Les menaces cyber des 30 derniers jours pour l'éducation et le secteur public (362 articles).
Résumés et correctifs assistés par IA, sources citées.
Élevé · SecurityWeek ·
Blockchain analysts have connected a $6 billion cryptocurrency theft to North Korea’s TraderTraitor group, while Binance investigates whether an engineer’s laptop was compromised.
Élevé · Dark Reading ·
A threat actor known as FrostyNeighbor has carried out a damaging cyber operation against Ukraine, while Belarus and Russia appear to be coordinating more closely.
Élevé · Security Affairs ·
A hacker obtained and disclosed personal information on more than 40,000 Department of Homeland Security workers, touching CBP, ICE and CISA, in a breach kept quiet until recent reporting.
Informationnel · Help Net Security ·
A new Gartner category designation and Stellar Cyber's SIEM evolution discussion are prompting K-12 security teams to revisit how they evaluate SOC platforms.
Élevé · Help Net Security ·
Akamai's 2026 fraud report links 1,200 counterfeit storefront and ticket sites on .shop domains to one IP, targeting payment cards and personal data.
Informationnel · Help Net Security ·
A Bitdefender assessment of routers, smart TVs and smart plugs recorded missing patches and viewing-data exposure concerns, with no CVE IDs assigned.
Moyen · BleepingComputer ·
OpenAI raised usage allowances for its $100, $200, and $500 ChatGPT tiers and scrapped a planned reduction after customers objected, while Dots usage stays separate.
Informationnel · The Register — Security ·
Security investigators reported on Oct. 29, 2026 that five OpenAI and Microsoft products for AI development and embedded browsing contain defects with no fixes yet and no assigned CVEs.
Moyen · BleepingComputer ·
A resurgent operation is using poisoned Hugging Face models and a Solana starter kit to hijack GPUs, install NetSupport RAT, and plant backdoors, with 28,000 downloads reported.
Élevé · BleepingComputer ·
A third-party passenger service platform operated by Amadeus exposed information tied to roughly 92,000 Japan Airlines customers, underscoring supplier risk.
Informationnel · Security Affairs ·
The Pentagon is investigating whether a cyberattack caused freezer failures and food spoilage at several US military installations, with French investigators assisting.
Élevé · BleepingComputer ·
A suspected attacker compromised a third-party service used by Polymarket, pushing a crypto-draining script that forced trading to stop and led to about $2.5 million in losses.
Moyen · Dark Reading ·
Threat actors are crafting Anthropic-branded messages to slip past widely deployed email security gateways and deliver phishing, with no CVE involved.
Informationnel · Dark Reading ·
A Dark Reading piece timed to Cybersecurity Awareness Month examines shifting awareness trends and makes the case for AI-focused staff training.
Informationnel · Dark Reading ·
A Dark Reading report frames capture-the-flag events as practical training that helps early-career security professionals build skills and advance their careers.
Moyen · The Record ·
General Motors resolved multistate privacy litigation, remitting $220 million and committing to compliance changes after accusations it sold driving records.
Informationnel · BleepingComputer ·
A fake app distributed through Apple’s App Store siphoned funds from 27 Solana wallets, causing roughly $23,000 in losses.
Informationnel · Wordfence ·
Security researchers processed more than a thousand WordPress-related vulnerability submissions in July 2026, reinforcing disclosure workflows without assigned CVE IDs.
Élevé · The Hacker News ·
A high-severity pattern blends rented banking trojans, older software weaknesses, and misuse of everyday tools to obtain login data and session tokens.
Informationnel · Cisco Talos ·
Cisco Talos has released an informational newsletter commentary by William on PHP and Node.js security, with no new CVEs or specific vulnerabilities.
Informationnel · SecurityWeek ·
A SecurityWeek opinion essay relies on a risk analogy to explain cyber exposure, offering no CVE or patch target—so treat it as communication guidance, not an incident report.
Informationnel · The Record ·
An investigation is underway after unknown attackers accessed IT systems used by federal bankruptcy courts, with no evidence yet that data was removed.
Moyen · Dark Reading ·
Dark Reading highlights a threat-modeling exercise that asks security leaders to surface assumptions on a whiteboard before incidents expose them.
Informationnel · Wordfence ·
Wordfence's weekly WordPress security roundup for Oct. 19–25, 2026 lists no CVE identifiers, so the notice is informational rather than an emergency patch call.