Flux RSS

— Sources secondaires
141articles RSS
Reinitialiser
Fake VS Code alerts on GitHub spread malware to developers
Gouvernance & RégulationBleepingComputeravant-hier

A large-scale campaign is targeting developers on GitHub with fake Visual Studio Code (VS Code) security alerts posted in the Discussions section of various projects, to trick users into downloading malware. [...]

Wartime Usage of Compromised IP Cameras Highlight Their Danger
Gouvernance & RégulationDark Readingavant-hier

The list of countries exploiting internet-connected cameras to give them eye's inside their adversaries' borders continues to expand, with Russia, Iran, Israel, Ukraine, and the United States all using the tactic. What should companies look out for?

AFC Ajax drops ball as flaws let hackers play admin with tickets and bans
Gouvernance & RégulationThe Register Securityavant-hier

Vulns in Dutch football club's systems didn't just expose data – they let outsiders play with accounts, and even lift stadium bans Dutch football giant AFC Ajax has admitted to a data breach after an attacker gained access to its internal systems, in an incident that looks less like a stray pass and more like the gates left wide open.…

Breach de l'environnement cloud Amazon de la Commission Européenne
ÉlevéIncidents & BreachesBleepingComputeravant-hier

La Commission Européenne enquête sur une brèche de sécurité après qu'un acteur malveillant a accédé à son environnement cloud Amazon (AWS). Au moins un compte AWS de la Commission a été compromis. Cet incident survient dans le contexte de propositions récentes pour renforcer la cybersécurité européenne contre les acteurs étatiques et la cybercriminalité.

Iran war drives urgent need  to counter underwater attack drones
Vulnérabilités & PatchesThe Register Securityavant-hier

US and UK forces seeking tech tender with an April 3 deadline The UK and US are looking for technology to counter the threat posed by underwater drones to ships, harbors and other critical maritime infrastructure, and are asking industry for answers.…

Security boffins scoured the web and found hundreds of valid API keys
Gouvernance & RégulationThe Register Securityavant-hier

Global bank's devs have some cleaning up to do after cloud creds found in website code Computer security boffins have conducted an analysis of 10 million websites and found almost 2,000 API credentials strewn across 10,000 webpages.…

Is the FCC's Router Ban the Wrong Fix?
Gouvernance & RégulationDark Readingil y a 3 jours

The agency put foreign-made consumer routers on its list of prohibited communications devices, but the ban could create more problems down the road.

CISA: New Langflow flaw actively exploited to hijack AI workflows
Gouvernance & RégulationBleepingComputeril y a 3 jours

The Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are actively exploiting a critical vulnerability identified as CVE-2026-33017, which affects the Langflow framework for building AI agents. [...]