Les menaces cyber des 30 derniers jours pour l'éducation et le secteur public (359 articles).
Résumés et correctifs assistés par IA, sources citées.
Moyen · Help Net Security ·
GitHub announced an npm firewall that inspects packages before installation, aiming to stop malicious code and serious flaws while giving enterprises policy control.
Moyen · BleepingComputer ·
Microsoft plans to retire text-message and voice-call authentication in Entra ID by February 2027, requiring administrators to move users to passkeys and other supported methods to avoid login interruptions.
Moyen · SecurityWeek ·
Google's Chrome build resolves 52 bugs and Mozilla's Firefox release contains 167 fixes, producing a combined remediation load above 200 vulnerabilities for administrators.
Moyen · BleepingComputer ·
Attackers are scanning for exposed, unpatched Oracle E-Business Suite systems, though no CVE has been tied to the activity.
Moyen · The Register — Security ·
On Oct. 28, 2026, Cisco published Project Quarry as open source, offering a way to identify AI agents and review their behavior; no incident or CVE was reported.
Moyen · The Hacker News ·
An unreleased Anthropic AI model identified and chained vulnerabilities in Chrome, Safari, Android, Windows and Linux during lab testing; vendors have patched the issues.
Moyen · Help Net Security ·
Kroll's 2026 breach outlook survey reports vendor-linked exposure at close to seven in ten, with customer records among the data at risk.
Élevé · BleepingComputer ·
Unknown attackers are exploiting unpatched, internet-exposed GitLab servers at scale, with more than 1,000 instances at risk while patching lags.
Élevé · BleepingComputer ·
Synology is alerting customers to an ongoing rise in C3RB3R ransomware incidents affecting NAS hardware and is pressing for current device software.
Élevé · BleepingComputer ·
Ivanti has issued patches for two remote-access vulnerabilities used as zero-days since early October, with attackers linking the flaws in real-world intrusions.
Élevé · SecurityWeek ·
The FBI has taken down Virtualine's domain and disrupted its bulletproof hosting service, which catered to criminal customers and accepted cryptocurrency payments.
Élevé · BleepingComputer ·
A maximum-severity GitLab vulnerability patched earlier this month is now being used by attackers in real intrusions, prompting a public warning from CISA.
Élevé · SecurityWeek ·
Unknown threat actors are actively abusing an access-bypass flaw in Drupal's Commerce Core module, prompting warnings for online stores to review order activity.
Élevé · BleepingComputer ·
Unidentified threat actors are exploiting a permission-bypass weakness in Drupal's Commerce Core add-on, and site administrators are being urged to apply updates without delay.
Élevé · Cisco Talos ·
Cisco Talos reports that attackers posing as IT support used vishing and phishing to gain access, fueling pre-ransomware and ransomware activity in finance and public administration during Q3 2026.
Faible · The Record ·
Hackers disrupted University of New Mexico hospital systems, prompting ambulance diversions and class cancellations before services were restored.
Élevé · Security Affairs ·
Lumen's Black Lotus Labs tied a covert relay network to China-linked Volt Typhoon, saying it concealed attacks on critical systems across a three-year span involving four zero-days.
Élevé · Security Affairs ·
A Ukrainian man described as an alleged co-conspirator was sentenced in Brooklyn federal court to 70 months for ransomware attacks tied to Hive and Nefilim, with an $11 million reward still offered.
Élevé · The Hacker News ·
Black Lotus Labs reported that a China-linked espionage group used compromised SOHO and IoT devices to build covert access and exploit zero-days in four campaigns.
Élevé · Unit 42 ·
Palo Alto Networks' Unit 42 has published threat analysis and defensive guidance for retailers facing heightened risk to operations and customer trust during peak shopping season.
Élevé · BleepingComputer ·
A China-aligned intrusion set is using the Silent Train toolset to mask exploitation of unknown vulnerabilities and rotate through compromised devices while pursuing sensitive systems.
Élevé · The Register — Security ·
Artem Stryzhak, tied to the Nefilim and Hive ransomware operations, received a 70-month sentence for roles in attacks on businesses and hospitals.
Élevé · Graham Cluley ·
A Ukrainian man received a 70-month prison term for ransomware activity tied to Nefilim and Hive, including intrusions at legal practices and a healthcare organization during the pandemic.
Élevé · SecurityWeek ·
Artem Stryzhak, a Ukrainian affiliate of Nefilim and Hive ransomware operations, pleaded guilty and was sentenced to 70 months in prison.