#security le 2026-10-08

1. 06:58 <Cassandra> BleepingComputer | Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland Sergiu Gatlan · 26m ago · 2 min read ​​​On the second day of Pwn2Own Ireland 2026, security researchers collected $232,500 in cash awards after exploiting 45 unique zero-day vulnerabilities. Read full story
2. 07:19 <Cassandra> The Hacker News | Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm info@thehackernews.com (The Hacker News) · 1h ago · 4 min read Malicious tensorlake npm version 0.5.144 contained a Shai-Hulud worm that harvests credentials and can republish compromised packages. Read full story
3. 07:57 <Sentinel> SecurityWeek | FortiBleed Attackers Locking Victims Out of Fortinet Devices Ionut Arghire · 5m ago · 4 min read The FortiBleed campaign is ongoing, with 86,000 Fortinet devices compromised and attackers locking organizations out. Read full story
4. 08:20 <Cassandra> The Hacker News | MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data info@thehackernews.com (The Hacker News) · 39m ago · 4 min read MonsterCloud's owner is accused of charging ransomware victims over $19 million while secretly paying attackers over $8 million for decryptors. Read full story
5. 08:20 <Cassandra> The Hacker News | U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks info@thehackernews.com (The Hacker News) · 38m ago · 5 min read The U.S. offers up to $10 million for information that identifies or locates Zhang Yu, charged over the HAFNIUM Exchange hacks. Read full story
6. 08:26 <Sentinel> SecurityWeek | Oracle Health Data Breach Tally Climbs to Nearly 20 Million Eduard Kovacs · 3m ago · 4 min read The personal and medical information of nearly 20 million people was compromised in a cyberattack on Oracle Health. Read full story
7. 09:55 <Sentinel> SecurityWeek | Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme Ionut Arghire · 27m ago · 3 min read Charged with defrauding MonsterCloud clients, Zohar Pinhasi was paying ransomware groups and then charging clients substantially more. Read full story
8. 10:19 <Cassandra> The Hacker News | 16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases info@thehackernews.com (The Hacker News) · 33m ago · 5 min read Sixteen malicious Firefox extensions imitate Rabby and OKX wallets to intercept recovery phrases and private keys during wallet imports. Read full story
9. 10:25 <Sentinel> SecurityWeek | TP-Link Faces State Lawsuits and New Scrutiny Over ISP Router Flaws Eduard Kovacs · 1m ago · 6 min read SEC Consult details TP-Link ISP router flaws cited in state lawsuits accusing the company of misleading users on security and China ties. Read full story
10. 10:29 <Cassandra> BleepingComputer | Owner of Empire cybercrime market gets 40 years in prison Sergiu Gatlan · 1m ago · 3 min read The co-creator of Empire Market, one of the largest dark web marketplaces before its shutdown, has been sentenced to 40 years in prison for facilitating $430 million in illegal transactions from 2018 to 2020. Read full story
11. 11:20 <Cassandra> The Hacker News | Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia info@thehackernews.com (The Hacker News) · 50m ago · 11 min read Wazza filters visitors with session tokens and browser checks before serving Adobe-themed Device Code phishing pages. Read full story
12. 11:27 <Sentinel> SecurityWeek | Rein Security Raises $25 Million to Guard AI Agents at Runtime Ionut Arghire · 16m ago · 3 min read The cybersecurity startup will invest in product innovation, agentic research, and employee base expansion. Read full story
13. 11:59 <Cassandra> BleepingComputer | ASOS links data breach to social engineering attack, credential theft Bill Toulas · 16m ago · 2 min read ASOS is sending updates to affected customers about the cybersecurity incident it suffered earlier this week, confirming that hackers accessed some personal data. Read full story
14. 12:28 <Cassandra> BleepingComputer | Microsoft Teams to get support for third-party deepfake detection tools Sergiu Gatlan · 20m ago · 2 min read Microsoft will soon introduce support for third-party deepfake detection solutions and impersonation protection in Teams meetings. Read full story
15. 12:54 <Sentinel> SecurityWeek | SonicWall and Splunk Patch Critical Vulnerabilities Ionut Arghire · 16m ago · 4 min read SonicWall and Splunk have rolled out patches for multiple critical- and high-severity vulnerabilities in their products. Read full story
16. 12:54 <Sentinel> SecurityWeek | US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward Eduard Kovacs · 8m ago · 4 min read Department of State is offering $10 million for information on Zhang Yu, a Chinese national accused of taking part in the Hafnium attacks. Read full story
17. 13:28 <Cassandra> BleepingComputer | Uranium crypto exchange hacker convicted for stealing $53 million Sergiu Gatlan · 10m ago · 2 min read A Maryland man was found guilty of stealing more than $53 million after hacking the decentralized crypto exchange Uranium Finance twice in April 2021. Read full story
