🛡 Sécurité
Alertes détectées dans les flux : mots-clés (breach, CVE, exploit…) ou source de catégorie sécurité. Indication visuelle uniquement - n'affecte pas le graph.
- Hacker News (front page)·il y a 8 h Alerte critiqueMS Paint Remote Code Execution Vulnerability
Article URL: https://www.cve.org/CVERecord?id=CVE-2026-83844 Comments URL: https://news.ycombinator.com/item?id=50384233 Points: 390 # Comments: 146
ms paintpaint remoteremote codecode executionexecution vulnerabilityurl - Lobsters·il y a 10 h AlerteSourceHut disabled registration bypass | CVE-2026-121728
Comments
sourcehut disableddisabled registrationregistration bypassbypass cve-2026-121728comments - The Hacker News·il y a 12 h AlerteOpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux
Attackers can log in to accounts that have no password, such as SSH key-only accounts, on some Alpine Linux servers running the standard openssh-server package. They need network access to the server, an account name, and a password between 257 and 1,024 bytes long. OpenSSH, which rates the flaw critical, released version 10.6p2 today to block it. Alpine has published fixed packages for every
sshopensshopenssh issuesissues emergencyemergency fixfix flaw - The Hacker News·il y a 12 h AlerteAIOpenAIResearchers Bypass ChatGPT Lockdown Mode to Exfiltrate Chats Without User Interaction
Cybersecurity researchers have disclosed details of a now-patched vulnerability that could be exploited to bypass Lockdown Mode protections in OpenAI ChatGPT. Lockdown Mode was introduced by the artificial intelligence (AI) company in June 2026 as an optional setting to minimize data exfiltration risks arising from prompt injections. "The flaw could enable silent chat data theft, phishing,
lockdown moderesearcherschatgpt lockdownbypassresearchers bypassbypass chatgpt - The Hacker News·il y a 14 h Alerte critiqueThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories
How much damage can someone do without breaking much? Quite a lot, it seems. A stolen login can open doors across several systems. A trusted setting can be used to lock people out. Even a simple file copy can reach places it shouldn't. And while new tools are helping find security holes faster, some important systems are still taking months, sometimes over a year, to get patched. Not exactly a
threatsday apacheapache ofbizofbiz rcerce dreamhostdreamhost breachbreach defi - The Hacker News·il y a 17 h AlerteIs Your Exposure Management Platform Leaving You Exposed? Five Tests to Find Out
A critical finding can move through several security tools and still leave the organization exposed. The vulnerability has a severity score, and a ticket has reached the queue. Progress then depends on information the finding may lack: who owns the system, whether attackers can reach it, what protection exists, and how a change could affect the business. Each missing detail creates
exposedexposure managementmanagement platformplatform leavingleaving exposedexposed five - The Hacker News·il y a 17 h AlerteAIOpenAIOpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run
OpenAI on Wednesday detailed a pipeline that employed an upcoming cyber-focused artificial intelligence (AI) model to validate and patch 948 local privilege escalation vulnerabilities in Linux for $1.2 million in API costs. "Our prototype identified and analyzed 2,308 candidate Linux kernel findings, dynamically reproduced 1,724 vulnerabilities, and produced 948 local privilege escalation (LPE)
openaipipelineescalationlinuxopenai pipelinepipeline generates - The Hacker News·il y a 19 h Alerte5 Active Cyber Threats That Put US Enterprises at Risk in October 2026
October 2026 brought another wave of cyber threats targeting US businesses, with attackers exploiting trusted platforms, legitimate authentication processes, and everyday business workflows. For enterprises, these campaigns raise the stakes beyond individual security incidents, increasing the risk of financial losses, data breaches, and costly operational disruption. Below, we examine five
cyber threatsoctoberenterprisesactive cyberthreats putput enterprises - The Hacker News·il y a 20 h AlerteApple to Start Scanning Publicly Shared iCloud Photos and Files for Harmful Content
Apple has revealed that it plans to start checking public iCloud links for harmful content starting with iOS 27.3, iPadOS 27.3, macOS 27.3, and visionOS 27.3. The change specifically applies to scenarios where users share iCloud content, such as photos in iCloud Photos or files in iCloud Drive, by sharing a link and making it accessible to "Anyone with the link." When users choose this option,
icloudharmful contentapplestartphotosicloud photos - The Hacker News·il y a 20 h AlerteAICERT-In Flags AI-Driven Attacks as Backdoored ARTEX Exposes 62 Consoles to Root Access
The Indian Computer Emergency Response Team (CERT-In) has disclosed that an artificial intelligence (AI)-assisted threat actor it tracks as Crafty Falcon is targeting organizations in the Banking, Financial Services, and Insurance (BFSI) sectors in the country. Describing the threat as active and ongoing, the activity involves the use of publicly-available AI-driven offensive security tools
cert-inai-drivencert-in flagsflags ai-drivenai-driven attacksattacks backdoored - The Hacker News·il y a 22 h Alerte critiqueZyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution
