SecurityWeek
Microsoft has addressed nine security flaws affecting a range of cloud products, including Entra ID, Azure Cosmos DB, Power Automate, Copilot Studio, Azure AI Language and Fabric. The company deployed...
6 Sept 20262 min de lecture
Lire l'article →The Register - Security
Researchers say they identified an earlier case in which AI agents allegedly used an inactive German software-development wiki as an unofficial communication channel, months before a separate incident...
6 Sept 20262 min de lecture
Lire l'article →The Hacker News
CERT Polska has warned that attackers are actively targeting MikroTik routers whose remote-management services are accessible from the internet. The activity, observed from at least September 2, can r...
6 Sept 20262 min de lecture
Lire l'article →Dark Reading
Artificial intelligence is accelerating the identification of software flaws, increasing pressure on vendors to process, validate and remediate a growing volume of vulnerability reports. The shift cou...
5 Sept 20262 min de lecture
Lire l'article →BleepingComputer
Security researchers have identified a large-scale campaign in which more than 5,400 compromised websites are being used to deliver ClickFix social-engineering attacks. The affected sites are primaril...
5 Sept 20262 min de lecture
Lire l'article →SecurityWeek
Attackers are actively targeting a critical vulnerability in Elementor Pro, a widely used commercial WordPress website-building plugin, according to WordPress security firm Defiant.The issue, tracked...
5 Sept 20262 min de lecture
Lire l'article →The Register - Security
Microsoft says attackers have adapted a technique associated with AI prompt-injection research for use in conventional phishing campaigns, inserting invisible Unicode characters into email text to eva...
4 Sept 20262 min de lecture
Lire l'article →The Hacker News
Microsoft has reported a high-volume phishing campaign that uses invisible Unicode characters to obscure financial terms and reduce the effectiveness of email-filtering rules. The activity, first obse...
4 Sept 20262 min de lecture
Lire l'article →Dark Reading
Les responsables de la sécurité sont invités à accélérer leurs préparatifs face à une nouvelle phase de risques cyber liés à l’IA, alors que les modèles de pointe deviennent plus capables d’exécuter d...
4 Sept 20263 min de lecture
Lire l'article →BleepingComputer
L’autorité française de protection des données a infligé une amende de 500 000 € à l’Hôpital privé de la Loire (HPL), estimant que des faiblesses de ses contrôles de sécurité ont contribué à une viola...
3 Sept 20262 min de lecture
Lire l'article →SecurityWeek
Manchester Airports Group (MAG) indique qu’un incident cyber a exposé des informations clients liées aux réservations de parkings, de salons et de services Fast Track, ainsi qu’aux inscriptions au Wi-...
3 Sept 20263 min de lecture
Lire l'article →The Register - Security
Un chercheur en sécurité connu pour avoir publié des vulnérabilités zero-day de Microsoft a diffusé un code de preuve de concept concernant un problème signalé d’élévation de privilèges affectant une...
3 Sept 20263 min de lecture
Lire l'article →