Rosstat breach claimed by Belarusian, pro-Ukrainian hacktivists
Faible · The Record ·
A Belarusian group and pro-Ukrainian actors, with a wider hacker collective, say they breached Rosstat and removed sensitive state data while disrupting services.
Veille cyber
Les menaces cyber des 30 derniers jours pour l'éducation et le secteur public (359 articles).
Résumés et correctifs assistés par IA, sources citées.
Microsoft report flags AI-enabled attacks, stays silent on flaw targeting
Faible · Dark Reading ·
Microsoft's latest Digital Defense Report highlights AI-driven attack trends and targeted sectors but does not detail how its own software flaws are chosen for exploitation.
Iran-Aligned DarkBlinders Hit Government Clouds in Israel and Iraqi Kurdistan
Faible · The Hacker News ·
An Iran-linked group called DarkBlinders ran espionage intrusions against government cloud systems in Israel and Iraq's Kurdistan region from August to October 2026, affecting prominent people.
Aid Portal Breach at Florida Education Department Exposes 4.9 Million
Élevé · SecurityWeek ·
Unknown actors compromised an online student-aid and financial-aid portal at Florida’s education department, exposing personal details and Social Security numbers for about 4.9 million individuals.
Syrian Pro-Assad Hacker Gets 42-Month Sentence After Decade on Run
Faible · SecurityWeek ·
A Syrian national linked to pro-Assad cyber operations has been sentenced to three and a half years after more than ten years evading capture.
Florida Student Aid Portal Breach Exposes Data of 4.9 Million
Élevé · The Record ·
Florida's education department warned that unknown intruders hit its student financial aid site, exposing Social Security numbers and other personal data for about 4.9 million people.
Disputed reports name Iran, Anthropic, UEFI and AI malware in server concerns
Faible · SecurityWeek ·
A contested breach account, reported data exposure, a UEFI server issue, and AI malware claims involve Iran, Anthropic, Cloudflare, and Copenhagen University.
NetamLoader campaign hits Asian government Windows endpoints
Faible · The Record ·
Unknown attackers are using a loader called NetamLoader to compromise government Windows hosts in Asia, bypass defenses, and pull down further payloads.
FBI Takes Over Virtualine Hosting Domain Amid Abuse and Laundering Claims
Faible · Security Affairs ·
The FBI has assumed control of virtualine.net, a Virtualine hosting domain tied to ignored abuse reports and alleged money-laundering support, with limited direct risk to K-12 networks.
Summit Public Schools reports 115 GB leak affecting student and staff records
Faible · Hackread ·
An unidentified intruder leaked about 115 GB of school data, prompting Summit Public Schools to disclose exposure of student and staff information.
Moldova Investigates Major Cyberattack on Government Systems and Citizen Data
Faible · The Record ·
Moldovan authorities are examining a large-scale intrusion into public digital systems, with citizen records exposed and signs that overseas actors may be involved.
UK Budget Opens Debate on Shifting Breach Liability to Software Vendors
Faible · The Record ·
British policymakers are weighing whether software firms should carry more responsibility for security failures, a national policy signal with contract and risk implications.
Wazuh spotlights AI automation for SOCs and automated attacks in October 2026
Faible · The Hacker News ·
The October 2026 Wazuh item focuses on AI-driven automation, SOC improvement, and automated attack activity, with no CVE assigned and a low severity signal.
Android SMS flaw CVE-2026-58882: crafted texts can crash phones, researcher shows
Informationnel · BleepingComputer ·
A researcher has published working exploit code for a Google Android bug that lets a specially built text message knock a handset offline — patched devices are safe, but many are not.
Drupal Commerce Core Access-Control Flaw Exposes Ecommerce Sites
Informationnel · Security Affairs ·
CVE-2026-118539 is an authorization bypass in Drupal Commerce Core, and attackers could abuse absent access checks against affected ecommerce sites.
Unauthenticated GitLab exploit CVE-2026-97229 raises server takeover risk
Élevé · SecurityWeek ·
A highest-severity GitLab flaw tracked as CVE-2026-97229 lets attackers act without logging in, run code, and potentially seize servers; Alpine Linux is also named in scope.
TeamViewer Flaw CVE-2026-111585 Exposes Support Technician Endpoints
Élevé · SecurityWeek ·
A high-severity TeamViewer vulnerability lets hostile hosts trigger an integer overflow to run code and seize technician workstations.
We need answer only headline <=90 chars, factual, no five-word sequence with external source. Need craft new headline. Need include key fact
Élevé · The Hacker News ·
Drupal Commerce Core sites on two release lines face an authorization bypass, CVE-2026-118539, that attackers are already using; administrators should inventory and update immediately.
Siemens Mendix SAML Flaw Enables Login Bypass via Assertion Replay
Élevé · CISA Advisories ·
CVE-2026-89209 lets an unauthenticated remote actor bypass authentication in Siemens Mendix SAML deployments by replaying a valid assertion.
Hitachi Energy CoreTec Flaws Expose Power-Sector Systems to CIA Risks
Élevé · CISA Advisories ·
Two tracked flaws in Hitachi Energy CoreTec products affect confidentiality, integrity, and availability, with exposure spanning global energy and critical-infrastructure operators.
CISA Flags Two Hitachi Energy TRO600 Vulnerabilities Enabling Remote Code Execution
Élevé · CISA Advisories ·
Hitachi Energy's TRO600 series carries two flaws that let an authenticated user run code, bypass authentication, and expose sensitive data, prompting CISA guidance for worldwide energy deployments.
Attempted CVE-2026-97229 exploit targets one GitLab server after patch
Informationnel · The Hacker News ·
An unidentified party tried to exploit CVE-2026-97229 on a single GitLab server about seven days after a fix shipped; investigators found no sign the attempt worked.
TianoCore UEFI Bug CVE-2026-97631 Allows Code Execution Before Boot on Servers
Critique · Security Affairs ·
A sixteen-year-old defect in TianoCore's reference UEFI implementation lets attackers run code before the operating system loads, and details surfaced ahead of a coordinated patch release.
Google and Partners Disrupt Proxy Botnet Tied to 1.3M TV Set-Tops, 10M Systems
Élevé · Krebs on Security ·
In November 2026, Google and industry partners dismantled a botnet and cut off access to a proxy network that had ensnared 1.3 million Android TV set-tops plus ten million other systems.