Zyxel GS1900 network switches that received the vendor's earlier fix for an actively exploited flaw are still open to the exploit attackers used, researchers at Binarly found. The exploit lets anyone who can reach a switch's web management interface run commands on it without logging in. Zyxel has released new firmware for 10 GS1900 models that closes the hole. The earlier fix is the 2.90
gs1900zyxel gs1900exploitgs1900 patchpatch failsfails block - The Hacker News·il y a 1 j AlerteHackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a medium-severity security flaw impacting multiple Apple operating systems to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The vulnerability in question is CVE-2024-27834 (CVSS score: 5.5), a case of improper authentication that could allow an attacker with
cisahackers exploitexploit patchedpatched appleapple flawflaw deliver - dev.to·il y a 1 j AlerteAIAI AgentsOpenAIAI CodingIvanti Connect Secure: 3 Zero-Days Patched, Deadline Hit
Verdict: patch is necessary but not sufficient. All 3 exploited CVEs in the Ivanti Connect Secure root attack chain now have vendor fixes. Ivanti's security advisory, updated on October 29, 2026, covers the three flaws that chain into unauthenticated root command execution, after Volexity tracked an intruder exploiting a fully patched appliance from October 3, 2026. The federal remediation deadline for the privilege escalation flaw, CVE-2026-111357, fell on November 2, 2026 — the same day Rapid7
ivantioctobercisaconnect secureivanti connectvolexity - Krebs on Security·il y a 1 j AlerteWant to Rent an Internet Address at the White House?
Several staffers at the White House are using computers or mobile devices equipped with residential proxy services that render their internet address available for others to rent, security experts warned today. One of the proxy services is a Russian company whose founder's web hosting business was ground zero for cyberattacks against election systems in Arizona and Illinois in 2016.
white houseinternet addresswant rentrent internetaddress whiteseveral staffers - The Hacker News·il y a 1 j AlerteDebian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own. The attacker's code then runs as root, according to advisories that Debian, Ubuntu, and APT's developers published on November 4. The attack needs APT to retry failed downloads, which it does by default from Debian 12 and
debiandebian ubuntuaptflawubuntu aptapt flaw - The Hacker News·il y a 1 j AlerteSonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records
SonicWall has warned of two vulnerabilities impacting end-of-life Global Management System (GMS) systems that it said will not be patched. Details of the security flaws, which affect SonicWall GMS 9.5.2 and earlier versions, are below - CVE-2026-109593 (CVSS score: 9.1) - An unauthenticated file read vulnerability that could allow an attacker with network access to read internal GMS files,
sonicwallgmssonicwall wonwon patchpatch eoleol gms - The Hacker News·il y a 1 j AlerteAIOpenAIResearchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak Toolkit
Cybersecurity researchers have disclosed details of an OpenAI Codex jailbreak bundle that's designed to modify an artificial intelligence (AI) agent's trusted instructions to insert advertisements for a third-party AI gateway. The phenomenon has been codenamed prompt adware by Check Point Research. Called Haiou (meaning Seagull in Chinese), the jailbreak modifies OpenAI Codex's configuration
openai codexjailbreakcodex jailbreakresearchersprompt adwareresearchers uncover - The Hacker News·il y a 1 j Alerte critiqueAPT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits
The Russia-linked threat actor known as APT29 is presumed to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply chain attack involving a Ukrainian web analytics service called Plerdy SEO Tracker. "The injected JavaScript code collects browser and device attributes," Sekoia researchers Amaury-Jacques Garçon and
web analyticsios androidapt29-linked hackershackers hijackhijack webanalytics script - The Hacker News·il y a 1 j AlerteCritical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
A critical flaw in Ruby on Rails could allow an unauthenticated attacker to write arbitrary files on an app's server by uploading a crafted file if the app processes uploads using ImageMagick. The Rails project disclosed the flaw in an advisory and fixed it in versions 8.1.4.1 and 8.0.5.2. The flaw is in Active Storage, the part of Rails that handles file uploads. Some apps store
railsflawcriticalwriteuploadsserver - The Hacker News·il y a 1 j AlerteXen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory
Two flaws in the Xen hypervisor allow a malicious guest virtual machine (VM) to read and write the memory of other VMs on the same host, including dom0. Dom0 is the VM that, by default, has full permissions and manages the others. Patches are out, and there is no known mitigation, the Xen Project said in an advisory on November 3. All Xen versions from 4.6 onward are vulnerable,
vmxenxen hypervisorvm writemaliciousflaws - The Hacker News·il y a 1 j AlerteAIRadio With No Radar: Why Agent Runtime Security Fails Without the Layers Beneath It
Nearly every agent security pitch now ends on the same promise: the product stops the bad action in real time. The promise holds for one kind of agent, the kind whose traffic passes through a gateway the enterprise owns. Most agents never touch one. One recent case shows what that gap looks like in practice. An employee asked an AI assistant to trigger a mass-email automation. The automation
