authorization to do so.
Optiv Launches CyberBOT Cybersecurity Awareness Training Program (nouvel onglet)
Hands-on sessions provide educators, nonprofits, and community leaders with an accessible resource to foster year-round cyber awareness and build more resilient communities.
Survey Finds High-Profile Executives Feel Untouchable as Digital Exposure Turns Into Physical Risk (nouvel onglet)
360 Privacy finds more than 8 in 10 security and wealth professionals say cybersecurity and physical security can no longer be separated.
Widespread PHP Flaw May Cause Many Site Outages Today (nouvel onglet)
Expect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an…
PHP ships emergency patches for critical PHP2Shell flaws (nouvel onglet)
The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619) tracked collectively as PHP2Shell.
ClickFix has never been bigger, and AI tools are its most convincing lure yet (nouvel onglet)
ClickFix attacks are surging as cybercriminals use fake AI installers, malicious search results, and trusted chatbot platforms to trick users into executing malware. Push Security examines how these…
PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge (nouvel onglet)
PHP has released emergency updates that fix two critical flaws in the language itself, letting an attacker without an account run code on a web server. The fixes are in PHP 8.5.12, 8.4.27, 8.3.36 and…
Google Chrome Adds ClickFix Warnings to Stop Users From Running Malicious Commands (nouvel onglet)
Google on Tuesday said it's rolling out improved safeguards in its Chrome browser to secure users against ClickFix attacks when Enhanced Protection is enabled. ClickFix is a popular social…
Decades-Old Windows Utility Powers Modern ClickFix Attack (nouvel onglet)
The attack uses malicious Google search results related to Amazon and leverages the "finger" utility to launch a CAPTCHA that installs malware, including the Lumma stealer.
Microsoft PowerToys adds CursorHide, Button Lock mouse tools (nouvel onglet)
Microsoft has released PowerToys 0.102, with two new mouse utilities, new command-line tools, and Command Palette improvements.
China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors (nouvel onglet)
Cybersecurity researchers have disclosed details of a previously undocumented China-aligned threat cluster known as Bronze Sandcastle that has been observed targeting organizations in Asia and Africa…
Generative AI Is Erasing Behavioral Tells, Weakening Behavior-Only Detection, Proofpoint Reports (nouvel onglet)
Generative AI has changed what a malicious email looks like. Messages that once gave themselves away through clumsy wording, generic pretexts, and reused templates now arrive fluent, personalized…
PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't (nouvel onglet)
You cannot fully block the two critical PHP flaws called PHP2Shell before today's fix, and the one setting being passed around as a workaround is not enough on its own, the security firm that…
The Harness Is the Hard Part of Agentic Pentesting (nouvel onglet)
An AppSec team can point an AI agent running on a general-purpose model at its own web apps with little setup. Sure, the model writes the attacks. But everything that makes those attacks safe to run…