Veille : Cyber EN — page 3
Actualité de la cybersécurité dans les médias anglophones.
Mis à jour le 22 octobre 2026 à 20:02 · 133 liens sur 30 jours
When Your Ransomware Negotiator Works for the Other Side (nouvel onglet)
The shocking arrest of a well-known ransomware negotiator reveals the critical need for vendor program oversight.
When AI Agents Commit Breaches, Humans May Not Be Held Liable (nouvel onglet)
As agents escape containment and access external systems, responsibility remains human. Accountability, however, is much less settled.
SecTor 2026 Reveals a Rapidly Shifting Cybersecurity Landscape (nouvel onglet)
The event closed in Toronto last week, with experts sharing critical perspectives on emerging risks, drawing record attendance and marking 22% growth.
F-Secure Launches Victim-First Scam Encyclopedia Covering 50+ Types of Consumer Fraud (nouvel onglet)
Built from decades of threat intelligence research, the new resource explains scams from the victims' perspective and tracks emerging forms of cyber crime.
AI Slop Isn't Just for Social Media; It's Ruining Cyberattacks, Too (nouvel onglet)
Don't buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it.
Vulnerability Management Isn't About the Score — It's About How It Applies to You (nouvel onglet)
Organizations need to move away from vendor-assigned, theoretical scores toward real exploit data specific to their environments.
EU Grocers Pay a Steep Price for Unpatched Fridge Firmware (nouvel onglet)
Hundreds of stores lost millions of euros because they hired third parties to manage the outdated OT firmware running their cooling systems.
Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles (nouvel onglet)
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
Yam Store: The Phishing Network Behind a Billion Messages (nouvel onglet)
A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.
Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat (nouvel onglet)
A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.
U.K. Sanctions Cryptomus for RU Money Laundering (nouvel onglet)
The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics…
Russian Influence Operation Widely Targets Latin America (nouvel onglet)
The AI-enabled operation used spoofed emails, fake government documents, and the creation of a local organization to target schools in Peru and Ecuador, among other efforts.
Ransomware Gangs Embrace Physical Threats, Family Stalking? (nouvel onglet)
Organizations are reporting that employees face threats of stalking, physical violence, and abduction. But these alarming claims are hard to verify.
Microsoft Patches More Than 1,400 Security Flaws (nouvel onglet)
Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000…
Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday (nouvel onglet)
The scary surprises in the largest security update ever include defense bypasses and unauthenticated RCEs.
North Korea Phishes Ukrainians for War Intel (nouvel onglet)
The Democratic People's Republic of Korea (DPRK) is trying to get insight into its own war effort in Ukraine, through simple reply-baiting phishing attacks.
Anthropic Finds Ingredients for Future AI Worms (nouvel onglet)
Anthropic's latest study combines IoT and network tests to explore AI self-replication, which researchers said would be "challenging" to shut down.
Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack (nouvel onglet)
Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position.
Prominent Ransomware Negotiator Faces Extortion Charges (nouvel onglet)
Edward Dubrovsky, a longtime cybersecurity executive, was arrested and charged in Pennsylvania last week under conspiracy to extort money.
No Identity, No Recovery: Cyber Resilience Starts With IAM (nouvel onglet)
The proliferation of enterprise apps and the centrality of cloud identity providers requires an identity security rethink.
Passing the Baton: Dark Reading Names New Editor-in-Chief (nouvel onglet)
Fahmida Y. Rashid will keep the momentum going as she leads Dark Reading.
FBI Arrests Executive at Ransomware Negotiation Firm (nouvel onglet)
Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that…
ASOS Breach Reveals the Risks in Customer-Facing SaaS (nouvel onglet)
The attack on the British retailer shows that compromising a single identity can lead to much deeper penetration of the corporate network.
AI Scramble Drives Cybersecurity M&A Boom (nouvel onglet)
Welcome to another gangbuster year for strategic M&A activity in cyber, with 117 deals announced in the latest quarter. What's different: Many of the buyers are not your typical cybersecurity firms.
What We Missed: FBI Strikes Back at ShinyHunters (nouvel onglet)
In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from the arrest of a suspected ShinyHunters operative to the compromise of a Pentagon-run…
Security Threats Don't Stop at the Office: Why Executives' Families Need Training, Too (nouvel onglet)
Those closest to executives must match their security postures because the weakest link in a family can become the entry point for attacks.
Social Engineering AI Agents: The New BEC for 2026 (nouvel onglet)
As AI agents gain authority over business systems, attackers can manipulate them like business email compromise (BEC) victims.
'AgentCorruption' Puts AWS Environments at Risk With Single Prompt (nouvel onglet)
A now-patched vulnerability in AWS Bedrock AgentCore could have allowed an attacker to use one AI chatbot to take over an organization's entire fleet.
Venezuelan Cartel's Malware Honcho Nabbed for ATM Jackpotting (nouvel onglet)
The first cybercriminal to ever make the FBI's "10 Most Wanted Fugitives" list allegedly infused Tren de Aragua's violent criminal operations with cash.
Russian Spies Give 'MatchBoil' Malware a Stealthy Facelift (nouvel onglet)
Cyber-espionage actor UAC-0099 has been steadily refining its flagship dropper in campaigns targeting Ukrainian organizations.
ShinyHunters Extorted Boeing Spin-off Prior to Arrests (nouvel onglet)
A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other members of…
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation (nouvel onglet)
Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters. In the days…
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions (nouvel onglet)
A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 was sentenced…