18. 14:24 <Sentinel> SecurityWeek | Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication Eduard Kovacs · 19m ago · 4 min read Threat actors have started targeting CVE-2026-21589, a critical vulnerability in Atlassian’s self-hosted Data Center products Read full story
19. 14:30 <Cassandra> BleepingComputer | OAuth grants pile up faster than you can review them. Here's how to keep up. Nudge Security · 30m ago · 7 min read OAuth grants create data highways between SaaS apps, AI agents, and other tools. And, they are multiplying faster than any security team can review them. As the recent Klue breach showed, attackers are taking notice and exploiting forgotten OAuth grants to gain access to corporate data. This article covers why OAuth risks are so hard Read full story
20. 14:55 <Sentinel> SecurityWeek | Security Awareness Training Isn't Dead, but It Needs a Rethink Kevin Townsend · 25m ago · 14 min read Experts are split on whether security awareness training works and a cognitive psychologist explains how it could be improved. Read full story
21. 15:30 <Cassandra> BleepingComputer | Cisco warns of critical flaws allowing Nexus switch takeover Bill Toulas · 3m ago · 3 min read Cisco released security advisories for five critical vulnerabilities in its NX-OS data center network operating system that could be exploited to run arbitrary code with root privileges on Nexus switches. Read full story
22. 15:49 <Cassandra> The Hacker News | ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms info@thehackernews.com (The Hacker News) · 1h ago · 6 min read Attackers used ARTEX and LLMs against South Korean financial organizations in a campaign that resulted in data exfiltration. Read full story
23. 15:49 <Cassandra> The Hacker News | UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML info@thehackernews.com (The Hacker News) · 23m ago · 6 min read TrendAI links UAC-0099 to ASHVEIN, a .NET stealer and RAT used in attacks targeting Ukrainian government personnel. Read full story
24. 15:56 <Sentinel> SecurityWeek | Cisco Patches a Dozen Critical Vulnerabilities Ionut Arghire · 28m ago · 4 min read Cisco has patched over a dozen critical vulnerabilities that could lead to RCE, DoS, privilege escalation, and other types of attacks. Read full story
25. 17:19 <Cassandra> The Hacker News | Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks info@thehackernews.com (The Hacker News) · 1h ago · 11 min read JPCERT/CC links Japan's recent data leaks to mobile API abuse and known software flaws, including an exploited Metabase SQL injection bug. Read full story
26. 17:33 <Cassandra> BleepingComputer | FakeGit malware campaign returns with 17,610 malicious GitHub repos Bill Toulas · 22m ago · 2 min read More than 17,000 fake repositories on GitHub are distributing the SmartLoader malware after the FakeGit campaign reactivated earlier this month to push the StealC infostealer. Read full story
27. 18:47 <Cassandra> The Hacker News | ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories info@thehackernews.com (The Hacker News) · 49m ago · 13 min read ThreatsDay: Malicious VS Code themes, npm supply-chain attacks, AI phishing, ransomware betrayal, exposed hacker tools, and more cybersecurity news. Read full story
28. 18:47 <Cassandra> The Hacker News | FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails info@thehackernews.com (The Hacker News) · 15m ago · 10 min read FBI says Integrity Technology Group-linked hackers stole email in Southeast Asia using custom tools and a scanner with over 1,300 scripts. Read full story
29. 19:29 <Cassandra> BleepingComputer | Low-cost Android phones ship with residential proxy malware Lawrence Abrams · 8m ago · 5 min read A malware campaign dubbed 'Midnight Mimosa' has been discovered on low-cost Android smartphones that ship with malicious software embedded in their firmware, allowing attackers to silently install apps, perform ad fraud, and turn devices into residential proxies. Read full story
30. 20:10 <Cassandra> BleepingComputer | Ransomware attack disrupts Japan's IDCF Cloud used by govt clients Bill Toulas · 1m ago · 3 min read IDC Frontier, a major Japanese cloud and digital infrastructure company, disclosed that its IDCF Cloud service was targeted in a ransomware attack that caused an outage at a data center cluster serving the eastern part of the country. Read full story
31. 22:10 <Cassandra> BleepingComputer | FBI disrupts Chinese hacking tools used to breach critical infrastructure Lawrence Abrams · 27m ago · 4 min read The FBI has seized seven domains used by Chinese state-sponsored hackers known as Flax Typhoon to operate two hacking tools, MicroScan and FishHub, used in attacks that breached critical infrastructure and other organizations worldwide. Read full story

Tous les jours · Rejoindre #security