Google Fixes 108 Chrome 154 Bugs, Including Memory Safety Issues
Moyen · SecurityWeek ·
Google has shipped Chrome 154 fixes for 108 vulnerabilities, with memory corruption and memory-safety weaknesses among the critical-rated issues.
Archives de la veille cyber
Toutes les alertes cyber notables pour l'éducation et le secteur public (33 articles), y compris les références CVE.
Résumés et correctifs assistés par IA, sources citées.
Microsoft Disrupts EvilTokens Phishing-as-a-Service, Seizes 50 Sites and 150 Domains
Moyen · Dark Reading ·
Microsoft has disrupted EvilTokens, a phishing-as-a-service operation, by seizing 50 websites and disabling 150 domains in a coordinated action.
Cisco Talos Uncovers CLOSEDQUORUM Malware with Autonomous C2 Capabilities
Moyen · Cisco Talos ·
Cisco Talos has identified a new malware, CLOSEDQUORUM, linked to the CAIRN project, enabling self-directed command-and-control and automated attack chains.
Microsoft: September 2026 Windows Updates Disrupt File History Backups
Moyen · BleepingComputer ·
Microsoft says its September 2026 Windows updates can break File History on some systems, causing backup jobs to fail; no CVE has been assigned.
Three Linux Kernel Bugs Expose Memory and Enable Crashes
Moyen · SecurityWeek ·
Attackers are leveraging three Linux kernel flaws that can cause denial-of-service, leak memory contents, or modify memory, and organizations are being urged to act.
BragJack PoC Shows One Extension Can Hijack Major Browser AI Assistants
Moyen · BleepingComputer ·
A proof-of-concept called BragJack uses one malicious browser extension and Prompt Forcing to hijack AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome.
Four Linux Kernel Flaws Allow Local Root Escalation on Older Systems
Moyen · The Hacker News ·
A security researcher has disclosed four vulnerabilities in older Linux kernels that let an unprivileged local user gain root access, with exploit code now public.
Microsoft Fixes 18 Azure and AI Product Flaws Enabling Privilege Escalation
Moyen · SecurityWeek ·
Microsoft has remediated eighteen vulnerabilities across Azure and AI-branded offerings, with privilege escalation as the stated impact and no CVE identifiers disclosed.
DPRK-Linked npm Campaign Harvests Chrome Extension Data via 13 Packages
Moyen · The Hacker News ·
A North Korean cluster tied to Contagious Interview planted 13 malicious npm packages that deploy a JavaScript stealer targeting Chrome extension storage.