Les menaces cyber des 30 derniers jours pour l'éducation et le secteur public (358 articles).
Résumés et correctifs assistés par IA, sources citées.
Moyen · The Hacker News ·
In November 2026, VOLTA operators were tied to a Windows tool that captures passwords and session cookies, pulls Outlook and Slack content, and uses Claude, Gemini and Kimi to sort victims.
Moyen · Help Net Security ·
Trust Onion's fraud-prevention app was demonstrated and tested on macOS, iOS and Android, with Cisco Talos examining attacker-relevant callback flows.
Moyen · BleepingComputer ·
A working exploit from Anthropic researchers can give unauthenticated attackers root-level command execution on Linux hosts that expose MPTCP services; no CVE is assigned.
Moyen · BleepingComputer ·
Researchers at Anthropic have identified a Linux kernel MPTCP weakness that can let unauthenticated attackers execute commands as root on exposed MPTCP servers; no CVE has been assigned.
Élevé · Security Affairs ·
Blockchain analysts and Binance are investigating suspicious crypto transfers after a compromised developer-operations laptop was linked to North Korean hackers, with cited loss figures of $6.3B and $5.8B.
Élevé · BleepingComputer ·
A Binance DevOps engineer’s compromised laptop has been linked to a $6.3 billion crypto theft, highlighting endpoint risk at a major exchange.
Élevé · Help Net Security ·
An attacker used a DevOps engineer’s compromised laptop to reach a containerized service and submit crypto withdrawals at Binance, in an incident linked to about $6.3 billion.
Élevé · The Register — Security ·
An unknown party took over a Binance engineer's laptop on Oct. 30, 2026, leading to unauthorized trades involving about $6.3 billion and a freeze on funds.
Élevé · The Hacker News ·
A major exchange and two stablecoin issuers reported an incident Thursday and blocked blockchain-held balances, with cited figures in the billions.
Moyen · Hackread ·
Binance is investigating a reported theft, has placed related assets on hold and is following the money trail, while saying customer balances remain protected.
Moyen · The Record ·
Blockchain investigators and Binance confirmed a Thursday crypto exchange breach, linked it to North Korea, and began trying to freeze $6.3 billion.
Moyen · Security Affairs ·
On Oct. 29, Binance examined suspicious transfers and a possible hack while Tether and Circle froze stablecoins, with reported amounts of $5.8B and $1.79B.
Élevé · BleepingComputer ·
Binance is looking into whether its platform was compromised, with reports pointing to a possible loss of digital assets valued at as much as $5.8 billion.
Moyen · Security Affairs ·
Ransomnews researchers used search-engine indexes to count 484,142 publicly reachable cloud storage buckets and 18.05 billion files, flagging exposed credentials, database dumps, backups and files.
Moyen · Dark Reading ·
Anthropic identified weaknesses and combined them into exploit chains affecting Google Chrome, Apple Safari, Android, Microsoft Windows, and Linux; no CVE IDs were assigned.
Moyen · BleepingComputer ·
Unknown operators used hundreds of Chrome extensions to divert Bing and Yahoo queries, inflate ad income, and route users through tracking redirects.
Moyen · SecurityWeek ·
Cisco has released Project Quarry and its rule syntax as open source, aiming to help defenders catch AI agent intrusions assembled from otherwise harmless actions.
Moyen · SecurityWeek ·
Unknown actors reportedly pulled personal and work-related data on roughly 41,000 Homeland Security staff from Okta's single sign-on environment and published the records online earlier this year.
Moyen · Help Net Security ·
Canonical has restarted Ubuntu Core Desktop work, acknowledged earlier preview gaps, and set a course for an immutable, attestable default desktop.
Moyen · BleepingComputer ·
A non-security preview cumulative package for two Windows 11 branches bundles 41 fixes, touching the file manager and how cloud-backed content is rebuilt.
Moyen · Help Net Security ·
A leak tied to Okta single sign-on has exposed records for 41,000 DHS and ICE employees, including undercover agents, with data released across October 28-29.
Moyen · The Hacker News ·
Cisco Talos says intruders abused a Catalyst SD-WAN vulnerability, duplicated encryption keys, and left KeyDrift malware behind; a patch shipped in February.
Moyen · Hackread ·
A comparative review of WireGuard, OpenVPN and Shadowsocks cites no CVE records, yet medium-severity operational concerns remain for K-12 remote access.
Moyen · Help Net Security ·
GitHub announced an npm firewall that inspects packages before installation, aiming to stop malicious code and serious flaws while giving enterprises policy control.