Archive · 51 articles · page 2/3
A hacker scraped École 42's internal directory using a user account with legitimate access, then put the profiles up for sale on October 9. The school filed a complaint and notified the CNIL, the French data protection authority. No passwords are believed to be involved.
Edward Dubrovsky, co-founder of CYPFER, a firm that negotiates with ransomware operators, was arrested on October 8 in Pennsylvania. The press links the case to the ShinyHunters group, but the FBI has not confirmed it.
A 28-year-old Russian suspected of being a leader of the Qilin ransomware group was arrested in Japan and transferred to Germany, authorities in North Rhine-Westphalia announced on October 7.
Push Security spotted an "Adception" campaign: a Google ad displaying bing.com leads to a fake Claude install page that tricks macOS users into running a malicious command.
On October 6 and 7, the audit body of the US Congress and Europol published reports urging organizations to prepare for the transition to post-quantum cryptography.
A hacker has claimed since October 10 to have breached Infogreffe. The organization acknowledges a "minor" incident on a platform still in development. The published sample is far more limited than the announcement.
Since October 7, hackers have been exploiting two vulnerabilities in the AhsayCBS backup server. Version 10.3.4.0 did not fix them: Ahsay is urging customers to install patch 10.3.4.45.
On October 8, Citrix released a patch for CVE-2026-107406, a flaw rated 9.5 out of 10 that affects NetScaler ADC and Gateway in SAML configurations. Citrix is not aware of any exploitation at this stage.
In an October 9 report, Anthropic describes cases where its models acted on real websites: forms submitted, protections bypassed, a fake tip sent to a US police department. It is cutting Internet access for all internal evaluations.
A hacker claims to be selling a database of 62,848 records of France Travail agents and partners. The agency has not confirmed the breach and says it is carrying out the necessary checks. The risk of targeted phishing is real.
Cloudflare announced on September 29 that it wants to become a public certificate authority, with Merkle Tree Certificates designed for post-quantum signatures. The first Merkle Tree Certificates are expected in early 2027.
Inventory, data lifetime, quick wins on TLS and SSH, vendors, procurement, crypto-agility: a practical method for starting your migration to post-quantum cryptography.
No, ANSSI is not banning RSA in 2027. Hybridization, product qualification, purchases after 2030, inventory: what the agency's FAQ and official publications say precisely about the post-quantum migration.
Standards published, protocols switching over, European and French timelines, a reassessed threat: a full update on post-quantum cryptography, backed by official sources.
According to CrowdStrike, a likely Chinese-speaking hacker attacked South Korean banks in late September using ARTEX, a penetration-testing tool driven by AI agents, along with several language models.
Zenity showed that a single request sent to a public Amazon Bedrock AgentCore agent could reach other agents and their secrets. AWS disputes that this is a vulnerability.
IDC Frontier, a SoftBank subsidiary, confirmed that a ransomware attack took down one region of its IDCF Cloud on October 7, affecting 495 businesses and local authorities.
Microsoft warns that Windows Update certificates expire on May 17 and June 19, 2027. PCs and servers not updated by then will no longer receive any security updates.
Mistral AI unveiled Mistral Large 4 on October 6, a multimodal model whose weights will be released on October 27. The startup is stressing cybersecurity and sovereignty to regain ground against American and Chinese giants.
The floor debate on the "Resilience" bill, which transposes NIS2, scheduled for October 7, was removed from the agenda. France, already taken to the EU Court of Justice, is nearly two years behind schedule.
France's national family allowance fund (Cnaf) has confirmed a "cybersecurity incident" at Vacaf, the CAF vacation aid program. Bank details and passwords reportedly are not affected, but beneficiaries should stay alert to scams.
Patched on October 6, a maximum-severity flaw in SonicWall SMA1000 remote access gateways is already the target of exploitation attempts. Administrators should apply the patch without delay.
Two critical NetScaler ADC and Gateway vulnerabilities allow remote code execution and are being exploited worldwide. CISA's alert, updated on October 9, now covers ten CVEs.
Fortinet warns of a FortiMail flaw rated 9.8/10 that was exploited before any patch existed. Fixed versions are now available on all maintained branches. Here are the affected branches, the workaround to apply and the indicators of compromise.
