Les menaces cyber des 30 derniers jours pour l'éducation et le secteur public (358 articles).
Résumés et correctifs assistés par IA, sources citées.
Informationnel · Hackread ·
Security weaknesses reported across Cursor, GitHub Copilot, Codex, VS Code, and Claude Desktop could let attackers run code, take local files, or spoof browser address bars, with no CVEs assigned.
Informationnel · The Hacker News ·
Operators of the Yoba campaign are publishing fake GitHub projects that pose as desktop clients for ChatGPT, Claude and other AI models, then abuse signed binaries to install loaders and coin miners.
Informationnel · SecurityWeek ·
Google is rolling out a security-focused Gemini model that scored 88.2% on its SEC-bench Pro evaluation, with a defender access track called the Fairwind Program.
Informationnel · SecurityWeek ·
Operators pushing AI-driven influence efforts and election hardware left without current updates are raising concerns about American ballots that cannot be independently verified.
Informationnel · Help Net Security ·
Check Point tracked a two-month Yoba campaign using counterfeit GitHub repos and GitHub.io pages to deliver ZIP malware that installs a cryptocurrency miner.
Moyen · The Register — Security ·
Unidentified attackers hit a national tax agency on 29 October 2026, forcing tax services offline and pushing deadlines into November.
Informationnel · BleepingComputer ·
Recent Windows updates address a documented issue that prevented non-administrator accounts from completing Remote Desktop connections.
Moyen · Help Net Security ·
Research published Oct. 29, 2026 describes how five popular AI assistants could leave their embedded browsers, execute hostile code, spoof the address bar, and touch local files, with no CVE IDs assigned.
Informationnel · BleepingComputer ·
Keep Aware warns that autonomous agents running in browsers can look like ordinary employees while touching authenticated apps and sensitive records.
Moyen · The Record ·
The FTC has launched a probe and ordered nine companies in food delivery, air travel and ride-hailing to disclose data tied to individualized pricing and compensation.
Informationnel · The Hacker News ·
Google launched Gemini 4 Carbon on Wednesday, showing benchmark results in flaw discovery, exploit development and remediation that could reshape how quickly attackers and defenders move.
Moyen · The Record ·
Belgium's Federal Public Service Finance has suspended access to MyMinfin while unknown attackers are investigated, disrupting the national tax service ahead of a filing deadline.
Informationnel · SecurityWeek ·
A vendor incident at BAE Systems interrupted bankruptcy court notice operations for several weeks, though the company says no data was extracted and no personal information was breached.
Informationnel · Hackread ·
Fraud operators are aiming automated advertising abuse at AI shopping helpers, a pattern tied to ADEX that lowers scam costs and complicates detection, with just over half of identified schemes caught.
Informationnel · Hackread ·
AppViewX announced on 29 October 2026 an expansion of Quantum Trust Hub that adds discovery of cryptographic assets, posture assessment, and remediation capabilities, with no CVE attached.
Informationnel · Help Net Security ·
On Oct. 29, 2026, Google announced three offerings it says can identify defects and repair bugs across very large code repositories and low-level software.
Informationnel · The Register — Security ·
UK government and regulators will require social platforms to verify adult users and block under-16s starting October 29, 2026, prompting schools to review policies.
Élevé · The Register — Security ·
On 2026-10-29, unidentified attackers used GitHub Issues to trigger Actions workflows across 61 public repositories in less than 60 minutes, raising supply-chain concerns.
Informationnel · The Hacker News ·
A webinar promotion highlights how attackers using AI can shorten the time defenders have to respond, with no CVEs cited.
Moyen · The Hacker News ·
A Telegram Android vulnerability tied to NebuSec let attackers run code after a voice call was answered; the issue was fixed and disclosed on October 29.
Élevé · The Hacker News ·
A high-severity operational shift is underway as AI tools handle alert sorting, event correlation and some response actions, forcing security teams to redesign workflows and analyst duties.
Informationnel · The Hacker News ·
A researcher discovered tens of thousands of working secrets in Gitee's public projects, highlighting risks for cloud and AI integrations.
Élevé · SecurityWeek ·
Hackers stole roughly 2.6 million records from Sony, So-net and Plala ISP services, exposing email passwords and a small set of bank-account details.
Informationnel · The Hacker News ·
GitHub has begun a public preview of an npm firewall that screens package metadata and downloads to block suspicious components before they enter software supply chains.