Les menaces cyber des 30 derniers jours pour l'éducation et le secteur public (361 articles).
Résumés et correctifs assistés par IA, sources citées.
Informationnel · The Record ·
Ahmad Umar Agha, tied to the Syrian Electronic Army and the Th3Pr0 handle, was sentenced Thursday to 42 months for a conspiracy conviction involving attacks on Western targets.
Moyen · Hackread ·
Unknown attackers are using a counterfeit GitHub repository to trick AI coding assistants into installing malware on developers' Windows machines and opening remote access.
Élevé · Dark Reading ·
A security firm found that unmaintained domains tied to a decade-old application could have let attackers seize control of millions of computers; the app has been patched.
Moyen · BleepingComputer ·
Attackers are abusing trust in SS7 and Diameter signaling to locate phones, capture calls and SMS codes, and impersonate subscribers across mobile networks, with no CVE assigned.
Moyen · SecurityWeek ·
As schools consider removing passwords in favor of passkeys, security teams should expect attackers to change tactics rather than disappear.
Moyen · Help Net Security ·
Ahmad Umar Agha (Th3Pr0) got 42 months for hijacking a news agency’s Twitter account and posting a fake White House explosion report that wiped $136B in market value.
Informationnel · Help Net Security ·
Shufti released KYA, a verification offering intended to reduce impersonation of autonomous agents and actions taken without proper authorization.
Moyen · The Record ·
IPCO’s yearly report says a probe is continuing into thousands of storage units that GCHQ cannot account for, raising media-handling concerns.
Informationnel · Help Net Security ·
Bedrock Data on Oct. 30, 2026 announced an enterprise feature that uses AI to assign exposure fixes, open tickets and confirm completion.
Moyen · The Hacker News ·
Buyers of Trezor Safe 5 devices through CryptoBilis from March 2026 onward may face recovery-phrase exposure and should protect funds.
Informationnel · Security Affairs ·
Fresh advice focuses on how school districts can order remediation work from penetration test results using consistent risk scoring, with no CVE identifiers attached.
Informationnel · The Hacker News ·
Security staff and app owners encounter queued fixes and requests for proof of change, stretching remediation timelines; no CVE is linked to this item.
Élevé · Hackread ·
Binance says North Korean hackers stole $6.3 billion in customer funds and is reviewing a DevOps engineer’s laptop compromise while promising reimbursement.
Moyen · The Register — Security ·
A UK intelligence agency misplaced thousands of data storage units, could not determine how many were lost, and left a code defect unresolved for years, amid detentions under terrorism law.
Informationnel · The Record ·
Polymarket says an attack involving an unnamed outside provider disrupted its platform starting Thursday around 2 p.m. Eastern.
Moyen · The Record ·
A Sunday cyber intrusion at Poryadok disrupted its website, mobile app, and 48 stores in 32 cities, forcing the retailer to manage an ongoing service outage.
Élevé · Help Net Security ·
A malicious publisher pushed a modified Claude Code extension release, version 2.1.313, through Open VSX, giving attackers SSH access to developer workstations; Microsoft’s marketplace was not affected.
Informationnel · The Hacker News ·
A court sentenced Ahmad Umar Agha, tied to the Syrian Electronic Army, over a hacking conspiracy that included a fake tweet on a Western news account before a $136 billion market value loss.
Moyen · Graham Cluley ·
Hackers reportedly published a cache of DHS employee information online, affecting more than 41,000 workers and raising concerns about phishing, identity theft, and targeting of government staff.
Élevé · SecurityWeek ·
Attackers compromised a site-monitoring software supplier, planted harmful code, and seized user sessions to steal more than $2 million from people trading on Polymarket.
Informationnel · Help Net Security ·
An Irregular assessment of Zhipu AI's GLM-5.3 on CyScenarioBench recorded three finished mock intrusion tasks out of 13, with no task refusals and no CVE assigned.
Élevé · The Hacker News ·
Researchers traced a tampered Claude Code extension that added an SSH backdoor, prompting Open VSX and Cursor Marketplace listings to be pulled in October 2026.
Élevé · SecurityWeek ·
Blockchain analysts have connected a $6 billion cryptocurrency theft to North Korea’s TraderTraitor group, while Binance investigates whether an engineer’s laptop was compromised.
Élevé · Dark Reading ·
A threat actor known as FrostyNeighbor has carried out a damaging cyber operation against Ukraine, while Belarus and Russia appear to be coordinating more closely.