Les menaces cyber des 30 derniers jours pour l'éducation et le secteur public (361 articles).
Résumés et correctifs assistés par IA, sources citées.
Informationnel · Help Net Security ·
Glow Labs found AI coding agents installed outdated MCP servers and archived packages during nearly every reviewed session, exposing developer machines to unpatched code.
Informationnel · Help Net Security ·
Planck Technologies advertised a security architecture position on November 3, 2026, a staffing signal worth noting for K-12 vendor oversight.
Élevé · Krebs on Security ·
In November 2026, Google and industry partners dismantled a botnet and cut off access to a proxy network that had ensnared 1.3 million Android TV set-tops plus ten million other systems.
Élevé · The Record ·
NCSC has issued a warning and annual report indicating an expected, historically large increase in attacks over the next few months.
Informationnel · Unit 42 ·
Palo Alto Networks' Unit 42 released a Nov. 2, 2026 report describing how adversaries are incorporating AI into offensive operations, with cyberespionage and financial extortion among the observed motives.
Élevé · The Register — Security ·
On 2 November 2026, unknown adversaries used a severe defect in a common operations-technology programming application and an industrial IoT gateway to install Linux malware, with no CVE listed.
Informationnel · Dark Reading ·
A reported Binance-connected monetary impact of about $6.3 billion is being discussed alongside attack-path testing, with no CVE assigned.
Élevé · The Record ·
Mercado Bitcoin says unidentified intruders breached its exchange and moved more than $46 million off the platform, prompting custody and incident-response scrutiny.
Informationnel · BleepingComputer ·
A China-linked threat group reportedly leveraged the ARTEX AI penetration-testing framework to automate intrusion attempts against more than 200 organizations in 14 countries.
Informationnel · Hackread ·
A privacy guidance item involving Apple iPhones and voice recordings carries no CVE and points schools toward safeguarding audio files and tightening privacy settings.
Informationnel · The Register — Security ·
A takedown operation targeted a network of roughly 1.3 million compromised Android TV boxes shipped by Videostrong with hidden remote-access code.
Informationnel · BleepingComputer ·
Abrigo's Sageworks financial platform went down amid suspected unauthorized access, disrupting borrower-facing tools and risk workflows before service returned.
Informationnel · BleepingComputer ·
Google disrupted an XCPE botnet spanning roughly 1.3 million Android-based TV devices and barred the manufacturer that shipped the malware.
Élevé · The Record ·
Polymarket traced a $3.9 million loss in customer money and a website outage to an attacker it has not named, then promised refunds and outage compensation.
Élevé · The Hacker News ·
A broad threat set spanning Linux and Android combines denial-of-service botnets, Android surveillance tools, monetary theft, and phishing lures, with no CVE to track.
Informationnel · The Register — Security ·
An AI workflow product reported that environment variables were exfiltrated on November 2, 2026, with no CVE assigned.
Moyen · The Register — Security ·
Attackers are stealing access tokens for large language model services and using them to run up more than $100,000 in fraudulent charges each day, with no CVE to patch.
Informationnel · Help Net Security ·
Google's threat research unit linked Videostrong firmware to the XCPE backdoor, affecting about 1.3 million Android TV boxes and leading to server takedowns and a vendor ban.
Moyen · The Hacker News ·
Criminal operators allegedly hijacked a Videostrong server, planted a backdoor and sold access, exposing about 1.3 million Android set-top devices to ad fraud and relay abuse.
Critique · Wordfence ·
A serious flaw tied to Brotli and WordPress was assigned CVE-2026-111497 on 22 October 2026, with fixes arriving the following month.
Moyen · BleepingComputer ·
Unidentified intruders are exploiting lagging BTCPay Server deployments to steal cryptocurrency from hot wallets, prompting an urgent update warning.
Informationnel · SecurityWeek ·
A roundup of 37 vendor transactions in October 2026 names Absolute Security, Aikido, Anthropic, Cohere, Hex-Rays and Proofpoint, with no CVE attached.
Informationnel · BleepingComputer ·
Telecom operators and vendor Cape are tied to extended retention of phone records, creating privacy risks from inferred relationships and locations across years of metadata.
Moyen · The Register — Security ·
Public alert channels for Kherson were taken over and used to push intimidating notices to civilians when a ceasefire lapsed, with attribution still unresolved.