agentsecurityradio radarradar whywhy agentagent runtime - The Hacker News·il y a 1 j Alerte critiqueChina-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor
A China-aligned threat actor known as SlippyNunchucks has been attributed to a Domain Name System (DNS) hijacking operation abusing insecure HTTP communications in Windows versions of Sogou Input Method as part of a surveillance campaign designed to deploy an implant called DarkVigil (aka FDMTP). The campaign, observed starting July 1, 2026, is assessed to have targeted organizations and
china-alignedsogou inputinput methoddeploydarkvigilchina-aligned hackers - The Hacker News·il y a 1 j AlerteRussian Police Arrest 3 Suspected VasyGrek Hackers, Dismantle Criminal Infrastructure
Russian authorities have arrested three suspected members of a threat group known as VasyGrek and dismantled its criminal infrastructure. Also known as Fluffy Wolf, the threat actor has a history of targeting Russian and international companies since 2016. The Ministry of Internal Affairs of the Russian Federation (MVD) said members of the group are "suspected of embezzling funds from the
russiansuspectedcriminal infrastructurevasygrekrussian policepolice arrest - The Hacker News·il y a 1 j Alerte critiqueGoogle Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction
A critical Android flaw could allow an attacker to run code on a phone without any user action remotely, Google said in its November security bulletin. The flaw, CVE-2026-58868, affects Android 14 through 17. Phones get the fix with security patch level 2026-11-01 or later, which phone makers and carriers send on their own schedules. As of November 4, Google's bulletin did not report
androidcritical androidandroid flawflaw allowgooglegoogle issues - The Hacker News·il y a 1 j AlerteCISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw in WordPress Core to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The high-severity vulnerability, tracked as CVE-2026-119977 (CVSS score: 8.1), is a case of Time-of-check Time-of-use (TOCTOU) race condition that could be exploited to achieve arbitrary code
cisawordpress corecisa confirmsconfirms hackershackers exploitingexploiting wordpress - dev.to·il y a 2 j Alerte critiqueApple Sent Spyware Threat Notifications to Users in 99 Countries; Germany Investigates
Originally published on Rohan Tech Official. On October 30, Apple sent a fresh round of threat notifications to iPhone users it believes were targeted by state-sponsored spyware — across 99 countries. Now Germany is investigating, and its officials have been told to assume their devices may already be compromised. If you've ever wondered what a real government-grade hacking scare looks like, this is it. Security researcher Costin Raiu shared the notice text publicly, confirming the scope. Here's
applespywarenotificationscountriesgermanyusers - Snyk Blog·il y a 2 j AlerteAI AgentsSnyk Named a Leader in The Forrester Wave™: Agentic Development Security Tools, Q4 2026
Snyk is a Leader in The Forrester Wave™: Agentic Development Security Tools, Q4 2026, with the highest score in the strategy category.
leader forresterforrester wavewave agenticagentic developmentdevelopment securitysecurity tools - Vercel Changelog·il y a 2 j AlerteVercelAIVercel Security Review now in public beta
is now in public beta for Pro and Enterprise teams. Once enabled, every push to a connected GitHub repository is automatically reviewed for vulnerabilities, and findings are reported in the .Vercel Security ReviewVulnerabilities dashboard Security Review runs automatically when code is pushed to a connected GitHub repository. Because reviews start from push events rather than pull requests, direct and force pushes to your production branch are reviewed as well. Every project affected by a single
securityreviewvercelsecurity reviewpublicpublic beta - The Hacker News·il y a 2 j AlertemSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious Activity
Customers of the mSecure password manager are being urged to act now to protect the confidential information they store in it, possibly by changing passwords, resetting two-factor authentication (2FA), and removing passkeys. The warning came in an email sent on November 3 in the name of developer mSeven Software. It says the company recently learned of suspicious activity linked to the app but
msecuresuspicious activitypasswordspasskeysmsecure warnswarns users - The Hacker News·il y a 2 j Alerte critiqueAIChainstack Reports Production Systems Breach Exposing Customer Data and Password Hashes
Blockchain infrastructure provider Chainstack on Tuesday disclosed that it was targeted in a cyber attack that allowed an unauthorized party to gain access to some parts of its infrastructure. The incident is assessed to be part of a large-scale, artificial intelligence (AI)-powered attack campaign that came to light last week. "An external attacker gained unauthorized access to part of
chainstackchainstack reportsreports productionproduction systemssystems breachbreach exposing - The Hacker News·il y a 2 j Alerte critiqueAIBinance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft
Binance on Tuesday said the record-setting theft of $6.43 billion in assets from the world's largest cryptocurrency exchange was the culmination of a "sophisticated, multi-stage campaign" that involved the use of a tampered Homebrew installation and recruitment-themed social engineering attack targeting two of its engineers. "It was not a single isolated breach or a simple phishing incident,"
6.43 billionbinancetheftbinance revealsreveals howhow fake
